Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

random BSOD's after thorough cleaning


  • This topic is locked This topic is locked
43 replies to this topic

#1 skeeterbyte

skeeterbyte

  • Members
  • 67 posts
  • OFFLINE
  •  
  • Local time:11:30 PM

Posted 23 March 2014 - 11:40 AM

Hi,

 

Would like to ask for some help with a computer I am working on. It is a Gateway desktop, GT5426E, running Windows 7 Home Premium 32-bit.

After the initial scans, I cleaned a plethora of items....this was using Malwarebytes followed by ESET which accomplished the bulk of items. After finishing

those, moved forward with a SFC scan as well as the CHKDSK. After thinking all was cleaned and all was operating well, the computer is throwing random

BSOD's with a different error code each time. Sometimes they will happen quickly while other times, I can run the computer for several hours before one

happens. I have run all the "usual" tools....AdwCleaner, JRT, etc. I'll wait for you to advise what logs you'd like to see. Any help you can offer is greatly appreciated.

 

Skeet



BC AdBot (Login to Remove)

 


m

#2 skeeterbyte

skeeterbyte
  • Topic Starter

  • Members
  • 67 posts
  • OFFLINE
  •  
  • Local time:11:30 PM

Posted 24 March 2014 - 11:56 AM

Maybe it will help to go ahead and post the DDS log. Maybe you can see what, if anything, I might have missed.

Thanks,

Skeet

 

Here's the DDS log:

 

DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 11.0.9600.16521  BrowserJavaVersion: 10.51.2
Run by Gatis at 12:04:24 on 2014-03-23
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.1.1033.18.3454.2435 [GMT -4:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
SP: Microsoft Security Essentials *Enabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\nvvsvc.exe
c:\Program Files\Microsoft Security Client\MsMpEng.exe
C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\System32\spoolsv.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\Common Files\Motive\McciCMService.exe
C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
C:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe
C:\Program Files\Skype\Updater\Updater.exe
C:\Windows\system32\sppsvc.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Xobni\XobniService.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\System32\WUDFHost.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\RtHDVCpl.exe
C:\Windows\zHotkey.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Windows\ModPS2Key.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Program Files\Siber Systems\AI RoboForm\robotaskbaricon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
c:\Program Files\Microsoft Security Client\NisSrv.exe
C:\Windows\system32\conhost.exe
C:\Windows\System32\wbem\WmiPrvSE.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k hpdevmgmt
C:\Windows\system32\svchost.exe -k HsfXAudioService
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\svchost.exe -k SDRSVC
.
============== Pseudo HJT Report ===============
.
dURLSearchHooks: {A3BC75A2-1F87-4686-AA43-5347D756017C} - <orphaned>
BHO: RoboForm BHO: {724d43a9-0d85-11d4-9908-00400523e39a} - c:\program files\siber systems\ai roboform\roboform.dll
BHO: SSVHelper Class: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre7\bin\ssv.dll
BHO: Google Toolbar Notifier BHO: {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - c:\program files\google\googletoolbarnotifier\5.2.4204.1700\swg.dll
BHO: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre7\bin\jp2ssv.dll
TB: &RoboForm: {724D43A0-0D85-11D4-9908-00400523E39A} - c:\program files\siber systems\ai roboform\roboform.dll
TB: &RoboForm: {724d43a0-0d85-11d4-9908-00400523e39a} - c:\program files\siber systems\ai roboform\roboform.dll
uRun: [ehTray.exe] c:\windows\ehome\ehTray.exe
uRun: [RoboForm] "c:\program files\siber systems\ai roboform\RoboTaskBarIcon.exe"
uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe
mRun: [RtHDVCpl] RtHDVCpl.exe
mRun: [APSDaemon] "c:\program files\common files\apple\apple application support\APSDaemon.exe"
mRun: [CHotkey] zHotkey.exe
mRun: [Google Desktop Search] "c:\program files\google\google desktop search\GoogleDesktop.exe" /startup
mRun: [HP Software Update] "c:\program files\hp\hp software update\HPWuSchd2.exe"
mRun: [Intuit SyncManager] c:\program files\common files\intuit\sync\IntuitSyncManager.exe  startup
mRun: [ModPS2] ModPS2Key.exe
mRun: [ShowWnd] ShowWnd.exe
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [MSC] "c:\program files\microsoft security client\msseces.exe" -hide -runkey
mRun: [SunJavaUpdateSched] "c:\program files\java\jre7\bin\jusched.exe"
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
StartupFolder: c:\users\gatis\appdata\roaming\microsoft\windows\start menu\programs\startup\OneNote 2007 Screen Clipper and Launcher.lnk.disabled
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\adobeg~1.lnk - c:\program files\common files\adobe\calibration\Adobe Gamma Loader.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\hpdigi~1.lnk - c:\program files\hp\digital imaging\bin\hpqtra08.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\quickb~1.lnk - c:\program files\common files\intuit\quickbooks\qbupdate\qbupdate.exe
StartupFolder: c:\programdata\microsoft\windows\start menu\programs\startup\w98Eject.lnk.disabled
uPolicies-Explorer: NoDriveTypeAutoRun = dword:145
mPolicies-Explorer: BindDirectlyToPropertySetStorage = dword:0
mPolicies-Explorer: NoDrives = dword:0
mPolicies-System: ConsentPromptBehaviorAdmin = dword:0
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableLUA = dword:0
mPolicies-System: EnableUIADesktopToggle = dword:0
mPolicies-System: PromptOnSecureDesktop = dword:0
IE: Customize Menu - c:\program files\siber systems\ai roboform\RoboFormComCustomizeIEMenu.html
IE: E&xport to Microsoft Excel - c:\progra~1\micros~4\office12\EXCEL.EXE/3000
IE: Fill Forms - c:\program files\siber systems\ai roboform\RoboFormComFillForms.html
IE: RoboForm Toolbar - c:\program files\siber systems\ai roboform\RoboFormComShowToolbar.html
IE: Save Forms - c:\program files\siber systems\ai roboform\RoboFormComSavePass.html
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-001051-0002-0051-ABCDEFFEDCBC} - <orphaned>
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\program files\microsoft office\office12\ONBttnIE.dll
IE: {320AF880-6646-11D3-ABEE-C5DBF3571F46} - c:\program files\siber systems\ai roboform\RoboFormComFillForms.html
IE: {320AF880-6646-11D3-ABEE-C5DBF3571F49} - c:\program files\siber systems\ai roboform\RoboFormComSavePass.html
IE: {724d43aa-0d85-11d4-9908-00400523e39a} - c:\program files\siber systems\ai roboform\RoboFormComShowToolbar.html
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}
Trusted Zone: clonewarsadventures.com
Trusted Zone: freerealms.com
Trusted Zone: soe.com
Trusted Zone: sony.com
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_51-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab
DPF: {CAFEEFAC-0017-0000-0051-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_51-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_51-windows-i586.cab
TCP: NameServer = 97.81.22.195 71.92.29.130 24.217.201.67
TCP: Interfaces\{514E703C-6EDB-451D-88B0-B252DA38F525} : DHCPNameServer = 97.81.22.195 71.92.29.130 24.217.201.67
Handler: intu-help-qb1 - {9B0F96C7-2E4B-433e-ABF3-043BA1B54AE3} - c:\program files\intuit\quickbooks 2008\HelpAsyncPluggableProtocol.dll
Handler: intu-help-qb2 - {84D77A00-41B5-4b8b-8ADF-86486D72E749} - c:\program files\intuit\quickbooks 2008\HelpAsyncPluggableProtocol.dll
Handler: qbwc - {FC598A64-626C-4447-85B8-53150405FD57} -
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\program files\common files\skype\Skype4COM.dll
AppInit_DLLs= c:\progra~1\google\google~1\GO36F4~1.DLL
SSODL: WebCheck - <orphaned>
mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "c:\program files\google\chrome\application\33.0.1750.154\installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\users\gatis\appdata\roaming\mozilla\firefox\profiles\2swkcybu.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.wunderground.com/cgi-bin/findweather/getForecast?query=30519
FF - plugin: c:\program files\adobe\reader 11.0\reader\air\nppdf32.dll
FF - plugin: c:\program files\google\google earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\google\google updater\2.4.2432.1652\npCIDetect14.dll
FF - plugin: c:\program files\google\update\1.3.22.5\npGoogleUpdate3.dll
FF - plugin: c:\program files\java\jre7\bin\dtplugin\npdeployJava1.dll
FF - plugin: c:\program files\java\jre7\bin\plugin2\npjp2.dll
FF - plugin: c:\program files\microsoft silverlight\5.1.30214.0\npctrlui.dll
FF - plugin: c:\program files\unity\webplayer\loader\npUnity3D32.dll
FF - plugin: c:\program files\virtual earth 3d\npVE3D.dll
FF - plugin: c:\users\gatis\appdata\local\microsoft\internet explorer\downloaded program files\npsoe.dll
FF - plugin: c:\users\gatis\appdata\local\roblox\versions\version-ccfce68b6145482d\NPRobloxProxy.dll
FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_12_0_0_77.dll
.
============= SERVICES / DRIVERS ===============
.
R0 MpFilter;Microsoft Malware Protection Driver;c:\windows\system32\drivers\MpFilter.sys [2013-1-20 214696]
R0 SSFS041A;Spy Sweeper File System Filer Driver: 041A;c:\windows\system32\drivers\SSFS041A.sys [2007-3-22 13824]
R2 HsfXAudioService;HsfXAudioService;c:\windows\system32\svchost.exe -k HsfXAudioService [2009-7-13 20992]
R2 MBAMScheduler;MBAMScheduler;c:\program files\malwarebytes' anti-malware\mbamscheduler.exe [2014-3-20 418376]
R2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2014-3-20 701512]
R2 NisDrv;Microsoft Network Inspection System;c:\windows\system32\drivers\NisDrvWFP.sys [2013-1-20 104768]
R2 SkypeUpdate;Skype Updater;c:\program files\skype\updater\Updater.exe [2013-10-23 172192]
R2 UMVPFSrv;UMVPFSrv;c:\program files\common files\logishrd\lvmvfm\UMVPFSrv.exe [2012-1-18 450848]
R2 XobniService;XobniService;c:\program files\xobni\XobniService.exe [2011-5-18 62184]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2014-3-20 22856]
R3 NisSrv;Microsoft Network Inspection;c:\program files\microsoft security client\NisSrv.exe [2013-10-23 280288]
R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\drivers\yk62x86.sys [2009-9-28 315392]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2013-9-11 105144]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-13 229888]
S3 GoogleDesktopManager-051210-111108;Google Desktop Manager 5.9.1005.12335;c:\program files\google\google desktop search\GoogleDesktop.exe [2007-1-30 30192]
S3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\ieetwcollector.exe [2014-3-18 108032]
S3 OXSDIDRV_x32;Oxford Semi eSATA Filter (x32);c:\windows\system32\drivers\OXSDIDRV_x32.sys [2009-9-28 52656]
S3 OXUDIDRV;OXUDIDRV;c:\windows\system32\drivers\OXUDIDRV_x32.sys [2012-8-19 24880]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2013-4-13 14848]
S3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\TsUsbFlt.sys [2014-3-20 49152]
S3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2013-4-13 27136]
S3 VST_DPV;VST_DPV;c:\windows\system32\drivers\VSTDPV3.SYS [2009-7-13 980992]
S3 VSTHWBS2;VSTHWBS2;c:\windows\system32\drivers\VSTBS23.SYS [2009-7-13 266752]
S3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\wat\WatAdminSvc.exe [2013-4-13 1343400]
.
=============== File Associations ===============
.
ShellExec: pi11.exe: Open="c:\program files\microsoft digital image 2006\pi.exe" "%1"
.
=============== Created Last 30 ================
.
2014-03-23 16:00:30    --------    d-----w-    c:\program files\iPod
2014-03-23 16:00:29    --------    d-----w-    c:\programdata\188F1432-103A-4ffb-80F1-36B633C5C9E1
2014-03-23 16:00:29    --------    d-----w-    c:\program files\iTunes
2014-03-23 15:53:33    159744    ----a-w-    c:\program files\internet explorer\plugins\npqtplugin5.dll
2014-03-23 15:53:33    159744    ----a-w-    c:\program files\internet explorer\plugins\npqtplugin4.dll
2014-03-23 15:53:33    159744    ----a-w-    c:\program files\internet explorer\plugins\npqtplugin3.dll
2014-03-23 15:53:33    159744    ----a-w-    c:\program files\internet explorer\plugins\npqtplugin2.dll
2014-03-23 15:53:33    159744    ----a-w-    c:\program files\internet explorer\plugins\npqtplugin.dll
2014-03-23 03:02:24    --------    d-----w-    c:\windows\ERUNT
2014-03-22 18:44:17    --------    d-----w-    C:\FRST
2014-03-22 16:32:09    7969936    ----a-w-    c:\programdata\microsoft\microsoft antimalware\definition updates\{f878ed53-55dd-478e-98cc-e1756c460d84}\mpengine.dll
2014-03-21 23:36:05    --------    d-----w-    c:\programdata\Oracle
2014-03-21 23:35:00    94632    ----a-w-    c:\windows\system32\WindowsAccessBridge.dll
2014-03-21 23:22:55    --------    d-----w-    c:\program files\VS Revo Group
2014-03-21 04:03:21    7969936    ----a-w-    c:\programdata\microsoft\microsoft antimalware\definition updates\backup\mpengine.dll
2014-03-21 04:01:48    5694464    ----a-w-    c:\windows\system32\mstscax.dll
2014-03-21 03:53:54    194552    ----a-w-    c:\program files\mozilla firefox\maintenanceservice_installer.exe
2014-03-21 03:53:39    119808    ----a-w-    c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
2014-03-21 03:37:41    --------    d-----w-    c:\windows\system32\catroot2
2014-03-21 03:14:52    --------    d-----w-    c:\windows\system32\wbem\repository
2014-03-21 03:08:34    --------    d-----w-    C:\RegBackup
2014-03-21 02:21:02    --------    d-----w-    c:\program files\Tweaking.com
2014-03-21 01:59:36    --------    d-----w-    C:\AdwCleaner
2014-03-21 01:31:45    765968    ------w-    c:\programdata\microsoft\microsoft antimalware\definition updates\{244ba0fa-57a9-47c3-b476-201c2fa9614a}\gapaengine.dll
2014-03-20 19:21:50    792576    ----a-w-    c:\windows\system32\TSWorkspace.dll
2014-03-20 17:55:20    --------    d-----w-    c:\users\gatis\appdata\roaming\Malwarebytes
2014-03-20 17:55:06    --------    d-----w-    c:\programdata\Malwarebytes
2014-03-20 17:55:04    22856    ----a-w-    c:\windows\system32\drivers\mbam.sys
2014-03-20 17:55:04    --------    d-----w-    c:\program files\Malwarebytes' Anti-Malware
2014-03-20 17:54:53    --------    d-----w-    c:\users\gatis\appdata\local\Programs
2014-03-18 23:10:59    7211008    ----a-w-    c:\program files\internet explorer\F12Resources.dll
2014-03-18 23:09:59    2349056    ----a-w-    c:\windows\system32\win32k.sys
2014-03-18 23:09:58    185344    ----a-w-    c:\windows\system32\wwansvc.dll
2014-03-18 23:09:57    381440    ----a-w-    c:\windows\system32\wer.dll
2014-02-26 20:33:58    --------    d-----w-    c:\windows\Migration
.
==================== Find3M  ====================
.
2014-03-20 21:02:18    71048    ----a-w-    c:\windows\system32\FlashPlayerCPLApp.cpl
2014-03-20 21:02:18    692616    ----a-w-    c:\windows\system32\FlashPlayerApp.exe
2014-03-01 04:11:20    2724864    ----a-w-    c:\windows\system32\mshtml.tlb
2014-03-01 04:10:48    4096    ----a-w-    c:\windows\system32\ieetwcollectorres.dll
2014-03-01 03:52:43    61952    ----a-w-    c:\windows\system32\iesetup.dll
2014-03-01 03:51:53    51200    ----a-w-    c:\windows\system32\ieetwproxystub.dll
2014-03-01 03:38:26    112128    ----a-w-    c:\windows\system32\ieUnatt.exe
2014-03-01 03:38:23    108032    ----a-w-    c:\windows\system32\ieetwcollector.exe
2014-03-01 03:37:35    553472    ----a-w-    c:\windows\system32\jscript9diag.dll
2014-03-01 03:31:30    646144    ----a-w-    c:\windows\system32\MsSpellCheckingFacility.exe
2014-03-01 03:14:15    4244480    ----a-w-    c:\windows\system32\jscript9.dll
2014-03-01 03:00:08    1964032    ----a-w-    c:\windows\system32\inetcpl.cpl
2014-03-01 02:32:16    1820160    ----a-w-    c:\windows\system32\wininet.dll
2014-02-04 02:04:22    1230336    ----a-w-    c:\windows\system32\WindowsCodecs.dll
2014-02-04 02:04:11    509440    ----a-w-    c:\windows\system32\qedit.dll
2014-01-19 07:32:23    231584    ------w-    c:\windows\system32\MpSigStub.exe
2014-01-17 20:24:12    94208    ----a-w-    c:\windows\system32\QuickTimeVR.qtx
2014-01-17 20:24:12    69632    ----a-w-    c:\windows\system32\QuickTime.qts
2013-12-24 23:09:41    1987584    ----a-w-    c:\windows\system32\d3d10warp.dll
.
============= FINISH: 12:06:11.38 ===============
 



