Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

cryptnet make me some trouble


  • This topic is locked This topic is locked
39 replies to this topic

#1 simeldorin

simeldorin

  • Members
  • 22 posts
  • OFFLINE
  •  
  • Local time:06:45 PM

Posted 04 March 2015 - 10:17 AM

I don't know how i got cryptnet

why i want to "kill" cryptnet

because it inject my game and i can't play because the game crash and says : crypnet inject your game

please help me

sorry for English

 



BC AdBot (Login to Remove)

 


#2 olgun52

olgun52

  • Malware Response Team
  • 3,783 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:45 PM

Posted 04 March 2015 - 10:57 AM

Hello simeldorin and :welcome: to BleepingComputer's Virus/Trojan/Spyware/Malware Removal forum.

 

My name is Yılmaz and I'll help you with the cleanup of malware from your computer.

Before we move on, please read the following points carefully.
 

  • Please complete all steps in the specified order.
  • Even if tools don't find malware, I want you to post the logfiles anyway.
  • Please copy and paste the logfiles directly into your posts. Please do not attach them unless you are instructed to do so.
  • Read the instructions carefully. If you have problems, stop what you  were doing and describe the problems you encountered as precisely as  you can.
  • Don't install or uninstall software during the cleanup unless you are told to do so.
  • If you can't answer for the next few days, please let me know. If  you haven't answered within 5 days, I am assuming that you don't need  help anymore and your topic will be closed.
  • I can not guarantee that we will find and be able to remove all  malware. The cleaning process is not instant. Please continue to review  my answers until I tell you that your computer is clean
  • Please reply to this thread. Do not start a new topic
  • As my first language is not English, please do not use slang or idioms. It could be hard for me to understand.

 

  • Please open as administrator  the computer. How is open as administrator  the computer?
  • Disable your AntiVirus and AntiSpyware applications, as they will  interfere with our tools and the removal. If you are unsure how to do  this, please refer to get help here

Thanks

---------------------------------------------------------------------------------------------------------

Please download DDS from either of these links

LINK 1
LINK 2

and save it to your desktop.

  • Disable any antivirus programs during the scan (If you have difficulty properly disabling your protective programs, refer to this link here )
  • Double click dds to run the tool.
  • When done, two DDS.txt's will open.
  • Save both reports to your desktop.

---------------------------------------------------
Please include the contents of the following in your next reply:

DDS.txt
Attach.txt

Good day


Best regards
 
paypal.gif
If you wish to show appreciation and support me personally fighting against malware, then you can consider a donation. Thank you. :thumbup2:
Malware fix forum
If I don't reply within 24 hours please PM me!

 


 


#3 simeldorin

simeldorin
  • Topic Starter

  • Members
  • 22 posts
  • OFFLINE
  •  
  • Local time:06:45 PM

Posted 04 March 2015 - 11:13 AM

this is dds.txt

DDS (Ver_2012-11-20.01) - NTFS_x86 
Internet Explorer: 11.0.9600.17496  BrowserJavaVersion: 11.25.2
Run by user at 21:29:24 on 2015-01-09
Microsoft Windows 7 Professional   6.1.7601.1.1252.1.1033.18.3470.1559 [GMT 2:00]
.
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: ESET NOD32 Antivirus 7.0 *Disabled/Updated* {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Program Files\BlueStacks\HD-LogRotatorService.exe
C:\Program Files\BlueStacks\HD-UpdaterService.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\Uniblue\Powersuite\powersuite_monitor.exe
D:\ggg\fraps\fraps.exe
C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe
C:\Program Files\Razer\Razer Cortex\RzKLService.exe
C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe
C:\Program Files\TuneUp Utilities 2014\TuneUpUtilitiesService32.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
C:\Program Files\Razer\Razer Cortex\main.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
C:\Program Files\BlueStacks\HD-Agent.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\TuneUp Utilities 2014\TuneUpUtilitiesApp32.exe
C:\Program Files\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
C:\Program Files\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe
C:\Program Files\RAMRush\RAMRush.exe
C:\Users\user\AppData\Roaming\uTorrent\uTorrent.exe
C:\Users\user\AppData\Roaming\Genieo\Application\Updater\bin\genupdater.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\PROGRA~1\Raptr\raptr.exe
C:\PROGRA~1\Raptr\raptr_im.exe
C:\Program Files\Intel\Extreme Tuning Utility\XtuService.exe
C:\Program Files\Opera\27.0.1689.69\opera.exe
C:\Program Files\Opera\27.0.1689.69\opera_crashreporter.exe
C:\Program Files\Opera\27.0.1689.69\opera.exe
C:\Program Files\Opera\27.0.1689.69\opera.exe
C:\Program Files\GameforgeLive\gfl_client.exe
C:\Program Files\Opera\27.0.1689.69\opera.exe
C:\Program Files\Opera\27.0.1689.69\opera.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\taskmgr.exe
C:\Program Files\Opera\27.0.1689.69\opera.exe
C:\Program Files\Opera\27.0.1689.69\opera.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k SDRSVC
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.com
uDefault_Page_URL = hxxp://www.google.com
mStart Page = hxxp://www.google.com
mSearch Page = hxxp://www.google.com
mDefault_Page_URL = hxxp://www.google.com
mDefault_Search_URL = hxxp://www.google.com
uProxyOverride = <local>
mWinlogon: Userinit = c:\windows\system32\userinit.exe
uRun: [ftweak_RAMRush] c:\program files\ramrush\RAMRush.exe
uRun: [uTorrent] "c:\users\user\appdata\roaming\utorrent\uTorrent.exe"  /MINIMIZED
uRun: [SPDriver] c:\program files\shopperpro\jsdriver\1.37.0.1391\jsdrv.exe
uRun: [YTDownloader] "c:\program files\ytdownloader\YTDownloader.exe" /boot
uRun: [LiveSupport] "c:\program files\livesupport\LiveSupport.exe" /noshow /log
uRun: [se] "c:\users\user\appdata\roaming\skypemoticons\SE.exe"  /minimized 
uRun: [Dxtory Update Checker 2.0] c:\program files\dxtory software\dxtory2.0\UpdateChecker.exe
uRun: [Gyazo] c:\program files\gyazo\GyStation.exe
uRun: [GenieoUpdaterService] "c:\users\user\appdata\roaming\genieo\application\updater\bin\genupdater.exe" -wait 5
uRun: [GenieoSystemTray] "c:\users\user\appdata\roaming\genieo\application\trayui\bin\gentray.exe"
uRun: [Minecraft Tweaker Updater] c:\users\user\appdata\roaming\.minecraft\MinecraftTweakerUpdater.exe
uRun: [Skype] "c:\program files\skype\phone\Skype.exe" /minimized /regrun
mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [Persistence] c:\windows\system32\igfxpers.exe
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRun: [RazerCortex] c:\program files\razer\razer cortex\RazerCortex.exe -autorun
mRun: [YTDownloader] "c:\program files\ytdownloader\YTDownloader.exe" /boot
mRun: [AdobeAAMUpdater-1.0] "c:\program files\common files\adobe\oobe\pdapp\uwa\UpdaterStartupUtility.exe"
mRun: [Adobe Creative Cloud] "c:\program files\adobe\adobe creative cloud\acc\Creative Cloud.exe" --showwindow=false --onOSstartup=true
mRun: [APSDaemon] "c:\program files\common files\apple\apple application support\APSDaemon.exe"
mRun: [BlueStacks Agent] c:\program files\bluestacks\HD-Agent.exe
mRun: [XMouseButtonControl] c:\program files\highresolution enterprises\x-mouse button control\XMouseButtonControl.exe /notportable
mRun: [Raptr] c:\progra~1\raptr\raptrstub.exe --startup
mRun: [LogMeIn Hamachi Ui] "c:\program files\logmein hamachi\hamachi-2-ui.exe" --auto-start
mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableUIADesktopToggle = dword:0
IE: {07BA1DA9-F501-4796-8728-74D1B91A6CD5} - c:\program files\pokerstars.eu\PokerStarsUpdate.exe
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-001067-0002-0067-ABCDEFFEDCBC} - <orphaned>
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\SkypeIEPlugin.dll
TCP: NameServer = 192.168.10.1
TCP: Interfaces\{CD3127FD-00A2-4F21-BE18-D327110E30F6} : DHCPNameServer = 192.168.10.1
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\SkypeIEPlugin.dll
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - c:\program files\windows live\photo gallery\AlbumDownloadProtocolHandler.dll
Notify: igfxcui - igfxdev.dll
AppInit_DLLs= 0
SSODL: WebCheck - <orphaned>
mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "c:\program files\google\chrome\application\38.0.2125.122\installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
.
================= FIREFOX ===================
.
FF - ProfilePath - 
.
============= SERVICES / DRIVERS ===============
.
R0 iaStorA;iaStorA;c:\windows\system32\drivers\iaStorA.sys [2012-11-19 525880]
R0 iaStorF;iaStorF;c:\windows\system32\drivers\iaStorF.sys [2012-11-19 25656]
R1 {2b929fe1-284b-4766-afb9-19b0915b99b0}Gw;{2b929fe1-284b-4766-afb9-19b0915b99b0}Gw;c:\windows\system32\drivers\{2b929fe1-284b-4766-afb9-19b0915b99b0}Gw.sys [2014-8-22 52416]
R1 {2b929fe1-284b-4766-afb9-19b0915b99b0}w;{2b929fe1-284b-4766-afb9-19b0915b99b0}w;c:\windows\system32\drivers\{2b929fe1-284b-4766-afb9-19b0915b99b0}w.sys [2014-8-23 52416]
R1 {3c3ae2b4-4a36-40c4-a356-ffc1820b7ece}w;{3c3ae2b4-4a36-40c4-a356-ffc1820b7ece}w;c:\windows\system32\drivers\{3c3ae2b4-4a36-40c4-a356-ffc1820b7ece}w.sys [2014-9-28 43192]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [2014-4-17 243128]
R2 BstHdDrv;BlueStacks Hypervisor;c:\program files\bluestacks\HD-Hypervisor-x86.sys [2014-10-7 112344]
R2 BstHdLogRotatorSvc;BlueStacks Log Rotator Service;c:\program files\bluestacks\HD-LogRotatorService.exe [2014-10-7 388824]
R2 BstHdUpdaterSvc;BlueStacks Updater Service;c:\program files\bluestacks\HD-UpdaterService.exe [2014-10-7 782040]
R2 c2cautoupdatesvc;Skype Click to Call Updater;c:\program files\skype\toolbars\autoupdate\SkypeC2CAutoUpdateSvc.exe [2014-7-14 1390176]
R2 c2cpnrsvc;Skype Click to Call PNR Service;c:\program files\skype\toolbars\pnrsvc\SkypeC2CPNRSvc.exe [2014-7-14 1767520]
R2 ekrn;ESET Service;c:\program files\eset\eset nod32 antivirus\ekrn.exe [2013-9-12 1337752]
R2 epfwwfpr;epfwwfpr;c:\windows\system32\drivers\epfwwfpr.sys [2013-9-17 122376]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files\logmein hamachi\hamachi-2.exe [2014-12-13 1895760]
R2 iocbios2;iocbios2;c:\program files\intel\extreme tuning utility\drivers\iocdriver\32bit\iocbios2.sys [2014-6-17 27376]
R2 LMIGuardianSvc;LMIGuardianSvc;c:\program files\logmein hamachi\LMIGuardianSvc.exe [2014-12-2 411920]
R2 RzKLService;RzKLService;c:\program files\razer\razer cortex\RzKLService.exe [2014-9-22 105448]
R2 TeamViewer9;TeamViewer 9;c:\program files\teamviewer\version9\TeamViewer_Service.exe [2014-10-24 4799760]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files\tuneup utilities 2014\TuneUpUtilitiesService32.exe [2014-7-16 1781048]
R2 XTU3SERVICE;Intel(R) Extreme Tuning Utility Service;c:\program files\intel\extreme tuning utility\XtuService.exe [2014-9-29 18384]
R3 ICCWDT;Intel(R) Watchdog Timer Driver (Intel(R) WDT);c:\windows\system32\drivers\ICCWDT.sys [2013-8-13 23512]
R3 L1C;NDIS Miniport Driver for Qualcomm Atheros AR81xx PCI-E Ethernet Controller;c:\windows\system32\drivers\L1C62x86.sys [2013-3-14 99992]
R3 MEI;Intel(R) Management Engine Interface ;c:\windows\system32\drivers\TeeDriver.sys [2014-6-16 109056]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\tuneup utilities 2014\TuneUpUtilitiesDriver32.sys [2014-6-23 12320]
R3 XSplit_Dummy;XSplit  Stream  Audio  Renderer;c:\windows\system32\drivers\xspltspk.sys [2014-7-2 22104]
S2 BstHdAndroidSvc;BlueStacks Android Service;c:\program files\bluestacks\HD-Service.exe [2014-10-7 409304]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2013-9-11 105144]
S2 SkypeUpdate;Skype Updater;c:\program files\skype\updater\Updater.exe [2015-1-2 315488]
S3 asmthub3;ASMedia USB3 Hub Service;c:\windows\system32\drivers\asmthub3.sys [2013-4-12 110920]
S3 asmtxhci;ASMEDIA XHCI Service;c:\windows\system32\drivers\asmtxhci.sys [2013-4-12 333128]
S3 b06diag;Broadcom NetXtreme II Diag Driver;c:\windows\system32\drivers\bxdiagx.sys [2013-3-14 75816]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-14 229888]
S3 BFN7x86;Bigfoot Networks Killer Gaming Service;c:\windows\system32\drivers\Xeno7x86.sys [2013-3-14 130152]
S3 bxfcoe;bxfcoe;c:\windows\system32\drivers\bxfcoe.sys [2013-3-14 150568]
S3 bxois;bxois;c:\windows\system32\drivers\bxois.sys [2013-3-14 435240]
S3 CEDRIVER60;CEDRIVER60;c:\program files\cheat engine 6.4\dbk32.sys [2014-10-18 82880]
S3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [2011-4-12 62464]
S3 eamonm;eamonm;c:\windows\system32\drivers\eamonm.sys [2013-9-17 188808]
S3 esgiguard;esgiguard;c:\program files\enigma software group\spyhunter\esgiguard.sys [2014-1-7 15384]
S3 EtronHub3;Etron USB 3.0 Extensible Hub Driver;c:\windows\system32\drivers\EtronHub3.sys [2013-2-27 65152]
S3 EtronSTOR;Etron Enhance USB BOT/UASP Mass Storage Driver;c:\windows\system32\drivers\EtronSTOR.sys [2013-2-27 32512]
S3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver;c:\windows\system32\drivers\EtronXHCI.sys [2013-2-27 88832]
S3 fssfltr;fssfltr;c:\windows\system32\drivers\fssfltr.sys [2014-7-7 49856]
S3 fsssvc;Windows Live Family Safety Service;c:\program files\windows live\family safety\fsssvc.exe [2014-3-31 1512640]
S3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\ieetwcollector.exe [2015-1-9 102912]
S3 iusb3hub;Intel(R) USB 3.0 Hub Driver;c:\windows\system32\drivers\iusb3hub.sys [2013-4-12 359560]
S3 iusb3xhc;Intel(R) USB 3.0 eXtensible Host Controller Driver;c:\windows\system32\drivers\iusb3xhc.sys [2013-4-12 792712]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\drivers\nusb3hub.sys [2013-2-27 73984]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\drivers\nusb3xhc.sys [2013-2-27 165120]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2014-5-6 14848]
S3 StorSvc;Storage Service;c:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-14 20992]
S3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\TsUsbFlt.sys [2014-5-6 49152]
S3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-20 27264]
S3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\wat\WatAdminSvc.exe [2014-5-3 1343400]
S3 WinRing0_1_2_0;WinRing0_1_2_0;c:\program files\iobit\game booster 3\driver\WinRing0.sys [2015-1-30 14416]
S4 Util innoApp;Util innoApp; [x]
.
=============== File Associations ===============
.
FileExt: .txt: Applications\iexplore.exe="c:\program files\internet explorer\iexplore.exe" %1 [UserChoice]
ShellExec: Opera.exe: open="c:\program files\opera\Launcher.exe" "%1"
.
=============== Created Last 30 ================
.
2015-01-30 11:38:22	--------	d-----w-	c:\program files\Minimal Memory
2015-01-30 11:38:01	--------	d-----w-	c:\program files\YoutuBeAdBBlocKie
2015-01-30 11:37:35	--------	d-----w-	c:\programdata\cgajncpckdgiedhcmdnkjabfmakjhalg
2015-01-30 11:24:12	--------	d-----w-	c:\programdata\IObit
2015-01-30 11:24:12	--------	d-----w-	c:\program files\IObit
2015-01-30 11:20:46	--------	d-----w-	c:\programdata\REVOLT
2015-01-30 11:12:43	--------	d-----w-	C:\uninstall
2015-01-30 11:12:40	--------	d-----w-	C:\Intel
2015-01-30 11:12:31	--------	d-----w-	c:\program files\Microsoft Synchronization Services
2015-01-30 11:12:13	--------	d-----w-	c:\users\user\Intel
2015-01-30 11:06:31	--------	d-----w-	c:\programdata\fhepblpeiefakfafdolajeagkdnmemdd
2015-01-30 11:05:11	--------	d-----w-	c:\program files\Five Nights at Freddy's 3
2015-01-09 19:47:07	--------	d-----w-	c:\users\user\appdata\roaming\Unity
2015-01-09 19:38:22	--------	d-----w-	c:\users\user\appdata\roaming\.minecraft
2015-01-09 19:36:21	--------	d-sh--w-	c:\users\user\appdata\local\EmieBrowserModeList
2015-01-09 19:30:03	--------	d-----w-	c:\users\user\appdata\roaming\LockAP
2015-01-09 19:17:51	--------	d-----w-	c:\programdata\IntelDLM
2015-01-09 19:15:07	--------	d-----w-	c:\users\user\appdata\roaming\Gyazo
2015-01-09 19:13:06	--------	d-----w-	c:\users\user\appdata\local\Intel
2015-01-09 19:12:01	--------	d-----w-	c:\program files\Intel Driver Update Utility
2015-01-09 19:11:02	--------	d-----w-	c:\program files\GameforgeLive
2015-01-09 19:08:01	9054624	----a-w-	c:\programdata\microsoft\windows defender\definition updates\{7523daef-05a9-44d1-9a0b-dbe837322db3}\mpengine.dll
2015-01-09 19:06:02	701440	----a-w-	c:\windows\system32\IMJP10K.DLL
2015-01-09 19:06:00	571904	----a-w-	c:\windows\system32\oleaut32.dll
2015-01-09 19:04:08	681984	----a-w-	c:\windows\system32\adtschema.dll
2015-01-09 19:04:08	523776	----a-w-	c:\windows\system32\termsrv.dll
2015-01-09 19:04:08	146432	----a-w-	c:\windows\system32\msaudite.dll
2015-01-09 19:04:08	136632	----a-w-	c:\windows\system32\drivers\ksecpkg.sys
2015-01-09 19:04:08	1059840	----a-w-	c:\windows\system32\lsasrv.dll
2015-01-09 19:03:55	116224	----a-w-	c:\windows\system32\drivers\mrxdav.sys
2015-01-09 19:03:52	--------	d-----w-	c:\program files\LogMeIn Hamachi
2015-01-09 19:02:32	--------	d-----w-	c:\users\user\appdata\roaming\Opera Software
2015-01-09 19:02:32	--------	d-----w-	c:\users\user\appdata\local\Opera Software
2015-01-09 18:53:29	--------	d-----w-	C:\MicroVolts Package
2014-12-20 18:59:12	--------	d-----w-	c:\users\user\appdata\local\PokerStars.EU
2014-12-20 18:58:41	--------	d-----w-	c:\program files\PokerStars.EU
2014-12-20 18:58:03	--------	d-----w-	c:\users\user\appdata\roaming\Highresolution Enterprises
2014-12-20 18:58:03	--------	d-----w-	c:\program files\Highresolution Enterprises
2014-12-20 18:12:05	--------	d-----w-	c:\users\user\appdata\local\31793
2014-12-20 18:10:01	--------	d-----w-	c:\users\user\appdata\roaming\SteelBytes
2014-12-20 18:07:32	--------	d--h--w-	c:\users\user\appdata\roaming\tvsbb
2014-12-20 17:43:29	--------	d-----w-	C:\Sierra
.
==================== Find3M  ====================
.
2014-12-22 22:50:16	249488	------w-	c:\windows\system32\MpSigStub.exe
2014-12-19 02:43:00	164864	----a-w-	c:\windows\system32\profsvc.dll
2014-12-12 05:11:44	3971512	----a-w-	c:\windows\system32\ntkrnlpa.exe
2014-12-12 05:11:43	3916728	----a-w-	c:\windows\system32\ntoskrnl.exe
2014-12-11 17:47:27	74240	----a-w-	c:\windows\system32\TSWbPrxy.exe
2014-12-06 03:50:19	242688	----a-w-	c:\windows\system32\nlasvc.dll
2014-11-22 02:20:44	2724864	----a-w-	c:\windows\system32\mshtml.tlb
2014-11-22 02:20:30	4096	----a-w-	c:\windows\system32\ieetwcollectorres.dll
2014-11-22 02:07:43	501248	----a-w-	c:\windows\system32\vbscript.dll
2014-11-22 02:07:17	62464	----a-w-	c:\windows\system32\iesetup.dll
2014-11-22 02:06:32	47616	----a-w-	c:\windows\system32\ieetwproxystub.dll
2014-11-22 02:05:02	64000	----a-w-	c:\windows\system32\MshtmlDac.dll
2014-11-22 01:55:16	115712	----a-w-	c:\windows\system32\ieUnatt.exe
2014-11-22 01:55:14	102912	----a-w-	c:\windows\system32\ieetwcollector.exe
2014-11-22 01:54:30	620032	----a-w-	c:\windows\system32\jscript9diag.dll
2014-11-22 01:48:26	667648	----a-w-	c:\windows\system32\MsSpellCheckingFacility.exe
2014-11-22 01:40:04	60416	----a-w-	c:\windows\system32\JavaScriptCollectionAgent.dll
2014-11-22 01:29:26	4299264	----a-w-	c:\windows\system32\jscript9.dll
2014-11-22 01:22:49	2052096	----a-w-	c:\windows\system32\inetcpl.cpl
2014-11-22 01:21:57	1155072	----a-w-	c:\windows\system32\mshtmlmedia.dll
2014-11-22 01:00:20	1888256	----a-w-	c:\windows\system32\wininet.dll
2014-11-17 12:51:42	71344	----a-w-	c:\windows\system32\FlashPlayerCPLApp.cpl
2014-11-17 12:51:42	701104	----a-w-	c:\windows\system32\FlashPlayerApp.exe
2014-11-11 02:44:45	1230336	----a-w-	c:\windows\system32\WindowsCodecs.dll
2014-11-11 02:44:32	186880	----a-w-	c:\windows\system32\pku2u.dll
2014-11-11 02:44:25	550912	----a-w-	c:\windows\system32\kerberos.dll
2014-10-30 17:20:35	75064	----a-w-	c:\windows\system32\PnkBstrA.exe
2014-10-25 16:24:59	1837296	----a-w-	c:\windows\system32\WUDFUpdate_01009.dll
2014-10-25 10:09:53	96680	----a-w-	c:\windows\system32\WindowsAccessBridge.dll
2014-10-25 01:32:37	67584	----a-w-	c:\windows\system32\packager.dll
2014-10-19 13:54:44	447752	----a-w-	c:\windows\system32\vp6vfw.dll
.
============= FINISH: 21:31:18.48 ===============

