Kan geen verbinding maken met de proxyserver

Swim · 1 november 2014

Hoi,

Ik kan sinds gisteren geen verbinding krijgen met de proxyserver. Ik heb het vermoedde dat ik dus ad- of malware heb. Meteen maar even Hijack This gedownload en scan gemaakt. Kan iemand mijn log analyseren?

Logfile of Trend Micro HijackThis v2.0.5

Scan saved at 8:44:04, on 1-11-2014

Platform: Windows 7 SP1 (WinNT 6.00.3505)

MSIE: Internet Explorer v11.0 (11.00.9600.17344)

CHROME: 38.0.2125.111

Boot mode: Normal

Running processes:

C:\Program Files (x86)\TubeSaver-soft\TubeSaverlMVgZw.exe

C:\Program Files (x86)\Steam\Steam.exe

C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe

C:\Users\Tim\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe

C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

C:\Users\Tim\AppData\Roaming\Spotify\spotify.exe

C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe

C:\Program Files\AVAST Software\Avast\AvastUI.exe

C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe

C:\Users\Tim\AppData\Roaming\uTorrent\uTorrent.exe

C:\Users\Tim\AppData\Roaming\Dropbox\bin\Dropbox.exe

C:\Users\Tim\.thinkbuzan\imindmap6\preload\iMindMap6_Preloader.exe

C:\Users\Tim\AppData\Roaming\Spotify\Data\SpotifyHelper.exe

C:\Program Files (x86)\ThinkBuzan\iMindMap 6\iMindMap 6.exe

C:\Users\Tim\AppData\Roaming\Spotify\Data\SpotifyHelper.exe

C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoUpdateCheck.exe

G:\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Startpagina

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Mixi Dj Search

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = msn

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = msn

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:13828

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

R3 - URLSearchHook: (no name) - {87775fdb-6972-41f9-ae51-8326e38cb206} - (no file)

F2 - REG:system.ini: UserInit=userinit.exe

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: mixidj Helper Object - {4D6A9BBF-402C-4301-B1EF-28D04F71D761} - (no file)

O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\MICROS~3\Office14\GROOVEEX.DLL

O2 - BHO: Funmoods Helper Object - {75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7} - (no file)

O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll

O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\MICROS~3\Office15\URLREDIR.DLL

O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\MICROS~3\Office15\GROOVEEX.DLL

O2 - BHO: PricePeep - {FD6D90C0-E6EE-4BC6-B9F7-9ED319698007} - C:\Program Files (x86)\PricePeep\pricepeep.dll

O2 - BHO: Yontoo Layers - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - (no file)

O3 - Toolbar: Funmoods Toolbar - {A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3} - (no file)

O3 - Toolbar: MixiDJ Toolbar - {CA9B9C89-4662-4ADC-9C23-A452BECD5D19} - (no file)

O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe

O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"

O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui

O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun

O4 - HKCU\..\Run: [steam] "C:\Program Files (x86)\Steam\Steam.exe" -silent

O4 - HKCU\..\Run: [ApplePhotoStreams] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe

O4 - HKCU\..\Run: [spotify Web Helper] "C:\Users\Tim\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"

O4 - HKCU\..\Run: [spotify] "C:\Users\Tim\AppData\Roaming\Spotify\Spotify.exe" /uri spotify:autostart

O4 - HKCU\..\Run: [uTorrent] "C:\Users\Tim\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED

O4 - HKCU\..\Run: [iCloudServices] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')

O4 - .DEFAULT User Startup: RUN.CMD (User 'Default user')

O4 - Startup: Dropbox.lnk = Tim\AppData\Roaming\Dropbox\bin\Dropbox.exe

O4 - Startup: iMindMap6 Preloader.lnk = Tim\.thinkbuzan\imindmap6\preload\iMindMap6_Preloader.exe

O8 - Extra context menu item: &Verzenden naar OneNote - res://C:\Program Files\MICROS~3\Office14\ONBttnIE.dll/105

O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\Program Files\MICROS~3\Office14\EXCEL.EXE/3000

O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll

O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll

O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL

O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL

O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe

O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)

O23 - Service: HP DS Service - Hewlett-Packard Company - C:\Program Files (x86)\HP\HPBDSService\HPBDSService.exe

O23 - Service: HP LaserJet Service - HP - C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe

O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)

O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)

O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)

O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)

O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe

O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

O23 - Service: Update service - Company - C:\Program Files (x86)\Popcorn Time\Updater.exe

O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)

O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--

End of file - 11690 bytes

1 november 2014

Hoi Swim en welkom op PC Helpforum,

Voor we beginnen , wil ik even vriendelijk op de volgende richtlijnen wijzen:

.

Log enkel in als beheerder met alle rechten.
Het opruimen van je systeem kan wat tijd in beslag nemen, wees geduldig.
Blijf bij het topic totdat ik gemeldt heb dat je PC clean is.
Als je iets niet weet of verstaat, vraag het dan even aub.
Installeer of deinstalleer géén software of hardware terwijl we met je probleem bezig zijn.
Ga ondertussen niet wat "anders" proberen, dat maakt het alleen maar moeilijker voor ons

.

Opmerking: Alle tools steeds uitvoeren als admin.

De instructies die worden gegeven, zijn enkel geldig voor jouw PC.

Stap 1:

Malware scannen en verwijderen....

Installeer MBAM 2.0 (info & download link)

Start MBAM.

Klik bovenin het scherm van Malwarebytes Anti-Malware op Scan.

Kies in het scherm voor de bedreigingsscan en klik vervolgens op de knop Scan nu.

Voor het scannen wordt er altijd eerst automatisch gecontroleerd of er updates van de virusdefinities beschikbaar zijn,

indien er een update beschikbaar is, moet je deze eerst laten installeren.

Wanneer de scan gereed is en er bedreigingen zijn gedetecteerd krijg je hier een overzicht van.

Selecteer om allen in quarantaine te plaatsen.

Bij de melding dat uw computer opnieuw opgestart moet worden klik je op Ja.

Na herstart van de PC, indien Malwarebytes heeft gevraagd om de PC opnieuw op te starten, open Malwarebytes opnieuw.

Klik op de Historie knop bovenaan in het menu.

Klik vervolgens op de optie programmalogboeken en selecteer het Scanlogboek dat je wilt exporteren.

Dit is de laatste scan die je hebt gedaan (kan je zien aan de datum en tijd).

Selecteer deze om te bekijken.

In een nieuw venster dat zal openen zal je de resultaten van je scan zien.

Onderaan, selecteer ofwel om te exporteren als tekstbestand en geef het tekstbestand een naam, bijvoorbeeld mbamlog.

Ofwel kan je selecteren om te kopieren naar het klembord, zodat de inhoud van de log naar je klembord wordt gekopieerd en je die zo in je volgende post kan plakken.

.___________________________________________________________

Stap 2:

Controle op slechte toolbars...

Download AdwCleaner by Xplode naar je Bureaublad.

Sluit alle openstaande vensters
Start AdwCleaner
Klik op Scannen
Klik op Verwijderen

Alle icoontjes verdwijnen van het Bureaublad,dit is normaal

Je PC word opnieuw opgestart en er een opent een logfile (C:\ AdwCleaner\AdwCleaner[xx].txt

Post deze inhoud hier op het Forum.

Enkel de log na de "Verwijderen" optie heb ik nodig.