#3 skeeterbyte

skeeterbyte
  • Topic Starter

  • Members
  • 67 posts
  • OFFLINE
  •  
  • Local time:11:30 PM

Posted 25 March 2014 - 01:47 PM

more that might help.....the MiniToolbox log....just for good measure, pasted the contents as well as attaching the file

Thanks,

Skeet

 

 

MiniToolBox by Farbar  Version: 23-01-2014
Ran by Gatis (administrator) on 25-03-2014 at 14:24:17
Running from "J:\"
Microsoft Windows 7 Home Premium  Service Pack 1 (X86)
Boot Mode: Normal
***************************************************************************

========================= Flush DNS: ===================================

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========================= IE Proxy Settings: ==============================

Proxy is not enabled.
No Proxy Server is set.

"Reset IE Proxy Settings": IE Proxy Settings were reset.

========================= FF Proxy Settings: ==============================


"Reset FF Proxy Settings": Firefox Proxy settings were reset.

========================= Hosts content: =================================




127.0.0.1       localhost

========================= Winsock entries =====================================

Catalog5 01 C:\Windows\system32\NLAapi.dll [52224] (Microsoft Corporation)
Catalog5 02 C:\Windows\system32\napinsp.dll [52224] (Microsoft Corporation)
Catalog5 03 C:\Windows\system32\pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 04 C:\Windows\system32\pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 05 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)
Catalog5 06 C:\Windows\system32\winrnr.dll [20992] (Microsoft Corporation)
Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Catalog9 01 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 02 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 03 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 04 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 05 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 06 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 07 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 08 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 09 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 10 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 11 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 12 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 13 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 14 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 15 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 16 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 17 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 18 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 19 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 20 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)

========================= Event log errors: ===============================

Application errors:
==================
Error: (03/25/2014 01:52:19 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Dependent Assembly Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (03/25/2014 01:51:29 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "assemblyIdentity1".Error in manifest or policy file "assemblyIdentity2" on line assemblyIdentity3.
The value "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" of attribute "version" in element "assemblyIdentity" is invalid.


System errors:
=============
Error: (03/25/2014 02:19:19 PM) (Source: Disk) (User: )
Description: The driver detected a controller error on \Device\Harddisk5\DR5.

Error: (03/25/2014 02:19:18 PM) (Source: Disk) (User: )
Description: The driver detected a controller error on \Device\Harddisk5\DR5.

Error: (03/25/2014 02:19:17 PM) (Source: Disk) (User: )
Description: The driver detected a controller error on \Device\Harddisk5\DR5.

Error: (03/25/2014 02:13:46 PM) (Source: WMPNetworkSvc) (User: )
Description: Service 'WMPNetworkSvc' did not start correctly because CoCreateInstance(CLSID_UPnPDeviceFinder) encountered error '0x80004005'. Verify that the UPnPHost service is running and that the UPnPHost component of Windows is installed properly.

Error: (03/25/2014 02:12:40 PM) (Source: BugCheck) (User: )
Description: 0x0000007f (0x0000000d, 0x00000000, 0x00000000, 0x00000000)C:\Windows\MEMORY.DMP032514-26067-01

Error: (03/25/2014 02:12:40 PM) (Source: EventLog) (User: )
Description: The previous system shutdown at 1:57:53 PM on ?3/?25/?2014 was unexpected.

Error: (03/25/2014 01:41:27 PM) (Source: Microsoft Antimalware) (User: )
Description: %NT AUTHORITY60 has encountered an error trying to update signatures.

    New Signature Version:

    Previous Signature Version: 1.169.485.0

    Update Source: %NT AUTHORITY59

    Update Stage: 4.4.0304.00

    Source Path: 4.4.0304.01

    Signature Type: %NT AUTHORITY602

    Update Type: %NT AUTHORITY604

    User: NT AUTHORITY\SYSTEM

    Current Engine Version: %NT AUTHORITY605

    Previous Engine Version: %NT AUTHORITY606

    Error code: %NT AUTHORITY607

    Error description: %NT AUTHORITY608

Error: (03/25/2014 01:16:32 PM) (Source: cdrom) (User: )
Description: The device, \Device\CdRom0, has a bad block.

Error: (03/25/2014 01:16:32 PM) (Source: cdrom) (User: )
Description: The device, \Device\CdRom0, has a bad block.

Error: (03/25/2014 01:16:32 PM) (Source: cdrom) (User: )
Description: The device, \Device\CdRom0, has a bad block.


Microsoft Office Sessions:
=========================
Error: (02/04/2013 08:07:39 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 1803 seconds with 180 seconds of active time.  This session ended with a crash.

Error: (09/27/2010 01:34:05 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6539.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 53 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (01/06/2010 07:29:46 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6514.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 46 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (01/05/2010 02:31:10 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6514.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 1182 seconds with 180 seconds of active time.  This session ended with a crash.

Error: (08/29/2009 04:21:37 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6504.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 10 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (02/12/2009 06:13:34 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6316.5000, Microsoft Office Version: 12.0.6215.1000. This session lasted 13 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (04/07/2008 07:40:42 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 4556 seconds with 1020 seconds of active time.  This session ended with a crash.


CodeIntegrity Errors:
===================================
  Date: 2014-03-21 22:00:05.631
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\winsxs\x86_microsoft-windows-securestartup-core_31bf3856ad364e35_6.0.6000.16386_none_32a3e3ecf533e7fe\fveapi.dll because the set of per-page image hashes could not be found on the system.

  Date: 2014-03-21 22:00:05.553
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\winsxs\x86_microsoft-windows-securestartup-core_31bf3856ad364e35_6.0.6000.16386_none_32a3e3ecf533e7fe\fveapi.dll because the set of per-page image hashes could not be found on the system.

  Date: 2014-03-21 22:00:05.459
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\winsxs\x86_microsoft-windows-securestartup-core_31bf3856ad364e35_6.0.6000.16386_none_32a3e3ecf533e7fe\fveapi.dll because the set of per-page image hashes could not be found on the system.

  Date: 2014-03-21 21:59:51.684
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\winsxs\x86_microsoft-windows-tpm-driver-wmi_31bf3856ad364e35_6.0.6000.16386_none_6d564c64c358b59e\Win32_Tpm.dll because the set of per-page image hashes could not be found on the system.

  Date: 2014-03-21 21:59:51.606
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\winsxs\x86_microsoft-windows-tpm-driver-wmi_31bf3856ad364e35_6.0.6000.16386_none_6d564c64c358b59e\Win32_Tpm.dll because the set of per-page image hashes could not be found on the system.

  Date: 2014-03-21 21:59:51.528
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\winsxs\x86_microsoft-windows-tpm-driver-wmi_31bf3856ad364e35_6.0.6000.16386_none_6d564c64c358b59e\Win32_Tpm.dll because the set of per-page image hashes could not be found on the system.

  Date: 2014-03-21 21:58:03.966
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\winsxs\Backup\x86_microsoft-windows-bcrypt-dll_31bf3856ad364e35_6.0.6000.16386_none_ec55d170f27a97bb_bcrypt.dll_e2f091ac because the set of per-page image hashes could not be found on the system.

  Date: 2014-03-21 21:58:03.888
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\winsxs\Backup\x86_microsoft-windows-bcrypt-dll_31bf3856ad364e35_6.0.6000.16386_none_ec55d170f27a97bb_bcrypt.dll_e2f091ac because the set of per-page image hashes could not be found on the system.

  Date: 2014-03-21 21:58:03.810
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\winsxs\Backup\x86_microsoft-windows-bcrypt-dll_31bf3856ad364e35_6.0.6000.16386_none_ec55d170f27a97bb_bcrypt.dll_e2f091ac because the set of per-page image hashes could not be found on the system.

  Date: 2014-03-21 21:57:51.206
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\wbem\Win32_Tpm.dll because the set of per-page image hashes could not be found on the system.


=========================== Installed Programs ============================

Adobe Flash Player 12 ActiveX (Version: 12.0.0.77)
Adobe Flash Player 12 Plugin (Version: 12.0.0.77)
Adobe Reader XI (11.0.06) (Version: 11.0.06)
Apple Application Support (Version: 3.0.1)
Apple Mobile Device Support (Version: 7.1.1.3)
Citrix Online Launcher (Version: 1.0.109)
Citrix Online Launcher (Version: 1.0.141)
Free Realms
Google Chrome (Version: 33.0.1750.154)
Google Earth (Version: 7.1.2.2041)
Google Update Helper (Version: 1.3.22.5)
iCloud (Version: 3.1.0.40)
ISO to USB version 1.0 (Version: 1.0)
iTunes (Version: 11.1.5.5)
Java 7 Update 51 (Version: 7.0.510)
Java Auto Updater (Version: 2.1.9.8)
Malwarebytes Anti-Malware version 1.75.0.1300 (Version: 1.75.0.1300)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938)
Microsoft Age of Empires II: The Conquerors Expansion
Microsoft Office Home and Student 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Standard 2007 (Version: 12.0.6612.1000)
Microsoft Security Client (Version: 4.4.0304.0)
Microsoft Security Essentials (Version: 4.4.304.0)
Microsoft Silverlight (Version: 5.1.30214.0)
Mozilla Firefox 28.0 (x86 en-US) (Version: 28.0)
Mozilla Maintenance Service (Version: 28.0)
NVIDIA Control Panel 307.83 (Version: 307.83)
NVIDIA Graphics Driver 307.83 (Version: 307.83)
NVIDIA Install Application (Version: 2.1002.109.706)
NVIDIA Update 1.10.8 (Version: 1.10.8)
NVIDIA Update Components (Version: 1.10.8)
PCI Soft Data Fax Modem with SmartCP (Version: 7.80.4.0)
ProductContext
QuickTime 7 (Version: 7.75.80.95)
Realtek High Definition Audio Driver
ROBLOX Player for Gatis
Skype™ 6.11 (Version: 6.11.102)
Windows 7 Upgrade Advisor (Version: 2.0.5000.0)

========================= Devices: ================================


========================= Memory info: ===================================

Percentage of memory in use: 37%
Total physical RAM: 3454.49 MB
Available physical RAM: 2143.3 MB
Total Pagefile: 6907.27 MB
Available Pagefile: 5334.98 MB
Total Virtual: 2047.88 MB
Available Virtual: 1938.72 MB

========================= Partitions: =====================================

1 Drive c: () (Fixed) (Total:288.38 GB) (Free:126.19 GB) NTFS
2 Drive d: (Recovery) (Fixed) (Total:9.71 GB) (Free:4.38 GB) NTFS
8 Drive j: (STORE N GO) (Removable) (Total:7.45 GB) (Free:7.43 GB) FAT32

========================= Users: ========================================

User accounts for \\GATIS-PC

Administrator            Bethany                  Gatis                    
Guest                    Noah                     UpdatusUser              

========================= Minidump Files ==================================

No minidump file found

========================= Restore Points ==================================

30-10-2013 22:17:35 Windows Update
04-11-2013 19:55:39 Windows Update
08-11-2013 02:31:32 Windows Update
11-11-2013 23:04:00 Windows Update
14-11-2013 21:41:28 Windows Update
17-11-2013 22:31:01 Windows Update
25-11-2013 01:51:39 Scheduled Checkpoint
02-12-2013 20:28:30 Windows Update
04-12-2013 02:18:37 Windows Update
11-12-2013 20:51:08 Windows Update
18-12-2013 14:32:28 Windows Update
23-12-2013 04:03:24 Windows Update
06-01-2014 17:03:17 Windows Update
09-01-2014 12:55:12 Windows Update
13-01-2014 21:33:35 Windows Update
28-01-2014 12:30:59 Windows Update
28-01-2014 17:22:55 Windows Update
05-02-2014 20:43:11 Windows Update
09-02-2014 01:17:07 Windows Update
14-02-2014 18:43:43 Windows Update
19-02-2014 20:30:14 Windows Update
20-02-2014 08:00:30 Windows Update
20-02-2014 23:33:50 Windows Update
26-02-2014 20:06:19 Windows Update
26-02-2014 20:32:54 Windows Update
28-02-2014 08:00:29 Windows Update
04-03-2014 00:13:16 Windows Update
18-03-2014 23:08:04 Windows Update
18-03-2014 23:57:47 Windows Update
20-03-2014 19:20:26 Installed Java 7 Update 51
21-03-2014 03:05:13 mid-Anita-cleaning
21-03-2014 04:02:35 Windows Update
21-03-2014 23:24:40 Revo Uninstaller's restore point - Java 7 Update 25
21-03-2014 23:25:11 Removed Java 7 Update 51
21-03-2014 23:34:29 Installed Java 7 Update 51
25-03-2014 18:23:41 Windows Update

**** End of log ****

Attached Files



#4 HelpBot

HelpBot

    Bleepin' Binary Bot


  • Bots
  • 12,549 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:30 AM

Posted 28 March 2014 - 11:45 AM

Hello and welcome to Bleeping Computer!

I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.

We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.

To help Bleeping Computer better assist you please perform the following steps:

***************************************************

step1.gif In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.

CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/528448 <<< CLICK THIS LINK



If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.

***************************************************

step2.gifIf you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of this page). In that reply, please include the following information:

  • If you have not done so already, include a clear description of the problems you're having, along with any steps you may have performed so far.
  • A new DDS log. For your convenience, you will find the instructions for generating these logs repeated at the bottom of this post.
    • Please do this even if you have previously posted logs for us.
    • If you were unable to produce the logs originally please try once more.
    • If you are unable to create a log please provide detailed information about your installed Windows Operating System including the Version, Edition and if it is a 32bit or a 64bit system.
    • If you are unsure about any of these characteristics just post what you can and we will guide you.
  • Please tell us if you have your original Windows CD/DVD available.
  • Upon completing the above steps and posting a reply, another staff member will review your topic and do their best to resolve your issues.

Thank you for your patience, and again sorry for the delay.

***************************************************

We need to see some information about what is happening in your machine. Please perform the following scan again:

  • Download DDS by sUBs from the following link if you no longer have it available and save it to your destop.

    DDS.com Download Link
  • Double click on the DDS icon, allow it to run.
  • A small box will open, with an explanation about the tool. No input is needed, the scan is running.
  • Notepad will open with the results.
  • Follow the instructions that pop up for posting the results.
  • Close the program window, and delete the program from your desktop.
Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet.

Information on A/V control can be found HERE.

As I am just a silly little program running on the BleepingComputer.com servers, please do not send me private messages as I do not know how to read and reply to them! Thanks!

#5 skeeterbyte

skeeterbyte
  • Topic Starter

  • Members
  • 67 posts
  • OFFLINE
  •  
  • Local time:11:30 PM

Posted 28 March 2014 - 12:28 PM

NEW DDS log as requested:

 

DDS txt:

 

DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 11.0.9600.16521  BrowserJavaVersion: 10.51.2
Run by Gatis at 13:22:06 on 2014-03-28
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.1.1033.18.3454.2434 [GMT -4:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
SP: Microsoft Security Essentials *Enabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\nvvsvc.exe
c:\Program Files\Microsoft Security Client\MsMpEng.exe
C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
C:\Windows\System32\spoolsv.exe
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
C:\Windows\system32\nvvsvc.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\Common Files\Motive\McciCMService.exe
C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
C:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe
C:\Program Files\Skype\Updater\Updater.exe
C:\Windows\system32\sppsvc.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Xobni\XobniService.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\System32\WUDFHost.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskhost.exe
C:\Windows\Explorer.EXE
C:\Windows\RtHDVCpl.exe
C:\Windows\zHotkey.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Windows\system32\taskeng.exe
C:\Windows\ModPS2Key.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Siber Systems\AI RoboForm\robotaskbaricon.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
c:\Program Files\Microsoft Security Client\NisSrv.exe
C:\Windows\system32\conhost.exe
C:\Windows\System32\wbem\WmiPrvSE.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k hpdevmgmt
C:\Windows\system32\svchost.exe -k HsfXAudioService
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\svchost.exe -k SDRSVC
.
============== Pseudo HJT Report ===============
.
dURLSearchHooks: {A3BC75A2-1F87-4686-AA43-5347D756017C} - <orphaned>
BHO: RoboForm BHO: {724d43a9-0d85-11d4-9908-00400523e39a} - c:\program files\siber systems\ai roboform\roboform.dll
BHO: SSVHelper Class: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre7\bin\ssv.dll
BHO: Google Toolbar Notifier BHO: {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - c:\program files\google\googletoolbarnotifier\5.2.4204.1700\swg.dll
BHO: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre7\bin\jp2ssv.dll
TB: &RoboForm: {724D43A0-0D85-11D4-9908-00400523E39A} - c:\program files\siber systems\ai roboform\roboform.dll
TB: &RoboForm: {724d43a0-0d85-11d4-9908-00400523e39a} - c:\program files\siber systems\ai roboform\roboform.dll
uRun: [ehTray.exe] c:\windows\ehome\ehTray.exe
uRun: [RoboForm] "c:\program files\siber systems\ai roboform\RoboTaskBarIcon.exe"
uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe
mRun: [RtHDVCpl] RtHDVCpl.exe
mRun: [APSDaemon] "c:\program files\common files\apple\apple application support\APSDaemon.exe"
mRun: [CHotkey] zHotkey.exe
mRun: [Google Desktop Search] "c:\program files\google\google desktop search\GoogleDesktop.exe" /startup
mRun: [HP Software Update] "c:\program files\hp\hp software update\HPWuSchd2.exe"
mRun: [Intuit SyncManager] c:\program files\common files\intuit\sync\IntuitSyncManager.exe  startup
mRun: [ModPS2] ModPS2Key.exe
mRun: [ShowWnd] ShowWnd.exe
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [MSC] "c:\program files\microsoft security client\msseces.exe" -hide -runkey
mRun: [SunJavaUpdateSched] "c:\program files\java\jre7\bin\jusched.exe"
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
StartupFolder: c:\users\gatis\appdata\roaming\microsoft\windows\start menu\programs\startup\OneNote 2007 Screen Clipper and Launcher.lnk.disabled
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\adobeg~1.lnk - c:\program files\common files\adobe\calibration\Adobe Gamma Loader.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\hpdigi~1.lnk - c:\program files\hp\digital imaging\bin\hpqtra08.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\quickb~1.lnk - c:\program files\common files\intuit\quickbooks\qbupdate\qbupdate.exe
StartupFolder: c:\programdata\microsoft\windows\start menu\programs\startup\w98Eject.lnk.disabled
uPolicies-Explorer: NoDriveTypeAutoRun = dword:145
mPolicies-Explorer: BindDirectlyToPropertySetStorage = dword:0
mPolicies-Explorer: NoDrives = dword:0
mPolicies-System: ConsentPromptBehaviorAdmin = dword:0
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableLUA = dword:0
mPolicies-System: EnableUIADesktopToggle = dword:0
mPolicies-System: PromptOnSecureDesktop = dword:0
IE: Customize Menu - c:\program files\siber systems\ai roboform\RoboFormComCustomizeIEMenu.html
IE: E&xport to Microsoft Excel - c:\progra~1\micros~4\office12\EXCEL.EXE/3000
IE: Fill Forms - c:\program files\siber systems\ai roboform\RoboFormComFillForms.html
IE: RoboForm Toolbar - c:\program files\siber systems\ai roboform\RoboFormComShowToolbar.html
IE: Save Forms - c:\program files\siber systems\ai roboform\RoboFormComSavePass.html
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\program files\microsoft office\office12\ONBttnIE.dll
IE: {320AF880-6646-11D3-ABEE-C5DBF3571F46} - c:\program files\siber systems\ai roboform\RoboFormComFillForms.html
IE: {320AF880-6646-11D3-ABEE-C5DBF3571F49} - c:\program files\siber systems\ai roboform\RoboFormComSavePass.html
IE: {724d43aa-0d85-11d4-9908-00400523e39a} - c:\program files\siber systems\ai roboform\RoboFormComShowToolbar.html
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}
Trusted Zone: clonewarsadventures.com
Trusted Zone: freerealms.com
Trusted Zone: soe.com
Trusted Zone: sony.com
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_51-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab
DPF: {CAFEEFAC-0017-0000-0051-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_51-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_51-windows-i586.cab
TCP: NameServer = 97.81.22.195 71.92.29.130 24.217.201.67
TCP: Interfaces\{514E703C-6EDB-451D-88B0-B252DA38F525} : DHCPNameServer = 97.81.22.195 71.92.29.130 24.217.201.67
Handler: intu-help-qb1 - {9B0F96C7-2E4B-433e-ABF3-043BA1B54AE3} - c:\program files\intuit\quickbooks 2008\HelpAsyncPluggableProtocol.dll
Handler: intu-help-qb2 - {84D77A00-41B5-4b8b-8ADF-86486D72E749} - c:\program files\intuit\quickbooks 2008\HelpAsyncPluggableProtocol.dll
Handler: qbwc - {FC598A64-626C-4447-85B8-53150405FD57} -
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\program files\common files\skype\Skype4COM.dll
AppInit_DLLs= c:\progra~1\google\google~1\GO36F4~1.DLL
SSODL: WebCheck - <orphaned>
mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "c:\program files\google\chrome\application\33.0.1750.154\installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\users\gatis\appdata\roaming\mozilla\firefox\profiles\2swkcybu.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.wunderground.com/cgi-bin/findweather/getForecast?query=30519
FF - plugin: c:\program files\adobe\reader 11.0\reader\air\nppdf32.dll
FF - plugin: c:\program files\google\google earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\google\google updater\2.4.2432.1652\npCIDetect14.dll
FF - plugin: c:\program files\google\update\1.3.22.5\npGoogleUpdate3.dll
FF - plugin: c:\program files\java\jre7\bin\dtplugin\npdeployJava1.dll
FF - plugin: c:\program files\java\jre7\bin\plugin2\npjp2.dll
FF - plugin: c:\program files\microsoft silverlight\5.1.30214.0\npctrlui.dll
FF - plugin: c:\program files\unity\webplayer\loader\npUnity3D32.dll
FF - plugin: c:\program files\virtual earth 3d\npVE3D.dll
FF - plugin: c:\users\gatis\appdata\local\microsoft\internet explorer\downloaded program files\npsoe.dll
FF - plugin: c:\users\gatis\appdata\local\roblox\versions\version-ccfce68b6145482d\NPRobloxProxy.dll
FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_12_0_0_77.dll
.
============= SERVICES / DRIVERS ===============
.
R0 MpFilter;Microsoft Malware Protection Driver;c:\windows\system32\drivers\MpFilter.sys [2013-1-20 214696]
R0 SSFS041A;Spy Sweeper File System Filer Driver: 041A;c:\windows\system32\drivers\SSFS041A.sys [2007-3-22 13824]
R2 HsfXAudioService;HsfXAudioService;c:\windows\system32\svchost.exe -k HsfXAudioService [2009-7-13 20992]
R2 MBAMScheduler;MBAMScheduler;c:\program files\malwarebytes' anti-malware\mbamscheduler.exe [2014-3-20 418376]
R2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2014-3-20 701512]
R2 NisDrv;Microsoft Network Inspection System;c:\windows\system32\drivers\NisDrvWFP.sys [2013-1-20 104768]
R2 SkypeUpdate;Skype Updater;c:\program files\skype\updater\Updater.exe [2013-10-23 172192]
R2 UMVPFSrv;UMVPFSrv;c:\program files\common files\logishrd\lvmvfm\UMVPFSrv.exe [2012-1-18 450848]
R2 XobniService;XobniService;c:\program files\xobni\XobniService.exe [2011-5-18 62184]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2014-3-20 22856]
R3 NisSrv;Microsoft Network Inspection;c:\program files\microsoft security client\NisSrv.exe [2013-10-23 280288]
R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\drivers\yk62x86.sys [2009-9-28 315392]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2013-9-11 105144]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-13 229888]
S3 GoogleDesktopManager-051210-111108;Google Desktop Manager 5.9.1005.12335;c:\program files\google\google desktop search\GoogleDesktop.exe [2007-1-30 30192]
S3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\ieetwcollector.exe [2014-3-18 108032]
S3 OXSDIDRV_x32;Oxford Semi eSATA Filter (x32);c:\windows\system32\drivers\OXSDIDRV_x32.sys [2009-9-28 52656]
S3 OXUDIDRV;OXUDIDRV;c:\windows\system32\drivers\OXUDIDRV_x32.sys [2012-8-19 24880]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2013-4-13 14848]
S3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\TsUsbFlt.sys [2014-3-20 49152]
S3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2013-4-13 27136]
S3 VST_DPV;VST_DPV;c:\windows\system32\drivers\VSTDPV3.SYS [2009-7-13 980992]
S3 VSTHWBS2;VSTHWBS2;c:\windows\system32\drivers\VSTBS23.SYS [2009-7-13 266752]
S3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\wat\WatAdminSvc.exe [2013-4-13 1343400]
.
=============== File Associations ===============
.
ShellExec: pi11.exe: Open="c:\program files\microsoft digital image 2006\pi.exe" "%1"
.
=============== Created Last 30 ================
.
2014-03-25 18:25:13    765968    ----a-w-    c:\programdata\microsoft\microsoft antimalware\definition updates\nisbackup\gapaengine.dll
2014-03-25 18:25:12    765968    ----a-w-    c:\programdata\microsoft\microsoft antimalware\definition updates\{e6fcb259-2032-417f-85c5-a27d62b8bcb7}\gapaengine.dll
2014-03-25 18:23:58    7969936    ----a-w-    c:\programdata\microsoft\microsoft antimalware\definition updates\{5e055c54-c4d7-4b08-97a1-f3478fff7baf}\mpengine.dll
2014-03-23 16:00:30    --------    d-----w-    c:\program files\iPod
2014-03-23 16:00:29    --------    d-----w-    c:\programdata\188F1432-103A-4ffb-80F1-36B633C5C9E1
2014-03-23 16:00:29    --------    d-----w-    c:\program files\iTunes
2014-03-23 15:53:33    159744    ----a-w-    c:\program files\internet explorer\plugins\npqtplugin5.dll
2014-03-23 15:53:33    159744    ----a-w-    c:\program files\internet explorer\plugins\npqtplugin4.dll
2014-03-23 15:53:33    159744    ----a-w-    c:\program files\internet explorer\plugins\npqtplugin3.dll
2014-03-23 15:53:33    159744    ----a-w-    c:\program files\internet explorer\plugins\npqtplugin2.dll
2014-03-23 15:53:33    159744    ----a-w-    c:\program files\internet explorer\plugins\npqtplugin.dll
2014-03-23 03:02:24    --------    d-----w-    c:\windows\ERUNT
2014-03-22 18:44:17    --------    d-----w-    C:\FRST
2014-03-22 16:32:09    7969936    ----a-w-    c:\programdata\microsoft\microsoft antimalware\definition updates\backup\mpengine.dll
2014-03-21 23:36:05    --------    d-----w-    c:\programdata\Oracle
2014-03-21 23:35:00    94632    ----a-w-    c:\windows\system32\WindowsAccessBridge.dll
2014-03-21 23:22:55    --------    d-----w-    c:\program files\VS Revo Group
2014-03-21 04:01:48    5694464    ----a-w-    c:\windows\system32\mstscax.dll
2014-03-21 03:53:54    194552    ----a-w-    c:\program files\mozilla firefox\maintenanceservice_installer.exe
2014-03-21 03:53:39    119808    ----a-w-    c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
2014-03-21 03:37:41    --------    d-----w-    c:\windows\system32\catroot2
2014-03-21 03:14:52    --------    d-----w-    c:\windows\system32\wbem\repository
2014-03-21 03:08:34    --------    d-----w-    C:\RegBackup
2014-03-21 02:21:02    --------    d-----w-    c:\program files\Tweaking.com
2014-03-21 01:59:36    --------    d-----w-    C:\AdwCleaner
2014-03-20 19:21:50    792576    ----a-w-    c:\windows\system32\TSWorkspace.dll
2014-03-20 17:55:20    --------    d-----w-    c:\users\gatis\appdata\roaming\Malwarebytes
2014-03-20 17:55:06    --------    d-----w-    c:\programdata\Malwarebytes
2014-03-20 17:55:04    22856    ----a-w-    c:\windows\system32\drivers\mbam.sys
2014-03-20 17:55:04    --------    d-----w-    c:\program files\Malwarebytes' Anti-Malware
2014-03-20 17:54:53    --------    d-----w-    c:\users\gatis\appdata\local\Programs
2014-03-18 23:10:59    7211008    ----a-w-    c:\program files\internet explorer\F12Resources.dll
2014-03-18 23:09:59    2349056    ----a-w-    c:\windows\system32\win32k.sys
2014-03-18 23:09:58    185344    ----a-w-    c:\windows\system32\wwansvc.dll
2014-03-18 23:09:57    381440    ----a-w-    c:\windows\system32\wer.dll
2014-02-26 20:33:58    --------    d-----w-    c:\windows\Migration
.
==================== Find3M  ====================
.
2014-03-20 21:02:18    71048    ----a-w-    c:\windows\system32\FlashPlayerCPLApp.cpl
2014-03-20 21:02:18    692616    ----a-w-    c:\windows\system32\FlashPlayerApp.exe
2014-03-01 04:11:20    2724864    ----a-w-    c:\windows\system32\mshtml.tlb
2014-03-01 04:10:48    4096    ----a-w-    c:\windows\system32\ieetwcollectorres.dll
2014-03-01 03:52:43    61952    ----a-w-    c:\windows\system32\iesetup.dll
2014-03-01 03:51:53    51200    ----a-w-    c:\windows\system32\ieetwproxystub.dll
2014-03-01 03:38:26    112128    ----a-w-    c:\windows\system32\ieUnatt.exe
2014-03-01 03:38:23    108032    ----a-w-    c:\windows\system32\ieetwcollector.exe
2014-03-01 03:37:35    553472    ----a-w-    c:\windows\system32\jscript9diag.dll
2014-03-01 03:31:30    646144    ----a-w-    c:\windows\system32\MsSpellCheckingFacility.exe
2014-03-01 03:14:15    4244480    ----a-w-    c:\windows\system32\jscript9.dll
2014-03-01 03:00:08    1964032    ----a-w-    c:\windows\system32\inetcpl.cpl
2014-03-01 02:32:16    1820160    ----a-w-    c:\windows\system32\wininet.dll
2014-02-04 02:04:22    1230336    ----a-w-    c:\windows\system32\WindowsCodecs.dll
2014-02-04 02:04:11    509440    ----a-w-    c:\windows\system32\qedit.dll
2014-01-19 07:32:23    231584    ------w-    c:\windows\system32\MpSigStub.exe
2014-01-17 20:24:12    94208    ----a-w-    c:\windows\system32\QuickTimeVR.qtx
2014-01-17 20:24:12    69632    ----a-w-    c:\windows\system32\QuickTime.qts
.
============= FINISH: 13:23:23.81 ===============