this is attach.txt

.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2012-11-20.01)
.
Microsoft Windows 7 Professional 
Boot Device: \Device\HarddiskVolume1
Install Date: 4/16/2014 8:37:05 PM
System Uptime: 1/9/2015 8:50:47 PM (1 hours ago)
.
Motherboard: PEGATRON CORPORATION |  | 2AE2
Processor: Intel(R) Pentium(R) CPU G640T @ 2.40GHz | SOCKET 0 | 2400/100mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 98 GiB total, 20.251 GiB free.
D: is FIXED (NTFS) - 368 GiB total, 73.564 GiB free.
E: is CDROM ()
G: is Removable
H: is CDROM ()
.
==== Disabled Device Manager Items =============
.
Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318}
Description: Microsoft Teredo Tunneling Adapter
Device ID: ROOT\*TEREDO\0000
Manufacturer: Microsoft
Name: Teredo Tunneling Pseudo-Interface
PNP Device ID: ROOT\*TEREDO\0000
Service: tunnel
.
==== System Restore Points ===================
.
No restore point in system.
.
==== Installed Programs ======================
.
"BioShock Infinite"
µTorrent
Action!
Adobe Creative Cloud
Adobe Flash Player 15 ActiveX
Adobe Flash Player 15 Plugin
Adobe Photoshop CC
Adobe Photoshop CC 2014 (32 Bit)
Adobe Shockwave Player 12.1
Apple Application Support
Apple Software Update
Battlefield 3™
Battlefield: Bad Company™ 2
BitTorrent
BlueStacks App Player
BlueStacks Notification Center
Call of Duty Advanced Warfare
Camtasia Studio 8
Cheat Engine 6.4
Chivalry: Medieval Warfare
CLEO v3.0.950
Counter Strike 1.6
D3DX10
Dxtory version 2.0.119
ESET NOD32 Antivirus
Far Cry 2
Far Cry 3
Five Nights at Freddy's
Five Nights at Freddy's 3
Five Nights at Freddys 2 Demo
Fraps (remove only)
Game Booster 3
Gameforge Live 2.0.6
GameShadow
Genieo
Ghost Recon Phantoms - EU
Google Chrome
Google Update Helper
Grand Theft Auto IV
GS Auto Clicker
GTA San Andreas
Gyazo 2.3
Half-Life Uplink
Hitman Absolution
Hitman Blood Money
Intel Extreme Tuning Utility
Intel(R) Chipset Device Software
Intel(R) Driver Update Utility 2.0
Intel(R) Management Engine Components
Intel(R) ME UninstallLegacy
Intel® Driver Update Utility
Intel® Watchdog Timer Driver (Intel® WDT)
Java 7 Update 67
Java 8 Update 25
Java Auto Updater
Junk Mail filter update
League of Legends
LogMeIn Hamachi
Metin2
Microsoft .NET Framework 4.5.1
Microsoft Application Error Reporting
Microsoft Games for Windows - LIVE Redistributable
Microsoft OneDrive
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft SQL Server Compact 3.5 SP2 ENU
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005
Microsoft XNA Framework Redistributable 4.0
MicroVolts
Minecraft Tweaker for Minecraft 1.7.10, ver. 1.7.10_10.5
Minecraft1.7.10
Minecraft1.7.2
Minecraft1.7.9
Minecraft1.8
Movie Maker
Mozilla Firefox 34.0.5 (x86 ro)
Mozilla Maintenance Service
MSVCRT
MSVCRT Redists
MSVCRT110
NetoCoupon
nVidia E5 Counter-Strike
NVIDIA PhysX (Legacy)
Opera Stable 27.0.1689.69
PDF Settings CC
Photo Common
Photo Gallery
Pivot Animator version 4.1.10
PokerStars.eu
PowerISO
Powersuite
Prince of Persia The Forgotten Sands™
PunkBuster Services
QuickTime 7
RAMRush 1.0.6.917
Raptr
Razer Cortex
RoboSaver
Rockstar Games Social Club
SCP. Containment Breach 0.8.1 1.0
Security Update for Microsoft .NET Framework 4.5.1 (KB2894854v2)
Security Update for Microsoft .NET Framework 4.5.1 (KB2898869)
Security Update for Microsoft .NET Framework 4.5.1 (KB2901126)
Security Update for Microsoft .NET Framework 4.5.1 (KB2931368)
Security Update for Microsoft .NET Framework 4.5.1 (KB2972107)
Security Update for Microsoft .NET Framework 4.5.1 (KB2972216)
Security Update for Microsoft .NET Framework 4.5.1 (KB2978128)
Security Update for Microsoft .NET Framework 4.5.1 (KB2979578v2)
Shopper-Pro
Skype Click to Call
Skype™ 7.1
Slender - The Arrival
SpeedUpMyPC
SpyHunter
Steam
SW-Sustainer 1.80
swMSM
System Requirements Lab Detection
Team Fortress 2
TeamViewer 9
The Forest 1.0
The Sims 4
The Sims™ 4
Trials Evolution Gold Edition
TuneUp Utilities 2014
TuneUp Utilities 2014 (en-US)
Unity Web Player
Uplay
Vegas Pro 11.0
Visual C++ 2008 Runtime (x86)
Warface
Winamp
Winamp Detector Plug-in
Windows Live Communications Platform
Windows Live Essentials
Windows Live Family Safety
Windows Live ID Sign-in Assistant
Windows Live Installer
Windows Live Mail
Windows Live Messenger
Windows Live MIME IFilter
Windows Live Photo Common
Windows Live PIMT Platform
Windows Live SOXE
Windows Live SOXE Definitions
Windows Live UX Platform
Windows Live UX Platform Language Pack
Windows Live Writer
Windows Live Writer Resources
Windows Movie Maker 2.6
Wirecast
X-Mouse Button Control 2.9.1
XSplit Gamecaster
.
==== Event Viewer Messages From Past Week ========
.
1/9/2015 9:32:52 PM, Error: NetBT [4321]  - The name "USER-PC        :20" could not be registered on the interface with IP address 192.168.10.106. The computer with the IP address 192.168.10.102 did not allow the name to be claimed by this computer.
1/9/2015 9:32:52 PM, Error: NetBT [4321]  - The name "USER-PC        :0" could not be registered on the interface with IP address 192.168.10.106. The computer with the IP address 192.168.10.102 did not allow the name to be claimed by this computer.
1/9/2015 9:30:50 PM, Error: Microsoft-Windows-WMPNSS-Service [14332]  - Service 'WMPNetworkSvc' did not start correctly because CoCreateInstance(CLSID_UPnPDeviceFinder) encountered error '0x80070422'. Verify that the UPnPHost service is running and that the UPnPHost component of Windows is installed properly.
1/9/2015 9:30:41 PM, Error: Service Control Manager [7001]  - The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error:  The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.
1/9/2015 9:21:23 PM, Error: NetBT [4321]  - The name "USER-PC        :20" could not be registered on the interface with IP address 192.168.10.107. The computer with the IP address 192.168.10.104 did not allow the name to be claimed by this computer.
1/9/2015 9:21:23 PM, Error: NetBT [4321]  - The name "USER-PC        :0" could not be registered on the interface with IP address 192.168.10.107. The computer with the IP address 192.168.10.104 did not allow the name to be claimed by this computer.
1/9/2015 9:16:48 PM, Error: Microsoft-Windows-WPDClassInstaller [25088]  - It was not possible to install drivers for the device USB\VID_1BBB&PID_0167&REV_0255&MI_00. Error code 0xe0000217.
1/9/2015 9:12:28 PM, Error: Service Control Manager [7001]  - The Windows Image Acquisition (WIA) service depends on the Shell Hardware Detection service which failed to start because of the following error:  The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.
1/9/2015 9:12:13 PM, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1068" attempting to start the service stisvc with arguments "" in order to run the server: {A1F4E726-8CF1-11D1-BF92-0060081ED811}
1/9/2015 9:12:09 PM, Error: NetBT [4321]  - The name "USER-PC        :20" could not be registered on the interface with IP address 192.168.10.102. The computer with the IP address 192.168.10.105 did not allow the name to be claimed by this computer.
1/9/2015 9:12:09 PM, Error: NetBT [4321]  - The name "USER-PC        :0" could not be registered on the interface with IP address 192.168.10.102. The computer with the IP address 192.168.10.105 did not allow the name to be claimed by this computer.
1/9/2015 9:07:56 PM, Error: Microsoft-Windows-WindowsUpdateClient [20]  - Installation Failure: Windows failed to install the following update with error 0x8024200d: Security Update for Windows 7 (KB2579686).
1/9/2015 9:07:46 PM, Error: Microsoft-Windows-WindowsUpdateClient [20]  - Installation Failure: Windows failed to install the following update with error 0x8024200d: Security Update for Windows 7 (KB2564958).
1/9/2015 9:04:14 PM, Error: Service Control Manager [7009]  - A timeout was reached (30000 milliseconds) while waiting for the LogMeIn Hamachi Tunneling Engine service to connect.
1/9/2015 9:04:14 PM, Error: Service Control Manager [7000]  - The LogMeIn Hamachi Tunneling Engine service failed to start due to the following error:  The service did not respond to the start or control request in a timely fashion.
1/9/2015 9:04:07 PM, Error: Service Control Manager [7030]  - The LogMeIn Hamachi Tunneling Engine service is marked as an interactive service.  However, the system is configured to not allow interactive services.  This service may not function properly.
1/9/2015 8:59:12 PM, Error: bowser [8003]  - The master browser has received a server announcement from the computer WARFIGHTER-PC that believes that it is the master browser for the domain on transport NetBT_Tcpip_{2312B9E8-EA86-4DC9-8455-27B3. The master browser is stopping or an election is being forced.
1/9/2015 8:58:12 PM, Error: Service Control Manager [7022]  - The Windows Update service hung on starting.
1/9/2015 8:56:44 PM, Error: Schannel [36888]  - The following fatal alert was generated: 45. The internal error state is 552.
1/9/2015 8:56:44 PM, Error: Schannel [36881]  - The certificate received from the remote server has either expired or is not yet valid. The SSL connection request has failed. The attached data contains the server certificate.
1/9/2015 8:53:31 PM, Error: Service Control Manager [7022]  - The BlueStacks Android Service service hung on starting.
1/9/2015 8:53:18 PM, Error: NetBT [4321]  - The name "USER-PC        :0" could not be registered on the interface with IP address 192.168.10.106. The computer with the IP address 192.168.10.105 did not allow the name to be claimed by this computer.
1/9/2015 8:53:17 PM, Error: NetBT [4321]  - The name "USER-PC        :20" could not be registered on the interface with IP address 192.168.10.106. The computer with the IP address 192.168.10.105 did not allow the name to be claimed by this computer.
1/9/2015 8:52:42 PM, Error: Service Control Manager [7022]  - The Skype Click to Call PNR Service service hung on starting.
1/9/2015 8:52:42 PM, Error: Service Control Manager [7001]  - The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error:  The dependency service or group failed to start.
1/9/2015 8:52:30 PM, Error: NetBT [4321]  - The name "USER-PC        :20" could not be registered on the interface with IP address 192.168.10.106. The computer with the IP address 192.168.10.104 did not allow the name to be claimed by this computer.
1/9/2015 8:52:26 PM, Error: NetBT [4321]  - The name "USER-PC        :20" could not be registered on the interface with IP address 192.168.10.102. The computer with the IP address 192.168.10.103 did not allow the name to be claimed by this computer.
1/9/2015 8:52:10 PM, Error: NetBT [4321]  - The name "USER-PC        :20" could not be registered on the interface with IP address 192.168.10.105. The computer with the IP address 192.168.10.103 did not allow the name to be claimed by this computer.
1/9/2015 8:52:07 PM, Error: NetBT [4321]  - The name "USER-PC        :20" could not be registered on the interface with IP address 192.168.10.107. The computer with the IP address 192.168.10.105 did not allow the name to be claimed by this computer.
1/9/2015 8:52:03 PM, Error: NetBT [4321]  - The name "USER-PC        :0" could not be registered on the interface with IP address 192.168.10.102. The computer with the IP address 192.168.10.103 did not allow the name to be claimed by this computer.
1/9/2015 8:51:54 PM, Error: NetBT [4321]  - The name "USER-PC        :0" could not be registered on the interface with IP address 192.168.10.104. The computer with the IP address 192.168.10.105 did not allow the name to be claimed by this computer.
1/9/2015 8:51:53 PM, Error: NetBT [4321]  - The name "USER-PC        :20" could not be registered on the interface with IP address 192.168.10.104. The computer with the IP address 192.168.10.106 did not allow the name to be claimed by this computer.
1/9/2015 8:51:53 PM, Error: NetBT [4321]  - The name "USER-PC        :20" could not be registered on the interface with IP address 192.168.10.104. The computer with the IP address 192.168.10.105 did not allow the name to be claimed by this computer.
1/9/2015 8:51:42 PM, Error: Server [2505]  - The server could not bind to the transport \Device\NetBT_Tcpip_{CD3127FD-00A2-4F21-BE18-D327110E30F6} because another computer on the network has the same name.  The server could not start.
1/9/2015 8:51:42 PM, Error: NetBT [4321]  - The name "USER-PC        :20" could not be registered on the interface with IP address 192.168.10.104. The computer with the IP address 192.168.10.103 did not allow the name to be claimed by this computer.
1/9/2015 8:51:39 PM, Error: NetBT [4321]  - The name "USER-PC        :20" could not be registered on the interface with IP address 192.168.10.106. The computer with the IP address 192.168.10.103 did not allow the name to be claimed by this computer.
1/9/2015 8:51:38 PM, Error: NetBT [4321]  - The name "USER-PC        :20" could not be registered on the interface with IP address 192.168.10.105. The computer with the IP address 192.168.10.104 did not allow the name to be claimed by this computer.
1/9/2015 8:51:36 PM, Error: NetBT [4321]  - The name "USER-PC        :20" could not be registered on the interface with IP address 192.168.10.104. The computer with the IP address 192.168.10.102 did not allow the name to be claimed by this computer.
1/9/2015 8:51:36 PM, Error: NetBT [4321]  - The name "USER-PC        :0" could not be registered on the interface with IP address 192.168.10.107. The computer with the IP address 192.168.10.105 did not allow the name to be claimed by this computer.
1/9/2015 8:51:36 PM, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1068" attempting to start the service netprofm with arguments "" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89}
1/9/2015 8:51:36 PM, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1068" attempting to start the service netman with arguments "" in order to run the server: {BA126AD1-2166-11D1-B1D0-00805FC1270E}
1/9/2015 8:51:34 PM, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
1/9/2015 8:51:30 PM, Error: Service Control Manager [7009]  - A timeout was reached (30000 milliseconds) while waiting for the DeltaFix service to connect.
1/9/2015 8:51:15 PM, Error: Service Control Manager [7023]  - The BlueStacks Android Service service terminated with the following error:  An exception occurred in the service when handling the control request.
1/9/2015 8:51:12 PM, Error: Microsoft-Windows-WER-SystemErrorReporting [1001]  - The computer has rebooted from a bugcheck.  The bugcheck was: 0x00000050 (0xdd161000, 0x00000001, 0xe2e82ef6, 0x00000000). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 010915-17066-01.
1/9/2015 8:51:11 PM, Error: NetBT [4321]  - The name "USER-PC        :0" could not be registered on the interface with IP address 192.168.10.106. The computer with the IP address 192.168.10.104 did not allow the name to be claimed by this computer.
1/9/2015 8:51:08 PM, Error: NetBT [4321]  - The name "USER-PC        :0" could not be registered on the interface with IP address 192.168.10.104. The computer with the IP address 192.168.10.106 did not allow the name to be claimed by this computer.
1/9/2015 8:51:03 PM, Error: Service Control Manager [7026]  - The following boot-start or system-start driver(s) failed to load:  AFD CSC DfsC discache ehdrv NetBIOS NetBT nsiproxy Psched rdbss SCDEmu spldr tdx Wanarpv6 WfpLwf {2b929fe1-284b-4766-afb9-19b0915b99b0}Gw {2b929fe1-284b-4766-afb9-19b0915b99b0}w {3c3ae2b4-4a36-40c4-a356-ffc1820b7ece}w
1/9/2015 8:51:03 PM, Error: Service Control Manager [7001]  - The Workstation service depends on the Network Store Interface Service service which failed to start because of the following error:  The dependency service or group failed to start.
1/9/2015 8:51:03 PM, Error: Service Control Manager [7001]  - The TCP/IP NetBIOS Helper service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error:  A device attached to the system is not functioning.
1/9/2015 8:51:03 PM, Error: Service Control Manager [7001]  - The SMB MiniRedirector Wrapper and Engine service depends on the Redirected Buffering Sub Sysytem service which failed to start because of the following error:  A device attached to the system is not functioning.
1/9/2015 8:51:03 PM, Error: Service Control Manager [7001]  - The SMB 2.0 MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error:  The dependency service or group failed to start.
1/9/2015 8:51:03 PM, Error: Service Control Manager [7001]  - The SMB 1.x MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error:  The dependency service or group failed to start.
1/9/2015 8:51:03 PM, Error: Service Control Manager [7001]  - The Network Store Interface Service service depends on the NSI proxy service driver. service which failed to start because of the following error:  A device attached to the system is not functioning.
1/9/2015 8:51:03 PM, Error: Service Control Manager [7001]  - The Network Location Awareness service depends on the Network Store Interface Service service which failed to start because of the following error:  The dependency service or group failed to start.
1/9/2015 8:51:03 PM, Error: Service Control Manager [7001]  - The DNS Client service depends on the NetIO Legacy TDI Support Driver service which failed to start because of the following error:  A device attached to the system is not functioning.
1/9/2015 8:51:03 PM, Error: Service Control Manager [7001]  - The DHCP Client service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error:  A device attached to the system is not functioning.
1/9/2015 8:51:03 PM, Error: NetBT [4321]  - The name "USER-PC        :0" could not be registered on the interface with IP address 192.168.10.105. The computer with the IP address 192.168.10.104 did not allow the name to be claimed by this computer.
1/9/2015 8:51:02 PM, Error: Schannel [36887]  - The following fatal alert was received: 20.
1/9/2015 8:51:02 PM, Error: NetBT [4321]  - The name "USER-PC        :0" could not be registered on the interface with IP address 192.168.10.104. The computer with the IP address 192.168.10.103 did not allow the name to be claimed by this computer.
1/9/2015 8:51:01 PM, Error: NetBT [4321]  - The name "USER-PC        :0" could not be registered on the interface with IP address 192.168.10.106. The computer with the IP address 192.168.10.103 did not allow the name to be claimed by this computer.
1/9/2015 8:51:01 PM, Error: NetBT [4321]  - The name "USER-PC        :0" could not be registered on the interface with IP address 192.168.10.104. The computer with the IP address 192.168.10.102 did not allow the name to be claimed by this computer.
1/9/2015 8:50:58 PM, Error: Microsoft-Windows-WER-SystemErrorReporting [1001]  - The computer has rebooted from a bugcheck.  The bugcheck was: 0x00000050 (0xddf61000, 0x00000001, 0xe2e76ec0, 0x00000000). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 010915-10795-01.
1/30/2015 12:56:52 PM, Error: Service Control Manager [7043]  - The Group Policy Client service did not shut down properly after receiving a preshutdown control.
1/30/2015 12:55:55 PM, Error: NetBT [4321]  - The name "USER-PC        :20" could not be registered on the interface with IP address 192.168.10.103. The computer with the IP address 192.168.10.102 did not allow the name to be claimed by this computer.
1/30/2015 12:55:25 PM, Error: Microsoft-Windows-Time-Service [34]  - The time service has detected that the system time needs to be  changed by -2932524 seconds. The time service will not change the system time by more than 54000 seconds. Verify that your time and time zone are correct, and that the time source time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->64.4.10.33:123) is working properly.
1/30/2015 12:55:22 PM, Error: NetBT [4321]  - The name "USER-PC        :0" could not be registered on the interface with IP address 192.168.10.105. The computer with the IP address 192.168.10.103 did not allow the name to be claimed by this computer.
1/30/2015 12:55:13 PM, Error: Ntfs [55]  - The file system structure on the disk is corrupt and unusable. Please run the chkdsk utility on the volume D:.
1/30/2015 1:53:14 PM, Error: NetBT [4321]  - The name "USER-PC        :0" could not be registered on the interface with IP address 192.168.10.103. The computer with the IP address 192.168.10.102 did not allow the name to be claimed by this computer.
1/30/2015 1:45:24 PM, Error: Tcpip [4199]  - The system detected an address conflict for IP address 192.168.10.103 with the system having network hardware address 24-0A-11-3F-AA-F7. Network operations on this system may be disrupted as a result.
1/30/2015 1:37:44 PM, Error: NetBT [4321]  - The name "USER-PC        :0" could not be registered on the interface with IP address 0.0.0.0. The computer with the IP address 192.168.10.105 did not allow the name to be claimed by this computer.
.
==== End Of File ===========================