Vergeet niet om je "smileys" uit te schakelen.

Als je Startpagina ook gehijackt was,stel dan de zoekmachine opnieuw in.

Deze word standaard door AdwCleaner terug gezet naar Google.com

___________________________________________________________

Stap 3:

Extra nota... Zorg ervoor dat je Security software uitschakeld is tijdens het installeren en gebruik van E-Peek.

Dit omdat deze scanners bepaalde componenten die E-Peek gebruikt, onterecht zien als geïnfecteerd en Combofix zullen blokkeren.

Kijk hier indien je niet weet hoe je je Antivirus, Firewall en/of Antispywarescanner moet uitschakelen.

Download E-PeekSetup.exe naar je bureaublad.

Dubbelklik erop en volg de instructies.

Op het einde van de installatie, zal E-Peek opstarten.

Klik OK op het eerste scherm en vervolgens "Scan".

Post de log.

___________________________________________________________

In je volgende posting, had ik graag de volgende logs gezien, gemaakt in de opgestelde volgorde:

.

MBAM
AdwCleaner
E-Peek

.

Emphyrio

1 november 2014 aangepast door kape
RSIT-opmerking + niet in bijlagen verwijderd

Swim · 1 november 2014

ok ik heb de scans uitgevoerd

PUP.Optional.DataMngr.A, HKU\S-1-5-21-2515933047-4215523510-3283556267-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DataMngr, Quarantined, [f89fb68097e52b0b1ee60e6923e110f0],

PUP.Optional.DataMngr.A, HKU\S-1-5-21-2515933047-4215523510-3283556267-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DataMngr_Toolbar, Quarantined, [e2b52e0864181620a65dafc89c68f40c],

PUP.FunMoods, HKU\S-1-5-21-2515933047-4215523510-3283556267-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Funmoods, Quarantined, [f89f2b0b5626ad895e788ade877c3cc4],

PUP.Optional.CrossRider.A, HKU\S-1-5-21-2515933047-4215523510-3283556267-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [c2d5e2543646a5910d55b9d215efbc44],

PUP.Optional.Babylon.A, HKU\S-1-5-21-2515933047-4215523510-3283556267-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\BABSOLUTION\Updater, Quarantined, [99fe85b137450b2b699e641440c4a55b],

PUP.Funmoods, HKU\S-1-5-21-2515933047-4215523510-3283556267-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\bbjciahceamgodcoidkjpchnokgfpphh, Quarantined, [ebac41f5e29a3ef8b89223480003b050],

PUP.Optional.FunMoods.A, HKU\S-1-5-21-2515933047-4215523510-3283556267-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\cjpglkicenollcignonpgiafdgfeehoj, Quarantined, [277057df66163501af5c0a4d6f95ea16],

PUP.FunMoods, HKU\S-1-5-21-2515933047-4215523510-3283556267-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE\funmoods, Quarantined, [e3b496a0f58768cea235353304ffc63a],

PUP.Optional.SuperFish.A, HKU\S-1-5-21-2515933047-4215523510-3283556267-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\DOMSTORAGE\superfish.com, Quarantined, [5e390c2a750715216018b489d92a0ff1],

PUP.Optional.BProtector.A, HKU\S-1-5-21-2515933047-4215523510-3283556267-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\bProtectSettings, Quarantined, [dcbb1a1c2b5146f0b39a4931bf4511ef],

PUP.Optional.MixiDJToolbar.A, HKU\S-1-5-21-2515933047-4215523510-3283556267-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MIXIDJ\MIXIDJ, Quarantined, [5443fc3a96e63ff78e7ca8d035cff30d],

PUP.Optional.RegCleanerPro.A, HKU\S-1-5-21-2515933047-4215523510-3283556267-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SYSTWEAK\RegClean Pro, Quarantined, [8b0c58de2e4ea78f91371a62c4409f61],

PUP.Optional.TubeSaver.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\27DED00B-35D6-784D-A4B1-493C7787DD67, Quarantined, [1e798fa73547171f8bc68f8a32d10000],

Registry Values: 11

PUP.Optional.Funmoods.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3}, Funmoods Toolbar, Quarantined, [37601323364662d4dd036b759a68946c]

PUP.Optional.MixiDJToolbar.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{CA9B9C89-4662-4ADC-9C23-A452BECD5D19}, MixiDJ Toolbar, Quarantined, [1681e35358241a1c8265fee6867c0df3]

PUP.Optional.Conduit.A, HKU\S-1-5-21-2515933047-4215523510-3283556267-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS\{87775fdb-6972-41f9-ae51-8326e38cb206}, Quarantined, [dabd43f37309b4825652159614ee1ae6],

PUP.Optional.Conduit.A, HKU\S-1-5-21-2515933047-4215523510-3283556267-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS|{87775FDB-6972-41F9-AE51-8326E38CB206}, Quarantined, [dabd43f37309b4825652159614ee1ae6],

PUP.Optional.Funmoods.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3}, Quarantined, [afe883b3384442f4538dc81828da8b75],

PUP.Optional.MixiDJToolbar.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\{CA9B9C89-4662-4ADC-9C23-A452BECD5D19}, Quarantined, [8f08eb4b0d6f30066384e6fe5ba747b9],

PUP.Optional.FunMoods.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\ABOUTURLS|Tabs, Funmoods Search, Quarantined, [682fb581413bbc7a33ad88d2788c43bd]

PUP.BProtector, HKU\S-1-5-21-2515933047-4215523510-3283556267-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|bProtector Start Page, Mixi Dj Search, Quarantined, [a3f48babc5b7c373ca3b7403f410a957]

PUP.BProtector, HKU\S-1-5-21-2515933047-4215523510-3283556267-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|bProtectorDefaultScope, {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}, Quarantined, [9ef9ef475725d5611aec086f21e3d729]

PUM.Bad.Proxy, HKU\S-1-5-21-2515933047-4215523510-3283556267-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|ProxyServer, http=127.0.0.1:13828, Quarantined, [1d7afa3c5527989e3574aae517ed28d8]

PUP.Optional.MixiDJToolbar.A, HKU\S-1-5-21-2515933047-4215523510-3283556267-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MIXIDJ\MIXIDJ|tlbrSrchUrl, Quarantined, [5443fc3a96e63ff78e7ca8d035cff30d],

Registry Data: 1

PUP.Optional.StartPage, HKU\S-1-5-21-2515933047-4215523510-3283556267-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, Mixi Dj Search, Good: (Google), Bad: (Mixi Dj Search,[6b2c2e08730980b6568e4ee7b253d22e]

Folders: 26

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Funmoods\UpdateProc, Quarantined, [7d1a15214d2fe3533d5d5012d72c05fb],

PUP.Optional.MixiDJToolBar.A, C:\Users\Tim\AppData\Local\Temp\mt_ffx\mixidj, Quarantined, [3d5a48eeef8d3afc8cd5dd1b6f93f60a],

PUP.Optional.MixiDJToolBar.A, C:\Users\Tim\AppData\Local\Temp\mt_ffx\mixidj\mixidj, Quarantined, [3d5a48eeef8d3afc8cd5dd1b6f93f60a],

PUP.Optional.MixiDJToolBar.A, C:\Users\Tim\AppData\Local\Temp\mt_ffx\mixidj\mixidj\1.8.18.8, Quarantined, [3d5a48eeef8d3afc8cd5dd1b6f93f60a],