 

and the Attach.txt:

 

DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 11.0.9600.16521  BrowserJavaVersion: 10.51.2
Run by Gatis at 13:22:06 on 2014-03-28
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.1.1033.18.3454.2434 [GMT -4:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
SP: Microsoft Security Essentials *Enabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\nvvsvc.exe
c:\Program Files\Microsoft Security Client\MsMpEng.exe
C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
C:\Windows\System32\spoolsv.exe
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
C:\Windows\system32\nvvsvc.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\Common Files\Motive\McciCMService.exe
C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
C:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe
C:\Program Files\Skype\Updater\Updater.exe
C:\Windows\system32\sppsvc.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Xobni\XobniService.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\System32\WUDFHost.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskhost.exe
C:\Windows\Explorer.EXE
C:\Windows\RtHDVCpl.exe
C:\Windows\zHotkey.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Windows\system32\taskeng.exe
C:\Windows\ModPS2Key.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Siber Systems\AI RoboForm\robotaskbaricon.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
c:\Program Files\Microsoft Security Client\NisSrv.exe
C:\Windows\system32\conhost.exe
C:\Windows\System32\wbem\WmiPrvSE.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k hpdevmgmt
C:\Windows\system32\svchost.exe -k HsfXAudioService
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\svchost.exe -k SDRSVC
.
============== Pseudo HJT Report ===============
.
dURLSearchHooks: {A3BC75A2-1F87-4686-AA43-5347D756017C} - <orphaned>
BHO: RoboForm BHO: {724d43a9-0d85-11d4-9908-00400523e39a} - c:\program files\siber systems\ai roboform\roboform.dll
BHO: SSVHelper Class: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre7\bin\ssv.dll
BHO: Google Toolbar Notifier BHO: {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - c:\program files\google\googletoolbarnotifier\5.2.4204.1700\swg.dll
BHO: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre7\bin\jp2ssv.dll
TB: &RoboForm: {724D43A0-0D85-11D4-9908-00400523E39A} - c:\program files\siber systems\ai roboform\roboform.dll
TB: &RoboForm: {724d43a0-0d85-11d4-9908-00400523e39a} - c:\program files\siber systems\ai roboform\roboform.dll
uRun: [ehTray.exe] c:\windows\ehome\ehTray.exe
uRun: [RoboForm] "c:\program files\siber systems\ai roboform\RoboTaskBarIcon.exe"
uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe
mRun: [RtHDVCpl] RtHDVCpl.exe
mRun: [APSDaemon] "c:\program files\common files\apple\apple application support\APSDaemon.exe"
mRun: [CHotkey] zHotkey.exe
mRun: [Google Desktop Search] "c:\program files\google\google desktop search\GoogleDesktop.exe" /startup
mRun: [HP Software Update] "c:\program files\hp\hp software update\HPWuSchd2.exe"
mRun: [Intuit SyncManager] c:\program files\common files\intuit\sync\IntuitSyncManager.exe  startup
mRun: [ModPS2] ModPS2Key.exe
mRun: [ShowWnd] ShowWnd.exe
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [MSC] "c:\program files\microsoft security client\msseces.exe" -hide -runkey
mRun: [SunJavaUpdateSched] "c:\program files\java\jre7\bin\jusched.exe"
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
StartupFolder: c:\users\gatis\appdata\roaming\microsoft\windows\start menu\programs\startup\OneNote 2007 Screen Clipper and Launcher.lnk.disabled
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\adobeg~1.lnk - c:\program files\common files\adobe\calibration\Adobe Gamma Loader.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\hpdigi~1.lnk - c:\program files\hp\digital imaging\bin\hpqtra08.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\quickb~1.lnk - c:\program files\common files\intuit\quickbooks\qbupdate\qbupdate.exe
StartupFolder: c:\programdata\microsoft\windows\start menu\programs\startup\w98Eject.lnk.disabled
uPolicies-Explorer: NoDriveTypeAutoRun = dword:145
mPolicies-Explorer: BindDirectlyToPropertySetStorage = dword:0
mPolicies-Explorer: NoDrives = dword:0
mPolicies-System: ConsentPromptBehaviorAdmin = dword:0
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableLUA = dword:0
mPolicies-System: EnableUIADesktopToggle = dword:0
mPolicies-System: PromptOnSecureDesktop = dword:0
IE: Customize Menu - c:\program files\siber systems\ai roboform\RoboFormComCustomizeIEMenu.html
IE: E&xport to Microsoft Excel - c:\progra~1\micros~4\office12\EXCEL.EXE/3000
IE: Fill Forms - c:\program files\siber systems\ai roboform\RoboFormComFillForms.html
IE: RoboForm Toolbar - c:\program files\siber systems\ai roboform\RoboFormComShowToolbar.html
IE: Save Forms - c:\program files\siber systems\ai roboform\RoboFormComSavePass.html
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\program files\microsoft office\office12\ONBttnIE.dll
IE: {320AF880-6646-11D3-ABEE-C5DBF3571F46} - c:\program files\siber systems\ai roboform\RoboFormComFillForms.html
IE: {320AF880-6646-11D3-ABEE-C5DBF3571F49} - c:\program files\siber systems\ai roboform\RoboFormComSavePass.html
IE: {724d43aa-0d85-11d4-9908-00400523e39a} - c:\program files\siber systems\ai roboform\RoboFormComShowToolbar.html
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}
Trusted Zone: clonewarsadventures.com
Trusted Zone: freerealms.com
Trusted Zone: soe.com
Trusted Zone: sony.com
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_51-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab
DPF: {CAFEEFAC-0017-0000-0051-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_51-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_51-windows-i586.cab
TCP: NameServer = 97.81.22.195 71.92.29.130 24.217.201.67
TCP: Interfaces\{514E703C-6EDB-451D-88B0-B252DA38F525} : DHCPNameServer = 97.81.22.195 71.92.29.130 24.217.201.67
Handler: intu-help-qb1 - {9B0F96C7-2E4B-433e-ABF3-043BA1B54AE3} - c:\program files\intuit\quickbooks 2008\HelpAsyncPluggableProtocol.dll
Handler: intu-help-qb2 - {84D77A00-41B5-4b8b-8ADF-86486D72E749} - c:\program files\intuit\quickbooks 2008\HelpAsyncPluggableProtocol.dll
Handler: qbwc - {FC598A64-626C-4447-85B8-53150405FD57} -
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\program files\common files\skype\Skype4COM.dll
AppInit_DLLs= c:\progra~1\google\google~1\GO36F4~1.DLL
SSODL: WebCheck - <orphaned>
mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "c:\program files\google\chrome\application\33.0.1750.154\installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\users\gatis\appdata\roaming\mozilla\firefox\profiles\2swkcybu.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.wunderground.com/cgi-bin/findweather/getForecast?query=30519
FF - plugin: c:\program files\adobe\reader 11.0\reader\air\nppdf32.dll
FF - plugin: c:\program files\google\google earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\google\google updater\2.4.2432.1652\npCIDetect14.dll
FF - plugin: c:\program files\google\update\1.3.22.5\npGoogleUpdate3.dll
FF - plugin: c:\program files\java\jre7\bin\dtplugin\npdeployJava1.dll
FF - plugin: c:\program files\java\jre7\bin\plugin2\npjp2.dll
FF - plugin: c:\program files\microsoft silverlight\5.1.30214.0\npctrlui.dll
FF - plugin: c:\program files\unity\webplayer\loader\npUnity3D32.dll
FF - plugin: c:\program files\virtual earth 3d\npVE3D.dll
FF - plugin: c:\users\gatis\appdata\local\microsoft\internet explorer\downloaded program files\npsoe.dll
FF - plugin: c:\users\gatis\appdata\local\roblox\versions\version-ccfce68b6145482d\NPRobloxProxy.dll
FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_12_0_0_77.dll
.
============= SERVICES / DRIVERS ===============
.
R0 MpFilter;Microsoft Malware Protection Driver;c:\windows\system32\drivers\MpFilter.sys [2013-1-20 214696]
R0 SSFS041A;Spy Sweeper File System Filer Driver: 041A;c:\windows\system32\drivers\SSFS041A.sys [2007-3-22 13824]
R2 HsfXAudioService;HsfXAudioService;c:\windows\system32\svchost.exe -k HsfXAudioService [2009-7-13 20992]
R2 MBAMScheduler;MBAMScheduler;c:\program files\malwarebytes' anti-malware\mbamscheduler.exe [2014-3-20 418376]
R2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2014-3-20 701512]
R2 NisDrv;Microsoft Network Inspection System;c:\windows\system32\drivers\NisDrvWFP.sys [2013-1-20 104768]
R2 SkypeUpdate;Skype Updater;c:\program files\skype\updater\Updater.exe [2013-10-23 172192]
R2 UMVPFSrv;UMVPFSrv;c:\program files\common files\logishrd\lvmvfm\UMVPFSrv.exe [2012-1-18 450848]
R2 XobniService;XobniService;c:\program files\xobni\XobniService.exe [2011-5-18 62184]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2014-3-20 22856]
R3 NisSrv;Microsoft Network Inspection;c:\program files\microsoft security client\NisSrv.exe [2013-10-23 280288]
R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\drivers\yk62x86.sys [2009-9-28 315392]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2013-9-11 105144]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-13 229888]
S3 GoogleDesktopManager-051210-111108;Google Desktop Manager 5.9.1005.12335;c:\program files\google\google desktop search\GoogleDesktop.exe [2007-1-30 30192]
S3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\ieetwcollector.exe [2014-3-18 108032]
S3 OXSDIDRV_x32;Oxford Semi eSATA Filter (x32);c:\windows\system32\drivers\OXSDIDRV_x32.sys [2009-9-28 52656]
S3 OXUDIDRV;OXUDIDRV;c:\windows\system32\drivers\OXUDIDRV_x32.sys [2012-8-19 24880]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2013-4-13 14848]
S3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\TsUsbFlt.sys [2014-3-20 49152]
S3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2013-4-13 27136]
S3 VST_DPV;VST_DPV;c:\windows\system32\drivers\VSTDPV3.SYS [2009-7-13 980992]
S3 VSTHWBS2;VSTHWBS2;c:\windows\system32\drivers\VSTBS23.SYS [2009-7-13 266752]
S3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\wat\WatAdminSvc.exe [2013-4-13 1343400]
.
=============== File Associations ===============
.
ShellExec: pi11.exe: Open="c:\program files\microsoft digital image 2006\pi.exe" "%1"
.
=============== Created Last 30 ================
.
2014-03-25 18:25:13    765968    ----a-w-    c:\programdata\microsoft\microsoft antimalware\definition updates\nisbackup\gapaengine.dll
2014-03-25 18:25:12    765968    ----a-w-    c:\programdata\microsoft\microsoft antimalware\definition updates\{e6fcb259-2032-417f-85c5-a27d62b8bcb7}\gapaengine.dll
2014-03-25 18:23:58    7969936    ----a-w-    c:\programdata\microsoft\microsoft antimalware\definition updates\{5e055c54-c4d7-4b08-97a1-f3478fff7baf}\mpengine.dll
2014-03-23 16:00:30    --------    d-----w-    c:\program files\iPod
2014-03-23 16:00:29    --------    d-----w-    c:\programdata\188F1432-103A-4ffb-80F1-36B633C5C9E1
2014-03-23 16:00:29    --------    d-----w-    c:\program files\iTunes
2014-03-23 15:53:33    159744    ----a-w-    c:\program files\internet explorer\plugins\npqtplugin5.dll
2014-03-23 15:53:33    159744    ----a-w-    c:\program files\internet explorer\plugins\npqtplugin4.dll
2014-03-23 15:53:33    159744    ----a-w-    c:\program files\internet explorer\plugins\npqtplugin3.dll
2014-03-23 15:53:33    159744    ----a-w-    c:\program files\internet explorer\plugins\npqtplugin2.dll
2014-03-23 15:53:33    159744    ----a-w-    c:\program files\internet explorer\plugins\npqtplugin.dll
2014-03-23 03:02:24    --------    d-----w-    c:\windows\ERUNT
2014-03-22 18:44:17    --------    d-----w-    C:\FRST
2014-03-22 16:32:09    7969936    ----a-w-    c:\programdata\microsoft\microsoft antimalware\definition updates\backup\mpengine.dll
2014-03-21 23:36:05    --------    d-----w-    c:\programdata\Oracle
2014-03-21 23:35:00    94632    ----a-w-    c:\windows\system32\WindowsAccessBridge.dll
2014-03-21 23:22:55    --------    d-----w-    c:\program files\VS Revo Group
2014-03-21 04:01:48    5694464    ----a-w-    c:\windows\system32\mstscax.dll
2014-03-21 03:53:54    194552    ----a-w-    c:\program files\mozilla firefox\maintenanceservice_installer.exe
2014-03-21 03:53:39    119808    ----a-w-    c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
2014-03-21 03:37:41    --------    d-----w-    c:\windows\system32\catroot2
2014-03-21 03:14:52    --------    d-----w-    c:\windows\system32\wbem\repository
2014-03-21 03:08:34    --------    d-----w-    C:\RegBackup
2014-03-21 02:21:02    --------    d-----w-    c:\program files\Tweaking.com
2014-03-21 01:59:36    --------    d-----w-    C:\AdwCleaner
2014-03-20 19:21:50    792576    ----a-w-    c:\windows\system32\TSWorkspace.dll
2014-03-20 17:55:20    --------    d-----w-    c:\users\gatis\appdata\roaming\Malwarebytes
2014-03-20 17:55:06    --------    d-----w-    c:\programdata\Malwarebytes
2014-03-20 17:55:04    22856    ----a-w-    c:\windows\system32\drivers\mbam.sys
2014-03-20 17:55:04    --------    d-----w-    c:\program files\Malwarebytes' Anti-Malware
2014-03-20 17:54:53    --------    d-----w-    c:\users\gatis\appdata\local\Programs
2014-03-18 23:10:59    7211008    ----a-w-    c:\program files\internet explorer\F12Resources.dll
2014-03-18 23:09:59    2349056    ----a-w-    c:\windows\system32\win32k.sys
2014-03-18 23:09:58    185344    ----a-w-    c:\windows\system32\wwansvc.dll
2014-03-18 23:09:57    381440    ----a-w-    c:\windows\system32\wer.dll
2014-02-26 20:33:58    --------    d-----w-    c:\windows\Migration
.
==================== Find3M  ====================
.
2014-03-20 21:02:18    71048    ----a-w-    c:\windows\system32\FlashPlayerCPLApp.cpl
2014-03-20 21:02:18    692616    ----a-w-    c:\windows\system32\FlashPlayerApp.exe
2014-03-01 04:11:20    2724864    ----a-w-    c:\windows\system32\mshtml.tlb
2014-03-01 04:10:48    4096    ----a-w-    c:\windows\system32\ieetwcollectorres.dll
2014-03-01 03:52:43    61952    ----a-w-    c:\windows\system32\iesetup.dll
2014-03-01 03:51:53    51200    ----a-w-    c:\windows\system32\ieetwproxystub.dll
2014-03-01 03:38:26    112128    ----a-w-    c:\windows\system32\ieUnatt.exe
2014-03-01 03:38:23    108032    ----a-w-    c:\windows\system32\ieetwcollector.exe
2014-03-01 03:37:35    553472    ----a-w-    c:\windows\system32\jscript9diag.dll
2014-03-01 03:31:30    646144    ----a-w-    c:\windows\system32\MsSpellCheckingFacility.exe
2014-03-01 03:14:15    4244480    ----a-w-    c:\windows\system32\jscript9.dll
2014-03-01 03:00:08    1964032    ----a-w-    c:\windows\system32\inetcpl.cpl
2014-03-01 02:32:16    1820160    ----a-w-    c:\windows\system32\wininet.dll
2014-02-04 02:04:22    1230336    ----a-w-    c:\windows\system32\WindowsCodecs.dll
2014-02-04 02:04:11    509440    ----a-w-    c:\windows\system32\qedit.dll
2014-01-19 07:32:23    231584    ------w-    c:\windows\system32\MpSigStub.exe
2014-01-17 20:24:12    94208    ----a-w-    c:\windows\system32\QuickTimeVR.qtx
2014-01-17 20:24:12    69632    ----a-w-    c:\windows\system32\QuickTime.qts
.
============= FINISH: 13:23:23.81 ===============