#4 olgun52

olgun52

  • Malware Response Team
  • 3,783 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:45 PM

Posted 04 March 2015 - 01:56 PM

Hi simeldorin,

 

Please go to Start, Click Control Panel , click Programs and then click Programs and Features if it still exists:

uninstall the following applications

 

gyazo
dxtory software
Genieo
shopperpro
YTDownloader
SpyHunter
SpeedUpMyPC
TuneUp Utilities 2014
c:\program files\shopperpro
c:\program files\gyazo
c:\program files\dxtory software
c:\program files\IObit

-------------------------------------------------------------------------------------------------------------------------------

 

Uninstall/remove all entries related to 10Bit or Advanced System Care, that program has dubious history..

Personally I would not trust installing any software from a company that resorts to stealing someone's technology to sell their product. Please see the following links and make up your own mind if you want to keep this on your system. If needed I can help you remove it.

IOBit Steals Malwarebytes' Intellectual Property
IOBit's Denial of Theft Unconvincing
IOBit Theft Conclusion
IObit: Trusting Your Antivirus Vendor
Malwarebytes: IObit Stole Our Signatures Database
IObit accused of stealing from Malwarebytes
http://shanegowland....-sucky-company/
 
--------------------------------------------------------------------------------------------------------------------------------
 
Going over your logs I noticed that you have µTorrent-BitTorrent  installed.

  • Avoid gaming sites, pirated software, cracking tools, keygens, and peer-to-peer (P2P) file sharing programs.
  • They are a security risk which can make your computer susceptible to a wide variety of malware infections, remote attacks, exposure of personal information, and identity theft. Many malicious worms and Trojans spread across P2P file sharing networks, gaming and underground sites.
  • Users visiting such pages may see innocuous-looking banner ads containing code which can trigger pop-up ads and malicious Flash ads that install viruses, Trojans and spyware. Ads are a target for hackers because they offer a stealthy way to distribute malware to a wide range of Internet users.
  • The best way to reduce the risk of infection is to avoid these types of web sites and not use any P2P applications.

It is pretty much certain that if you continue to use P2P programs, you will get infected again.
I would recommend that you uninstall µTorrent-BitTorrent , however that choice is up to you. If you choose to remove these programs, you can do so via Start > Control Panel > Add/Remove Programs.

 

BitTorrent

µTorrent

--------------------------------------------------------------------------------------------------------------------------------------

TuneUp Utilities:

The following is referring to Registry Recycler.
Please be aware that bleepingcomputer staff do not recommend the usage of registry cleaners / tools due to the following facts:

  • Registry tools can cause irreparable damage to your Operating System
  • Registry tools can, as a result of the above, render your pc to be inoperable.

This is done, assuming that the major audience here at this board might be inexperienced users and thus a suggested safeguard from our side. If you feel you have the need for a registry cleaner, then you are just as welcome to keep it. This is what we refer to an "optional fix" and is up to the user, so just take this as a recommendation from my side.

For more information about why you should avoid using a such programs please take a look here

---------------------------------------------------------------------------------------------------------------------------------------------

Please PC restart

 

Next >>

 

Please be sure to run our tools with administrator rights.

 

ComboFix run:

 

* IMPORTAN: 1   Place ComboFix.exe on your Desktop

* IMPORTAN: 2   Ensure your external and/or USB drives are inserted during the scan

Next, download ComboFix Save to the Desktop

  • Disable all antivirus and antispyware programs. Get help here
  • Now, close all open windows
  • Double-click combofix.exe to run the program
  • Follow the prompts.
  • If the option is offered, it is in your best interest to allow the download and install of the Recovery Console when prompted.
  • When told that the RC is installed correctly, press YES to continue scanning for malware.
  • ComboFix will run. Please don't click on the window while the program is running, it may cause your system to stall.
  • CF may reboot the computer and resume running when it restarts.
  • When finished, a log, ComboFix.txt, is produced.

Please provide the contents of the ComboFix report in your reply.

 

Have a nice day.

 


Best regards
 
paypal.gif
If you wish to show appreciation and support me personally fighting against malware, then you can consider a donation. Thank you. :thumbup2:
Malware fix forum
If I don't reply within 24 hours please PM me!

 


 


#5 simeldorin

simeldorin
  • Topic Starter

  • Members
  • 22 posts
  • OFFLINE
  •  
  • Local time:06:45 PM

Posted 05 March 2015 - 12:39 AM

HELLO THIS IS PART 1 OF COMBOFIX.TXT BECAUSE IS TOO LONG

ComboFix 15-03-01.01 - user 01/09/2015  21:13:24.1.2 - x86
Microsoft Windows 7 Professional   6.1.7601.1.1252.1.1033.18.3470.1847 [GMT 2:00]
Running from: c:\users\user\Downloads\ComboFix.exe
SP: ESET NOD32 Antivirus 7.0 *Disabled/Updated* {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Created a new restore point
.
.
(((((((((((((((((((((((((((((((((((((((   Other Deletions   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\Common Files\Config\ver.xml
c:\programdata\2308189059
c:\programdata\3189632498336037313
c:\programdata\3189632498336037313\cd5b15e575e1c3d01bd785ee3689bd53.ini
c:\programdata\Adblocker
c:\programdata\Adblocker\aF8uQ9fe1a.dat
c:\programdata\ntuser.pol
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\background.html
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\content.js
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\jP8Nec2nu09.js
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\lsdb.js
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\manifest.json
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\background.html
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\content.js
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\lsdb.js
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\manifest.json
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\w.js
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\background.html
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\content.js
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\GIL.js
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\lsdb.js
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\manifest.json
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\background.html
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\content.js
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\lsdb.js
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\manifest.json
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\ymwbS4Wd0.js
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\background.html
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\content.js
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\lsdb.js
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\manifest.json
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\WG4Mp3w.js
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\background.html
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\content.js
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\kO3n4hM.js
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\lsdb.js
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\manifest.json
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\background.html
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\content.js
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\lsdb.js
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\manifest.json
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\YWkiqLsR.js
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\B9LYiA.js
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\background.html
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\content.js
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\lsdb.js
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\manifest.json
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\background.html
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\content.js
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\lsdb.js
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\manifest.json
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\srGcsUe.js
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\background.html
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\content.js
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\hdC.js
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\lsdb.js
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\manifest.json
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\background.html
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\content.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\jP8Nec2nu09.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\lsdb.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\manifest.json
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\background.html
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\content.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\lsdb.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\manifest.json
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\w.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\background.html
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\content.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\GIL.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\lsdb.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\manifest.json
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\background.html
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\content.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\lsdb.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\manifest.json
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\ymwbS4Wd0.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\background.html
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\content.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\lsdb.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\manifest.json
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\WG4Mp3w.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\background.html
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\content.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\kO3n4hM.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\lsdb.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\manifest.json
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\background.html
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\content.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\lsdb.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\manifest.json
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\ydOAm3UbFoTo.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\background.html
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\content.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\GKey5nK7akm.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\lsdb.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\manifest.json
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\background.html
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\content.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\lsdb.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\manifest.json
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\YWkiqLsR.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\background.html
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\content.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\lsdb.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\lv0W8Xv.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\manifest.json
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\background.html
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\content.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\lsdb.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\manifest.json
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\newtab.html
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\zU_pK9RKrgQ.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\B9LYiA.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\background.html
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\content.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\lsdb.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\manifest.json
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\background.html
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\content.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\lsdb.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\manifest.json
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\srGcsUe.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\background.html
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\content.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\hdC.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\lsdb.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\background.html
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\content.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\jP8Nec2nu09.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\background.html
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\content.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\w.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\background.html
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\content.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\GIL.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\background.html
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\content.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\ymwbS4Wd0.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\background.html
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\content.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\WG4Mp3w.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\background.html
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\content.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\kO3n4hM.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\background.html
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\content.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\ydOAm3UbFoTo.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\background.html
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\content.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\GKey5nK7akm.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\background.html
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\content.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\YWkiqLsR.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\background.html
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\content.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\lv0W8Xv.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\background.html
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\content.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\newtab.html
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\zU_pK9RKrgQ.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\B9LYiA.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\background.html
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\content.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\background.html
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\content.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\srGcsUe.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\background.html
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\content.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\hdC.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\background.html
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\content.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\jP8Nec2nu09.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\background.html
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\content.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\w.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\background.html
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\content.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\GIL.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\background.html
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\content.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\ymwbS4Wd0.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\background.html
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\content.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\WG4Mp3w.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\background.html
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\content.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\kO3n4hM.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\background.html
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\content.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\ydOAm3UbFoTo.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\background.html
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\content.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\GKey5nK7akm.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\background.html
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\content.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\YWkiqLsR.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\background.html
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\content.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\lv0W8Xv.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\background.html
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\content.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\newtab.html
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\zU_pK9RKrgQ.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\B9LYiA.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\background.html
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\content.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\background.html
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\content.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\srGcsUe.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\background.html
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\content.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\hdC.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\manifest.json
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\background.html
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\content.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\jP8Nec2nu09.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\lsdb.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\manifest.json
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\background.html
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\content.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\lsdb.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\manifest.json
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\w.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\background.html
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\content.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\GIL.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\lsdb.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\manifest.json
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\background.html
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\content.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\lsdb.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\manifest.json
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\ymwbS4Wd0.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\background.html
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\content.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\lsdb.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\manifest.json
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\WG4Mp3w.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\background.html
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\content.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\kO3n4hM.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\lsdb.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\manifest.json
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\background.html
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\content.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\lsdb.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\manifest.json
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\ydOAm3UbFoTo.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\background.html
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\content.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\GKey5nK7akm.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\lsdb.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\manifest.json
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\background.html
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\content.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\lsdb.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\manifest.json
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\YWkiqLsR.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\background.html
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\content.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\lsdb.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\lv0W8Xv.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\manifest.json
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\background.html
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\content.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\lsdb.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\manifest.json
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\newtab.html
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\zU_pK9RKrgQ.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\B9LYiA.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\background.html
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\content.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\lsdb.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\manifest.json
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\background.html
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\content.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\lsdb.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\manifest.json
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\srGcsUe.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\background.html
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\content.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\hdC.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\lsdb.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\manifest.json
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\background.html
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\content.js
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\jP8Nec2nu09.js
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\lsdb.js
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\manifest.json
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\background.html
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\content.js
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\lsdb.js
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\manifest.json
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\w.js
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\background.html
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\content.js
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\GIL.js
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\lsdb.js
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\manifest.json
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\background.html
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\content.js
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\lsdb.js
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\manifest.json
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\ymwbS4Wd0.js
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\background.html
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\content.js
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\lsdb.js
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\manifest.json
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\WG4Mp3w.js
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\background.html
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\content.js
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\kO3n4hM.js
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\lsdb.js
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\manifest.json
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\background.html
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\content.js
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\lsdb.js
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\manifest.json
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\YWkiqLsR.js
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\B9LYiA.js
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\background.html
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\content.js
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\lsdb.js
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\manifest.json
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\background.html
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\content.js
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\lsdb.js
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\manifest.json
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\srGcsUe.js
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\background.html
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\content.js
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\hdC.js
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\lsdb.js
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\manifest.json
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\background.html
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\content.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\jP8Nec2nu09.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\lsdb.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\manifest.json
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\background.html
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\content.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\lsdb.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\manifest.json
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\w.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\background.html
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\content.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\GIL.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\lsdb.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\manifest.json
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\background.html
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\content.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\lsdb.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\manifest.json
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\ymwbS4Wd0.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\background.html
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\content.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\lsdb.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\manifest.json
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\WG4Mp3w.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\background.html
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\content.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\kO3n4hM.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\lsdb.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\manifest.json
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\background.html
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\content.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\lsdb.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\manifest.json
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\ydOAm3UbFoTo.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\background.html
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\content.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\GKey5nK7akm.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\lsdb.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\manifest.json
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\background.html
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\content.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\lsdb.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\manifest.json
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\YWkiqLsR.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\background.html
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\content.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\lsdb.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\lv0W8Xv.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\manifest.json
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\background.html
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\content.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\lsdb.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\manifest.json
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\newtab.html
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\zU_pK9RKrgQ.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\B9LYiA.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\background.html
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\content.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\lsdb.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\manifest.json
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\background.html
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\content.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\lsdb.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\manifest.json
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\srGcsUe.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\background.html
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\content.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\hdC.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\lsdb.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\background.html
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\content.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\jP8Nec2nu09.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\background.html
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\content.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\w.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\background.html
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\content.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\GIL.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\background.html
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\content.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\ymwbS4Wd0.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\background.html
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\content.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\WG4Mp3w.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\background.html
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\content.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\kO3n4hM.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\background.html
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\content.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\ydOAm3UbFoTo.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\background.html
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\content.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\GKey5nK7akm.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\background.html
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\content.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\YWkiqLsR.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\background.html
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\content.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\lv0W8Xv.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\background.html
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\content.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\newtab.html
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\zU_pK9RKrgQ.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\B9LYiA.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\background.html
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\content.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\background.html
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\content.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\srGcsUe.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\background.html
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\content.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\hdC.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\background.html
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\content.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\jP8Nec2nu09.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\background.html
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\content.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\w.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\background.html
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\content.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\GIL.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\background.html
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\content.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\ymwbS4Wd0.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\background.html
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\content.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\WG4Mp3w.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\background.html
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\content.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\kO3n4hM.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\background.html
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\content.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\ydOAm3UbFoTo.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\background.html
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\content.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\GKey5nK7akm.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\background.html
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\content.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\YWkiqLsR.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\background.html
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\content.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\lv0W8Xv.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\background.html
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\content.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\newtab.html
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\zU_pK9RKrgQ.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\B9LYiA.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\background.html
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\content.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\background.html
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\content.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\srGcsUe.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\background.html
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\content.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\hdC.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\manifest.json
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\background.html
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\content.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\jP8Nec2nu09.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\lsdb.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\manifest.json
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\background.html
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\content.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\lsdb.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\manifest.json
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\w.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\background.html
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\content.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\GIL.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\lsdb.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\manifest.json
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\background.html
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\content.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\lsdb.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\manifest.json
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\ymwbS4Wd0.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\background.html
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\content.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\lsdb.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\manifest.json
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\WG4Mp3w.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\background.html
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\content.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\kO3n4hM.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\lsdb.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\manifest.json
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\background.html
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\content.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\lsdb.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\manifest.json
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\ydOAm3UbFoTo.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\background.html
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\content.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\GKey5nK7akm.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\lsdb.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\manifest.json
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\background.html
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\content.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\lsdb.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\manifest.json
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\YWkiqLsR.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\background.html
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\content.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\lsdb.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\lv0W8Xv.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\manifest.json
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\background.html
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\content.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\lsdb.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\manifest.json
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\newtab.html
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\zU_pK9RKrgQ.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\B9LYiA.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\background.html
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\content.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\lsdb.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\manifest.json
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\background.html
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\content.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\lsdb.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\manifest.json
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\srGcsUe.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\background.html
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\content.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\hdC.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\lsdb.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\background.html
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\content.js
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\jP8Nec2nu09.js
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\background.html
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\content.js
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\w.js
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\background.html
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\content.js
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\GIL.js
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\background.html
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\content.js
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\ymwbS4Wd0.js
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\background.html
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\content.js
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\WG4Mp3w.js
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\background.html
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\content.js
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\kO3n4hM.js
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\background.html
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\content.js
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\YWkiqLsR.js
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\B9LYiA.js
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\background.html
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\content.js
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\background.html
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\content.js
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\srGcsUe.js
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\background.html
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\content.js
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\hdC.js
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\background.html
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\content.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\jP8Nec2nu09.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\background.html
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\content.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\w.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\background.html
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\content.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\GIL.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\background.html
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\content.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\ymwbS4Wd0.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\background.html
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\content.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\WG4Mp3w.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\background.html
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\content.js