PUP.Optional.BitGuard.A, C:\PROGRAMDATA\BitGuard\2.6.1694.246, Quarantined, [77201a1cc6b6ca6c7a108b6d61a1d030],

PUP.Optional.BitGuard.A, C:\PROGRAMDATA\BitGuard\2.6.1694.246\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}, Quarantined, [77201a1cc6b6ca6c7a108b6d61a1d030],

PUP.Optional.BitGuard.A, C:\PROGRAMDATA\BitGuard\2.6.1694.246\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\FirefoxExtension, Quarantined, [77201a1cc6b6ca6c7a108b6d61a1d030],

PUP.Optional.BitGuard.A, C:\PROGRAMDATA\BitGuard\2.6.1694.246\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings, Quarantined, [77201a1cc6b6ca6c7a108b6d61a1d030],

PUP.Optional.Conduit.A, C:\Users\Tim\AppData\Local\Temp\CT2865317, Quarantined, [40573df999e3999d872c6494e220ab55],

PUP.Optional.Conduit.A, C:\Users\Tim\AppData\Local\Temp\CT2865317\xpi, Quarantined, [40573df999e3999d872c6494e220ab55],

PUP.Optional.Conduit.A, C:\Users\Tim\AppData\Local\Temp\CT3241951, Quarantined, [2473de580c70aa8cf4bfdd1b719113ed],

PUP.Optional.RegCleanerPro.A, C:\Users\Tim\AppData\Roaming\systweak\regclean pro, Quarantined, [c6d1c0763844e3531e9bfcfc33cf60a0],

PUP.Optional.RegCleanerPro.A, C:\Users\Tim\AppData\Roaming\systweak\regclean pro\Version 6.1, Quarantined, [c6d1c0763844e3531e9bfcfc33cf60a0],

PUP.Optional.MixiDJToolbar.A, C:\Users\Tim\AppData\Roaming\mixidj, Quarantined, [5d3a1125afcd51e53d0e3dbce41e38c8],

PUP.Optional.PricePeep.A, C:\PROGRAM FILES (X86)\PricePeep, Quarantined, [7f18b086403cbb7b71a36199a16103fd],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\ffxtlbr@funmoods.com, Quarantined, [c5d20531bfbd3bfb7d467885df239f61],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\ffxtlbr@funmoods.com\content, Quarantined, [c5d20531bfbd3bfb7d467885df239f61],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\ffxtlbr@funmoods.com\content\images, Quarantined, [c5d20531bfbd3bfb7d467885df239f61],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\ffxtlbr@funmoods.com\content\imgs, Quarantined, [c5d20531bfbd3bfb7d467885df239f61],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\ffxtlbr@funmoods.com\content\imgs\flgs, Quarantined, [c5d20531bfbd3bfb7d467885df239f61],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\ffxtlbr@funmoods.com\META-INF, Quarantined, [c5d20531bfbd3bfb7d467885df239f61],

PUP.Optional.BabSolution.A, C:\Users\Tim\AppData\Roaming\BabSolution\CR, Quarantined, [7621ad89dd9f2115e3fdf916df2425db],

PUP.Optional.TubeSaver.A, C:\PROGRAM FILES (X86)\TubeSaver-soft, Delete-on-Reboot, [1e798fa73547171f8bc68f8a32d10000],

PUP.Optional.OnlySearch, C:\Users\Tim\AppData\Local\onlysearch, Quarantined, [baddcc6af686dd592b367ca0b54eae52],

PUP.Optional.OnlySearch, C:\Users\Tim\AppData\Local\onlysearch\onlysearch, Quarantined, [baddcc6af686dd592b367ca0b54eae52],

PUP.Optional.OnlySearch, C:\Users\Tim\AppData\Local\onlysearch\onlysearch\1.3.12.9, Quarantined, [baddcc6af686dd592b367ca0b54eae52],

Files: 107

PUP.Optional.PricePeep.A, C:\Program Files (x86)\PricePeep\pricepeep.dll, Quarantined, [f4a3df57651733036595d90a6d95b749],

Adware.Agent, C:\Program Files (x86)\PricePeep\pricepeep.dll, Quarantined, [1d7ab086c1bb9f97f8a5684b1be751af],

PUP.Optional.PricePeep.A, C:\Program Files (x86)\PricePeep\uninstall.exe, Quarantined, [3b5c8babc7b5a39339e22530ad542ed2],

PUP.BundleInstaller.DW, C:\$Recycle.Bin\S-1-5-21-2515933047-4215523510-3283556267-1000\$R5D4CGI.exe, Quarantined, [44531026afcd74c2388976a552af8878],

PUP.Optional.OptChrome.A, C:\$Recycle.Bin\S-1-5-21-2515933047-4215523510-3283556267-1000\$RAIS8QQ\OptChrome.exe, Quarantined, [5245b0860775b086f8d9051929d7966a],

PUP.Optional.RegCleanerPro, C:\Windows\System32\Tasks\RegClean Pro, Quarantined, [cfc8ca6c82fa142257c97db78b78ca36],

PUP.Optional.FunMoods.A, C:\Windows\System32\Tasks\Funmoods, Quarantined, [3c5be74ffa822214edc5340824dff50b],

PUP.Optional.FunMoods.A, C:\Windows\Tasks\Funmoods.job, Quarantined, [7e1961d590ec3006823169d3679c7e82],

PUP.Optional.Babylon.A, C:\Windows\System32\Tasks\EPUpdater, Quarantined, [16814de980fc48eeed6878c6d92ae21e],

PUP.Optional.BitGuard.A, C:\Windows\System32\Tasks\BitGuard, Quarantined, [c6d1e6505c208fa72b32b886e81b26da],

PUP.Optional.BetterDeals.A, C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.betterdeals00.betterdeals.co_0.localstorage, Quarantined, [87100432f389a49252967dc63fc4d32d],

PUP.Optional.BetterDeals.A, C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.betterdeals00.betterdeals.co_0.localstorage-journal, Quarantined, [306716208af25bdb38b02e156c9740c0],

PUP.Optional.PricePeep.A, C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\pricepeep@getpricepeep.com.xpi, Quarantined, [9dfa3402f28a8aacb41d0e4833d0ab55],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Funmoods\UpdateProc\config.dat, Quarantined, [7d1a15214d2fe3533d5d5012d72c05fb],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Funmoods\UpdateProc\info.dat, Quarantined, [7d1a15214d2fe3533d5d5012d72c05fb],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Funmoods\UpdateProc\src.dat, Quarantined, [7d1a15214d2fe3533d5d5012d72c05fb],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Funmoods\UpdateProc\STTL.DAT, Quarantined, [7d1a15214d2fe3533d5d5012d72c05fb],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Funmoods\UpdateProc\TTL.DAT, Quarantined, [7d1a15214d2fe3533d5d5012d72c05fb],

PUP.Optional.BProtector.A, C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\bProtector Web Data, Quarantined, [197eb383eb91989e9ab4205afb0924dc],

PUP.Optional.BProtector.A, C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\bprotectorpreferences, Quarantined, [d6c166d00f6d9c9a71def08a09fb51af],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Local\funmoods-speeddial_sf.crx, Quarantined, [772001358bf10531e777078c31d359a7],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Local\funmoods.crx, Quarantined, [bddae650c0bc75c19ac4a8eb64a0b14f],