 

Thanks,

Skeet



#6 1972vet

1972vet

  • Malware Response Team
  • 1,698 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Midwest U.S.A.
  • Local time:10:30 PM

Posted 02 April 2014 - 02:15 PM

Greetings skeeterbyte and Welcome to the forums,

Do I understand correctly that none of these blue screen stop error messages occurred until after you cleaned the system of malware using, first MBAM then ESET? Please post the logs from those scans on your next reply and while we wait to review them, please be certain to configure your security programs MBAM and Microsoft Security Essentials, to ignore each other. If you need guidance to do that, please let us know and it will be provided. Thanks!


Disabled Veteran, U.S.C.G. 1972 - 1978
mvpsigpic.jpg
2009 - 2013

Member: U.N.I.T.E.
Performance and Maintenance for Windows XP, Windows Vista and Windows Seven


#7 skeeterbyte

skeeterbyte
  • Topic Starter

  • Members
  • 67 posts
  • OFFLINE
  •  
  • Local time:11:30 PM

Posted 02 April 2014 - 02:41 PM

Hi 1972vet,

 

Thanks in advance for helping with this one.

No, the BSOD's were occurring before that removal which is why they brought it to me. When I first got the computer, it did BSOD on me once but after that, I was able to run the Malwarebytes and then the ESET. Then, as described in my initial post, it seemed to be okay and ran for the rest of that day with no BSOD's if I recall correctly. The following day, an hour or so into running it, the BSOD's started again. They are sporadic, with different error messages so I've not been able to specifically pin-point even a direction or been able to reproduce a particular fault. I don't think I have a log from the ESET scan. However here are the MBAM logs from the first scans and the removal of the items found, and there were a lot of them. There are two logs because I manually stopped the first one (although now I can't specifically remember why). Let me know what you'd like to see additionally to hopefully get this one fixed.

 

Thanks in advance,

Skeet

 

First MBAM log (manually stopped):

 

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Database version: v2014.03.20.04

Windows 7 Service Pack 1 x86 NTFS (Safe Mode)
Internet Explorer 11.0.9600.16521
Gatis :: GATIS-PC [administrator]

3/20/2014 2:03:01 PM
mbam-log-2014-03-20 (14-03-01).txt

Scan type: Full scan (C:\|)
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 49665
Time elapsed: 2 minute(s), 34 second(s) [aborted]

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 40
HKLM\SYSTEM\CurrentControlSet\Services\WajamUpdater (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
HKCR\CLSID\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2} (PUP.Optional.Wajam) -> Quarantined and deleted successfully.
HKCR\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2} (PUP.Optional.Wajam) -> Quarantined and deleted successfully.
HKCR\TypeLib\{095BFD3C-4602-4FE1-96F1-AEFAFBFD067D} (PUP.Optional.Wajam) -> Quarantined and deleted successfully.
HKCR\CLSID\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C} (PUP.Optional.Wajam) -> Quarantined and deleted successfully.
HKCR\wajam.WajamBHO.1 (PUP.Optional.Wajam) -> Quarantined and deleted successfully.
HKCR\wajam.WajamBHO (PUP.Optional.Wajam) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C} (PUP.Optional.Wajam) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C} (PUP.Optional.Wajam) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C} (PUP.Optional.Wajam) -> Quarantined and deleted successfully.
HKCR\AppID\{0D82ACD6-A652-4496-A298-2BDE705F4227} (Adware.ClickPotato) -> Quarantined and deleted successfully.
HKCR\AppID\{1FAEE6D5-34F4-42AA-8025-3FD8F3EC4634} (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
HKCR\AppID\{7025E484-D4B0-441a-9F0B-69063BD679CE} (Adware.ClickPotato) -> Quarantined and deleted successfully.
HKCR\AppID\{8258B35C-05B8-4c0e-9525-9BCCC70F8F2D} (Adware.ClickPotato) -> Quarantined and deleted successfully.
HKCR\AppID\{A89256AD-EC17-4a83-BEF5-4B8BC4F39306} (Adware.ClickPotato) -> Quarantined and deleted successfully.
HKCR\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17} (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
HKCR\AppID\{F85FA3F2-D2C8-4D4D-BB1C-3181E691AF2B} (PUP.Optional.FaceThemes) -> Quarantined and deleted successfully.
HKCR\CLSID\{2A28729E-2280-4986-BDB4-EC2623EAFBA4} (PUP.FaceThemes) -> Quarantined and deleted successfully.
HKCR\TypeLib\{A3F56272-CDB4-4310-9BB1-9A0D0757A3B3} (PUP.FaceThemes) -> Quarantined and deleted successfully.
HKCR\Interface\{D6975F9E-15B2-4FE7-9D16-FC2E85CB201B} (PUP.FaceThemes) -> Quarantined and deleted successfully.
HKCR\SelectionLinks.SelectionLinksBHO.1 (PUP.FaceThemes) -> Quarantined and deleted successfully.
HKCR\CLSID\{5D64294B-1341-4FE7-B6D8-7C36828D4DD5} (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
HKCR\wajam.WajamDownloader.1 (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
HKCR\wajam.WajamDownloader (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
HKCR\CLSID\{67BD9EEB-AA06-4329-A940-D250019300C9} (PUP.Optional.SoftwareUpdater) -> Quarantined and deleted successfully.
HKCR\TypeLib\{A0EE0278-2986-4E5A-884E-A3BF0357E476} (PUP.Optional.SoftwareUpdater) -> Quarantined and deleted successfully.
HKCR\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67} (PUP.Optional.SoftwareUpdater) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96} (PUP.Optional.SoftwareUpdater) -> Quarantined and deleted successfully.
HKCR\Updater.AmiUpd.1 (PUP.Optional.SoftwareUpdater) -> Quarantined and deleted successfully.
HKCR\Updater.AmiUpd (PUP.Optional.SoftwareUpdater) -> Quarantined and deleted successfully.
HKCR\CLSID\{BA14329E-9550-4989-B3F2-9732E92D17CC} (PUP.Optional.VuzeRemoteTB.A) -> Quarantined and deleted successfully.
HKCR\CLSID\{92A83183-1E45-4A16-A293-F19D329A144E} (PUP.Optional.VuzeRemoteTB.A) -> Quarantined and deleted successfully.
HKCR\Toolbar.CT2504091 (PUP.Optional.VuzeRemoteTB.A) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{92A83183-1E45-4A16-A293-F19D329A144E} (PUP.Optional.VuzeRemoteTB.A) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA14329E-9550-4989-B3F2-9732E92D17CC} (PUP.Optional.VuzeRemoteTB.A) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{BA14329E-9550-4989-B3F2-9732E92D17CC} (PUP.Optional.VuzeRemoteTB.A) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{BA14329E-9550-4989-B3F2-9732E92D17CC} (PUP.Optional.VuzeRemoteTB.A) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{B64F4A7C-97C9-11DA-8BDE-F66BAD1E3F3A} (Rogue.WinAntiVirus) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199} (PUP.Optional.Iminent.A) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48d2-9061-8BBD4899EB08} (PUP.Optional.Iminent.A) -> Quarantined and deleted successfully.

Registry Values Detected: 4
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar|{BA14329E-9550-4989-B3F2-9732E92D17CC} (PUP.Optional.VuzeRemoteTB.A) -> Data: Vuze Remote Toolbar -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks|{BA14329E-9550-4989-B3F2-9732E92D17CC} (PUP.Optional.VuzeRemoteTB.A) -> Data:  -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{ba14329e-9550-4989-b3f2-9732e92d17cc} (PUP.Optional.VuzeRemoteTB.A) -> Data:  -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\{ba14329e-9550-4989-b3f2-9732e92d17cc} (PUP.Optional.VuzeRemoteTB.A) -> Data:  -> Quarantined and deleted successfully.

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 6
C:\Program Files\Wajam\Updater\WajamUpdater.exe (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Program Files\Wajam\IE\wajam.dll (PUP.Optional.Wajam) -> Quarantined and deleted successfully.
C:\Users\Bethany\AppData\Local\SwvUpdater\Updater.exe (PUP.Optional.SoftwareUpdater) -> Quarantined and deleted successfully.
C:\Program Files\Vuze_Remote\prxtbVuze.dll (PUP.Optional.VuzeRemoteTB.A) -> Quarantined and deleted successfully.
C:\$RECYCLE.BIN\S-1-5-21-4111677358-2937080306-3027222422-1001\$R0MXO83.exe (PUP.Optional.Solimba.mr) -> Quarantined and deleted successfully.
C:\$RECYCLE.BIN\S-1-5-21-4111677358-2937080306-3027222422-1001\$R5K15X1.exe (PUP.Optional.Solimba.mr) -> Quarantined and deleted successfully.

(end)
 

 

Second MBAM log (immediately run after the last one....time stamp indicates 3 minutes later):

 

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Database version: v2014.03.20.04

Windows 7 Service Pack 1 x86 NTFS (Safe Mode)
Internet Explorer 11.0.9600.16521
Gatis :: GATIS-PC [administrator]

3/20/2014 2:06:00 PM
mbam-log-2014-03-20 (14-06-00).txt

Scan type: Full scan (C:\|)
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 516899
Time elapsed: 1 hour(s), 3 minute(s), 1 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 18
HKCR\CLSID\{3c471948-f874-49f5-b338-4f214a2ee0b1} (PUP.Optional.Conduit) -> Quarantined and deleted successfully.
HKCR\CLSID\{10DE7085-6A1E-4D41-A7BF-9AF93E351401} (Adware.Yontoo) -> Quarantined and deleted successfully.
HKCR\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401} (Adware.Yontoo) -> Quarantined and deleted successfully.
HKCR\AppID\priam_bho.DLL (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\The Weather Channel (Adware.Hotbar) -> Quarantined and deleted successfully.
HKCU\Software\Conduit\FF (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\WAJAM (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Vuze_Remote (PUP.Optional.VuzeRemoteTB.A) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Google\Chrome\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Google\Chrome\Extensions\poheodfamflhhhdcmjfeggbgigeefaco (PUP.Optional.BetterSurf.A) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\WAJAM (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
HKLM\Software\Iminent (PUP.Optional.Iminent.A) -> Quarantined and deleted successfully.
HKLM\Software\InstallIQ (PUP.Optional.InstallBrain.A) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Wajam (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DDA5D4B3-468F-4D62-9092-75142C6169B1} (PUP.Optional.FastFreeConverter.A) -> Quarantined and deleted successfully.
HKCR\CLSID\{DDA5D4B3-468F-4D62-9092-75142C6169B1} (PUP.Optional.FastFreeConverter.A) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{DDA5D4B3-468F-4D62-9092-75142C6169B1} (PUP.Optional.FastFreeConverter.A) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{DDA5D4B3-468F-4D62-9092-75142C6169B1} (PUP.Optional.FastFreeConverter.A) -> Quarantined and deleted successfully.

Registry Values Detected: 4
HKCU\Software\Wajam|affiliate_id (PUP.Optional.Wajam.A) -> Data: 3555 -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Control Panel\Cpls|wxfw.dll (Adware.Hotbar) -> Data: C:\Program Files\The Weather Channel FW\Framework\wxfw.cpl -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Mozilla\Firefox\extensions|{336D0C35-8A85-403a-B9D2-65C292C39087} (PUP.Optional.Incredibar) -> Data: C:\Program Files\Web Assistant\Firefox -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Wajam|red (PUP.Optional.Wajam.A) -> Data: 4 -> Quarantined and deleted successfully.