#6 simeldorin

simeldorin
  • Topic Starter

  • Members
  • 22 posts
  • OFFLINE
  •  
  • Local time:06:45 PM

Posted 05 March 2015 - 12:41 AM

HELLO THIS IS THE LAST PART 

c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\kO3n4hM.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\background.html
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\content.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\YWkiqLsR.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\B9LYiA.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\background.html
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\content.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\background.html
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\content.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\srGcsUe.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\background.html
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\content.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\hdC.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\jP8Nec2nu09.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\w.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\GIL.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\ymwbS4Wd0.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\WG4Mp3w.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\kO3n4hM.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\YWkiqLsR.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\B9LYiA.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\srGcsUe.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\hdC.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\jP8Nec2nu09.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\w.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\GIL.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\ymwbS4Wd0.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\WG4Mp3w.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\kO3n4hM.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\YWkiqLsR.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\B9LYiA.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\srGcsUe.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\hdC.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\background.html
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\content.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\jP8Nec2nu09.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\background.html
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\content.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\w.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\background.html
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\content.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\GIL.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\background.html
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\content.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\ymwbS4Wd0.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\background.html
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\content.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\WG4Mp3w.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\background.html
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\content.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\kO3n4hM.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\background.html
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\content.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\YWkiqLsR.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\B9LYiA.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\background.html
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\content.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\background.html
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\content.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\srGcsUe.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\background.html
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\content.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\hdC.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\manifest.json
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\background.html
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\content.js
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\jP8Nec2nu09.js
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\lsdb.js
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\manifest.json
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\background.html
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\content.js
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\lsdb.js
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\manifest.json
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\w.js
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\background.html
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\content.js
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\GIL.js
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\lsdb.js
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\manifest.json
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\background.html
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\content.js
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\lsdb.js
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\manifest.json
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\ymwbS4Wd0.js
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\background.html
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\content.js
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\lsdb.js
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\manifest.json
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\WG4Mp3w.js
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\background.html
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\content.js
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\kO3n4hM.js
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\lsdb.js
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\manifest.json
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\background.html
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\content.js
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\lsdb.js
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\manifest.json
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\YWkiqLsR.js
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\B9LYiA.js
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\background.html
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\content.js
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\lsdb.js
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\manifest.json
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\background.html
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\content.js
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\lsdb.js
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\manifest.json
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\srGcsUe.js
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\background.html
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\content.js
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\hdC.js
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\lsdb.js
c:\users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\manifest.json
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\background.html
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\content.js
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\jP8Nec2nu09.js
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\lsdb.js
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\manifest.json
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\background.html
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\content.js
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\lsdb.js
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\manifest.json
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\w.js
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\background.html
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\content.js
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\GIL.js
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\lsdb.js
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\manifest.json
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\background.html
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\content.js
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\lsdb.js
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\manifest.json
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\ymwbS4Wd0.js
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\background.html
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\content.js
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\lsdb.js
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\manifest.json
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\WG4Mp3w.js
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\background.html
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\content.js
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\kO3n4hM.js
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\lsdb.js
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\manifest.json
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\background.html
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\content.js
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\lsdb.js
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\manifest.json
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\ydOAm3UbFoTo.js
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\background.html
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\content.js
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\GKey5nK7akm.js
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\lsdb.js
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\manifest.json
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\background.html
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\content.js
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\lsdb.js
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\manifest.json
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\YWkiqLsR.js
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\background.html
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\content.js
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\lsdb.js
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\lv0W8Xv.js
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\manifest.json
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\background.html
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\content.js
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\lsdb.js
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\manifest.json
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\newtab.html
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\zU_pK9RKrgQ.js
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\B9LYiA.js
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\background.html
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\content.js
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\lsdb.js
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\manifest.json
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\background.html
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\content.js
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\lsdb.js
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\manifest.json
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\srGcsUe.js
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\background.html
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\content.js
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\hdC.js
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\lsdb.js
c:\users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\manifest.json
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\background.html
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\content.js
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\jP8Nec2nu09.js
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\lsdb.js
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\manifest.json
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\background.html
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\content.js
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\lsdb.js
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\manifest.json
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\w.js
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\background.html
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\content.js
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\GIL.js
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\lsdb.js
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\manifest.json
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\background.html
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\content.js
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\lsdb.js
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\manifest.json
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\ymwbS4Wd0.js
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\background.html
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\content.js
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\lsdb.js
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\manifest.json
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\WG4Mp3w.js
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\background.html
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\content.js
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\kO3n4hM.js
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\lsdb.js
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\manifest.json
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\background.html
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\content.js
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\lsdb.js
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\manifest.json
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\ydOAm3UbFoTo.js
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\background.html
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\content.js
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\GKey5nK7akm.js
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\lsdb.js
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\manifest.json
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\background.html
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\content.js
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\lsdb.js
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\manifest.json
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\YWkiqLsR.js
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\background.html
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\content.js
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\lsdb.js
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\lv0W8Xv.js
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\manifest.json
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\background.html
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\content.js
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\lsdb.js
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\manifest.json
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\newtab.html
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\zU_pK9RKrgQ.js
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\B9LYiA.js
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\background.html
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\content.js
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\lsdb.js
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\manifest.json
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\background.html
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\content.js
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\lsdb.js
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\manifest.json
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\srGcsUe.js
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\background.html
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\content.js
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\hdC.js
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\lsdb.js
c:\users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\manifest.json
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpphfcjpaldmedbbomcdhgonmhjngfig
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpphfcjpaldmedbbomcdhgonmhjngfig\135\background.html
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpphfcjpaldmedbbomcdhgonmhjngfig\135\content.js
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpphfcjpaldmedbbomcdhgonmhjngfig\135\lsdb.js
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpphfcjpaldmedbbomcdhgonmhjngfig\135\M.js
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpphfcjpaldmedbbomcdhgonmhjngfig\135\manifest.json
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cagndenbadhgcbnbekngbcieojhdpjdk
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cagndenbadhgcbnbekngbcieojhdpjdk\000291.log
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cagndenbadhgcbnbekngbcieojhdpjdk\000292.ldb
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cagndenbadhgcbnbekngbcieojhdpjdk\CURRENT
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cagndenbadhgcbnbekngbcieojhdpjdk\LOCK
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cagndenbadhgcbnbekngbcieojhdpjdk\LOG
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cagndenbadhgcbnbekngbcieojhdpjdk\LOG.old
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cagndenbadhgcbnbekngbcieojhdpjdk\MANIFEST-000289
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffdeoahhgmkgbbgikfcdgpaonckpapmo
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffdeoahhgmkgbbgikfcdgpaonckpapmo\000003.log
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffdeoahhgmkgbbgikfcdgpaonckpapmo\CURRENT
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffdeoahhgmkgbbgikfcdgpaonckpapmo\LOCK
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffdeoahhgmkgbbgikfcdgpaonckpapmo\LOG
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffdeoahhgmkgbbgikfcdgpaonckpapmo\MANIFEST-000002
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gcnebnopglfkooggkolchipofaecldoi
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gcnebnopglfkooggkolchipofaecldoi\000216.ldb
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gcnebnopglfkooggkolchipofaecldoi\000232.ldb
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gcnebnopglfkooggkolchipofaecldoi\000241.ldb
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gcnebnopglfkooggkolchipofaecldoi\000254.ldb
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gcnebnopglfkooggkolchipofaecldoi\000255.log
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gcnebnopglfkooggkolchipofaecldoi\CURRENT
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gcnebnopglfkooggkolchipofaecldoi\LOCK
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gcnebnopglfkooggkolchipofaecldoi\LOG
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gcnebnopglfkooggkolchipofaecldoi\LOG.old
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gcnebnopglfkooggkolchipofaecldoi\MANIFEST-000253
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jjopkehdedepnmfkoamdppbkmddejhfo
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jjopkehdedepnmfkoamdppbkmddejhfo\000291.log
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jjopkehdedepnmfkoamdppbkmddejhfo\000292.ldb
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jjopkehdedepnmfkoamdppbkmddejhfo\CURRENT
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jjopkehdedepnmfkoamdppbkmddejhfo\LOCK
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jjopkehdedepnmfkoamdppbkmddejhfo\LOG
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jjopkehdedepnmfkoamdppbkmddejhfo\LOG.old
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jjopkehdedepnmfkoamdppbkmddejhfo\MANIFEST-000289
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mpphfcjpaldmedbbomcdhgonmhjngfig
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mpphfcjpaldmedbbomcdhgonmhjngfig\000003.log
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mpphfcjpaldmedbbomcdhgonmhjngfig\CURRENT
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mpphfcjpaldmedbbomcdhgonmhjngfig\LOCK
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mpphfcjpaldmedbbomcdhgonmhjngfig\LOG
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mpphfcjpaldmedbbomcdhgonmhjngfig\MANIFEST-000002
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\npoipahghmmcajhlnoiimdebjcnkpkbo
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\npoipahghmmcajhlnoiimdebjcnkpkbo\000216.ldb
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\npoipahghmmcajhlnoiimdebjcnkpkbo\000232.ldb
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\npoipahghmmcajhlnoiimdebjcnkpkbo\000241.ldb
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\npoipahghmmcajhlnoiimdebjcnkpkbo\000254.ldb
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\npoipahghmmcajhlnoiimdebjcnkpkbo\000255.log
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\npoipahghmmcajhlnoiimdebjcnkpkbo\CURRENT
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\npoipahghmmcajhlnoiimdebjcnkpkbo\LOCK
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\npoipahghmmcajhlnoiimdebjcnkpkbo\LOG
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\npoipahghmmcajhlnoiimdebjcnkpkbo\LOG.old
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\npoipahghmmcajhlnoiimdebjcnkpkbo\MANIFEST-000253
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oiodegeehgbiimmcjggafhncoggjjmjf
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oiodegeehgbiimmcjggafhncoggjjmjf\000003.log
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oiodegeehgbiimmcjggafhncoggjjmjf\CURRENT
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oiodegeehgbiimmcjggafhncoggjjmjf\LOCK
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oiodegeehgbiimmcjggafhncoggjjmjf\LOG
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oiodegeehgbiimmcjggafhncoggjjmjf\MANIFEST-000002
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_cagndenbadhgcbnbekngbcieojhdpjdk_0.localstorage-journal
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_cagndenbadhgcbnbekngbcieojhdpjdk_0.localstorage
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_cgbogdmdefihhljhfeiklfiedefalcde_0.localstorage-journal
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_cgbogdmdefihhljhfeiklfiedefalcde_0.localstorage
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_diddingdcmcfpjhjfeoocmdofkomhcpl_0.localstorage-journal
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_diddingdcmcfpjhjfeoocmdofkomhcpl_0.localstorage
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_eamieighfgpgbfhldhanlkcihbfgfcji_0.localstorage-journal
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_eamieighfgpgbfhldhanlkcihbfgfcji_0.localstorage
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_efakgaopdabhcfkhningfkkjfdeggdhp_0.localstorage-journal
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_efakgaopdabhcfkhningfkkjfdeggdhp_0.localstorage
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ffdeoahhgmkgbbgikfcdgpaonckpapmo_0.localstorage-journal
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ffdeoahhgmkgbbgikfcdgpaonckpapmo_0.localstorage
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_fpfmklldfnlcblofkhdeoohfppdoejdc_0.localstorage-journal
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_fpfmklldfnlcblofkhdeoohfppdoejdc_0.localstorage
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gcnebnopglfkooggkolchipofaecldoi_0.localstorage-journal
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gcnebnopglfkooggkolchipofaecldoi_0.localstorage
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_haeblpfgphkehnjjnnpljmlbfahlljhe_0.localstorage-journal
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_haeblpfgphkehnjjnnpljmlbfahlljhe_0.localstorage
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_jjopkehdedepnmfkoamdppbkmddejhfo_0.localstorage-journal
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_jjopkehdedepnmfkoamdppbkmddejhfo_0.localstorage
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_kehodepjgiiheddbihdkcgcbkeibmnij_0.localstorage-journal
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_kehodepjgiiheddbihdkcgcbkeibmnij_0.localstorage
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_lgomjifbpjfhpodjhihemafahhmegbek_0.localstorage-journal
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_lgomjifbpjfhpodjhihemafahhmegbek_0.localstorage
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_mdbbpjcnkibakkahjkhdlcajokffjjjo_0.localstorage-journal
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_mdbbpjcnkibakkahjkhdlcajokffjjjo_0.localstorage
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_mpphfcjpaldmedbbomcdhgonmhjngfig_0.localstorage-journal
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_mpphfcjpaldmedbbomcdhgonmhjngfig_0.localstorage
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_npoipahghmmcajhlnoiimdebjcnkpkbo_0.localstorage-journal
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_npoipahghmmcajhlnoiimdebjcnkpkbo_0.localstorage
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_oglbipcbkmlknhfhabolnniekmlhfoek_0.localstorage-journal
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_oglbipcbkmlknhfhabolnniekmlhfoek_0.localstorage
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ohklalhdclnhhadnfkgiffmebcolfjdd_0.localstorage-journal