PUP.Optional.ReMarkable.A, C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.re-markable00.re-markable.net_0.localstorage, Quarantined, [d3c487af017b5adcdb64a8f49c6817e9],

PUP.Optional.ReMarkable.A, C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.re-markable00.re-markable.net_0.localstorage-journal, Quarantined, [692ecd691b6181b53f00722aa85c7987],

PUP.Optional.BitGuard.A, C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BitGuard.settings, Quarantined, [77201a1cc6b6ca6c7a108b6d61a1d030],

PUP.Optional.BitGuard.A, C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\bl, Quarantined, [77201a1cc6b6ca6c7a108b6d61a1d030],

PUP.Optional.BitGuard.A, C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\dm, Quarantined, [77201a1cc6b6ca6c7a108b6d61a1d030],

PUP.Optional.BitGuard.A, C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\00, Quarantined, [77201a1cc6b6ca6c7a108b6d61a1d030],

PUP.Optional.BitGuard.A, C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\01, Quarantined, [77201a1cc6b6ca6c7a108b6d61a1d030],

PUP.Optional.BitGuard.A, C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\02, Quarantined, [77201a1cc6b6ca6c7a108b6d61a1d030],

PUP.Optional.BitGuard.A, C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\03, Quarantined, [77201a1cc6b6ca6c7a108b6d61a1d030],

PUP.Optional.BitGuard.A, C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\10, Quarantined, [77201a1cc6b6ca6c7a108b6d61a1d030],

PUP.Optional.BitGuard.A, C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\11, Quarantined, [77201a1cc6b6ca6c7a108b6d61a1d030],

PUP.Optional.BitGuard.A, C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\12, Quarantined, [77201a1cc6b6ca6c7a108b6d61a1d030],

PUP.Optional.BitGuard.A, C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\13, Quarantined, [77201a1cc6b6ca6c7a108b6d61a1d030],

PUP.Optional.BitGuard.A, C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\20, Quarantined, [77201a1cc6b6ca6c7a108b6d61a1d030],

PUP.Optional.BitGuard.A, C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\21, Quarantined, [77201a1cc6b6ca6c7a108b6d61a1d030],

PUP.Optional.BitGuard.A, C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\22, Quarantined, [77201a1cc6b6ca6c7a108b6d61a1d030],

PUP.Optional.BitGuard.A, C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\23, Quarantined, [77201a1cc6b6ca6c7a108b6d61a1d030],

PUP.Optional.RegCleanerPro.A, C:\Users\Tim\AppData\Roaming\systweak\regclean pro\Version 6.1\Dutch_rcp.dat, Quarantined, [c6d1c0763844e3531e9bfcfc33cf60a0],

PUP.Optional.RegCleanerPro.A, C:\Users\Tim\AppData\Roaming\systweak\regclean pro\Version 6.1\ExcludeList.rcp, Quarantined, [c6d1c0763844e3531e9bfcfc33cf60a0],

PUP.Optional.RegCleanerPro.A, C:\Users\Tim\AppData\Roaming\systweak\regclean pro\Version 6.1\log_06-06-2013.log, Quarantined, [c6d1c0763844e3531e9bfcfc33cf60a0],

PUP.Optional.RegCleanerPro.A, C:\Users\Tim\AppData\Roaming\systweak\regclean pro\Version 6.1\log_06-07-2013.log, Quarantined, [c6d1c0763844e3531e9bfcfc33cf60a0],

PUP.Optional.RegCleanerPro.A, C:\Users\Tim\AppData\Roaming\systweak\regclean pro\Version 6.1\rcpupdate.ini, Quarantined, [c6d1c0763844e3531e9bfcfc33cf60a0],

PUP.Optional.RegCleanerPro.A, C:\Users\Tim\AppData\Roaming\systweak\regclean pro\Version 6.1\results.rcp, Quarantined, [c6d1c0763844e3531e9bfcfc33cf60a0],

PUP.Optional.RegCleanerPro.A, C:\Users\Tim\AppData\Roaming\systweak\regclean pro\Version 6.1\TempHLList.rcp, Quarantined, [c6d1c0763844e3531e9bfcfc33cf60a0],

PUP.Optional.MixiDJToolbar.A, C:\Users\Tim\AppData\Roaming\mixidj\sqlite3.dll, Quarantined, [5d3a1125afcd51e53d0e3dbce41e38c8],

PUP.Optional.PricePeep.A, C:\Program Files (x86)\PricePeep\installer.ico, Quarantined, [7f18b086403cbb7b71a36199a16103fd],