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 144
C:\Program Files\Wajam (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Program Files\Wajam\IE (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Program Files\Wajam\IE\res (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Program Files\Wajam\IE\res\res (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Program Files\Wajam\Updater (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Bethany\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Bethany\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_0 (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Bethany\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_0\html (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Bethany\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_0\js (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Bethany\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_0\plugins (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.32_0 (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.32_0\html (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.32_0\js (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.34_0 (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.34_0\html (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.34_0\js (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Wajam (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Wajam\Chrome (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0 (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\APISupport (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\js\lib (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\js\options (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\js\tabs (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\js\tabs\back (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\js\toolbarAPI (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\mam (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\mam\scripts (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\mam\scripts\contentScripts (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\nativeMessaging (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\API (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\aboutBox (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\aboutBox\images (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\aboutBox\js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ac (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ac\css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ac\img (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ac\res (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\api (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\msd (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\options (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\options\css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\options\images (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\options\js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\options\js\resources (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\sp (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\sp\js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\sp\spbd (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\sp\spbd\images (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\sp\spsd (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\sp\spsd\images (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\dlg (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\dlg\ftd (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\dlg\ftd\images (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\dlg\restart (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\dlg\restart\images (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\gadgetFrame (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\gf (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\gf\css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\gf\img (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\gf\js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\menu (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\menu\css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\menu\img (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\menu\js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\APPLICATION_BUTTON (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\APPLICATION_BUTTON\Js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\APPLICATION_BUTTON\resources (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\EMAIL_NOTIFIER (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\EMAIL_NOTIFIER\css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\EMAIL_NOTIFIER\js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\HIGHLIGHTER (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\HIGHLIGHTER\css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\HIGHLIGHTER\js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\MULTI_RSS (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\MULTI_RSS\css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\MULTI_RSS\img (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\MULTI_RSS\js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\MULTI_RSS\js\resources (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\NOTIFICATION (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\NOTIFICATION\css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\NOTIFICATION\images (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\NOTIFICATION\images\dark (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\NOTIFICATION\images\light (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\NOTIFICATION\js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\Optimizer (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\Optimizer\js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\PRICE_GONG (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\PRICE_GONG\agreement (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\PRICE_GONG\css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\PRICE_GONG\css\custom-theme (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\PRICE_GONG\images (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\RADIO_PLAYER (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\RADIO_PLAYER\css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\RADIO_PLAYER\css\custom-theme (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\RADIO_PLAYER\js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\RADIO_PLAYER\js\resources (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\SEARCH (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\SEARCH\buildSettings (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\SEARCH\Css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\SEARCH\js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\SEARCH\resources (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\SEARCH\view (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\SEARCH\view\script (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\SEARCH\view\style (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\SEARCH\view\style\rsx (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\TWITTER (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\TWITTER\img (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\TWITTER\js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\WEATHER (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\WEATHER\css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\WEATHER\js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\core (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\lib (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\lib\jquery.alerts (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\lib\jquery.alerts\images (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\lib\jquery.jscrollpane (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\sl (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\_locales (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\_locales\en (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Bethany\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.
C:\Users\Bethany\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.9_0 (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.9_0 (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.
C:\Users\Noah\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.
C:\Users\Noah\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.0_0 (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.
C:\Users\Noah\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.9_0 (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.
C:\Users\Bethany\AppData\Local\Conduit\CT2504091 (PUP.Optional.VuzeRemoteTB.A) -> Quarantined and deleted successfully.
C:\Program Files\Vuze_Remote (PUP.Optional.VuzeRemoteTB.A) -> Quarantined and deleted successfully.
C:\Users\Bethany\AppData\Local\Google\Chrome\User Data\Default\Extensions\poheodfamflhhhdcmjfeggbgigeefaco (PUP.Optional.BetterSurf.A) -> Quarantined and deleted successfully.
C:\Users\Bethany\AppData\Local\Google\Chrome\User Data\Default\Extensions\poheodfamflhhhdcmjfeggbgigeefaco\1.1_0 (PUP.Optional.BetterSurf.A) -> Quarantined and deleted successfully.