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ohklalhdclnhhadnfkgiffmebcolfjdd_0.localstorage
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_oiodegeehgbiimmcjggafhncoggjjmjf_0.localstorage-journal
c:\users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_oiodegeehgbiimmcjggafhncoggjjmjf_0.localstorage
c:\users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\innoApp_iels
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\background.html
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\content.js
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\jP8Nec2nu09.js
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\lsdb.js
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\manifest.json
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\background.html
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\content.js
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\lsdb.js
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\manifest.json
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\w.js
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\background.html
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\content.js
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\GIL.js
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\lsdb.js
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\manifest.json
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\background.html
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\content.js
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\lsdb.js
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\manifest.json
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\ymwbS4Wd0.js
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\background.html
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\content.js
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\lsdb.js
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\manifest.json
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\WG4Mp3w.js
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\background.html
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\content.js
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\kO3n4hM.js
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\lsdb.js
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\manifest.json
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\background.html
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\content.js
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\lsdb.js
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\manifest.json
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\ydOAm3UbFoTo.js
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\background.html
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\content.js
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\GKey5nK7akm.js
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\lsdb.js
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\manifest.json
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\background.html
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\content.js
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\lsdb.js
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\manifest.json
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\YWkiqLsR.js
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\background.html
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\content.js
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\lsdb.js
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\lv0W8Xv.js
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\manifest.json
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\background.html
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\content.js
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\lsdb.js
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\manifest.json
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\newtab.html
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\zU_pK9RKrgQ.js
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\B9LYiA.js
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\background.html
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\content.js
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\lsdb.js
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\manifest.json
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\background.html
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\content.js
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\lsdb.js
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\manifest.json
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\srGcsUe.js
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\background.html
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\content.js
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\hdC.js
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\lsdb.js
c:\users\user\AppData\Local\Torch\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\manifest.json
c:\users\user\AppData\Roaming\dclogs
c:\users\user\AppData\Roaming\dclogs\2014-06-20-6.dc
c:\users\user\AppData\Roaming\dclogs\2014-12-20-7.dc
c:\users\user\AppData\Roaming\LiveSupport.exe_log.txt
c:\users\user\AppData\Roaming\regsvr32.exe_log.txt
c:\windows\system32\28463
c:\windows\system32\28463\YNVP.001
c:\windows\XSxS
D:\install.exe
.
.
(((((((((((((((((((((((((((((((((((((((   Drivers/Services   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_NETHFDRV
.
.
(((((((((((((((((((((((((   Files Created from 2014-12-09 to 2015-01-09  )))))))))))))))))))))))))))))))
.
.
2015-01-30 11:38 . 2015-01-30 10:55 -------- d-----w- c:\program files\Minimal Memory
2015-01-30 11:38 . 2015-01-30 10:57 -------- d-----w- c:\program files\YoutuBeAdBBlocKie
2015-01-30 11:37 . 2015-01-30 11:37 -------- d-----w- c:\programdata\cgajncpckdgiedhcmdnkjabfmakjhalg
2015-01-30 11:24 . 2015-01-30 11:24 -------- d-----w- c:\programdata\IObit
2015-01-30 11:20 . 2015-01-30 11:20 -------- d-----w- c:\programdata\REVOLT
2015-01-30 11:12 . 2015-01-30 11:12 -------- d-----w- C:\uninstall
2015-01-30 11:12 . 2015-01-30 11:12 -------- d-----w- C:\Intel
2015-01-30 11:12 . 2015-01-30 11:12 -------- d-----w- c:\program files\Microsoft Synchronization Services
2015-01-30 11:12 . 2015-01-30 11:12 -------- d-----w- c:\windows\system32\config\systemprofile\Intel
2015-01-30 11:12 . 2015-01-30 10:56 -------- d-----w- c:\programdata\Intel
2015-01-30 11:12 . 2015-01-09 19:18 -------- d-----w- c:\program files\Intel
2015-01-30 11:12 . 2015-01-30 11:12 -------- d-----w- c:\users\user\Intel
2015-01-30 11:06 . 2015-01-30 11:06 -------- d-----w- c:\programdata\fhepblpeiefakfafdolajeagkdnmemdd
2015-01-30 11:05 . 2015-01-30 11:05 -------- d-----w- c:\program files\Five Nights at Freddy's 3
2015-01-09 19:47 . 2015-01-09 19:47 -------- d-----w- c:\users\user\AppData\Roaming\Unity
2015-01-09 19:38 . 2015-01-09 19:03 -------- d-----w- c:\users\user\AppData\Roaming\.minecraft
2015-01-09 19:36 . 2015-01-09 19:36 -------- d-sh--w- c:\users\user\AppData\Local\EmieBrowserModeList
2015-01-09 19:30 . 2015-01-09 19:30 -------- d-----w- c:\users\user\AppData\Roaming\LockAP
2015-01-09 19:24 . 2015-01-09 19:24 -------- d-----w- c:\users\Default\AppData\Local\temp
2015-01-09 19:15 . 2015-01-09 19:15 -------- d-----w- c:\users\user\AppData\Roaming\Gyazo
2015-01-09 19:13 . 2015-01-09 19:13 -------- d-----w- c:\users\user\AppData\Local\Intel
2015-01-09 19:12 . 2015-01-09 19:12 -------- d-----w- c:\program files\Intel Driver Update Utility
2015-01-09 19:11 . 2015-01-09 19:26 -------- d-----w- c:\program files\GameforgeLive
2015-01-09 19:08 . 2014-12-15 02:13 9054624 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{7523DAEF-05A9-44D1-9A0B-DBE837322DB3}\mpengine.dll
2015-01-09 19:06 . 2014-08-12 01:36 701440 ----a-w- c:\windows\system32\IMJP10K.DLL
2015-01-09 19:06 . 2014-10-18 01:33 571904 ----a-w- c:\windows\system32\oleaut32.dll
2015-01-09 19:04 . 2014-10-14 01:56 136632 ----a-w- c:\windows\system32\drivers\ksecpkg.sys
2015-01-09 19:04 . 2014-10-14 01:50 523776 ----a-w- c:\windows\system32\termsrv.dll
2015-01-09 19:04 . 2014-10-14 01:50 1059840 ----a-w- c:\windows\system32\lsasrv.dll
2015-01-09 19:04 . 2014-10-14 01:47 146432 ----a-w- c:\windows\system32\msaudite.dll
2015-01-09 19:04 . 2014-10-14 01:46 681984 ----a-w- c:\windows\system32\adtschema.dll
2015-01-09 19:03 . 2014-12-19 01:34 116224 ----a-w- c:\windows\system32\drivers\mrxdav.sys
2015-01-09 19:03 . 2015-01-09 19:03 -------- d-----w- c:\program files\LogMeIn Hamachi
2015-01-09 19:02 . 2015-01-09 19:02 -------- d-----w- c:\users\user\AppData\Roaming\Opera Software
2015-01-09 19:02 . 2015-01-09 19:02 -------- d-----w- c:\users\user\AppData\Local\Opera Software
2015-01-09 19:02 . 2015-01-09 19:02 -------- d-----w- c:\program files\Opera
2015-01-09 18:53 . 2015-01-09 19:04 -------- d-----w- C:\MicroVolts Package
2014-12-20 18:59 . 2014-12-20 18:46 -------- d-----w- c:\users\user\AppData\Local\PokerStars.EU
2014-12-20 18:58 . 2014-12-20 18:59 -------- d-----w- c:\program files\PokerStars.EU
2014-12-20 18:58 . 2015-01-09 19:02 -------- d-----w- c:\program files\Highresolution Enterprises
2014-12-20 18:58 . 2014-12-20 18:58 -------- d-----w- c:\users\user\AppData\Roaming\Highresolution Enterprises
2014-12-20 18:12 . 2014-12-20 19:10 -------- d-----w- c:\users\user\AppData\Local\31793
2014-12-20 18:10 . 2014-12-20 18:10 -------- d-----w- c:\users\user\AppData\Roaming\SteelBytes
2014-12-20 18:07 . 2014-12-20 18:43 -------- d--h--w- c:\users\user\AppData\Roaming\tvsbb
2014-12-20 17:43 . 2014-12-20 17:43 -------- d-----w- C:\Sierra
.
.
.
((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-12-22 22:50 . 2014-04-16 18:54 249488 ------w- c:\windows\system32\MpSigStub.exe
2014-11-17 12:51 . 2014-04-18 06:43 71344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2014-11-17 12:51 . 2014-04-18 06:43 701104 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2014-10-30 17:20 . 2014-05-09 10:51 75064 ----a-w- c:\windows\system32\PnkBstrA.exe
2014-10-25 16:24 . 2014-10-25 16:24 1837296 ----a-w- c:\windows\system32\WUDFUpdate_01009.dll
2014-10-25 10:09 . 2014-09-06 13:21 96680 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2014-10-19 13:54 . 2014-11-07 13:45 447752 ----a-w- c:\windows\system32\vp6vfw.dll
.
.
(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ AccExtIco1]
@="{AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47}"
[HKEY_CLASSES_ROOT\CLSID\{AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47}]
2014-09-26 12:40 1029280 ----a-w- c:\program files\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x86.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ AccExtIco2]
@="{853B7E05-C47D-4985-909A-D0DC5C6D7303}"
[HKEY_CLASSES_ROOT\CLSID\{853B7E05-C47D-4985-909A-D0DC5C6D7303}]
2014-09-26 12:40 1029280 ----a-w- c:\program files\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x86.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ AccExtIco3]
@="{42D38F2E-98E9-4382-B546-E24E4D6D04BB}"
[HKEY_CLASSES_ROOT\CLSID\{42D38F2E-98E9-4382-B546-E24E4D6D04BB}]
2014-09-26 12:40 1029280 ----a-w- c:\program files\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x86.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]
@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"
[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
2014-07-07 07:09 223432 ----a-w- c:\users\user\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]
@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"
[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
2014-07-07 07:09 223432 ----a-w- c:\users\user\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]
@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"
[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
2014-07-07 07:09 223432 ----a-w- c:\users\user\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ftweak_RAMRush"="c:\program files\RAMRush\RAMRush.exe" [2009-09-17 670720]
"uTorrent"="c:\users\user\AppData\Roaming\uTorrent\uTorrent.exe" [2015-01-09 1742928]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2015-01-23 31087200]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2013-01-15 146032]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2013-01-15 181360]
"Persistence"="c:\windows\system32\igfxpers.exe" [2013-01-15 190064]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2014-10-07 507776]
"RazerCortex"="c:\program files\Razer\Razer Cortex\RazerCortex.exe" [2014-08-28 60640]
"AdobeAAMUpdater-1.0"="c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2014-10-14 557768]
"Adobe Creative Cloud"="c:\program files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" [2014-10-15 2694320]
"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-09-13 59720]
"BlueStacks Agent"="c:\program files\BlueStacks\HD-Agent.exe" [2014-10-07 843480]
"Raptr"="c:\progra~1\Raptr\raptrstub.exe" [2015-02-27 55568]
"LogMeIn Hamachi Ui"="c:\program files\LogMeIn Hamachi\hamachi-2-ui.exe" [2014-12-13 3838800]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\tcpip\parameters\persistentroutes]
"173.245.61.58,255.255.255.255,192.168.10.101,1"=""
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ    autocheck autochk *\0sh4native Sh4Removal
.
[HKLM\~\startupfolder\C:^Users^user^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^MyPC Backup.lnk]
backupExtension=.Startup
path=c:\users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
backup=c:\windows\pss\MyPC Backup.lnk.Startup
.
[HKLM\~\startupfolder\C:^Users^user^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^TornTvDownloader.lnk]
backupExtension=.Startup
path=c:\users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TornTvDownloader.lnk
backup=c:\windows\pss\TornTvDownloader.lnk.Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Creative Cloud]
2014-10-15 18:33 2694320 ----a-w- c:\program files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0]
2014-10-14 03:34 557768 ----a-w- c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitTorrent]
2014-05-16 13:10 1639760 ----a-w- c:\users\user\AppData\Roaming\BitTorrent\BitTorrent.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\egui]
2013-09-12 09:06 5110672 ----a-w- c:\program files\ESET\ESET NOD32 Antivirus\egui.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PWRISOVM.EXE]
2014-06-27 06:59 366904 ----a-w- c:\program files\PowerISO\PWRISOVM.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Raptr]
2015-02-27 19:21 55568 ----a-w- c:\progra~1\Raptr\raptrstub.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RazerCortex]
2014-08-28 06:59 60640 ----a-w- c:\program files\Razer\Razer Cortex\RazerCortex.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
2015-01-23 12:40 31087200 ----a-r- c:\program files\Skype\Phone\Skype.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent]
2015-01-09 18:53 1742928 ----a-w- c:\users\user\AppData\Roaming\uTorrent\uTorrent.exe
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" -autorun
"LiveSupport"="c:\program files\LiveSupport\LiveSupport.exe" /noshow /log
"RGSC"=d:\gfh\Rockstar Games Social Club\RGSCLauncher.exe /silent
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe"
.
R2 BstHdAndroidSvc;BlueStacks Android Service;c:\program files\BlueStacks\HD-Service.exe BstHdAndroidSvc Android [x]
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2015-01-02 315488]
R3 asmthub3;ASMedia USB3 Hub Service;c:\windows\system32\drivers\asmthub3.sys [2012-11-08 110920]
R3 asmtxhci;ASMEDIA XHCI Service;c:\windows\system32\drivers\asmtxhci.sys [2012-11-08 333128]
R3 b06diag;Broadcom NetXtreme II Diag Driver;c:\windows\system32\drivers\bxdiagx.sys [2012-03-08 75816]
R3 BFN7x86;Bigfoot Networks Killer Gaming Service;c:\windows\system32\drivers\Xeno7x86.sys [2012-02-22 130152]
R3 bxfcoe;bxfcoe;c:\windows\system32\drivers\bxfcoe.sys [2012-02-22 150568]
R3 bxois;bxois;c:\windows\system32\drivers\bxois.sys [2012-02-22 435240]
R3 CEDRIVER60;CEDRIVER60;c:\program files\Cheat Engine 6.4\dbk32.sys [2014-06-20 82880]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [2010-11-20 62464]
R3 EagleXNt;EagleXNt;c:\windows\system32\drivers\EagleXNt.sys [x]
R3 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [2013-09-17 188808]
R3 esgiguard;esgiguard;c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
R3 EtronHub3;Etron USB 3.0 Extensible Hub Driver;c:\windows\System32\Drivers\EtronHub3.sys [2012-07-24 65152]
R3 EtronSTOR;Etron Enhance USB BOT/UASP Mass Storage Driver;c:\windows\System32\Drivers\EtronSTOR.sys [2012-07-24 32512]
R3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver;c:\windows\System32\Drivers\EtronXHCI.sys [2012-07-24 88832]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2014-11-22 102912]
R3 iusb3hub;Intel® USB 3.0 Hub Driver;c:\windows\system32\drivers\iusb3hub.sys [2012-12-21 359560]
R3 iusb3xhc;Intel® USB 3.0 eXtensible Host Controller Driver;c:\windows\system32\drivers\iusb3xhc.sys [2012-12-21 792712]
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\drivers\nusb3hub.sys [2011-10-25 73984]
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\drivers\nusb3xhc.sys [2011-10-25 165120]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 14848]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2013-10-02 49152]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-20 27264]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [2014-05-03 1343400]
R3 WinRing0_1_2_0;WinRing0_1_2_0;c:\program files\IObit\Game Booster 3\Driver\WinRing0.sys [x]
R3 XDva409;XDva409;c:\users\user\AppData\Local\Temp\DinD50A.tmp [x]
R3 XDva413;XDva413; [x]
R4 Util innoApp;Util innoApp; [x]
S0 iaStorA;iaStorA;c:\windows\system32\DRIVERS\iaStorA.sys [2012-11-19 525880]
S0 iaStorF;iaStorF;c:\windows\system32\DRIVERS\iaStorF.sys [2012-11-19 25656]
S1 {2b929fe1-284b-4766-afb9-19b0915b99b0}Gw;{2b929fe1-284b-4766-afb9-19b0915b99b0}Gw;c:\windows\system32\drivers\{2b929fe1-284b-4766-afb9-19b0915b99b0}Gw.sys [2014-08-21 52416]
S1 {2b929fe1-284b-4766-afb9-19b0915b99b0}w;{2b929fe1-284b-4766-afb9-19b0915b99b0}w;c:\windows\system32\drivers\{2b929fe1-284b-4766-afb9-19b0915b99b0}w.sys [2014-08-22 52416]
S1 {3c3ae2b4-4a36-40c4-a356-ffc1820b7ece}w;{3c3ae2b4-4a36-40c4-a356-ffc1820b7ece}w;c:\windows\system32\drivers\{3c3ae2b4-4a36-40c4-a356-ffc1820b7ece}w.sys [2014-09-27 43192]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2014-04-17 243128]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2013-09-17 134248]
S2 BstHdDrv;BlueStacks Hypervisor;c:\program files\BlueStacks\HD-Hypervisor-x86.sys [2014-10-07 112344]
S2 BstHdLogRotatorSvc;BlueStacks Log Rotator Service;c:\program files\BlueStacks\HD-LogRotatorService.exe [2014-10-07 388824]
S2 BstHdUpdaterSvc;BlueStacks Updater Service;c:\program files\BlueStacks\HD-UpdaterService.exe [2014-10-07 782040]
S2 c2cautoupdatesvc;Skype Click to Call Updater;c:\program files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2014-07-14 1390176]
S2 c2cpnrsvc;Skype Click to Call PNR Service;c:\program files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2014-07-14 1767520]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [2013-09-12 1337752]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [2013-09-17 122376]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files\LogMeIn Hamachi\hamachi-2.exe [2014-12-13 1895760]
S2 iocbios2;iocbios2;c:\program files\Intel\Extreme Tuning Utility\Drivers\IocDriver\32bit\iocbios2.sys [2014-06-17 27376]
S2 LMIGuardianSvc;LMIGuardianSvc;c:\program files\LogMeIn Hamachi\LMIGuardianSvc.exe [2014-12-02 411920]
S2 RzKLService;RzKLService;c:\program files\Razer\Razer Cortex\RzKLService.exe [2014-08-28 105448]
S2 TeamViewer9;TeamViewer 9;c:\program files\TeamViewer\Version9\TeamViewer_Service.exe [2014-09-12 4799760]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files\TuneUp Utilities 2014\TuneUpUtilitiesService32.exe [2014-07-16 1781048]
S2 XTU3SERVICE;Intel® Extreme Tuning Utility Service;c:\program files\Intel\Extreme Tuning Utility\XtuService.exe [2014-09-29 18384]
S3 ICCWDT;Intel® Watchdog Timer Driver (Intel® WDT);c:\windows\system32\DRIVERS\ICCWDT.sys [2013-08-12 23512]
S3 L1C;NDIS Miniport Driver for Qualcomm Atheros AR81xx PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x86.sys [2012-07-19 99992]
S3 MEI;Intel® Management Engine Interface ;c:\windows\system32\DRIVERS\TeeDriver.sys [2014-06-16 109056]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\TuneUp Utilities 2014\TuneUpUtilitiesDriver32.sys [2014-06-23 12320]
S3 XSplit_Dummy;XSplit  Stream  Audio  Renderer;c:\windows\system32\drivers\xspltspk.sys [2014-07-02 22104]
.
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-11-17 12:56 1089352 ----a-w- c:\program files\Google\Chrome\Application\38.0.2125.122\Installer\chrmstp.exe
.
Contents of the 'Scheduled Tasks' folder
.
2015-01-09 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-04-18 12:51]
.
2015-01-09 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2014-11-17 12:55]
.
2015-01-09 c:\windows\Tasks\GoogleUpdateTaskMachineUA1cf7375258eafb9.job
- c:\program files\Google\Update\GoogleUpdate.exe [2014-11-17 12:55]
.
2015-01-09 c:\windows\Tasks\powersuite_monitor.job
- c:\program files\Uniblue\Powersuite\powersuite_monitor.exe [2014-10-25 08:06]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.com
mStart Page = hxxp://www.google.com
uInternet Settings,ProxyOverride = <local>
IE: {{07BA1DA9-F501-4796-8728-74D1B91A6CD5} - c:\program files\PokerStars.EU\PokerStarsUpdate.exe
FF - ProfilePath - 
.
- - - - ORPHANS REMOVED - - - -
.
HKCU-Run-SPDriver - c:\program files\ShopperPro\JSDriver\1.37.0.1391\jsdrv.exe
HKCU-Run-YTDownloader - c:\program files\YTDownloader\YTDownloader.exe
HKCU-Run-LiveSupport - c:\program files\LiveSupport\LiveSupport.exe
HKCU-Run-Minecraft Tweaker Updater - c:\users\user\AppData\Roaming\.minecraft\MinecraftTweakerUpdater.exe
HKLM-Run-YTDownloader - c:\program files\YTDownloader\YTDownloader.exe
MSConfigStartUp-AppsHat - c:\users\user\AppData\Local\WebPlayer\AppsHat\WebPlayer.exe
MSConfigStartUp-Optimizer Pro - c:\program files\Optimizer Pro\OptProLauncher.exe
MSConfigStartUp-se - c:\users\user\AppData\Roaming\SkypEmoticons\SE.exe
MSConfigStartUp-SPDriver - c:\program files\ShopperPro\JSDriver\1.37.0.1374\jsdrv.exe
MSConfigStartUp-Steam - d:\steam\Steam.exe
MSConfigStartUp-TornTv Downloader - c:\users\user\AppData\Roaming\TornTV.com\Torntv Downloader.exe
MSConfigStartUp-YTDownloader - c:\program files\YTDownloader\YTDownloader.exe
AddRemove-Call of Duty Advanced Warfare_is1 - d:\call of duty advanced warfare\unins000.exe
AddRemove-Fraps - d:\fraps\uninstall.exe
AddRemove-GTA San Andreas_is1 - d:\gta san andreas999999\unins000.exe
AddRemove-Hitman Absolution_is1 - d:\hitman absolution\unins000.exe
AddRemove-Minecraft1.7.2 - c:\users\user\AppData\Roaming\.minecraft\minecraft launcher\Uninstall.exe
AddRemove-Steam App 219640 - d:\steam\steam.exe
AddRemove-Steam App 291480 - d:\steam\steam.exe
AddRemove-Steam App 440 - d:\steam\steam.exe
AddRemove-Winamp - c:\program files\Winamp\UninstWA.exe
AddRemove-{317D8BB4-16C3-CFBD-3777-AED69667DA46} - c:\programdata\NetoCoupon\Jbj8xbH9Z9mh9T.exe
AddRemove-{5F189DF5-2D05-472B-9091-84D9848AE48B}{c67abfdb} - c:\progra~1\SW-BOO~1\ASSIST~1.DLL
AddRemove-{6428D19C-67AF-44FB-9496-E255C5D1E553}_is1 - c:\users\user\AppData\Roaming\.minecraft\unins000.exe
AddRemove-{8FB91814-FE42-4B62-9B54-4B677A420715}_is1 - d:\gta san andreas999999\unins001.exe
AddRemove-{BE360B8B-0F10-CA89-FC84-A5EAB71A6AF8} - c:\programdata\RoboSaver\52heDtKSjWdAAW.exe
AddRemove-{D081C29C-1DDC-4C55-BCBF-DF8519636331}_is1 - d:\bioshock infinite\Uninstall\unins000.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\XDva409]
"ImagePath"="\??\c:\users\user\AppData\Local\Temp\DinD50A.tmp"
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_USERS\S-1-5-21-1601848376-2192148879-720690555-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.Email.1"
.
[HKEY_USERS\S-1-5-21-1601848376-2192148879-720690555-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.VCard.1"
.
[HKEY_USERS\S-1-5-21-1601848376-2192148879-720690555-1000\Software\SecuROM\License information*]
"datasecu"=hex:a7,81,c6,05,51,47,78,e9,d5,5e,a3,d9,01,be,62,9f,b9,4a,d9,a6,ac,
   14,03,2a,dc,cb,e1,2b,bf,2e,e0,1e,1f,80,3d,f4,1c,92,c9,62,f1,b6,8e,eb,5a,89,\
"rkeysecu"=hex:01,34,44,4d,f4,69,b9,ed,58,b1,ca,47,e8,6a,a6,db
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
--------------------- DLLs Loaded Under Running Processes ---------------------
.
- - - - - - - > 'Explorer.exe'(5968)
c:\program files\Razer\Razer Cortex\K_FPS.dll
c:\windows\system32\FXSRESM.DLL
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\taskhost.exe
d:\ggg\fraps\fraps.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\program files\TuneUp Utilities 2014\TuneUpUtilitiesApp32.exe
c:\windows\system32\conhost.exe
c:\program files\Razer\Razer Cortex\main.exe
c:\program files\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
c:\program files\Uniblue\Powersuite\powersuite.exe
c:\progra~1\Raptr\raptr.exe
c:\program files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
c:\windows\system32\sppsvc.exe
c:\progra~1\Raptr\raptr_im.exe
c:\program files\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe
c:\windows\system32\rundll32.exe
c:\windows\system32\rundll32.exe
c:\windows\system32\WerFault.exe
.
**************************************************************************
.
Completion time: 2015-01-09  20:58:18 - machine was rebooted
ComboFix-quarantined-files.txt  2015-01-09 18:58
.
Pre-Run: 22,770,421,760 bytes free
Post-Run: 22,551,945,216 bytes free
.
- - End Of File - - 7B32A7BC46ED58B346CBDA5AAEF376DC
A36C5E4F47E84449FF07ED3517B43A31


#7 olgun52

olgun52

  • Malware Response Team
  • 3,783 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:45 PM

Posted 05 March 2015 - 12:51 PM

H simeldorin,

 

Chrome
Chrome - Reset browser settings
 

Step 1:
Combofix scripting
1. Close any open browsers.
2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
3. Download the attached txt.gif  CFScript.txt  1.33KB 0 downloads and save it to the location where Combofix is.