PUP.Optional.PricePeep.A, C:\Program Files (x86)\PricePeep\unutil.exe, Quarantined, [7f18b086403cbb7b71a36199a16103fd],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\ffxtlbr@funmoods.com\chrome.manifest, Quarantined, [c5d20531bfbd3bfb7d467885df239f61],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\ffxtlbr@funmoods.com\install.rdf, Quarantined, [c5d20531bfbd3bfb7d467885df239f61],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\ffxtlbr@funmoods.com\content\funmoods.css, Quarantined, [c5d20531bfbd3bfb7d467885df239f61],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\ffxtlbr@funmoods.com\content\funmoods.xul, Quarantined, [c5d20531bfbd3bfb7d467885df239f61],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\ffxtlbr@funmoods.com\content\loader.xul, Quarantined, [c5d20531bfbd3bfb7d467885df239f61],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\ffxtlbr@funmoods.com\content\mtstart.js, Quarantined, [c5d20531bfbd3bfb7d467885df239f61],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\ffxtlbr@funmoods.com\content\preferences.xul, Quarantined, [c5d20531bfbd3bfb7d467885df239f61],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\ffxtlbr@funmoods.com\content\tmplt.js, Quarantined, [c5d20531bfbd3bfb7d467885df239f61],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\ffxtlbr@funmoods.com\content\images\pref.jpg, Quarantined, [c5d20531bfbd3bfb7d467885df239f61],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\ffxtlbr@funmoods.com\content\imgs\arwDwn.gif, Quarantined, [c5d20531bfbd3bfb7d467885df239f61],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\ffxtlbr@funmoods.com\content\imgs\help_16.gif, Quarantined, [c5d20531bfbd3bfb7d467885df239f61],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\ffxtlbr@funmoods.com\content\imgs\home.gif, Quarantined, [c5d20531bfbd3bfb7d467885df239f61],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\ffxtlbr@funmoods.com\content\imgs\logo.png, Quarantined, [c5d20531bfbd3bfb7d467885df239f61],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\ffxtlbr@funmoods.com\content\imgs\privecy_16_hot.gif, Quarantined, [c5d20531bfbd3bfb7d467885df239f61],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\ffxtlbr@funmoods.com\content\imgs\tellafriend.gif, Quarantined, [c5d20531bfbd3bfb7d467885df239f61],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\ffxtlbr@funmoods.com\content\imgs\flgs\ae.png, Quarantined, [c5d20531bfbd3bfb7d467885df239f61],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\ffxtlbr@funmoods.com\content\imgs\flgs\bg.png, Quarantined, [c5d20531bfbd3bfb7d467885df239f61],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\ffxtlbr@funmoods.com\content\imgs\flgs\ch.png, Quarantined, [c5d20531bfbd3bfb7d467885df239f61],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\ffxtlbr@funmoods.com\content\imgs\flgs\cn.png, Quarantined, [c5d20531bfbd3bfb7d467885df239f61],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\ffxtlbr@funmoods.com\content\imgs\flgs\cz.png, Quarantined, [c5d20531bfbd3bfb7d467885df239f61],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\ffxtlbr@funmoods.com\content\imgs\flgs\de.png, Quarantined, [c5d20531bfbd3bfb7d467885df239f61],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\ffxtlbr@funmoods.com\content\imgs\flgs\eg.png, Quarantined, [c5d20531bfbd3bfb7d467885df239f61],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\ffxtlbr@funmoods.com\content\imgs\flgs\en.png, Quarantined, [c5d20531bfbd3bfb7d467885df239f61],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\ffxtlbr@funmoods.com\content\imgs\flgs\es.png, Quarantined, [c5d20531bfbd3bfb7d467885df239f61],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\ffxtlbr@funmoods.com\content\imgs\flgs\fr.png, Quarantined, [c5d20531bfbd3bfb7d467885df239f61],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\ffxtlbr@funmoods.com\content\imgs\flgs\gr.png, Quarantined, [c5d20531bfbd3bfb7d467885df239f61],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\ffxtlbr@funmoods.com\content\imgs\flgs\he.png, Quarantined, [c5d20531bfbd3bfb7d467885df239f61],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\ffxtlbr@funmoods.com\content\imgs\flgs\il.png, Quarantined, [c5d20531bfbd3bfb7d467885df239f61],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\ffxtlbr@funmoods.com\content\imgs\flgs\it.png, Quarantined, [c5d20531bfbd3bfb7d467885df239f61],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\ffxtlbr@funmoods.com\content\imgs\flgs\ja.png, Quarantined, [c5d20531bfbd3bfb7d467885df239f61],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\ffxtlbr@funmoods.com\content\imgs\flgs\jp.png, Quarantined, [c5d20531bfbd3bfb7d467885df239f61],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\ffxtlbr@funmoods.com\content\imgs\flgs\nl.png, Quarantined, [c5d20531bfbd3bfb7d467885df239f61],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\ffxtlbr@funmoods.com\content\imgs\flgs\no.png, Quarantined, [c5d20531bfbd3bfb7d467885df239f61],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\ffxtlbr@funmoods.com\content\imgs\flgs\pl.png, Quarantined, [c5d20531bfbd3bfb7d467885df239f61],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\ffxtlbr@funmoods.com\content\imgs\flgs\pt.png, Quarantined, [c5d20531bfbd3bfb7d467885df239f61],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\ffxtlbr@funmoods.com\content\imgs\flgs\ro.png, Quarantined, [c5d20531bfbd3bfb7d467885df239f61],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\ffxtlbr@funmoods.com\content\imgs\flgs\ru.png, Quarantined, [c5d20531bfbd3bfb7d467885df239f61],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\ffxtlbr@funmoods.com\content\imgs\flgs\sa.png, Quarantined, [c5d20531bfbd3bfb7d467885df239f61],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\ffxtlbr@funmoods.com\content\imgs\flgs\se.png, Quarantined, [c5d20531bfbd3bfb7d467885df239f61],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\ffxtlbr@funmoods.com\content\imgs\flgs\sv.png, Quarantined, [c5d20531bfbd3bfb7d467885df239f61],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\ffxtlbr@funmoods.com\content\imgs\flgs\tr.png, Quarantined, [c5d20531bfbd3bfb7d467885df239f61],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\ffxtlbr@funmoods.com\content\imgs\flgs\ua.png, Quarantined, [c5d20531bfbd3bfb7d467885df239f61],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\ffxtlbr@funmoods.com\content\imgs\flgs\us.png, Quarantined, [c5d20531bfbd3bfb7d467885df239f61],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\ffxtlbr@funmoods.com\META-INF\le_c6a58f26_4d2d_4341_b387_c4f2289b6170.rsa, Quarantined, [c5d20531bfbd3bfb7d467885df239f61],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\ffxtlbr@funmoods.com\META-INF\le_c6a58f26_4d2d_4341_b387_c4f2289b6170.sf, Quarantined, [c5d20531bfbd3bfb7d467885df239f61],

PUP.Optional.FunMoods.A, C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\ffxtlbr@funmoods.com\META-INF\manifest.mf, Quarantined, [c5d20531bfbd3bfb7d467885df239f61],

PUP.Optional.BabSolution.A, C:\Users\Tim\AppData\Roaming\BabSolution\CR\mixiDj.crx, Quarantined, [7621ad89dd9f2115e3fdf916df2425db],

PUP.Optional.TubeSaver.A, C:\Program Files (x86)\TubeSaver-soft\158.crx, Quarantined, [1e798fa73547171f8bc68f8a32d10000],

PUP.Optional.TubeSaver.A, C:\Program Files (x86)\TubeSaver-soft\158.dat, Quarantined, [1e798fa73547171f8bc68f8a32d10000],

PUP.Optional.TubeSaver.A, C:\Program Files (x86)\TubeSaver-soft\158.xpi, Quarantined, [1e798fa73547171f8bc68f8a32d10000],

PUP.Optional.TubeSaver.A, C:\Program Files (x86)\TubeSaver-soft\a.db, Quarantined, [1e798fa73547171f8bc68f8a32d10000],

PUP.Optional.TubeSaver.A, C:\Program Files (x86)\TubeSaver-soft\b.db, Quarantined, [1e798fa73547171f8bc68f8a32d10000],

PUP.Optional.TubeSaver.A, C:\Program Files (x86)\TubeSaver-soft\Sqlite3.dll, Quarantined, [1e798fa73547171f8bc68f8a32d10000],

PUP.Optional.TubeSaver.A, C:\Program Files (x86)\TubeSaver-soft\TubeSaverlMV158.bin, Quarantined, [1e798fa73547171f8bc68f8a32d10000],

PUP.Optional.TubeSaver.A, C:\Program Files (x86)\TubeSaver-soft\TubeSaverlMV158.dll, Quarantined, [1e798fa73547171f8bc68f8a32d10000],

PUP.Optional.TubeSaver.A, C:\Program Files (x86)\TubeSaver-soft\TubeSaverlMV158.ini, Quarantined, [1e798fa73547171f8bc68f8a32d10000],

PUP.Optional.TubeSaver.A, C:\Program Files (x86)\TubeSaver-soft\TubeSaverlMVgZw.exe, Delete-on-Reboot, [1e798fa73547171f8bc68f8a32d10000],

PUP.Optional.TubeSaver.A, C:\Program Files (x86)\TubeSaver-soft\Uninstall.exe, Quarantined, [1e798fa73547171f8bc68f8a32d10000],

Physical Sectors: 0

(No malicious items detected)

(end)

1 november 2014 aangepast door Swim

Swim · 1 november 2014

Ik heb de scans uitgevoerd, maar kan de logs niet in één keer uploaden. hier het eerste deel van de mbam log:

Malwarebytes Anti-Malware

Malwarebytes | Free Anti-Malware & Internet Security Software

Scan Date: 1-11-2014

Scan Time: 11:54:56

Logfile: mbamlog 01-11-2014.txt

Administrator: Yes

Version: 2.00.3.1025

Malware Database: v2014.11.01.03

Rootkit Database: v2014.10.22.01

License: Trial

Malware Protection: Enabled

Malicious Website Protection: Enabled

Self-protection: Disabled

OS: Windows 7 Service Pack 1

CPU: x64

File System: NTFS

User: Tim

Scan Type: Threat Scan

Result: Completed

Objects Scanned: 364959

Time Elapsed: 21 min, 57 sec

Memory: Enabled

Startup: Enabled

Filesystem: Enabled

Archives: Enabled

Rootkits: Disabled

Heuristics: Enabled

PUP: Enabled

PUM: Enabled

Processes: 1

PUP.Optional.TubeSaver.A, C:\Program Files (x86)\TubeSaver-soft\TubeSaverlMVgZw.exe, 1656, Delete-on-Reboot, [1e798fa73547171f8bc68f8a32d10000]