Files Detected: 650
C:\Program Files\Conduit\Community Alerts\Alert.dll (PUP.Optional.Conduit) -> Quarantined and deleted successfully.
C:\Program Files\Wajam\Updater\update.exe (PUP.Optional.Wajam) -> Quarantined and deleted successfully.
C:\Program Files\Yontoo Layers Runtime\YontooIEClient.dll (Adware.Yontoo) -> Quarantined and deleted successfully.
C:\Users\Bethany\AppData\Local\Temp\Updater.exe (PUP.Optional.Amonetize.A) -> Quarantined and deleted successfully.
C:\Users\Bethany\Downloads\gimp_freely_d157195.exe (PUP.Optional.InstallIQ) -> Quarantined and deleted successfully.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4ZV54O7X\wajam_update[1].004 (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ACEQ6Z2F\wajam_update[1].004 (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ACEQ6Z2F\wajam_update[2].004 (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ACEQ6Z2F\wajam_update[3].004 (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FVNFB546\wajam_update[1].004 (PUP.Optional.Wajam) -> Quarantined and deleted successfully.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FVNFB546\wajam_update[2].004 (PUP.Optional.Wajam) -> Quarantined and deleted successfully.
C:\Windows\Tasks\AmiUpdXp.job (PUP.Software.Updater) -> Quarantined and deleted successfully.
C:\Users\Noah\firefox.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Program Files\Wajam\IE\favicon.ico (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Program Files\Wajam\IE\uninstall.exe (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Program Files\Wajam\IE\waitBHOEnable.exe (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Program Files\Wajam\IE\res\alert_window_bho.html (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Program Files\Wajam\IE\res\wajam.html (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Program Files\Wajam\IE\res\wajam_logo.png (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Program Files\Wajam\IE\res\res\alert_window_bho.html (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Program Files\Wajam\IE\res\res\wajam.html (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Program Files\Wajam\IE\res\res\wajam_logo.png (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Bethany\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_0\manifest.json (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Bethany\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_0\priam_icon_128x128.png (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Bethany\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_0\priam_icon_48x48.png (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Bethany\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_0\html\background.html (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Bethany\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_0\js\background.js (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Bethany\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_0\js\priam.js (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Bethany\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_0\js\priam_background.js (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Bethany\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_0\js\priam_chrome.js (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Bethany\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_0\plugins\PriamNPAPI.dll (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.32_0\manifest.json (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.32_0\priam_icon_128x128.png (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.32_0\priam_icon_48x48.png (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.32_0\html\background.html (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.32_0\js\background.js (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.32_0\js\browserLoad.js (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.32_0\js\priam.js (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.32_0\js\priam_background.js (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.32_0\js\priam_chrome.js (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.34_0\manifest.json (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.34_0\priam_icon_128x128.png (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.34_0\priam_icon_48x48.png (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.34_0\html\background.html (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.34_0\js\background.js (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.34_0\js\browserLoad.js (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.34_0\js\priam.js (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.34_0\js\priam_background.js (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.34_0\js\priam_chrome.js (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Wajam\Chrome\unique_id.txt (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Wajam\Chrome\wajam_121.crx (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\634419249254350497.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\634419250214103522.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\634419250214552712.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\blank.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\ConduitAbstractionLayerBack.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\ConduitAbstractionLayerFront.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\CT3289847.txt (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\CT3289847_public.txt (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\initdata.json (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\manifest.json (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\shouldShowTB.txt (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\APISupport\APISupport.dll (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\js\bcview.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\js\chromeBackstage.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\js\chromeBackstage.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\js\chromeBackstageLoader.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\js\communicator.back.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\js\compatibility.end.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\js\compatibility.service.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\js\compatibility.start.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\js\conduitEnv.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\js\contentScript.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\js\framework.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\js\iframeHost.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\js\iframeHost.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\js\JSONStringify.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\js\logger.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\js\match.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\js\nativeMsgCom.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\js\navigationHandler.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\js\pricegongMigration.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\js\updatesManager.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\js\verlyEarly.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\js\lib\jquery-1.5.min.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\js\options\Options.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\js\tabs\back\postNavigation.htm (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\js\toolbarAPI\toolbarAPI.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\mam\background.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\mam\settings.json (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\mam\scripts\background.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\mam\scripts\iframeHost.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\mam\scripts\iframeHost.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\mam\scripts\popup.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\mam\scripts\contentScripts\contentScript.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\nativeMessaging\nmHostConfig.json (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\nativeMessaging\nmHostManifest.json (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\nativeMessaging\TBMessagingHost.exe (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\initData.json (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\html\SearchBackground.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\html\searchInNewTabAPI.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\API\Applications.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\API\Bookmarks.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\API\CntRedirect.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\API\DeveloperMode.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\API\EmbeddedConfig.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\API\enable_disable.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\API\EventHandler.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\API\Global.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\API\LocationService.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\API\LogMsg.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\API\MostVisited.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\API\NewTabAPI.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\API\RecentlyClosed.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\API\SearchBox.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\API\SearchBoxIframe.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\API\ServiceMap.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\API\Settings.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\API\startupSequence.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\API\Thumbnails.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\API\Toolbar.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\API\Translation.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\API\Usage.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\css\about_memory.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\css\alert_overlay.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\css\apps_page.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\css\bubble.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\css\chrome_shared.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\css\chrome_shared2.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\css\chrome_shared2_touch.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\css\dialogs.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\css\expandable_bubble.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\css\footer_menu.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\css\list.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\css\menu.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\css\most_visited_page.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\css\nav_dot.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\css\new_tab.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\css\new_tab_theme.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\css\overlay.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\css\spinner.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\css\suggestions_page.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\css\table.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\css\tabs.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\css\throbber.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\css\tile_page.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\css\trash.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\css\tree.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\css\ui_account_tweaks.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\css\widgets.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\html\alert_overlay.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\html\appLauncher.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\html\loadfile.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\html\NewTabBackground.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\html\new_tab.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\html\Options.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\html\redirect.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\html\trash.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\app_promo_button.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\check.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\checkbox_black.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\checkbox_white.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\closed_window.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\close_bar.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\close_bar_2x.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\close_bar_h.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\close_bar_h_2x.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\close_bar_mask.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\close_bar_mask_2x.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\close_bar_p.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\close_bar_p_2x.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\detected_sd.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\detected_usb.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\disabled_select.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\disclosure_triangle_mask.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\downloads_section.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\exclamationIcon.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\favicon.ico (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\favicon.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\folder_closed.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\folder_closed_rtl.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\folder_open.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\folder_open_rtl.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\gear.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\google-transparent.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\guest_icon_standalone.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\help.gif (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\history_section.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\icon128.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\icon16.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\icon48.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\icon_checkmark.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\icon_file.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\icon_folder.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\icon_warning.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\icon_warning2.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\IDR_PRODUCT_LOGO.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\ImagesRepository.json (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\insert.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\minus.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\nub.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\nub_mask.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\otr_icon_standalone.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\phishing_icon.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\plus.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\select.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\small_bubble.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\spinner.svg (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\star_small.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\success.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\throbber.svg (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\thumbnailPlaceHolder.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\trash.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\trashBinN.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\WebStore128.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\x-hover.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\x.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\img\__IDR_PRODUCT_LOGO.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\alert_overlay.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\appLauncher.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\apps_page.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\autocomplete_list.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\Base64.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\bubble.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\card_slider.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\color-thief.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\command.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\command_line.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\context_menu_button.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\context_menu_handler.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\cr.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\database.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\dialogs.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\dot_list.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\drag_wrapper.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\event_target.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\event_tracker.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\expandable_bubble.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\focus_outline_manager.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\i18n_process.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\i18n_template.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\i18n_template2.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\jquery.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\link_controller.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\loadFile.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\load_time_data.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\local_strings.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\logerror.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\logging.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\md5.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\media_common.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\menu.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\menu_button.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\menu_item.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\most_visited_page.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\nav_dot.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\NewTabBackground.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\newTabBeforeStart.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\newTabLoadTimeData.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\new_tab.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\options.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\other_sessions.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\overlay.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\page_list_view.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\page_switcher.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\parse_html_subset.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\position_util.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\promise.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\quantize.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\recently_closed.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\repeating_button.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\SearchBoxPage.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\search_history.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\splitter.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\suggestions_page.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\tile_page.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\touch_handler.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\trash.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\tree.css.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\tree.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\ui.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\ui_account_tweaks.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\util.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\Search\NewTabPages\js\ZipFile.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\backstage.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\version.txt (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\al.view.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\aboutBox\aboutBox.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\aboutBox\images\conduit-logo-OLD.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\aboutBox\images\conduit-logo.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\aboutBox\images\OK-Button-Default.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\aboutBox\images\OK-Button-MouseOver.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\aboutBox\images\OK-Button-OnClick.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\aboutBox\images\truste.gif (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\aboutBox\images\x.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\aboutBox\js\aboutBox.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ac\appManager.controller.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ac\appManager.model.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ac\appManager.view.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ac\css\toolbar.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ac\img\ajax-loader.gif (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ac\img\buttonSprites.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ac\img\chevron_sprites.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ac\img\fallback24.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ac\img\ie8_mouseover_button.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ac\img\ie8_onclick_button.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ac\img\loader-icon.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ac\img\menu_arrow.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ac\img\minibrowser.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ac\img\minibrowser24.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ac\img\mp_sprites.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ac\img\new_chevron_sprites.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ac\img\rounded_corners_left_transparent.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ac\img\rounded_corners_left_white.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ac\img\rounded_corners_left_white_34.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ac\img\rounded_corners_right_transparent.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ac\img\rounded_corners_right_white.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ac\img\rounded_corners_right_white_34.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ac\img\separator.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ac\img\separator_hover.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ac\img\uus.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ac\res\yoxscroll.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\api\toolbarapi.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\api\webAppApi.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\api\webAppApiFront.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\msd\excanvas.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\msd\trusted.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\msd\trusted.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\msd\untrusted.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\msd\untrusted.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\msd\untrusted.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\options\options.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\options\css\jquery.jscrollpane.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\options\css\options.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\options\css\reset.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\options\images\bg-hide-click.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\options\images\bg-hide.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\options\images\checkbox-check-off.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\options\images\checkbox-check-on.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\options\images\conduit-logo.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\options\images\ic_Closer.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\options\images\ic_Closer_hover.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\options\images\minibrowser.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\options\images\scroller.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\options\images\sprite-ok-button.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\options\images\truste.gif (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\options\images\x.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\options\js\html5SupportIe.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\options\js\options.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\options\js\resources\html5shiv.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\options\js\resources\jquery.jscrollpane.min.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\options\js\resources\jquery.mousewheel.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\sp\js\searchProtectorManager.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\sp\spbd\bubble.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\sp\spbd\bubble.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\sp\spbd\main.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\sp\spbd\images\information.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\sp\spbd\images\x-default-LTR.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\sp\spbd\images\x-default-RTL.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\sp\spbd\images\x-mouseover-LTR.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\sp\spbd\images\x-mouseover-RTL.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\sp\spsd\main.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\sp\spsd\SearchProtector.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\sp\spsd\settings.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\sp\spsd\images\ok-button.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\sp\spsd\images\separation-line.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\sp\spsd\images\warning.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\menus.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\popups.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\dlg\DialogsAPI.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\dlg\excanvas.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\dlg\generalDialogStyle.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\dlg\PIE.htc (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\dlg\settings.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\dlg\ftd\main.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\dlg\ftd\ToolbarFirstTimeDialog.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\dlg\ftd\ToolbarFirstTimeDialog.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\dlg\ftd\images\app-store-icon.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\dlg\ftd\images\arrow.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\dlg\ftd\images\dialog_tip_left.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\dlg\ftd\images\dialog_tip_right.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\dlg\ftd\images\divider.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\dlg\ftd\images\emailNotifier.gif (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\dlg\ftd\images\facebook.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\dlg\ftd\images\radio.GIF (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\dlg\ftd\images\Thumbs.db (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\dlg\ftd\images\truste_welcome.GIF (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\dlg\ftd\images\weather.GIF (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\dlg\restart\main.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\dlg\restart\restartDialog.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\dlg\restart\restartDialog.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\dlg\restart\images\2.0--spec--kicker.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\dlg\restart\images\content-pattern.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\dlg\restart\images\content-sep.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\dlg\restart\images\OK-Button-Default.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\dlg\restart\images\OK-Button-MouseOver.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\dlg\restart\images\OK-Button-OnClick.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\dlg\restart\images\x.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\gadgetFrame\gf.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\gadgetFrame\lgf.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\gf\gf.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\gf\lgf.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\gf\css\gf.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\gf\css\gf_ie.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\gf\img\ie_back.gif (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\gf\img\loader.gif (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\gf\img\resize.gif (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\gf\img\sprites.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\gf\js\gf.view.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\gf\js\lgf.view.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\menu\popup.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\menu\css\menu.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\menu\img\arrow-down-strong.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\menu\img\arrow-down.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\menu\img\arrow-left-strong.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\menu\img\arrow-left.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\menu\img\arrow-right-strong.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\menu\img\arrow-right.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\menu\img\arrows.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\menu\js\jquery.ellipsis.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\menu\js\jquery.scrollTo-1.4.2-min.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\menu\js\menu.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\menu\js\renderHandler.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\menu\js\scrollers.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\ui\menu\js\showHandler.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\browserAppApi.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\APPLICATION_BUTTON\bgpage.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\APPLICATION_BUTTON\Js\bgpage.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\APPLICATION_BUTTON\resources\defaultEngineImage.gif (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\EMAIL_NOTIFIER\bgPage.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\EMAIL_NOTIFIER\popup.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\EMAIL_NOTIFIER\css\en.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\EMAIL_NOTIFIER\css\en_rtl.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\EMAIL_NOTIFIER\css\jquery.jscrollpane.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\EMAIL_NOTIFIER\js\AccountManager.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\EMAIL_NOTIFIER\js\bgPage.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\EMAIL_NOTIFIER\js\EN.model.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\EMAIL_NOTIFIER\js\IMAPExecuter.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\EMAIL_NOTIFIER\js\Inboxer.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\EMAIL_NOTIFIER\js\Invoker.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\EMAIL_NOTIFIER\js\MailDecoder.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\EMAIL_NOTIFIER\js\MailMerger.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\EMAIL_NOTIFIER\js\POP3Executer.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\EMAIL_NOTIFIER\js\Popup.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\EMAIL_NOTIFIER\js\providerHelper.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\EMAIL_NOTIFIER\js\Providers.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\EMAIL_NOTIFIER\js\SettingsManager.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\EMAIL_NOTIFIER\js\Timer.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\EMAIL_NOTIFIER\js\Translation.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\EMAIL_NOTIFIER\js\Utils.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\HIGHLIGHTER\bgpage.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\HIGHLIGHTER\embedded.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\HIGHLIGHTER\popup.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\HIGHLIGHTER\css\embedded.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\HIGHLIGHTER\css\popup.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\HIGHLIGHTER\css\reset.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\HIGHLIGHTER\js\bgpage.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\HIGHLIGHTER\js\embedded.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\HIGHLIGHTER\js\higlighter_script.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\HIGHLIGHTER\js\popup.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\MULTI_RSS\bgpage.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\MULTI_RSS\popup.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\MULTI_RSS\css\popup.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\MULTI_RSS\img\arrows.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\MULTI_RSS\img\badges.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\MULTI_RSS\img\icons.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\MULTI_RSS\js\bgpage.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\MULTI_RSS\js\popup.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\MULTI_RSS\js\resources\webAppUtils.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\NOTIFICATION\bgpage.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\NOTIFICATION\embedded.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\NOTIFICATION\NotificationPopup.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\NOTIFICATION\Settings.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\NOTIFICATION\css\gadget.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\NOTIFICATION\css\general.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\NOTIFICATION\css\Main.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\NOTIFICATION\css\newMain.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\NOTIFICATION\css\settings.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\NOTIFICATION\css\ui.stepper.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\NOTIFICATION\images\closeIcon.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\NOTIFICATION\images\downArrow.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\NOTIFICATION\images\settingsIcon.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\NOTIFICATION\images\upArrow.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\NOTIFICATION\images\dark\close.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\NOTIFICATION\images\dark\Next.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\NOTIFICATION\images\dark\Next_hover.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\NOTIFICATION\images\dark\powered-by.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\NOTIFICATION\images\dark\Prev.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\NOTIFICATION\images\dark\Prev_hover.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\NOTIFICATION\images\dark\settings.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\NOTIFICATION\images\light\close.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\NOTIFICATION\images\light\Next.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\NOTIFICATION\images\light\Next_hover.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\NOTIFICATION\images\light\powered-by.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\NOTIFICATION\images\light\Prev.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\NOTIFICATION\images\light\Prev_hover.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\NOTIFICATION\images\light\settings.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\NOTIFICATION\js\AppName.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\NOTIFICATION\js\bgpage.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\NOTIFICATION\js\bgpageEarly.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\NOTIFICATION\js\commons.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\NOTIFICATION\js\jquery.ezmark.min.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\NOTIFICATION\js\notification.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\NOTIFICATION\js\NotificationSettings.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\NOTIFICATION\js\notificationUIManger.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\NOTIFICATION\js\Settings.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\NOTIFICATION\js\stepper.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\NOTIFICATION\js\ToolbarAndAppsSettings.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\Optimizer\bgpage.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\Optimizer\js\bgpage.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\PRICE_GONG\bgpage.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\PRICE_GONG\bgpage.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\PRICE_GONG\pg_offers.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\PRICE_GONG\pg_offers.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\PRICE_GONG\agreement\agree.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\PRICE_GONG\agreement\agree.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\PRICE_GONG\agreement\Close.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\PRICE_GONG\agreement\Image.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\PRICE_GONG\agreement\Logo.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\PRICE_GONG\agreement\OK_Btn.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\PRICE_GONG\agreement\Topbg.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\PRICE_GONG\css\gadget.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\PRICE_GONG\css\ie7styles.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\PRICE_GONG\css\iestyle.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\PRICE_GONG\css\custom-theme\jquery-ui-1.8.10.custom.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\PRICE_GONG\images\icon.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\RADIO_PLAYER\bgpage.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\RADIO_PLAYER\embedded.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\RADIO_PLAYER\popup2.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\RADIO_PLAYER\css\gadget.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\RADIO_PLAYER\css\jquery.jscrollpane.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\RADIO_PLAYER\css\reset.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\RADIO_PLAYER\css\stations.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\RADIO_PLAYER\css\custom-theme\jquery-ui-1.8.10.custom.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\RADIO_PLAYER\js\bgpage.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\RADIO_PLAYER\js\bgpageEarly.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\RADIO_PLAYER\js\embedded.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\RADIO_PLAYER\js\embeddedEarly.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\RADIO_PLAYER\js\localization.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\RADIO_PLAYER\js\player.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\RADIO_PLAYER\js\popup.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\RADIO_PLAYER\js\resources\BrowserDetect.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\RADIO_PLAYER\js\resources\jquery-ui-1.8.10.custom.min.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\RADIO_PLAYER\js\resources\jquery.jscrollpane.min.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\RADIO_PLAYER\js\resources\jquery.scrollTo-1.4.2-min.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\RADIO_PLAYER\js\resources\radioCommon.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\RADIO_PLAYER\js\resources\system.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\RADIO_PLAYER\js\resources\utils.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\SEARCH\bgpage.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\SEARCH\embedded.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\SEARCH\information.popup.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\SEARCH\buildSettings\SearchApp_Ant.xml (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\SEARCH\Css\information.popup.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\SEARCH\js\bgpage.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\SEARCH\js\common.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\SEARCH\js\contentManager.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\SEARCH\js\historyProvider.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\SEARCH\js\information.popup.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\SEARCH\js\layoutManager.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\SEARCH\js\searchListener.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\SEARCH\js\selectionListener.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\SEARCH\js\suggestProvider.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\SEARCH\resources\history--x-default.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\SEARCH\resources\history--x-mouseover.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\SEARCH\resources\menu.icon.apps.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\SEARCH\view\script\view.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\SEARCH\view\style\default.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\SEARCH\view\style\rsx\dd-arrow.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\SEARCH\view\style\rsx\ie8.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\TWITTER\bgpage.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\TWITTER\popup.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\TWITTER\popup.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\TWITTER\img\icons.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\TWITTER\img\inbox.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\TWITTER\img\scroll_down.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\TWITTER\img\scroll_up.png (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\TWITTER\js\bgpage.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\TWITTER\js\localization.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\TWITTER\js\popup.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\WEATHER\bgpage.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\WEATHER\popup.html (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\WEATHER\css\gadget.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\WEATHER\css\ie7styles.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\WEATHER\css\iestyle.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\WEATHER\js\bgpage.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\WEATHER\js\common.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\WEATHER\js\date-functions.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\WEATHER\js\gadget.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\WEATHER\js\jquery.autocomplete.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\WEATHER\js\jquery.textshadow.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\WEATHER\js\logic.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\WEATHER\js\main.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\al\wa\WEATHER\js\xPath.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\core\corelibs.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\core\framework.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\core\utils.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\lib\al.view.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\lib\al.viewPerformanceLog.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\lib\background.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\lib\ie_fix.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\lib\jquery.min.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\lib\jquery.mousewheel.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\lib\jquery.text-overflow.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\lib\jquery.tmpl.min.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\lib\jquery.xml2json.custom.min.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\lib\jquery.xml2json.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\lib\json2.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\lib\json2.min.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\lib\script2injectEmbedded.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\lib\script2injectPopup.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\lib\sdk.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\lib\jquery.alerts\jquery.alerts.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\lib\jquery.alerts\jquery.alerts.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\lib\jquery.alerts\images\help.gif (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\lib\jquery.alerts\images\important.gif (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\lib\jquery.alerts\images\info.gif (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\lib\jquery.alerts\images\title.gif (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\lib\jquery.jscrollpane\jquery.jscrollpane.css (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\lib\jquery.jscrollpane\jquery.jscrollpane.min.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\tb\sl\serviceLayer.js (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.26.4.512_0\_locales\en\messages.json (PUP.Optional.WhiteSmoke.A) -> Quarantined and deleted successfully.
C:\Users\Bethany\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.9_0\babylon48.png (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.
C:\Users\Bethany\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.9_0\BabylonChromePI.dll (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.
C:\Users\Bethany\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.9_0\bg.html (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.
C:\Users\Bethany\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.9_0\bg.js (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.
C:\Users\Bethany\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.9_0\cs.js (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.
C:\Users\Bethany\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.9_0\manifest.json (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.9_0\babylon48.png (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.9_0\BabylonChromePI.dll (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.9_0\bg.html (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.9_0\bg.js (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.9_0\cs.js (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.
C:\Users\Gatis\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.9_0\manifest.json (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.
C:\Users\Noah\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.0_0\BabylonChromePI.dll (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.
C:\Users\Noah\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.0_0\bg.js (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.
C:\Users\Noah\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.0_0\cs.js (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.
C:\Users\Noah\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.9_0\babylon48.png (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.
C:\Users\Noah\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.9_0\bg.html (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.
C:\Users\Noah\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.9_0\manifest.json (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.
C:\Users\Bethany\AppData\Local\Conduit\CT2504091\Vuze_RemoteAutoUpdateHelper.exe (PUP.Optional.VuzeRemoteTB.A) -> Quarantined and deleted successfully.
C:\Program Files\Vuze_Remote\GottenAppsContextMenu.xml (PUP.Optional.VuzeRemoteTB.A) -> Quarantined and deleted successfully.
C:\Program Files\Vuze_Remote\OtherAppsContextMenu.xml (PUP.Optional.VuzeRemoteTB.A) -> Quarantined and deleted successfully.
C:\Program Files\Vuze_Remote\SharedAppsContextMenu.xml (PUP.Optional.VuzeRemoteTB.A) -> Quarantined and deleted successfully.
C:\Program Files\Vuze_Remote\tbVuze.dll (PUP.Optional.VuzeRemoteTB.A) -> Quarantined and deleted successfully.
C:\Program Files\Vuze_Remote\toolbar.cfg (PUP.Optional.VuzeRemoteTB.A) -> Quarantined and deleted successfully.
C:\Program Files\Vuze_Remote\ToolbarContextMenu.xml (PUP.Optional.VuzeRemoteTB.A) -> Quarantined and deleted successfully.
C:\Program Files\Vuze_Remote\uninstall.exe (PUP.Optional.VuzeRemoteTB.A) -> Quarantined and deleted successfully.
C:\Program Files\Vuze_Remote\Vuze_RemoteToolbarHelper.exe (PUP.Optional.VuzeRemoteTB.A) -> Quarantined and deleted successfully.
C:\Users\Bethany\AppData\Local\Google\Chrome\User Data\Default\Extensions\poheodfamflhhhdcmjfeggbgigeefaco\1.1_0\icon.ico (PUP.Optional.BetterSurf.A) -> Quarantined and deleted successfully.
C:\Users\Bethany\AppData\Local\Google\Chrome\User Data\Default\Extensions\poheodfamflhhhdcmjfeggbgigeefaco\1.1_0\manifest.json (PUP.Optional.BetterSurf.A) -> Quarantined and deleted successfully.

(end)
 



#8 1972vet

1972vet

  • Malware Response Team
  • 1,698 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Midwest U.S.A.
  • Local time:10:30 PM

Posted 02 April 2014 - 03:40 PM

Look for the ESET scan log here:
Program Files (x86)>ESET>ESET Online Scanner>Log.txt

Also, anything that was quarantined would be tucked in the quarantine folder. While I wait for the ESET logs(s), please download an updated version of MBAM (it's now in verison 2.0.0.1000) from Here:

https://www.malwarebytes.org/

There's quite a few updates to the database since your last MBAM scan so a fresh "Threat Scan" (Formerly "Quick Scan") would be appreciated. Thanks!


Disabled Veteran, U.S.C.G. 1972 - 1978
mvpsigpic.jpg
2009 - 2013

Member: U.N.I.T.E.
Performance and Maintenance for Windows XP, Windows Vista and Windows Seven


#9 skeeterbyte

skeeterbyte
  • Topic Starter

  • Members
  • 67 posts
  • OFFLINE
  •  
  • Local time:11:30 PM

Posted 02 April 2014 - 03:51 PM

Running MBAM (updated version) now. Don't see any ESET log in the location you reference or anywhere. So although it wouldn't have the items it removed the first go-round, would you like me to run it again after MBAM finishes?