CFScriptB-4.gif

Refering to the picture above, drag CFScript into ComboFix.exe
When finished, it shall produce a log for you at C:\ComboFix.txt which I will require in your next reply.
 
Step 2:
Scan with Malwarebytes Antimalware:

Please download Malwarebytes Anti-Malware to your desktop.

  • Double-click the downloaded setup file and follow the prompts to install the program.
  • At the end, be sure a checkmark is placed next to the following:
  • Launch Malwarebytes Anti-Malware
  • A 14 day trial of the Premium features is pre-selected. You may deselect this if you wish, and it will not diminish the scanning and removal capabilities of the program.
  • Click Finish.

If the program is already installed:

  • Run Malwarebytes Antimalware
  • On the Dashboard, click the 'Update Now >>' link
  • After the update completes, click the 'Scan Now >>' button.
  • Or, on the Dashboard, click the Scan Now >> button.
  • If an update is available, click the Update Now button.
  • A Threat Scan will begin.
  • When the scan is complete, if there have been detections, click Apply Actions to allow MBAM to clean what was detected.
  • In most cases, a restart will be required.
  • Wait for the prompt to restart the computer to appear, then click on Yes.
  • After the restart once you are back at your desktop, open MBAM once more.
  • Click on the History tab > Application Logs.
  • Double click on the scan log which shows the Date and time of the scan just performed.
  • Click 'Copy to Clipboard'
  • Paste the contents of the clipboard into your reply

Step 3:
Scan with ESET Online Scan

Please go to here to run the online scannner from ESET.

  • Turn off the real time scanner of any existing antivirus program while performing the online scan
  • Tick the box next to YES, I accept the Terms of Use.
  • Click Start
  • When asked, allow the activex control to install
  • Click Start
  • Make sure that the option Remove found threats is unticked
  • Click on Advanced Settings and ensure these options are ticked:
    • Scan for potentially unwanted applications
    • Scan for potentially unsafe applications
    • Enable Anti-Stealth Technology
  • Click Scan
  • Wait for the scan to finish
  • If any threats were found, click the 'List of found threats' , then click Export to text file....
  • Save it to your desktop, then please copy and paste that log as a reply to this topic.

-------------------------------------------

 

How is your PC running now ?

 

Have a nice great.

Attached Files


Best regards
 
paypal.gif
If you wish to show appreciation and support me personally fighting against malware, then you can consider a donation. Thank you. :thumbup2:
Malware fix forum
If I don't reply within 24 hours please PM me!

 


 


#8 simeldorin

simeldorin
  • Topic Starter

  • Members
  • 22 posts
  • OFFLINE
  •  
  • Local time:06:45 PM

Posted 06 March 2015 - 08:09 AM

thx work verryyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyy....yyyyyy good this is the last combofix report please check 

ComboFix 15-03-01.01 - user 01/09/2015  21:01:16.2.2 - x86
Microsoft Windows 7 Professional   6.1.7601.1.1252.1.1033.18.3470.1938 [GMT 2:00]
Running from: c:\users\user\Downloads\ComboFix.exe
Command switches used :: c:\users\user\Desktop\CFScript.txt
SP: ESET NOD32 Antivirus 7.0 *Disabled/Updated* {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\program files\IObit\Game Booster 3\Driver\WinRing0.sys"
"c:\program files\TuneUp Utilities 2014\TuneUpUtilitiesApp32.exe"
"c:\program files\TuneUp Utilities 2014\TuneUpUtilitiesDriver32.sys"
"c:\program files\TuneUp Utilities 2014\TuneUpUtilitiesService32.exe"
"c:\users\user\AppData\Local\Temp\DinD50A.tmp"
"c:\windows\system32\drivers\{2b929fe1-284b-4766-afb9-19b0915b99b0}w.sys"
"c:\windows\system32\drivers\{3c3ae2b4-4a36-40c4-a356-ffc1820b7ece}w.sys"
.
.
(((((((((((((((((((((((((((((((((((((((   Other Deletions   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\dxtory software
c:\program files\dxtory software\Dxtory2.0\DxtoryLicenceFile.dxtorylic
c:\programdata\cgajncpckdgiedhcmdnkjabfmakjhalg
c:\programdata\cgajncpckdgiedhcmdnkjabfmakjhalg\background.html
c:\programdata\cgajncpckdgiedhcmdnkjabfmakjhalg\content.js
c:\programdata\cgajncpckdgiedhcmdnkjabfmakjhalg\lsdb.js
c:\programdata\cgajncpckdgiedhcmdnkjabfmakjhalg\manifest.json
c:\programdata\cgajncpckdgiedhcmdnkjabfmakjhalg\VyddvX.js
c:\programdata\fhepblpeiefakfafdolajeagkdnmemdd
c:\programdata\fhepblpeiefakfafdolajeagkdnmemdd\background.html
c:\programdata\fhepblpeiefakfafdolajeagkdnmemdd\content.js
c:\programdata\fhepblpeiefakfafdolajeagkdnmemdd\dNG2wtOk.js
c:\programdata\fhepblpeiefakfafdolajeagkdnmemdd\lsdb.js
c:\programdata\fhepblpeiefakfafdolajeagkdnmemdd\manifest.json
c:\programdata\IObit
c:\programdata\IObit\Game Booster 3\Defrags.ini
c:\programdata\IObit\Game Booster 3\GameBooster.ini
c:\programdata\IObit\Game Booster 3\TweaksBackup.reg
c:\users\user\AppData\Roaming\Gyazo
c:\users\user\AppData\Roaming\Gyazo\id.txt
.
.
(((((((((((((((((((((((((((((((((((((((   Drivers/Services   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_ESGIGUARD
-------\Legacy_TUNEUPUTILITIESDRV
-------\Legacy_WINRING0_1_2_0
-------\Legacy_XDVA409
-------\Legacy_XDVA413
-------\Legacy_{2B929FE1-284B-4766-AFB9-19B0915B99B0}W
-------\Legacy_{3C3AE2B4-4A36-40C4-A356-FFC1820B7ECE}W
-------\Service_{2b929fe1-284b-4766-afb9-19b0915b99b0}w
-------\Service_{3c3ae2b4-4a36-40c4-a356-ffc1820b7ece}w
-------\Service_esgiguard
-------\Service_Util innoApp
-------\Service_WinRing0_1_2_0
-------\Service_XDva409
-------\Service_XDva413
.
.
(((((((((((((((((((((((((   Files Created from 2014-12-09 to 2015-01-09  )))))))))))))))))))))))))))))))
.
.
2015-01-30 11:38 . 2015-01-30 10:55 -------- d-----w- c:\program files\Minimal Memory
2015-01-30 11:38 . 2015-01-30 10:57 -------- d-----w- c:\program files\YoutuBeAdBBlocKie
2015-01-30 11:20 . 2015-01-30 11:20 -------- d-----w- c:\programdata\REVOLT
2015-01-30 11:12 . 2015-01-30 11:12 -------- d-----w- C:\uninstall
2015-01-30 11:12 . 2015-01-30 11:12 -------- d-----w- C:\Intel
2015-01-30 11:12 . 2015-01-30 11:12 -------- d-----w- c:\program files\Microsoft Synchronization Services
2015-01-30 11:12 . 2015-01-30 11:12 -------- d-----w- c:\windows\system32\config\systemprofile\Intel
2015-01-30 11:12 . 2015-01-30 10:56 -------- d-----w- c:\programdata\Intel
2015-01-30 11:12 . 2015-01-09 19:18 -------- d-----w- c:\program files\Intel
2015-01-30 11:12 . 2015-01-30 11:12 -------- d-----w- c:\users\user\Intel
2015-01-30 11:05 . 2015-01-30 11:05 -------- d-----w- c:\program files\Five Nights at Freddy's 3
2015-01-09 19:47 . 2015-01-09 19:47 -------- d-----w- c:\users\user\AppData\Roaming\Unity
2015-01-09 19:38 . 2015-01-09 19:03 -------- d-----w- c:\users\user\AppData\Roaming\.minecraft
2015-01-09 19:36 . 2015-01-09 19:36 -------- d-sh--w- c:\users\user\AppData\Local\EmieBrowserModeList
2015-01-09 19:30 . 2015-01-09 19:30 -------- d-----w- c:\users\user\AppData\Roaming\LockAP
2015-01-09 19:13 . 2015-01-09 19:13 -------- d-----w- c:\users\user\AppData\Local\Intel
2015-01-09 19:12 . 2015-01-09 19:12 -------- d-----w- c:\program files\Intel Driver Update Utility
2015-01-09 19:11 . 2015-01-09 19:11 -------- d-----w- c:\users\HomeGroupUser$\AppData\Local\temp
2015-01-09 19:11 . 2015-01-09 19:11 -------- d-----w- c:\users\Guest\AppData\Local\temp
2015-01-09 19:08 . 2014-12-15 02:13 9054624 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{7523DAEF-05A9-44D1-9A0B-DBE837322DB3}\mpengine.dll
2015-01-09 19:06 . 2014-08-12 01:36 701440 ----a-w- c:\windows\system32\IMJP10K.DLL
2015-01-09 19:06 . 2014-10-18 01:33 571904 ----a-w- c:\windows\system32\oleaut32.dll
2015-01-09 19:04 . 2014-10-14 01:56 136632 ----a-w- c:\windows\system32\drivers\ksecpkg.sys
2015-01-09 19:04 . 2014-10-14 01:50 523776 ----a-w- c:\windows\system32\termsrv.dll
2015-01-09 19:04 . 2014-10-14 01:50 1059840 ----a-w- c:\windows\system32\lsasrv.dll
2015-01-09 19:04 . 2014-10-14 01:47 146432 ----a-w- c:\windows\system32\msaudite.dll
2015-01-09 19:04 . 2014-10-14 01:46 681984 ----a-w- c:\windows\system32\adtschema.dll
2015-01-09 19:03 . 2014-12-19 01:34 116224 ----a-w- c:\windows\system32\drivers\mrxdav.sys
2015-01-09 19:03 . 2015-01-09 19:03 -------- d-----w- c:\program files\LogMeIn Hamachi
2015-01-09 19:02 . 2015-01-09 19:02 -------- d-----w- c:\users\user\AppData\Roaming\Opera Software
2015-01-09 19:02 . 2015-01-09 19:02 -------- d-----w- c:\users\user\AppData\Local\Opera Software
2015-01-09 19:02 . 2015-01-09 19:02 -------- d-----w- c:\program files\Opera
2015-01-09 18:53 . 2015-01-09 19:04 -------- d-----w- C:\MicroVolts Package
2014-12-20 18:59 . 2014-12-20 18:46 -------- d-----w- c:\users\user\AppData\Local\PokerStars.EU
2014-12-20 18:58 . 2014-12-20 18:59 -------- d-----w- c:\program files\PokerStars.EU
2014-12-20 18:58 . 2015-01-09 19:02 -------- d-----w- c:\program files\Highresolution Enterprises
2014-12-20 18:58 . 2014-12-20 18:58 -------- d-----w- c:\users\user\AppData\Roaming\Highresolution Enterprises
2014-12-20 18:12 . 2014-12-20 19:10 -------- d-----w- c:\users\user\AppData\Local\31793
2014-12-20 18:10 . 2014-12-20 18:10 -------- d-----w- c:\users\user\AppData\Roaming\SteelBytes
2014-12-20 18:07 . 2014-12-20 18:43 -------- d--h--w- c:\users\user\AppData\Roaming\tvsbb
2014-12-20 17:43 . 2014-12-20 17:43 -------- d-----w- C:\Sierra
.
.
.
((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-12-22 22:50 . 2014-04-16 18:54 249488 ------w- c:\windows\system32\MpSigStub.exe
2014-11-17 12:51 . 2014-04-18 06:43 71344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2014-11-17 12:51 . 2014-04-18 06:43 701104 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2014-10-30 17:20 . 2014-05-09 10:51 75064 ----a-w- c:\windows\system32\PnkBstrA.exe
2014-10-25 16:24 . 2014-10-25 16:24 1837296 ----a-w- c:\windows\system32\WUDFUpdate_01009.dll
2014-10-25 10:09 . 2014-09-06 13:21 96680 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2014-10-19 13:54 . 2014-11-07 13:45 447752 ----a-w- c:\windows\system32\vp6vfw.dll
.
.
((((((((((((((((((((((((((((((((((((((((((((   Look   )))))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
---- Directory of c:\users\user\AppData\Local\31793 ----
.
2014-12-20 18:12 . 2014-12-20 18:12 1216 ----a-w- c:\users\user\AppData\Local\31793\Updater.xml
2014-12-20 18:12 . 2014-12-20 18:12 1 ----a-w- c:\users\user\AppData\Local\31793\status.cfg
.
.
(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ AccExtIco1]
@="{AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47}"
[HKEY_CLASSES_ROOT\CLSID\{AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47}]
2014-09-26 12:40 1029280 ----a-w- c:\program files\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x86.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ AccExtIco2]
@="{853B7E05-C47D-4985-909A-D0DC5C6D7303}"
[HKEY_CLASSES_ROOT\CLSID\{853B7E05-C47D-4985-909A-D0DC5C6D7303}]
2014-09-26 12:40 1029280 ----a-w- c:\program files\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x86.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ AccExtIco3]
@="{42D38F2E-98E9-4382-B546-E24E4D6D04BB}"
[HKEY_CLASSES_ROOT\CLSID\{42D38F2E-98E9-4382-B546-E24E4D6D04BB}]
2014-09-26 12:40 1029280 ----a-w- c:\program files\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x86.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]
@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"
[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
2014-07-07 07:09 223432 ----a-w- c:\users\user\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]
@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"
[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
2014-07-07 07:09 223432 ----a-w- c:\users\user\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]
@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"
[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
2014-07-07 07:09 223432 ----a-w- c:\users\user\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ftweak_RAMRush"="c:\program files\RAMRush\RAMRush.exe" [2009-09-17 670720]
"uTorrent"="c:\users\user\AppData\Roaming\uTorrent\uTorrent.exe" [2015-01-09 1742928]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2015-01-23 31087200]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2013-01-15 146032]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2013-01-15 181360]
"Persistence"="c:\windows\system32\igfxpers.exe" [2013-01-15 190064]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2014-10-07 507776]
"RazerCortex"="c:\program files\Razer\Razer Cortex\RazerCortex.exe" [2014-08-28 60640]
"AdobeAAMUpdater-1.0"="c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2014-10-14 557768]
"Adobe Creative Cloud"="c:\program files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" [2014-10-15 2694320]
"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-09-13 59720]
"BlueStacks Agent"="c:\program files\BlueStacks\HD-Agent.exe" [2014-10-07 843480]
"Raptr"="c:\progra~1\Raptr\raptrstub.exe" [2015-02-27 55568]
"LogMeIn Hamachi Ui"="c:\program files\LogMeIn Hamachi\hamachi-2-ui.exe" [2014-12-13 3838800]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\tcpip\parameters\persistentroutes]
"173.245.61.58,255.255.255.255,192.168.10.101,1"=""
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ   autocheck autochk *\0sh4native Sh4Removal
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Creative Cloud]
2014-10-15 18:33 2694320 ----a-w- c:\program files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0]
2014-10-14 03:34 557768 ----a-w- c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitTorrent]
2014-05-16 13:10 1639760 ----a-w- c:\users\user\AppData\Roaming\BitTorrent\BitTorrent.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\egui]
2013-09-12 09:06 5110672 ----a-w- c:\program files\ESET\ESET NOD32 Antivirus\egui.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PWRISOVM.EXE]
2014-06-27 06:59 366904 ----a-w- c:\program files\PowerISO\PWRISOVM.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Raptr]
2015-02-27 19:21 55568 ----a-w- c:\progra~1\Raptr\raptrstub.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RazerCortex]
2014-08-28 06:59 60640 ----a-w- c:\program files\Razer\Razer Cortex\RazerCortex.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
2015-01-23 12:40 31087200 ----a-r- c:\program files\Skype\Phone\Skype.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent]
2015-01-09 18:53 1742928 ----a-w- c:\users\user\AppData\Roaming\uTorrent\uTorrent.exe
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" -autorun
"LiveSupport"="c:\program files\LiveSupport\LiveSupport.exe" /noshow /log
"RGSC"=d:\gfh\Rockstar Games Social Club\RGSCLauncher.exe /silent
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe"
.
R2 BstHdAndroidSvc;BlueStacks Android Service;c:\program files\BlueStacks\HD-Service.exe BstHdAndroidSvc Android [x]
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2015-01-02 315488]
R3 asmthub3;ASMedia USB3 Hub Service;c:\windows\system32\drivers\asmthub3.sys [2012-11-08 110920]
R3 asmtxhci;ASMEDIA XHCI Service;c:\windows\system32\drivers\asmtxhci.sys [2012-11-08 333128]
R3 b06diag;Broadcom NetXtreme II Diag Driver;c:\windows\system32\drivers\bxdiagx.sys [2012-03-08 75816]
R3 BFN7x86;Bigfoot Networks Killer Gaming Service;c:\windows\system32\drivers\Xeno7x86.sys [2012-02-22 130152]
R3 bxfcoe;bxfcoe;c:\windows\system32\drivers\bxfcoe.sys [2012-02-22 150568]
R3 bxois;bxois;c:\windows\system32\drivers\bxois.sys [2012-02-22 435240]
R3 CEDRIVER60;CEDRIVER60;c:\program files\Cheat Engine 6.4\dbk32.sys [2014-06-20 82880]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [2010-11-20 62464]
R3 EagleXNt;EagleXNt;c:\windows\system32\drivers\EagleXNt.sys [x]
R3 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [2013-09-17 188808]
R3 EtronHub3;Etron USB 3.0 Extensible Hub Driver;c:\windows\System32\Drivers\EtronHub3.sys [2012-07-24 65152]
R3 EtronSTOR;Etron Enhance USB BOT/UASP Mass Storage Driver;c:\windows\System32\Drivers\EtronSTOR.sys [2012-07-24 32512]
R3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver;c:\windows\System32\Drivers\EtronXHCI.sys [2012-07-24 88832]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2014-11-22 102912]
R3 iusb3hub;Intel® USB 3.0 Hub Driver;c:\windows\system32\drivers\iusb3hub.sys [2012-12-21 359560]
R3 iusb3xhc;Intel® USB 3.0 eXtensible Host Controller Driver;c:\windows\system32\drivers\iusb3xhc.sys [2012-12-21 792712]
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\drivers\nusb3hub.sys [2011-10-25 73984]
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\drivers\nusb3xhc.sys [2011-10-25 165120]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 14848]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2013-10-02 49152]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-20 27264]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [2014-05-03 1343400]
S0 iaStorA;iaStorA;c:\windows\system32\DRIVERS\iaStorA.sys [2012-11-19 525880]
S0 iaStorF;iaStorF;c:\windows\system32\DRIVERS\iaStorF.sys [2012-11-19 25656]
S1 {2b929fe1-284b-4766-afb9-19b0915b99b0}Gw;{2b929fe1-284b-4766-afb9-19b0915b99b0}Gw;c:\windows\system32\drivers\{2b929fe1-284b-4766-afb9-19b0915b99b0}Gw.sys [2014-08-21 52416]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2014-04-17 243128]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2013-09-17 134248]
S2 BstHdDrv;BlueStacks Hypervisor;c:\program files\BlueStacks\HD-Hypervisor-x86.sys [2014-10-07 112344]
S2 BstHdLogRotatorSvc;BlueStacks Log Rotator Service;c:\program files\BlueStacks\HD-LogRotatorService.exe [2014-10-07 388824]
S2 BstHdUpdaterSvc;BlueStacks Updater Service;c:\program files\BlueStacks\HD-UpdaterService.exe [2014-10-07 782040]
S2 c2cautoupdatesvc;Skype Click to Call Updater;c:\program files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2014-07-14 1390176]
S2 c2cpnrsvc;Skype Click to Call PNR Service;c:\program files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2014-07-14 1767520]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [2013-09-12 1337752]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [2013-09-17 122376]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files\LogMeIn Hamachi\hamachi-2.exe [2014-12-13 1895760]
S2 iocbios2;iocbios2;c:\program files\Intel\Extreme Tuning Utility\Drivers\IocDriver\32bit\iocbios2.sys [2014-06-17 27376]
S2 LMIGuardianSvc;LMIGuardianSvc;c:\program files\LogMeIn Hamachi\LMIGuardianSvc.exe [2014-12-02 411920]
S2 RzKLService;RzKLService;c:\program files\Razer\Razer Cortex\RzKLService.exe [2014-08-28 105448]
S2 TeamViewer9;TeamViewer 9;c:\program files\TeamViewer\Version9\TeamViewer_Service.exe [2014-09-12 4799760]
S2 XTU3SERVICE;Intel® Extreme Tuning Utility Service;c:\program files\Intel\Extreme Tuning Utility\XtuService.exe [2014-09-29 18384]
S3 ICCWDT;Intel® Watchdog Timer Driver (Intel® WDT);c:\windows\system32\DRIVERS\ICCWDT.sys [2013-08-12 23512]
S3 L1C;NDIS Miniport Driver for Qualcomm Atheros AR81xx PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x86.sys [2012-07-19 99992]
S3 MEI;Intel® Management Engine Interface ;c:\windows\system32\DRIVERS\TeeDriver.sys [2014-06-16 109056]
S3 XSplit_Dummy;XSplit  Stream  Audio  Renderer;c:\windows\system32\drivers\xspltspk.sys [2014-07-02 22104]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-11-17 12:56 1089352 ----a-w- c:\program files\Google\Chrome\Application\38.0.2125.122\Installer\chrmstp.exe
.
Contents of the 'Scheduled Tasks' folder
.
2015-01-09 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-04-18 12:51]
.
2015-01-09 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2014-11-17 12:55]
.
2015-01-09 c:\windows\Tasks\GoogleUpdateTaskMachineUA1cf7375258eafb9.job
- c:\program files\Google\Update\GoogleUpdate.exe [2014-11-17 12:55]
.
2015-01-09 c:\windows\Tasks\powersuite_monitor.job
- c:\program files\Uniblue\Powersuite\powersuite_monitor.exe [2014-10-25 08:06]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.com
mStart Page = hxxp://www.google.com
uInternet Settings,ProxyOverride = <local>
IE: {{07BA1DA9-F501-4796-8728-74D1B91A6CD5} - c:\program files\PokerStars.EU\PokerStarsUpdate.exe
FF - ProfilePath - 
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_USERS\S-1-5-21-1601848376-2192148879-720690555-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.Email.1"
.
[HKEY_USERS\S-1-5-21-1601848376-2192148879-720690555-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.VCard.1"
.
[HKEY_USERS\S-1-5-21-1601848376-2192148879-720690555-1000\Software\SecuROM\License information*]
"datasecu"=hex:a7,81,c6,05,51,47,78,e9,d5,5e,a3,d9,01,be,62,9f,b9,4a,d9,a6,ac,
   14,03,2a,dc,cb,e1,2b,bf,2e,e0,1e,1f,80,3d,f4,1c,92,c9,62,f1,b6,8e,eb,5a,89,\
"rkeysecu"=hex:01,34,44,4d,f4,69,b9,ed,58,b1,ca,47,e8,6a,a6,db
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
--------------------- DLLs Loaded Under Running Processes ---------------------
.
- - - - - - - > 'Explorer.exe'(4764)
c:\program files\Razer\Razer Cortex\K_FPS.dll
c:\program files\Razer\Razer Cortex\d3dx9_43.dll
c:\program files\Razer\Razer Cortex\d3dx10_43.dll
c:\program files\Razer\Razer Cortex\d3dx11_43.dll
c:\program files\Razer\Razer Cortex\D3DX8Wrapper.dll
c:\program files\Razer\Razer Cortex\D3DCOMPILER_43.dll
c:\windows\system32\OPENGL32.dll
c:\windows\system32\GLU32.dll
c:\program files\Razer\Razer Cortex\EasyHook32.dll
c:\progra~1\Raptr\ltc_help32-93154.dll
c:\windows\System32\SyncCenter.dll
c:\windows\system32\FXSRESM.DLL
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\taskhost.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\windows\System32\WUDFHost.exe
c:\windows\system32\conhost.exe
c:\program files\Razer\Razer Cortex\main.exe
c:\program files\Uniblue\Powersuite\powersuite.exe
c:\program files\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\windows\system32\DllHost.exe
c:\progra~1\Raptr\raptr.exe
c:\program files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
c:\program files\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe
c:\progra~1\Raptr\raptr_im.exe
c:\windows\system32\sppsvc.exe
c:\windows\system32\DllHost.exe
c:\windows\system32\rundll32.exe
c:\windows\system32\rundll32.exe
c:\windows\system32\WerFault.exe
.
**************************************************************************
.
Completion time: 2015-01-09  20:57:47 - machine was rebooted
ComboFix-quarantined-files.txt  2015-01-09 18:57
ComboFix2.txt  2015-01-09 18:58
.
Pre-Run: 22,166,986,752 bytes free
Post-Run: 21,985,828,864 bytes free
.
- - End Of File - - 7CEB8B02BBBB012BB488508C20A5AC95
A36C5E4F47E84449FF07ED3517B43A31