Modules: 0

(No malicious items detected)

Registry Keys: 136

PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\APPID\{14B1B6D0-D25F-4418-94E3-EC2B5AEE9756}, Quarantined, [0196ce6883f937ff2cc0ad3758aa19e7],

PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{14B1B6D0-D25F-4418-94E3-EC2B5AEE9756}, Quarantined, [0196ce6883f937ff2cc0ad3758aa19e7],

PUP.Optional.PricePeep.A, HKLM\SOFTWARE\CLASSES\APPID\{38A066B0-DD5F-4226-AC4F-6A27C1BFB892}, Quarantined, [cdca74c2126a3ff7dd413ca9ee1412ee],

PUP.Optional.PricePeep.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{38A066B0-DD5F-4226-AC4F-6A27C1BFB892}, Quarantined, [cdca74c2126a3ff7dd413ca9ee1412ee],

PUP.Optional.MixiDJToolbar.A, HKLM\SOFTWARE\CLASSES\APPID\{A2773ED4-83BD-488A-A186-73590706C916}, Quarantined, [8f085dd916668fa7cd18ca1ae61c0bf5],

PUP.Optional.MixiDJToolbar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{A2773ED4-83BD-488A-A186-73590706C916}, Quarantined, [8f085dd916668fa7cd18ca1ae61c0bf5],

PUP.Optional.MixiDJToolbar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{2C141B4C-B5BA-4E89-BE73-F71ED4A208CF}, Quarantined, [b3e4b18583f953e3e004657fdf237f81],

PUP.Optional.MixiDJToolbar.A, HKLM\SOFTWARE\CLASSES\mixidj.mixidjappCore.1, Quarantined, [b3e4b18583f953e3e004657fdf237f81],

PUP.Optional.MixiDJToolbar.A, HKLM\SOFTWARE\CLASSES\mixidj.mixidjappCore, Quarantined, [b3e4b18583f953e3e004657fdf237f81],

PUP.Optional.MixiDJToolbar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\mixidj.mixidjappCore, Quarantined, [b3e4b18583f953e3e004657fdf237f81],

PUP.Optional.MixiDJToolbar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\mixidj.mixidjappCore.1, Quarantined, [b3e4b18583f953e3e004657fdf237f81],

PUP.Optional.MixiDJToolbar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{4D6A9BBF-402C-4301-B1EF-28D04F71D761}, Quarantined, [9205c670d9a380b617cfa0440002d030],

PUP.Optional.MixiDJToolbar.A, HKLM\SOFTWARE\CLASSES\mixidj.mixidjHlpr.1, Quarantined, [9205c670d9a380b617cfa0440002d030],

PUP.Optional.MixiDJToolbar.A, HKLM\SOFTWARE\CLASSES\mixidj.mixidjHlpr, Quarantined, [9205c670d9a380b617cfa0440002d030],

PUP.Optional.MixiDJToolbar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\mixidj.mixidjHlpr, Quarantined, [9205c670d9a380b617cfa0440002d030],

PUP.Optional.MixiDJToolbar.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{4D6A9BBF-402C-4301-B1EF-28D04F71D761}, Quarantined, [9205c670d9a380b617cfa0440002d030],

PUP.Optional.MixiDJToolbar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\mixidj.mixidjHlpr.1, Quarantined, [9205c670d9a380b617cfa0440002d030],

PUP.Optional.Funmoods.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{75A4D144-506D-4BE5-81DB-EC7DA1E7F840}, Quarantined, [a5f27cbaafcdd75f2fb0558b5ba72cd4],

PUP.Optional.Funmoods.A, HKLM\SOFTWARE\CLASSES\esrv.funmoodsESrvc.1, Quarantined, [a5f27cbaafcdd75f2fb0558b5ba72cd4],

PUP.Optional.Funmoods.A, HKLM\SOFTWARE\CLASSES\esrv.funmoodsESrvc, Quarantined, [a5f27cbaafcdd75f2fb0558b5ba72cd4],

PUP.Optional.Funmoods.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\esrv.funmoodsESrvc, Quarantined, [a5f27cbaafcdd75f2fb0558b5ba72cd4],

PUP.Optional.Funmoods.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\esrv.funmoodsESrvc.1, Quarantined, [a5f27cbaafcdd75f2fb0558b5ba72cd4],

PUP.Optional.FunMoods.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7}, Quarantined, [eea90a2c6e0eb284632e635c877b6898],

PUP.Optional.FunMoods.A, HKLM\SOFTWARE\CLASSES\funmoods.funmoodsHlpr.1, Quarantined, [eea90a2c6e0eb284632e635c877b6898],

PUP.Optional.FunMoods.A, HKLM\SOFTWARE\CLASSES\funmoods.funmoodsHlpr, Quarantined, [eea90a2c6e0eb284632e635c877b6898],

PUP.Optional.FunMoods.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\funmoods.funmoodsHlpr, Quarantined, [eea90a2c6e0eb284632e635c877b6898],

PUP.Optional.FunMoods.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7}, Quarantined, [eea90a2c6e0eb284632e635c877b6898],

PUP.Optional.FunMoods.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\funmoods.funmoodsHlpr.1, Quarantined, [eea90a2c6e0eb284632e635c877b6898],

PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{7D0EE142-0642-4FDD-AF73-7399C04E1041}, Quarantined, [c6d12412cfad92a46f79895ba45ea060],

PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\esrv.mixidjESrvc.1, Quarantined, [c6d12412cfad92a46f79895ba45ea060],

PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\esrv.mixidjESrvc, Quarantined, [c6d12412cfad92a46f79895ba45ea060],

PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\esrv.mixidjESrvc, Quarantined, [c6d12412cfad92a46f79895ba45ea060],

PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\esrv.mixidjESrvc.1, Quarantined, [c6d12412cfad92a46f79895ba45ea060],

PUP.Optional.Funmoods.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{965B9DBE-B104-44AC-950A-8A5F97AFF439}, Quarantined, [514659dd4e2ecd6939a429b730d20cf4],

PUP.Optional.Funmoods.A, HKLM\SOFTWARE\CLASSES\escort.escortIEPane.1, Quarantined, [514659dd4e2ecd6939a429b730d20cf4],

PUP.Optional.Funmoods.A, HKLM\SOFTWARE\CLASSES\escort.escortIEPane, Quarantined, [514659dd4e2ecd6939a429b730d20cf4],

PUP.Optional.Funmoods.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\escort.escortIEPane, Quarantined, [514659dd4e2ecd6939a429b730d20cf4],

PUP.Optional.Funmoods.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3}, Quarantined, [37601323364662d4dd036b759a68946c],

PUP.Optional.Funmoods.A, HKLM\SOFTWARE\CLASSES\funmoods.dskBnd.1, Quarantined, [37601323364662d4dd036b759a68946c],