#10 skeeterbyte

skeeterbyte
  • Topic Starter

  • Members
  • 67 posts
  • OFFLINE
  •  
  • Local time:11:30 PM

Posted 02 April 2014 - 05:05 PM

well.....it dumped again while I was away from it so I didn't get any detail from it. I started it in safe mode (with networking) and ran the malwarebytes scan. It wouldn't let me export the log as a txt file (would give the dreaded "has encountered a problem and will close" message. But I did get it exported as a xml file. So here are the copied/pasted contents of that. I'll attach it as well, in case. Right now it is running in normal...i.e. not safe mode. I'll go ahead and run another malwarebytes scan while I'm waiting to hear from you.

 

Edit: Ran the scan again and it didn't find any malicious items.

 

2014/04/02 17:48:48 -0400 mbam-log-2014-04-02 (17-38-00).xml yes

2.00.0.1000 v2014.04.02.09 v2014.03.27.01 premium disabled disabled disabled Windows 7 Service Pack 1 x86 Gatis NTFS

 

threat completed 329930 612

 

 

 

 

0 0 14 7 0 0 0 0 enabled enabled enabled enabled disabled disabled enabled enabled enabled HKU\S-1-5-21-4111677358-2937080306-3027222422-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}PUP.Optional.Wajam.Asuccesse2aff134d5a66dc9243a709d18ea09f7 HKU\S-1-5-21-4111677358-2937080306-3027222422-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}PUP.Optional.Wajam.Asuccesse2aff134d5a66dc9243a709d18ea09f7 HKU\S-1-5-21-4111677358-2937080306-3027222422-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}PUP.Optional.Wajam.Asuccesse2aff134d5a66dc9243a709d18ea09f7 HKU\S-1-5-21-4111677358-2937080306-3027222422-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}PUP.Optional.Wajam.Asuccesse2aff134d5a66dc9243a709d18ea09f7 HKU\S-1-5-21-4111677358-2937080306-3027222422-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{BA14329E-9550-4989-B3F2-9732E92D17CC}PUP.Optional.VuzeRemoteTB.Asuccessccc5c164651623132ed73ecc7c86837d HKU\S-1-5-21-4111677358-2937080306-3027222422-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{BA14329E-9550-4989-B3F2-9732E92D17CC}PUP.Optional.VuzeRemoteTB.Asuccessccc5c164651623132ed73ecc7c86837d HKU\S-1-5-21-4111677358-2937080306-3027222422-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{BA14329E-9550-4989-B3F2-9732E92D17CC}PUP.Optional.VuzeRemoteTB.Asuccessccc5c164651623132ed73ecc7c86837d HKU\S-1-5-21-4111677358-2937080306-3027222422-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{BA14329E-9550-4989-B3F2-9732E92D17CC}PUP.Optional.VuzeRemoteTB.Asuccessccc5c164651623132ed73ecc7c86837d HKU\S-1-5-21-4111677358-2937080306-3027222422-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\The Weather ChannelAdware.Hotbarsuccess8809db4aee8dc472c97c06df54ae6799 HKU\S-1-5-21-4111677358-2937080306-3027222422-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\IminentPUP.Optional.Iminent.Asuccess533e0f167605a393582dcca0689a40c0 HKU\S-1-5-21-4111677358-2937080306-3027222422-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\The Weather ChannelAdware.Hotbarsuccess7c15879efc7fa19598ada73e55adaa56 HKU\S-1-5-21-4111677358-2937080306-3027222422-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\PriceGongPUP.Optional.PriceGong.Asuccess4849bc6933483006606df27339c9827e HKU\S-1-5-21-4111677358-2937080306-3027222422-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\CONDUIT\FFPUP.Optional.Conduit.Asuccessf29fe441d9a280b68ec7790e04ff42be HKU\S-1-5-21-4111677358-2937080306-3027222422-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\WAJAMPUP.Optional.Wajam.Asuccess8809ce5786f5eb4b39f0e0a5e122a060 HKU\S-1-5-21-4111677358-2937080306-3027222422-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER{BA14329E-9550-4989-B3F2-9732E92D17CC}PUP.Optional.VuzeRemoteTB.Asuccess

Attached Files


Edited by skeeterbyte, 02 April 2014 - 05:19 PM.


#11 1972vet

1972vet

  • Malware Response Team
  • 1,698 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Midwest U.S.A.
  • Local time:10:30 PM

Posted 03 April 2014 - 05:34 AM

QUOTE Don't see any ESET log in the location you reference or anywhere. So although it wouldn't have the items it removed the first go-round, would you like me to run it again after MBAM finishes?

If you found the folder "ESET Online Scanner" then a log file should have been saved.

You have certainly made some progress. We DO need to run ESET again and review the log. In addition to that log though, I'd like to see the "Attached.txt" log produced from the last DDS scan. When you posted it up, it didn't appear to upload correctly. What you posted is the DDS scan log (twice). So on your next reply, please post the ESET scan results and the "Attache.txt" log from the DDS scan. Thanks!

Disabled Veteran, U.S.C.G. 1972 - 1978
mvpsigpic.jpg
2009 - 2013

Member: U.N.I.T.E.
Performance and Maintenance for Windows XP, Windows Vista and Windows Seven


#12 skeeterbyte

skeeterbyte
  • Topic Starter

  • Members
  • 67 posts
  • OFFLINE
  •  
  • Local time:11:30 PM

Posted 03 April 2014 - 11:22 AM

Hi 1972vet,

 

Sorry, I should have been more detailed in the info about the ESET log. I didn't find an ESET folder or any sign of it. But I will look again just for good measure.

It's being argumentative starting up this morning. It's not thrown any BSOd's yet but is shutting itself down and trying to restart. I currently have it in safe mode to try and run the ESET scan. I'll let you know how that goes. But so far, so good...."knock on wood"

 

Also, didn't realize I posted the DDS twice. Must have just been a day that day....lol.

Here's the contents of the attach.txt from the 28th:

 

.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2012-11-20.01)
.
Microsoft Windows 7 Home Premium
Boot Device: \Device\HarddiskVolume2
Install Date: 4/13/2013 4:34:49 PM
System Uptime: 3/28/2014 1:19:33 PM (0 hours ago)
.
Motherboard: ELITEGROUP |  | MCP61P   
Processor: AMD Athlon™ 64 X2 Dual Core Processor 5200+ | Socket M2  | 2600/201mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 288 GiB total, 126.581 GiB free.
D: is FIXED (NTFS) - 10 GiB total, 4.378 GiB free.
E: is CDROM ()
F: is Removable
G: is Removable
H: is Removable
I: is Removable
J: is Removable
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
RP81: 10/30/2013 6:17:35 PM - Windows Update
RP82: 11/4/2013 2:55:39 PM - Windows Update
RP83: 11/7/2013 9:31:32 PM - Windows Update
RP84: 11/11/2013 6:04:00 PM - Windows Update
RP85: 11/14/2013 4:41:28 PM - Windows Update
RP86: 11/17/2013 5:31:01 PM - Windows Update
RP87: 11/24/2013 8:51:39 PM - Scheduled Checkpoint
RP88: 12/2/2013 3:28:30 PM - Windows Update
RP89: 12/3/2013 9:18:37 PM - Windows Update
RP90: 12/11/2013 3:51:08 PM - Windows Update
RP91: 12/18/2013 9:32:28 AM - Windows Update
RP92: 12/22/2013 11:03:24 PM - Windows Update
RP93: 1/6/2014 12:03:17 PM - Windows Update
RP94: 1/9/2014 7:55:12 AM - Windows Update
RP95: 1/13/2014 4:33:35 PM - Windows Update
RP96: 1/28/2014 7:30:59 AM - Windows Update
RP97: 1/28/2014 12:22:55 PM - Windows Update
RP98: 2/5/2014 3:43:11 PM - Windows Update
RP99: 2/8/2014 8:17:07 PM - Windows Update
RP100: 2/14/2014 1:43:43 PM - Windows Update
RP101: 2/19/2014 3:30:14 PM - Windows Update
RP102: 2/20/2014 3:00:30 AM - Windows Update
RP103: 2/20/2014 6:33:50 PM - Windows Update
RP104: 2/26/2014 3:06:19 PM - Windows Update
RP105: 2/26/2014 3:32:54 PM - Windows Update
RP106: 2/28/2014 3:00:29 AM - Windows Update
RP107: 3/3/2014 7:13:16 PM - Windows Update
RP108: 3/18/2014 7:08:04 PM - Windows Update
RP109: 3/18/2014 7:57:47 PM - Windows Update
RP110: 3/20/2014 3:20:26 PM - Installed Java 7 Update 51
RP111: 3/20/2014 11:05:13 PM - mid-Anita-cleaning
RP112: 3/21/2014 12:02:35 AM - Windows Update
RP114: 3/21/2014 7:24:40 PM - Revo Uninstaller's restore point - Java 7 Update 25
RP115: 3/21/2014 7:25:11 PM - Removed Java 7 Update 51
RP116: 3/21/2014 7:34:29 PM - Installed Java 7 Update 51
RP117: 3/25/2014 2:23:41 PM - Windows Update
.
==== Installed Programs ======================
.
Adobe Flash Player 12 ActiveX
Adobe Flash Player 12 Plugin
Adobe Reader XI (11.0.06)
Apple Application Support
Apple Mobile Device Support
Citrix Online Launcher
Free Realms
Google Chrome
Google Earth
Google Update Helper
iCloud
ISO to USB version 1.0
iTunes
Java 7 Update 51
Java Auto Updater
Malwarebytes Anti-Malware version 1.75.0.1300
Microsoft .NET Framework 4.5.1
Microsoft Age of Empires II: The Conquerors Expansion
Microsoft Office Home and Student 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Standard 2007
Microsoft Security Client
Microsoft Security Essentials
Microsoft Silverlight
Mozilla Firefox 28.0 (x86 en-US)
Mozilla Maintenance Service
NVIDIA Control Panel 307.83
NVIDIA Graphics Driver 307.83
NVIDIA Install Application
NVIDIA Update 1.10.8
NVIDIA Update Components
PCI Soft Data Fax Modem with SmartCP
ProductContext
QuickTime 7
Realtek High Definition Audio Driver
ROBLOX Player for Gatis
Security Update for Microsoft .NET Framework 4.5.1 (KB2898869)
Security Update for Microsoft .NET Framework 4.5.1 (KB2901126)
Skype™ 6.11
Windows 7 Upgrade Advisor
.
==== Event Viewer Messages From Past Week ========
.
3/28/2014 1:20:01 PM, Error: Microsoft-Windows-WER-SystemErrorReporting [1001]  - The computer has rebooted from a bugcheck.  The bugcheck was: 0x0000008e (0xc0000005, 0x832aa04f, 0xa55e7a29, 0x00000000). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 032814-23992-01.
3/25/2014 3:06:41 PM, Error: Microsoft-Windows-WER-SystemErrorReporting [1001]  - The computer has rebooted from a bugcheck.  The bugcheck was: 0x0000008e (0xc000001d, 0x8332a849, 0xa821796c, 0x00000000). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 032514-30045-01.
3/25/2014 2:19:19 PM, Error: Disk [11]  - The driver detected a controller error on \Device\Harddisk5\DR5.
3/25/2014 2:13:46 PM, Error: Microsoft-Windows-WMPNSS-Service [14332]  - Service 'WMPNetworkSvc' did not start correctly because CoCreateInstance(CLSID_UPnPDeviceFinder) encountered error '0x80004005'. Verify that the UPnPHost service is running and that the UPnPHost component of Windows is installed properly.
3/25/2014 2:12:40 PM, Error: Microsoft-Windows-WER-SystemErrorReporting [1001]  - The computer has rebooted from a bugcheck.  The bugcheck was: 0x0000007f (0x0000000d, 0x00000000, 0x00000000, 0x00000000). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 032514-26067-01.
3/25/2014 1:41:27 PM, Error: Microsoft Antimalware [2001]  - Microsoft Antimalware has encountered an error trying to update signatures.      New Signature Version:       Previous Signature Version: 1.169.485.0      Update Source: Microsoft Update Server      Update Stage: Search      Source Path: http://www.microsoft.com      Signature Type: AntiVirus      Update Type: Full      User: NT AUTHORITY\SYSTEM      Current Engine Version:       Previous Engine Version: 1.1.10401.0      Error code: 0x8024402c      Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.
3/23/2014 2:30:44 PM, Error: Disk [11]  - The driver detected a controller error on \Device\Harddisk5\DR6.
3/23/2014 11:58:18 AM, Error: Service Control Manager [7031]  - The Apple Mobile Device service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.
3/23/2014 10:56:47 AM, Error: Schannel [36888]  - The following fatal alert was generated: 43. The internal error state is 252.
.
==== End Of File ===========================
 



#13 1972vet

1972vet

  • Malware Response Team
  • 1,698 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Midwest U.S.A.
  • Local time:10:30 PM

Posted 03 April 2014 - 01:47 PM

OK, I need to make this quick as possible since we're having some major storms in my area. According to those error messages, you need to update your drivers, specifically for the chipset.

 

Next, you need to run ESET online scanner again and post that log:

Please note that disabling your on board antivirus product is not necessary while you scan with ESET online scanner Here. Click the Run ESET Online Scanner button. Another window will open...here, please accept the agreement, then click the Start button.

When prompted, install the needed software to perform the scan . When it finishes with the install, make sure to check the box titled Scan archives (the Remove found threats box should already be checked by default so PLEASE remove the check from this box).

Next, click the "Advanced Settings" link. Please make sure all boxes are checked except for "Use custom proxy settings". then click the Start button.

When it completes, use notepad to open the logfile located at C:\Program Files\EsetOnlineScanner\log.txt
Copy and paste that log with your next reply, along with a description of any remaining problems. Thanks!

Disabled Veteran, U.S.C.G. 1972 - 1978
mvpsigpic.jpg
2009 - 2013

Member: U.N.I.T.E.
Performance and Maintenance for Windows XP, Windows Vista and Windows Seven


#14 skeeterbyte

skeeterbyte
  • Topic Starter

  • Members
  • 67 posts
  • OFFLINE
  •  
  • Local time:11:30 PM

Posted 03 April 2014 - 01:50 PM

thanks 1972vet. Got it. Will do. So far the ESET scan hasn't found anything. Will report as soon as I do what you've directed.

Stay safe and hope the storms aren't too bad and pass quickly.

 

Edit: everything I've found and/or run so far on the chipset returns saying it has the latest version.

So do you have any suggestions on a safe, good place to find updated chipset drivers for the Gateway GT5426e?


Edited by skeeterbyte, 03 April 2014 - 11:14 PM.


#15 skeeterbyte

skeeterbyte
  • Topic Starter

  • Members
  • 67 posts
  • OFFLINE
  •  
  • Local time:11:30 PM

Posted 03 April 2014 - 08:33 PM

The ESET scan did finish without finding anything. Just for good measure though, here's the log from that scan:

 

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=66d5d35be9712d45af1ec97531ed813a
# engine=17745
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2014-04-04 12:24:04
# local_time=2014-04-03 08:24:04 (-0500, Eastern Daylight Time)
# country="United States"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5892 16777213 88 94 0 5025862 0 0
# scanned=231705
# found=0
# cleaned=0
# scan_time=12163
 






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users