Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

How to remove HKU\S-1-5-18\SOFTWARE. How serious is this virus?


  • Please log in to reply
8 replies to this topic

#1 hanzo99999

hanzo99999

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:07:24 AM

Posted 08 June 2015 - 05:47 PM

Just curious. Here is a picture of scanning from Malwarebytes so far. I wonder what it takes to remove this? Seems like every single time I tried to scan, something little new pops up. Is this a serious virus? Something that can potentially damage my computer?

 

 

Here is an image of what the file looks like.

 

 

 

http://imgur.com/KLqcb4D

 

 

But what i'm curious is, how is this virus be able to create technically an invisible folder that we can't technically see? It is very confusing to me. If someone can also explain this to me as well, and perhaps have a solution? I tried to locate it but couldn't



BC AdBot (Login to Remove)

 


m

#2 severac

severac

  • Members
  • 872 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Serbia
  • Local time:12:24 PM

Posted 08 June 2015 - 05:56 PM

This is not a virus. It looks like some adware. Continue scan and post log. 

 

A PUP (potentially unwanted program) is a program that may be unwanted, despite the possibility that users consented to download it.


I would like to help you to remove malware. Let's look inside.   :busy:

But I don't know to solve all PC problems.  :smash: 

 


#3 hanzo99999

hanzo99999
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:07:24 AM

Posted 08 June 2015 - 06:31 PM

yeah it was interestin because some of the programs I checked are actually games that i downloaded through torrent. But what I'm curious about, is what does Malwarebytes consider unwanted programs? Something that looks suspicious? because idk if ''keys'' files are considered a virus. Can they?



#4 hanzo99999

hanzo99999
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:07:24 AM

Posted 08 June 2015 - 06:43 PM

And for some reason, when a message says ''view identified threats'' I usually see that as either  a virus, or something that can slow my pc down....please tell me I'm wrong? 



#5 severac

severac

  • Members
  • 872 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Serbia
  • Local time:12:24 PM

Posted 09 June 2015 - 03:29 AM

I can't tell you without seeing log file. But If MBAM identify something as a threat, you should remove it. 

 

I will give you links where MBAM expert explains what is PUP and how they classifies: 

https://www.malwarebytes.org/pup/

https://blog.malwarebytes.org/malvertising-2/2014/07/pups-are-persistent/


I would like to help you to remove malware. Let's look inside.   :busy:

But I don't know to solve all PC problems.  :smash: 

 


#6 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,606 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:05:24 AM

Posted 09 June 2015 - 05:58 AM

A PUP detection means a "Potentially Unwanted Program (PUP)". PUP is a very broad threat category which can encompass any number of different programs to include those which are benign as well as harmful. Thus, this type of detection does not always necessarily mean the file is malicious or a bad program. PUPs in and of themselves are not always bad...many are generally known, non-malicious but unwanted software usually containing Adware or bundled with other free third-party software to include toolbars, add-ons/plug-ins and browser extensions. PUPs are considered unwanted because they can cause undesirable system performance or other problems and are sometimes installed without the user's consent since they are often included when downloading legitimate programs. PUPs may also be defined somewhat differently by various security vendors and may or may not be detected/removed based on that definition. That fact adds to confusion and a lot of complaints from end users asking why a detection was not made on a particular file (program) they are having issues with.

In the past, Malwarebytes Anti-Malware detected only PUPs that were considered mostly harmful and deceiving but they revised their policy, taking a more aggressive approach to include PUPs that most users found annoying or misleading. This is what Malwarebytes has to say:If you recognize the PUP detection(s) as belonging to a program you installed and/or want to keep, you can add those items to the exclusion or ignore list (by right-clicking) so they will not show in future scans. If you don't recognize the detection(s), then you can remove them.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#7 hanzo99999

hanzo99999
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:07:24 AM

Posted 09 June 2015 - 09:03 PM

Here is the updated log scanned today. Please take a look. Im not sure if those are viruses. Most of the files or folder that I opened are actually empty after the scan. So Idk if that really means unwanted items or not.

 

Here is the log: I just copy and pasted on here.

 

Malwarebytes Anti-Malware
www.malwarebytes.org
 
Scan Date: 6/9/2015
Scan Time: 5:24:11 PM
Logfile: malwarelog.txt
Administrator: Yes
 
Version: 2.01.6.1022
Malware Database: v2015.06.09.06
Rootkit Database: v2015.06.02.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled
 
OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Nancy
 
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 526981
Time Elapsed: 3 hr, 33 min, 1 sec
 
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled
 
Processes: 0
(No malicious items detected)
 
Modules: 0
(No malicious items detected)
 