PUP.Optional.Funmoods.A, HKLM\SOFTWARE\CLASSES\funmoods.dskBnd, Quarantined, [37601323364662d4dd036b759a68946c],

PUP.Optional.Funmoods.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\funmoods.dskBnd, Quarantined, [37601323364662d4dd036b759a68946c],

PUP.Optional.Funmoods.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\funmoods.dskBnd.1, Quarantined, [37601323364662d4dd036b759a68946c],

PUP.Optional.Funmoods.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{A9DB719C-7156-415E-B49D-BAD039DE4F13}, Quarantined, [d8bfc86e2e4e41f5f9e84c949072af51],

PUP.Optional.Funmoods.A, HKLM\SOFTWARE\CLASSES\funmoodsApp.appCore.1, Quarantined, [d8bfc86e2e4e41f5f9e84c949072af51],

PUP.Optional.Funmoods.A, HKLM\SOFTWARE\CLASSES\funmoodsApp.appCore, Quarantined, [d8bfc86e2e4e41f5f9e84c949072af51],

PUP.Optional.Funmoods.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\funmoodsApp.appCore, Quarantined, [d8bfc86e2e4e41f5f9e84c949072af51],

PUP.Optional.Funmoods.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\funmoodsApp.appCore.1, Quarantined, [d8bfc86e2e4e41f5f9e84c949072af51],

PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{C3F978C3-0594-4397-B8E6-3F9D9BE6A7B9}, Quarantined, [a4f356e04b3177bfdc0d37ad4bb7748c],

PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\escort.escortIEPane.1, Quarantined, [a4f356e04b3177bfdc0d37ad4bb7748c],

PUP.Optional.MixiDJToolbar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{CA9B9C89-4662-4ADC-9C23-A452BECD5D19}, Quarantined, [1681e35358241a1c8265fee6867c0df3],

PUP.Optional.MixiDJToolbar.A, HKLM\SOFTWARE\CLASSES\mixidj.mixidjdskBnd.1, Quarantined, [1681e35358241a1c8265fee6867c0df3],

PUP.Optional.MixiDJToolbar.A, HKLM\SOFTWARE\CLASSES\mixidj.mixidjdskBnd, Quarantined, [1681e35358241a1c8265fee6867c0df3],

PUP.Optional.MixiDJToolbar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\mixidj.mixidjdskBnd, Quarantined, [1681e35358241a1c8265fee6867c0df3],

PUP.Optional.MixiDJToolbar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\mixidj.mixidjdskBnd.1, Quarantined, [1681e35358241a1c8265fee6867c0df3],

PUP.Optional.Funmoods.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{F03FD9D0-4F2B-497C-8A71-DD41D70B07D9}, Quarantined, [d9bece688af292a4608240a07e84946c],

PUP.Optional.Funmoods.A, HKLM\SOFTWARE\CLASSES\f, Quarantined, [d9bece688af292a4608240a07e84946c],

PUP.Optional.Funmoods.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\f, Quarantined, [d9bece688af292a4608240a07e84946c],

PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{F9221CC8-22DF-4CEF-B8ED-BA87F1F09878}, Quarantined, [deb981b54b311d19a6455b89ba482ad6],

PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\m, Quarantined, [deb981b54b311d19a6455b89ba482ad6],

PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\m, Quarantined, [deb981b54b311d19a6455b89ba482ad6],

PUP.Optional.PricePeep.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{FD6D90C0-E6EE-4BC6-B9F7-9ED319698007}, Quarantined, [f4a3df57651733036595d90a6d95b749],

PUP.Optional.PricePeep.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{3BF3DED5-0FC8-4207-AC09-AA7B5AF4E408}, Quarantined, [f4a3df57651733036595d90a6d95b749],

PUP.Optional.PricePeep.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{1B97A696-5576-43AC-A73B-E1D2C78F21E8}, Quarantined, [f4a3df57651733036595d90a6d95b749],

PUP.Optional.PricePeep.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{75BF416E-4326-45B5-8A2D-AE32D05B930B}, Quarantined, [f4a3df57651733036595d90a6d95b749],

PUP.Optional.PricePeep.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{1B97A696-5576-43AC-A73B-E1D2C78F21E8}, Quarantined, [f4a3df57651733036595d90a6d95b749],

PUP.Optional.PricePeep.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{75BF416E-4326-45B5-8A2D-AE32D05B930B}, Quarantined, [f4a3df57651733036595d90a6d95b749],

PUP.Optional.PricePeep.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{3BF3DED5-0FC8-4207-AC09-AA7B5AF4E408}, Quarantined, [f4a3df57651733036595d90a6d95b749],

PUP.Optional.PricePeep.A, HKLM\SOFTWARE\CLASSES\PricePeep.PricePeepBho.1, Quarantined, [f4a3df57651733036595d90a6d95b749],

PUP.Optional.PricePeep.A, HKLM\SOFTWARE\CLASSES\PricePeep.PricePeepBho, Quarantined, [f4a3df57651733036595d90a6d95b749],

PUP.Optional.PricePeep.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PricePeep.PricePeepBho, Quarantined, [f4a3df57651733036595d90a6d95b749],

PUP.Optional.PricePeep.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{FD6D90C0-E6EE-4BC6-B9F7-9ED319698007}, Quarantined, [f4a3df57651733036595d90a6d95b749],

PUP.Optional.PricePeep.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PricePeep.PricePeepBho.1, Quarantined, [f4a3df57651733036595d90a6d95b749],

PUP.Optional.PricePeep.A, HKU\S-1-5-21-2515933047-4215523510-3283556267-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{FD6D90C0-E6EE-4BC6-B9F7-9ED319698007}, Quarantined, [f4a3df57651733036595d90a6d95b749],

PUP.Optional.PricePeep.A, HKU\S-1-5-21-2515933047-4215523510-3283556267-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{FD6D90C0-E6EE-4BC6-B9F7-9ED319698007}, Quarantined, [f4a3df57651733036595d90a6d95b749],

PUP.Optional.Yontoo.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}, Quarantined, [8e09e84ee894d95dd49106a6738f9e62],

PUP.Optional.Yontoo.A, HKLM\SOFTWARE\CLASSES\YontooIEClient.Layers.1, Quarantined, [8e09e84ee894d95dd49106a6738f9e62],

PUP.Optional.Yontoo.A, HKLM\SOFTWARE\CLASSES\YontooIEClient.Layers, Quarantined, [8e09e84ee894d95dd49106a6738f9e62],

PUP.Optional.Yontoo.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\YontooIEClient.Layers, Quarantined, [8e09e84ee894d95dd49106a6738f9e62],

PUP.Optional.Yontoo.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}, Quarantined, [8e09e84ee894d95dd49106a6738f9e62],

PUP.Optional.Yontoo.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\YontooIEClient.Layers.1, Quarantined, [8e09e84ee894d95dd49106a6738f9e62],

Adware.Agent, HKLM\SOFTWARE\CLASSES\TYPELIB\{3BF3DED5-0FC8-4207-AC09-AA7B5AF4E408}, Quarantined, [1d7ab086c1bb9f97f8a5684b1be751af],

Adware.Agent, HKLM\SOFTWARE\CLASSES\INTERFACE\{1B97A696-5576-43AC-A73B-E1D2C78F21E8}, Quarantined, [1d7ab086c1bb9f97f8a5684b1be751af],