#9 olgun52

olgun52

  • Malware Response Team
  • 3,783 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:45 PM

Posted 06 March 2015 - 08:37 AM

I am wait others the Logs.


Best regards
 
paypal.gif
If you wish to show appreciation and support me personally fighting against malware, then you can consider a donation. Thank you. :thumbup2:
Malware fix forum
If I don't reply within 24 hours please PM me!

 


 


#10 simeldorin

simeldorin
  • Topic Starter

  • Members
  • 22 posts
  • OFFLINE
  •  
  • Local time:06:45 PM

Posted 06 March 2015 - 08:39 AM

this is 2nd log
Malwarebytes Anti-Malware
www.malwarebytes.org
 
Scan Date: 1/9/2015
Scan Time: 9:03:19 PM
Logfile: 
Administrator: Yes
 
Version: 2.00.4.1028
Malware Database: v2014.11.20.06
Rootkit Database: v2015.02.25.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled
 
OS: Windows 7 Service Pack 1
CPU: x86
File System: NTFS
User: user
 
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 367918
Time Elapsed: 19 min, 1 sec
 
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled
 
Processes: 0
(No malicious items detected)
 
Modules: 0
(No malicious items detected)
 
Registry Keys: 15
PUP.Optional.Outbrowse, HKLM\SOFTWARE\CLASSES\CLSID\{6D4506CE-F855-4657-AA38-DB6B1F733982}, Quarantined, [22e441fd3f3de5514f1b698fbf436d93], 
PUP.Optional.Outbrowse, HKLM\SOFTWARE\CLASSES\TYPELIB\{03771AEF-400D-4A13-B712-25878EC4A3F5}, Quarantined, [22e441fd3f3de5514f1b698fbf436d93], 
PUP.Optional.Sanbreel.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\{2b929fe1-284b-4766-afb9-19b0915b99b0}Gw, Quarantined, [c73fee502755c96df8952c208b78d32d], 
PUP.Optional.HQVideo.A, HKLM\SOFTWARE\HQ-Video-Pro-2.1cV02.11, Quarantined, [61a592acc6b6a294d101f0c16c9849b7], 
PUP.Optional.TornTV.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\TornTv Downloader, Quarantined, [0df9112dd8a4c2746ab801370ff4fc04], 
PUP.Optional.AppsHat.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Apps Hat, Quarantined, [699d77c7c7b546f0ffa2f776f50eb34d], 
PUP.Optional.GeForce.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Ge-Force, Quarantined, [ba4cc07e94e8c1755ad80ca10301c13f], 
PUP.Optional.HQVideo.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\HQ-Video-Pro-2.1cV02.11, Quarantined, [f2140f2f394383b35183426fee166e92], 
PUP.Optional.SavePass.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\SavePass 1.1, Quarantined, [27dfdd613e3ec4728666d7712ad9d030], 
PUP.Optional.TornTV.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\TheTorntv V10, Quarantined, [7a8c81bd94e86fc7a3e3d06ebe45a060], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1601848376-2192148879-720690555-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\esc, Quarantined, [6a9c2618493342f4c0a0dfce37cd13ed], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1601848376-2192148879-720690555-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\HQ-VideoV02.11, Quarantined, [d13505390d6fda5cb214b88f798a867a], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1601848376-2192148879-720690555-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\Nero, Quarantined, [cb3b99a53f3d1323f63182226d9702fe], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1601848376-2192148879-720690555-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\OB, Quarantined, [d630ba84b0ccb482916a68df9b6843bd], 
PUP.Optional.WebPlayer.A, HKU\S-1-5-21-1601848376-2192148879-720690555-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\WEBPLAYER, Quarantined, [ab5b17275725270fbb06430c13f03ec2], 
 
Registry Values: 2
PUP.Optional.WebSearchInfo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {BB74DE59-BC4C-4172-9AC4-73315F71CFFE}, Quarantined, [19ed16285b21a2946c98f8b852b2f40c]
PUP.Optional.WebPlayer.A, HKU\S-1-5-21-1601848376-2192148879-720690555-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\WEBPLAYER|AppsHat, 1, Quarantined, [ab5b17275725270fbb06430c13f03ec2]
 
Registry Data: 0
(No malicious items detected)
 
Folders: 9
PUP.Optional.Booster.A, C:\ProgramData\AppSnow\SO_Booster, Quarantined, [f115e35be79542f4fd57041b5ba88f71], 
PUP.Optional.Booster.A, C:\ProgramData\AppSnow\SO_Booster\2355932470, Quarantined, [f115e35be79542f4fd57041b5ba88f71], 
PUP.Optional.MultiPlug.A, C:\ProgramData\YoutubeAdBlocke, Quarantined, [d2347cc2b6c641f5de7ab76a4eb5768a], 
PUP.Optional.Booster.A, C:\ProgramData\BlueOcean\SO_Booster, Quarantined, [15f154ea621a4de9bbd769bd9073d62a], 
PUP.Optional.BlueOcean.A, C:\ProgramData\BlueOcean\Setup, Quarantined, [64a28faf97e5da5c8e4d5ecddb2839c7], 
PUP.Optional.GoSave.A, C:\ProgramData\GoSave, Quarantined, [d333a995ccb056e0964f1c13e61d4db3], 
PUP.Optional.GoSave.A, C:\Program Files\GoSave, Quarantined, [957183bbc4b8072f8c5ae34c3bc819e7], 
PUP.Optional.CrossRider.A, C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\edjkooiccbgjhlpfhkknkjhfpmjkmelk, Quarantined, [66a07ac43e3e1125091a87aa0bf812ee], 
PUP.Optional.HQVideo.A, C:\Program Files\HQ-Video-Pro-2.1cV02.11, Quarantined, [7096eb53e19bd165ebee7cb538cbe41c], 
 
Files: 29
PUP.Optional.OpenCandy, C:\Users\user\AppData\Roaming\PowerISO\Upgrade\PowerISO6.exe, Quarantined, [b1553a047efe11251de9690cca3b8080], 
Trojan.Autoit, C:\Users\user\Desktop\Minecraft Premium Account Generator.exe, Quarantined, [35d1003e5527cb6b33bd3eaecc3506fa], 
PUP.Optional.MultiPlug, C:\Users\user\Downloads\Five Nights at Freddys Full Game PC Downloader.exe, Quarantined, [a066d46a314bdd59197b48962dd4a15f], 
PUP.RiskwareTool.CK, C:\Users\user\Downloads\Adobe CC 2014 KEYGEN - Windows.rar, Quarantined, [51b57bc3e89490a64378f5b853af966a], 
PUP.Optional.OutBrowse, C:\Users\user\Downloads\Adobe Photoshop CC Crack.rar, Quarantined, [a264d36b88f43303895a0fc0a65b956b], 
RiskWare.Tool.HCK, C:\Users\user\Downloads\patch.rar, Quarantined, [23e32e10e894e25416f30153eb17dc24], 
PUP.Optional.Amonetize, C:\Users\user\Downloads\Setup Five Nights at Freddys Full by R.G V1.13__6431_il415.exe, Quarantined, [897de35be09c201612a0ca15c839cb35], 
PUP.Optional.MultiPlug, C:\Users\user\Downloads\Free Download Mirillis Action! 1.7.3.0 Full Patch.exe, Quarantined, [ab5bb28ca0dcc2742b699c42e31e40c0], 
PUP.Optional.DLSecure.A, C:\Users\user\Downloads\dlsecureTb_1.0.1.5.exe, Quarantined, [7f8741fd1963fa3c5bf2c00f659c7090], 
Backdoor.Agent.DCRSAGen, C:\Users\user\Downloads\[www.fisierulmeu.ro] havij premium 2014 update(1).exe, Quarantined, [897dec52502c9c9af32ffeaec53b4ab6], 
Backdoor.Agent.DCRSAGen, C:\Users\user\Downloads\[www.fisierulmeu.ro] havij premium 2014 update.exe, Quarantined, [bc4afd416c10fc3a1909eac2738d817f], 
PUP.Optional.InstalleRex, C:\Users\user\Downloads\_i class=_fa fa-download____i_ Server Download.exe, Quarantined, [35d194aa6418b284ae334f80b051748c], 
PUP.Optional.MultiPlug, C:\Users\user\Downloads\Crack and Setup (1).exe, Quarantined, [91750a344a32f145efa525b9c73aa25e], 
PUP.Optional.MultiPlug, C:\Users\user\Downloads\Crack and Setup.exe, Quarantined, [26e046f8ea92dc5aff958559e71a946c], 
PUP.Optional.Softonic, C:\Users\user\Downloads\SoftonicDownloader_for_quicktime.exe, Quarantined, [74929ca227550234f88f23379f61c23e], 
PUP.Optional.Sanbreel.A, C:\Windows\System32\drivers\{2b929fe1-284b-4766-afb9-19b0915b99b0}Gw.sys, Quarantined, [c73fee502755c96df8952c208b78d32d], 
PUP.Optional.Sanbreel.A, C:\Windows\System32\drivers\{2b929fe1-284b-4766-afb9-19b0915b99b0}w.sys, Quarantined, [44c2201ea0dcaa8c2dc1634852b23fc1], 
PUP.Optional.Sanbreel.A, C:\Windows\System32\drivers\{3c3ae2b4-4a36-40c4-a356-ffc1820b7ece}w.sys, Quarantined, [b353da641e5e46f0b539d6d5e61e22de], 
PUP.Optional.CrossRider.A, C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_edjkooiccbgjhlpfhkknkjhfpmjkmelk_0.localstorage, Quarantined, [57af1e20126a3df9b687b7fa7094fc04], 
PUP.Optional.CrossRider.A, C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_edjkooiccbgjhlpfhkknkjhfpmjkmelk_0.localstorage-journal, Quarantined, [40c652ec215b3204c578c6ebd92ba55b], 
PUP.Optional.Booster.A, C:\ProgramData\AppSnow\SO_Booster\2355932470.ini, Quarantined, [f115e35be79542f4fd57041b5ba88f71], 
PUP.Optional.CrossRider.A, C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\edjkooiccbgjhlpfhkknkjhfpmjkmelk\000005.ldb, Quarantined, [66a07ac43e3e1125091a87aa0bf812ee], 
PUP.Optional.CrossRider.A, C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\edjkooiccbgjhlpfhkknkjhfpmjkmelk\000017.ldb, Quarantined, [66a07ac43e3e1125091a87aa0bf812ee], 
PUP.Optional.CrossRider.A, C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\edjkooiccbgjhlpfhkknkjhfpmjkmelk\000018.log, Quarantined, [66a07ac43e3e1125091a87aa0bf812ee], 
PUP.Optional.CrossRider.A, C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\edjkooiccbgjhlpfhkknkjhfpmjkmelk\CURRENT, Quarantined, [66a07ac43e3e1125091a87aa0bf812ee], 
PUP.Optional.CrossRider.A, C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\edjkooiccbgjhlpfhkknkjhfpmjkmelk\LOCK, Quarantined, [66a07ac43e3e1125091a87aa0bf812ee], 
PUP.Optional.CrossRider.A, C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\edjkooiccbgjhlpfhkknkjhfpmjkmelk\LOG, Quarantined, [66a07ac43e3e1125091a87aa0bf812ee], 
PUP.Optional.CrossRider.A, C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\edjkooiccbgjhlpfhkknkjhfpmjkmelk\LOG.old, Quarantined, [66a07ac43e3e1125091a87aa0bf812ee], 
PUP.Optional.CrossRider.A, C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\edjkooiccbgjhlpfhkknkjhfpmjkmelk\MANIFEST-000016, Quarantined, [66a07ac43e3e1125091a87aa0bf812ee], 
 
Physical Sectors: 0
(No malicious items detected)
 
 
(end)


#11 simeldorin

simeldorin
  • Topic Starter

  • Members
  • 22 posts
  • OFFLINE
  •  
  • Local time:06:45 PM

Posted 06 March 2015 - 10:07 AM

i cant give you the eset log i cant scan 2 hours :) sorry

but i try sunday



#12 olgun52

olgun52

  • Malware Response Team
  • 3,783 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:45 PM

Posted 06 March 2015 - 10:40 AM

i cant give you the eset log i cant scan 2 hours :) sorry

but i try sunday

Okay. i am wite.