Adware.Agent, HKLM\SOFTWARE\CLASSES\INTERFACE\{75BF416E-4326-45B5-8A2D-AE32D05B930B}, Quarantined, [1d7ab086c1bb9f97f8a5684b1be751af],

Adware.Agent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{1B97A696-5576-43AC-A73B-E1D2C78F21E8}, Quarantined, [1d7ab086c1bb9f97f8a5684b1be751af],

Adware.Agent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{75BF416E-4326-45B5-8A2D-AE32D05B930B}, Quarantined, [1d7ab086c1bb9f97f8a5684b1be751af],

Adware.Agent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{FD6D90C0-E6EE-4BC6-B9F7-9ED319698007}, Quarantined, [1d7ab086c1bb9f97f8a5684b1be751af],

Adware.Agent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{3BF3DED5-0FC8-4207-AC09-AA7B5AF4E408}, Quarantined, [1d7ab086c1bb9f97f8a5684b1be751af],

Adware.Agent, HKLM\SOFTWARE\CLASSES\PricePeep.PricePeepBho.1, Quarantined, [1d7ab086c1bb9f97f8a5684b1be751af],

Adware.Agent, HKLM\SOFTWARE\CLASSES\PricePeep.PricePeepBho, Quarantined, [1d7ab086c1bb9f97f8a5684b1be751af],

Adware.Agent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PricePeep.PricePeepBho, Quarantined, [1d7ab086c1bb9f97f8a5684b1be751af],

Adware.Agent, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{FD6D90C0-E6EE-4BC6-B9F7-9ED319698007}, Quarantined, [1d7ab086c1bb9f97f8a5684b1be751af],

Adware.Agent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PricePeep.PricePeepBho.1, Quarantined, [1d7ab086c1bb9f97f8a5684b1be751af],

Adware.Agent, HKU\S-1-5-21-2515933047-4215523510-3283556267-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{FD6D90C0-E6EE-4BC6-B9F7-9ED319698007}, Quarantined, [1d7ab086c1bb9f97f8a5684b1be751af],

Adware.Agent, HKU\S-1-5-21-2515933047-4215523510-3283556267-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{FD6D90C0-E6EE-4BC6-B9F7-9ED319698007}, Quarantined, [1d7ab086c1bb9f97f8a5684b1be751af],

PUP.Optional.Babylon.A, HKU\S-1-5-21-2515933047-4215523510-3283556267-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}, Quarantined, [fd9adc5a1c60a88edd628d1efa08a25e],

PUP.Optional.FunMoods.A, HKU\S-1-5-21-2515933047-4215523510-3283556267-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B7971660-A1CE-4FDD-B9E0-2C37D77AFB0B}, Quarantined, [3f58ed494a324aecf88a52909b678f71],

PUP.Optional.FunMoods.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B7971660-A1CE-4FDD-B9E0-2C37D77AFB0B}, Quarantined, [3f58ed494a324aecf88a52909b678f71],

PUP.Optional.FunMoods.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B7971660-A1CE-4FDD-B9E0-2C37D77AFB0B}, Quarantined, [3f58ed494a324aecf88a52909b678f71],

PUP.Optional.MixiDJ.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A105B30B-D103-4781-B18C-E8DF93B6EBD0}, Quarantined, [841353e326567bbbd052ffe6857da45c],

PUP.Optional.Funmoods.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C87FC351-A80D-43E9-9A86-CF1E29DC443A}, Quarantined, [efa887af0c7058de7c620ed2fa08cf31],

PUP.Optional.PricePeep.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\PricePeep, Quarantined, [3b5c8babc7b5a39339e22530ad542ed2],

PUP.Optional.Yontoo.A, HKLM\SOFTWARE\CLASSES\YontooIEClient.Api, Quarantined, [2473b77f3745e55107d5b38b15eefb05],

PUP.Optional.Yontoo.A, HKLM\SOFTWARE\CLASSES\YontooIEClient.Api.1, Quarantined, [8e099d991963f0464b916cd28b786e92],

PUP.Optional.PricePeep.A, HKLM\SOFTWARE\CLASSES\APPID\PricePeep.DLL, Quarantined, [deb996a098e49b9b7c345226bd47f60a],

PUP.Optional.BetterSurf.A, HKLM\SOFTWARE\CLASSES\APPID\YontooIEClient.DLL, Quarantined, [25728fa79fddc571d904350950b3b14f],

PUP.Funmoods, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\bbjciahceamgodcoidkjpchnokgfpphh, Quarantined, [b6e1a49298e459dd7dce75f60bf8d729],

PUP.Optional.FunMoods.A, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\cjpglkicenollcignonpgiafdgfeehoj, Quarantined, [ff98db5bb8c4aa8c27e30f48fa0a54ac],

PUP.Optional.DataMangr.A, HKLM\SOFTWARE\WOW6432NODE\DataMngr, Quarantined, [138489ade6961c1a77db2d177390dc24],

PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\Iminent, Quarantined, [286f12243d3f62d49146045d42c1827e],

PUP.Optional.Yontoo.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\YontooIEClient.Api, Quarantined, [0b8c5adcf28afe3809d368d6aa594eb2],

PUP.Optional.Yontoo.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\YontooIEClient.Api.1, Quarantined, [1186171ff68681b521bb68d607fc28d8],

PUP.Optional.PricePeep.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\PricePeep.DLL, Quarantined, [8314cc6a47352511159b522635cf9e62],

PUP.Optional.BetterSurf.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\YontooIEClient.DLL, Quarantined, [cbcca1956616f14533aa003e976c41bf],

PUP.Funmoods, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\bbjciahceamgodcoidkjpchnokgfpphh, Quarantined, [e4b3e650156742f487c4bbb0fa09837d],

PUP.Optional.ATDheNetTVAp.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\bgnnidmnbdkmhfkjgdnngciimpdgohok, Quarantined, [9007b97d2c500d291e6f9adef50f53ad],

PUP.Optional.Babylon.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\boipimhfjpakfgckhbljjengakjhkcbp, Quarantined, [afe81f17720a4aec8b7a1c5c30d432ce],

PUP.Optional.FunMoods.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\cjpglkicenollcignonpgiafdgfeehoj, Quarantined, [f99e3cfa98e41a1c11f9e374699b7987],

PUP.Optional.MixiDJToolbar.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\kpepfkjapeclaafmhoelccknpfedainn, Quarantined, [1a7d0d29275588ae6a9faacec24240c0],

PUP.Optional.Yontoo.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\niapdbllcanepiiimjjndipklodoedlc, Quarantined, [c9cece68adcf2b0ba758b297b05341bf],

PUP.Optional.FunMoods.A, HKLM\SOFTWARE\WOW6432NODE\INSTALLCORE\funmoods, Quarantined, [5d3aac8af28a42f42623f95f010354ac],

PUP.Optional.MixiDJ.A, HKLM\SOFTWARE\WOW6432NODE\MIXIDJ\mixidj, Quarantined, [6c2b5dd992ea989ef4c29bdd3cc835cb],

PUP.Optional.RegCleanPro.A, HKLM\SOFTWARE\WOW6432NODE\SYSTWEAK\RegClean Pro, Quarantined, [484ff1451d5f8fa7afc86ecd689b22de],

PUP.Optional.1ClickDownload.A, HKU\S-1-5-21-2515933047-4215523510-3283556267-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\1ClickDownload, Quarantined, [4b4c57df2953b77f35428aee0103669a],