Best regards
 
paypal.gif
If you wish to show appreciation and support me personally fighting against malware, then you can consider a donation. Thank you. :thumbup2:
Malware fix forum
If I don't reply within 24 hours please PM me!

 


 


#13 simeldorin

simeldorin
  • Topic Starter

  • Members
  • 22 posts
  • OFFLINE
  •  
  • Local time:06:45 PM

Posted 08 March 2015 - 05:09 AM

this is the last log i stay for this 20:30 hours !!!!!! serious twenty hours for a scan???????????

C:\Program Files\Cheat Engine 6.4\standalonephase1.dat a variant of Win32/HackTool.CheatEngine.AF potentially unsafe application
C:\Program Files\programe si fisiere\Cheat Engine 6.3\cheatengine-i386.exe a variant of Win32/HackTool.CheatEngine.AB potentially unsafe application
C:\Program Files\programe si fisiere\Cheat Engine 6.3\standalonephase1.dat a variant of Win32/HackTool.CheatEngine.AF potentially unsafe application
C:\Program Files\programe si fisiere\NCH Software\ExpressBurn\expressburn.exe a variant of Win32/Bundled.Toolbar.Google.C potentially unsafe application
C:\Program Files\programe si fisiere\NCH Software\ExpressBurn\expressburnsetup_v4.68.exe a variant of Win32/Bundled.Toolbar.Google.C potentially unsafe application
C:\Program Files\Sony\Vegas Pro 11.0\Keygen.exe a variant of Win32/Keygen.HU potentially unsafe application
C:\ProgramData\bjpdngmpnmhllkoikdhakofagejplpgj\content.js JS/Chromex.Agent.L trojan
C:\ProgramData\bjpdngmpnmhllkoikdhakofagejplpgj\QXOPY0liT.js JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\ProgramData\cgajncpckdgiedhcmdnkjabfmakjhalg\content.js.vir JS/Chromex.Agent.L trojan
C:\Qoobox\Quarantine\C\ProgramData\cgajncpckdgiedhcmdnkjabfmakjhalg\lsdb.js.vir JS/Adware.MultiPlug.B application
C:\Qoobox\Quarantine\C\ProgramData\cgajncpckdgiedhcmdnkjabfmakjhalg\VyddvX.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\ProgramData\fhepblpeiefakfafdolajeagkdnmemdd\dNG2wtOk.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\jP8Nec2nu09.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\lsdb.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\w.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\GIL.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\content.js.vir JS/Chromex.Agent.L trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\ymwbS4Wd0.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\lsdb.js.vir JS/Adware.MultiPlug.B application
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\WG4Mp3w.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\content.js.vir JS/Adware.MultiPlug.B application
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\kO3n4hM.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\YWkiqLsR.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\B9LYiA.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\lsdb.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\content.js.vir JS/Chromex.Agent.L trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\srGcsUe.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\hdC.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\jP8Nec2nu09.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\lsdb.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\w.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\GIL.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\content.js.vir JS/Chromex.Agent.L trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\ymwbS4Wd0.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\lsdb.js.vir JS/Adware.MultiPlug.B application
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\WG4Mp3w.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\content.js.vir JS/Adware.MultiPlug.B application
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\kO3n4hM.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\ydOAm3UbFoTo.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\GKey5nK7akm.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\YWkiqLsR.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\lv0W8Xv.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\zU_pK9RKrgQ.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\B9LYiA.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\lsdb.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\content.js.vir JS/Chromex.Agent.L trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\srGcsUe.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\hdC.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\jP8Nec2nu09.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\lsdb.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\w.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\GIL.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\content.js.vir JS/Chromex.Agent.L trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\ymwbS4Wd0.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\lsdb.js.vir JS/Adware.MultiPlug.B application
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\WG4Mp3w.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\content.js.vir JS/Adware.MultiPlug.B application
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\kO3n4hM.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\ydOAm3UbFoTo.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\GKey5nK7akm.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\YWkiqLsR.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\lv0W8Xv.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\zU_pK9RKrgQ.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\B9LYiA.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\lsdb.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\content.js.vir JS/Chromex.Agent.L trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\srGcsUe.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\hdC.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\jP8Nec2nu09.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\lsdb.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\w.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\GIL.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\content.js.vir JS/Chromex.Agent.L trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\ymwbS4Wd0.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\lsdb.js.vir JS/Adware.MultiPlug.B application
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\WG4Mp3w.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\content.js.vir JS/Adware.MultiPlug.B application
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\kO3n4hM.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\ydOAm3UbFoTo.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\GKey5nK7akm.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\YWkiqLsR.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\lv0W8Xv.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\zU_pK9RKrgQ.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\B9LYiA.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\lsdb.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\content.js.vir JS/Chromex.Agent.L trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\srGcsUe.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\hdC.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\jP8Nec2nu09.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\lsdb.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\w.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\GIL.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\content.js.vir JS/Chromex.Agent.L trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\ymwbS4Wd0.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\lsdb.js.vir JS/Adware.MultiPlug.B application
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\WG4Mp3w.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\content.js.vir JS/Adware.MultiPlug.B application
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\kO3n4hM.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\ydOAm3UbFoTo.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\GKey5nK7akm.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\YWkiqLsR.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\lv0W8Xv.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\zU_pK9RKrgQ.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\B9LYiA.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\lsdb.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\content.js.vir JS/Chromex.Agent.L trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\srGcsUe.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\hdC.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\jP8Nec2nu09.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\lsdb.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\w.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\GIL.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\content.js.vir JS/Chromex.Agent.L trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\ymwbS4Wd0.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\lsdb.js.vir JS/Adware.MultiPlug.B application
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\WG4Mp3w.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\content.js.vir JS/Adware.MultiPlug.B application
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\kO3n4hM.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\YWkiqLsR.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\B9LYiA.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\lsdb.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\content.js.vir JS/Chromex.Agent.L trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\srGcsUe.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\hdC.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\jP8Nec2nu09.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\lsdb.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\w.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\GIL.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\content.js.vir JS/Chromex.Agent.L trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\ymwbS4Wd0.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\lsdb.js.vir JS/Adware.MultiPlug.B application
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\WG4Mp3w.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\content.js.vir JS/Adware.MultiPlug.B application
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\kO3n4hM.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\ydOAm3UbFoTo.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\GKey5nK7akm.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\YWkiqLsR.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\lv0W8Xv.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\zU_pK9RKrgQ.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\B9LYiA.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\lsdb.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\content.js.vir JS/Chromex.Agent.L trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\srGcsUe.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\hdC.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\jP8Nec2nu09.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\lsdb.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\w.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\GIL.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\content.js.vir JS/Chromex.Agent.L trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\ymwbS4Wd0.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\lsdb.js.vir JS/Adware.MultiPlug.B application
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\WG4Mp3w.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\content.js.vir JS/Adware.MultiPlug.B application
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\kO3n4hM.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\ydOAm3UbFoTo.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\GKey5nK7akm.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\YWkiqLsR.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\lv0W8Xv.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\zU_pK9RKrgQ.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\B9LYiA.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\lsdb.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\content.js.vir JS/Chromex.Agent.L trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\srGcsUe.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\hdC.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\jP8Nec2nu09.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\lsdb.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\w.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\GIL.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\content.js.vir JS/Chromex.Agent.L trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\ymwbS4Wd0.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\lsdb.js.vir JS/Adware.MultiPlug.B application
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\WG4Mp3w.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\content.js.vir JS/Adware.MultiPlug.B application
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\kO3n4hM.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\ydOAm3UbFoTo.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\GKey5nK7akm.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\YWkiqLsR.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\lv0W8Xv.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\zU_pK9RKrgQ.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\B9LYiA.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\lsdb.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\content.js.vir JS/Chromex.Agent.L trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\srGcsUe.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\hdC.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Torch\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\jP8Nec2nu09.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Torch\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\lsdb.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Torch\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\w.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Torch\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\GIL.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Torch\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\content.js.vir JS/Chromex.Agent.L trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Torch\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\ymwbS4Wd0.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Torch\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\lsdb.js.vir JS/Adware.MultiPlug.B application
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Torch\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\WG4Mp3w.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Torch\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\content.js.vir JS/Adware.MultiPlug.B application
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Torch\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\kO3n4hM.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Torch\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\ydOAm3UbFoTo.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Torch\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\GKey5nK7akm.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Torch\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\YWkiqLsR.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Torch\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\lv0W8Xv.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Torch\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\zU_pK9RKrgQ.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Torch\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\B9LYiA.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Torch\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\lsdb.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Torch\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\content.js.vir JS/Chromex.Agent.L trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Torch\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\srGcsUe.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\Guest\AppData\Local\Torch\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\hdC.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\jP8Nec2nu09.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\lsdb.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\w.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\GIL.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\content.js.vir JS/Chromex.Agent.L trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\ymwbS4Wd0.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\lsdb.js.vir JS/Adware.MultiPlug.B application
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\WG4Mp3w.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\content.js.vir JS/Adware.MultiPlug.B application
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\kO3n4hM.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\YWkiqLsR.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\B9LYiA.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\lsdb.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\content.js.vir JS/Chromex.Agent.L trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\srGcsUe.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\hdC.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\jP8Nec2nu09.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\lsdb.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\w.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\GIL.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\content.js.vir JS/Chromex.Agent.L trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\ymwbS4Wd0.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\lsdb.js.vir JS/Adware.MultiPlug.B application
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\WG4Mp3w.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\content.js.vir JS/Adware.MultiPlug.B application
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\kO3n4hM.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\YWkiqLsR.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\B9LYiA.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\lsdb.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\content.js.vir JS/Chromex.Agent.L trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\srGcsUe.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\hdC.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\jP8Nec2nu09.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\lsdb.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\w.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\GIL.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\content.js.vir JS/Chromex.Agent.L trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\ymwbS4Wd0.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\lsdb.js.vir JS/Adware.MultiPlug.B application
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\WG4Mp3w.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\content.js.vir JS/Adware.MultiPlug.B application
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\kO3n4hM.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\YWkiqLsR.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\B9LYiA.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\lsdb.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\content.js.vir JS/Chromex.Agent.L trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\srGcsUe.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\hdC.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\jP8Nec2nu09.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\lsdb.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\w.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\GIL.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\content.js.vir JS/Chromex.Agent.L trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\ymwbS4Wd0.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\lsdb.js.vir JS/Adware.MultiPlug.B application
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\WG4Mp3w.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\content.js.vir JS/Adware.MultiPlug.B application
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\kO3n4hM.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\YWkiqLsR.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\B9LYiA.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\lsdb.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\content.js.vir JS/Chromex.Agent.L trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\srGcsUe.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\hdC.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\jP8Nec2nu09.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\lsdb.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\w.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\GIL.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\content.js.vir JS/Chromex.Agent.L trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\ymwbS4Wd0.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\lsdb.js.vir JS/Adware.MultiPlug.B application
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\WG4Mp3w.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\content.js.vir JS/Adware.MultiPlug.B application
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\kO3n4hM.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\YWkiqLsR.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\B9LYiA.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\lsdb.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\content.js.vir JS/Chromex.Agent.L trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\srGcsUe.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\hdC.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\jP8Nec2nu09.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\lsdb.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\w.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\GIL.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\content.js.vir JS/Chromex.Agent.L trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\ymwbS4Wd0.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\lsdb.js.vir JS/Adware.MultiPlug.B application
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\WG4Mp3w.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\content.js.vir JS/Adware.MultiPlug.B application
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\kO3n4hM.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\YWkiqLsR.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\B9LYiA.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\lsdb.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\content.js.vir JS/Chromex.Agent.L trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\srGcsUe.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Chromatic Browser\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\hdC.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\jP8Nec2nu09.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\lsdb.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\w.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\GIL.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\content.js.vir JS/Chromex.Agent.L trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\ymwbS4Wd0.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\lsdb.js.vir JS/Adware.MultiPlug.B application
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\WG4Mp3w.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\content.js.vir JS/Adware.MultiPlug.B application
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\kO3n4hM.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\ydOAm3UbFoTo.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\GKey5nK7akm.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\YWkiqLsR.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\lv0W8Xv.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\zU_pK9RKrgQ.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\B9LYiA.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\lsdb.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\content.js.vir JS/Chromex.Agent.L trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\srGcsUe.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\hdC.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpphfcjpaldmedbbomcdhgonmhjngfig\135\content.js.vir JS/Chromex.Agent.L trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpphfcjpaldmedbbomcdhgonmhjngfig\135\lsdb.js.vir JS/Adware.MultiPlug.B application
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpphfcjpaldmedbbomcdhgonmhjngfig\135\M.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\jP8Nec2nu09.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\lsdb.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\w.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\GIL.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\content.js.vir JS/Chromex.Agent.L trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\ymwbS4Wd0.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\lsdb.js.vir JS/Adware.MultiPlug.B application
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\WG4Mp3w.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\content.js.vir JS/Adware.MultiPlug.B application
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\kO3n4hM.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\ydOAm3UbFoTo.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\GKey5nK7akm.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\YWkiqLsR.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\lv0W8Xv.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\zU_pK9RKrgQ.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\B9LYiA.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\lsdb.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\content.js.vir JS/Chromex.Agent.L trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\srGcsUe.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\hdC.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Torch\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\jP8Nec2nu09.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Torch\User Data\Default\Extensions\ahbfdplhlopcimefiglpimmeangghiao\2.14\lsdb.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Torch\User Data\Default\Extensions\bckemcnabhkhmllcfnffikphkndehmab\2.0\w.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Torch\User Data\Default\Extensions\bekfkbeohbfeaeiabghlgbpggmbnmdbg\2.0\GIL.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Torch\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\content.js.vir JS/Chromex.Agent.L trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Torch\User Data\Default\Extensions\bnllfjlpolnjddlpepplnjmgemahdncp\2.14\ymwbS4Wd0.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Torch\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\lsdb.js.vir JS/Adware.MultiPlug.B application
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Torch\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde\177\WG4Mp3w.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Torch\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\content.js.vir JS/Adware.MultiPlug.B application
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Torch\User Data\Default\Extensions\cieldmgdpoplldomgoohieaokdnnhggk\2.0\kO3n4hM.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Torch\User Data\Default\Extensions\dbhhnnnpaeobfddmlalhnehgclcmjimi\133\ydOAm3UbFoTo.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Torch\User Data\Default\Extensions\djgigbalihkpejpbjoeblfglpeenkhpe\1.0\GKey5nK7akm.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Torch\User Data\Default\Extensions\fhpmcflbjjoahbaonbmcngfkbjfohnpo\2.0\YWkiqLsR.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Torch\User Data\Default\Extensions\homimlgobcecacdobjidnjjbfnnaafcm\5.14\lv0W8Xv.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Torch\User Data\Default\Extensions\ioakbgbgafaloeplaekcbnhphcfkjlhg\2.1\zU_pK9RKrgQ.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Torch\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\B9LYiA.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Torch\User Data\Default\Extensions\jjldbdpinlfepilkcniicjhmkfnflebl\2.14\lsdb.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Torch\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\content.js.vir JS/Chromex.Agent.L trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Torch\User Data\Default\Extensions\ldgohlicpfnebbajeafkaahojigpmofd\2.14\srGcsUe.js.vir JS/Kryptik.ATB trojan
C:\Qoobox\Quarantine\C\Users\user\AppData\Local\Torch\User Data\Default\Extensions\oglbipcbkmlknhfhabolnniekmlhfoek\154\hdC.js.vir JS/Kryptik.ATB trojan
C:\Users\All Users\bjpdngmpnmhllkoikdhakofagejplpgj\content.js JS/Chromex.Agent.L trojan
C:\Users\All Users\bjpdngmpnmhllkoikdhakofagejplpgj\QXOPY0liT.js JS/Kryptik.ATB trojan
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\DY76Y44R\cryptnet32-dll[1].htm HTML/ScrInject.B.Gen virus
C:\Users\user\AppData\Roaming\DownloadManager\Loader.exe a variant of Win32/Adware.OxyPumper.D application
C:\Users\user\AppData\Roaming\tvsbb\clqnx.uww Win32/Injector.Autoit.AZK trojan
C:\Users\user\AppData\Roaming\tvsbb\IHAKD Win32/Injector.Autoit.AZK trojan
C:\Users\user\AppData\Roaming\tvsbb\WBAMN Win32/Injector.Autoit.AZK trojan
C:\Users\user\Desktop\EggCrack.exe a variant of MSIL/Injector.FBN trojan
C:\Users\user\Desktop\Leis\Leis.exe a variant of Win32/GameHack.BB potentially unsafe application
C:\Windows\KJ\BIOS.EXE Win32/HackTool.SLICMod.C potentially unsafe application
C:\Windows\KJ\K.J_12.exe Win32/HackTool.SLICMod.C potentially unsafe application
C:\Windows\KJ\BIOS_Emulator\royal32.sys a variant of Win32/HackKMS.M potentially unsafe application
C:\Windows\KJ\OEM_info\oem.exe a variant of MSIL/HackTool.WinActivator.A potentially unsafe application
C:\Windows\KJ\Pirate\WinRR.exe a variant of Win32/HackTool.WinActivator.J potentially unsafe application
D:\ggg\Games\Garrys Mod\Garrys_Mod.exe a variant of Win32/GameHack.B potentially unsafe application
D:\ggg\Games\Garrys Mod\UltimateNameChanger.exe a variant of Win32/GameTool.D potentially unsafe application
D:\pizdalumely\g.exe Win32/TrojanDownloader.VB.ONX trojan


#14 olgun52

olgun52

  • Malware Response Team
  • 3,783 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:45 PM

Posted 08 March 2015 - 07:33 AM

Hi simeldorin,
 
Please go to: VirusTotal
On the page you'll find a "Choose File" button.
Click on the Choose File button.
In the Choose File to Upload window which opens, copy and paste this into the File Name box.
 
C:\Users\user\Desktop\Leis\Leis.exe
C:\Windows\KJ\OEM_info\oem.exe
D:\ggg\Games\Garrys Mod\Garrys_Mod.exe
D:\ggg\Games\Garrys Mod\UltimateNameChanger.exe

 
Next, click the Open button.
Then click the "Scan It!" button just below.
This will scan the file. Please be patient.
If you get a message saying File has already been analyzed: click Reanalyze file now
Once scanned, copy and paste the link to the results page in your next reply.
-------------------------------------------
Please post a fresh FRST the logfile for me check. (FRST.txt and Additional.txt)
------------------------------------

SecurityCheck:
Please download SecurityCheck: Link1 Link2

  • Save it to your desktop, start it and follow the instructions in the window.
  • After the scan finished the (checkup.txt) will open. Copy its content to your thread.

Best regards
 
paypal.gif
If you wish to show appreciation and support me personally fighting against malware, then you can consider a donation. Thank you. :thumbup2:
Malware fix forum
If I don't reply within 24 hours please PM me!

 


 


#15 simeldorin

simeldorin
  • Topic Starter

  • Members
  • 22 posts
  • OFFLINE
  •  
  • Local time:06:45 PM

Posted 08 March 2015 - 12:02 PM

hello i cant make 1 step because i dont have activate cookies but i try security check






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users