Registry Keys: 34
PUP.Optional.ConsumerInput.A, HKU\S-1-5-18\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{B49699FC-1665-4414-A1CB-C4A2A4A13EEC}, , [5e4ce6d23d4df0464815046a5aa949b7], 
PUP.Optional.MySearchDial.A, HKU\S-1-5-21-26751967-809291980-3467015544-501\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{3004627E-F8E9-4E8B-909D-316753CBA923}, , [cbdf3f797911bc7ad70f049d4ab912ee], 
PUP.Optional.PlayBryte, HKU\S-1-5-21-26751967-809291980-3467015544-501\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{61E0EF7A-9BC0-45EA-9B2F-F3E9F02692BD}, , [cbdffcbc0387c571bc13086e6b987f81], 
PUP.Optional.MySearchDial.A, HKU\S-1-5-21-26751967-809291980-3467015544-501\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD}, , [991128904f3bc076e005920ff60d0ff1], 
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\POLICIES\GOOGLE\UPDATE, , [8b1feace8efc91a5cd2a840223e29868], 
PUP.Optional.CinemaPlus.A, HKLM\SOFTWARE\WOW6432NODE\CinemaPlus-3.2cV04.06, , [5357595fa4e60036a2032dd53bc96c94], 
PUP.Optional.CinemaPlus.A, HKLM\SOFTWARE\WOW6432NODE\CinemaPlus-3.2cV04.06-nv, , [74365b5d583246f0faabd42e9173aa56], 
PUP.Optional.CinemaPlus.A, HKLM\SOFTWARE\WOW6432NODE\CinemaPlus-3.2cV04.06-nv-ie, , [bceeb5032e5c8fa75d4841c1c04437c9], 
PUP.Optional.EduApp.A, HKLM\SOFTWARE\WOW6432NODE\Edu App, , [2d7d2296c0ca162087373cb147bc5aa6], 
PUP.Optional.GigaClicks.C, HKLM\SOFTWARE\WOW6432NODE\GigaClicks, , [2a804d6bd6b40a2cfbddfbf256ada858], 
PUP.Optional.Infonaut.A, HKLM\SOFTWARE\WOW6432NODE\Infonaut_1.10.0.14, , [7b2f04b4741693a312407875cb3829d7], 
PUP.Optional.OneSoftPerDay.A, HKLM\SOFTWARE\WOW6432NODE\ONESOFTPERDAY, , [32781f99eb9fe254634fe32945bf49b7], 
PUP.Optional.CrossRider.C, HKLM\SOFTWARE\WOW6432NODE\APPDATALOW\SOFTWARE\Crossrider, , [39710badcebcee48390c8468c2416b95], 
PUP.Optional.Inminet.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{E20D6E44-C692-4329-D495-57E2996FC3ED}, , [2e7c11a7c7c36bcb95ee94f342c325db], 
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\WOW6432NODE\POLICIES\GOOGLE\UPDATE, , [8822dbddb1d9b18539be1d69ee17be42], 
PUP.Optional.PCSpeedUp.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\PCSUUCDRV, , [cfdb05b3ec9e38fecb77cebaf80d45bb], 
PUP.Optional.MultiPlug.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\JOKYDEKI, , [5654e4d494f693a359ab2756c73ead53], 
PUP.Optional.MultiPlug.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SYSENYFO, , [1496fbbd9ceecf67c0430875b352cf31], 
PUP.Optional.MultiPlug.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TIMUNEQI, , [f6b44870c0caf04633d1cab351b4b14f], 
PUP.Optional.Package.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SERVERAS, , [4a60f8c0404a3bfbc755b7380003de22], 
PUP.Optional.Coupoon.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\UPDATECHECK, , [3971feba2d5da2944cf1087bb94c7c84], 
PUP.Optional.Coupoon.A, HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\coupoon, , [3c6ed0e86327ec4a5fe6bdc16b9ad12f], 
PUP.Optional.weDownload.A, HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\The weDownload Manager, , [83277741a2e8d165794ad658f90bed13], 
PUP.Optional.TornTV.A, HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\Torntv V6.0, , [8525d8e08efc78beb23caa8afb09e31d], 
PUP.Optional.Shopperz.A, HKU\S-1-5-19\SOFTWARE\{4E7638A1-6962-4e44-A6B9-F40E84FD6D09}, , [06a448707a10979f76f2b141f50ef60a], 
PUP.Optional.Shopperz.A, HKU\S-1-5-20\SOFTWARE\{4E7638A1-6962-4e44-A6B9-F40E84FD6D09}, , [b7f33a7ecac0b680ed7b8d65c53e669a], 
PUP.Optional.CinemaPlus.A, HKU\S-1-5-21-26751967-809291980-3467015544-1000\SOFTWARE\CinemaPlus-3.2cV04.06-nv, , [4268dfd9dab077bf9c0a917116ee7f81], 
PUP.Optional.CinemaPlus.A, HKU\S-1-5-21-26751967-809291980-3467015544-1000\SOFTWARE\CinemaPlus-3.2cV04.06-nv-ie, , [adfdc8f08703de586343fc06ee1625db], 
PUP.Optional.EduApp.A, HKU\S-1-5-21-26751967-809291980-3467015544-1000\SOFTWARE\Edu App, , [efbbf3c57d0df640af10f6f723e0639d], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-26751967-809291980-3467015544-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EF7F527E-C349-4FFA-87C1-847380E5EEFD}, , [852553655c2eaf87cb46671d2fd660a0], 
PUP.Optional.Spigot.A, HKU\S-1-5-21-26751967-809291980-3467015544-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{18B47D08-B02C-4A96-A007-77A6F3858F9F}, , [8d1d8434f7930630c03ecd205ca733cd], 
PUP.Optional.OneSystemCare.A, HKU\S-1-5-21-26751967-809291980-3467015544-1000\SOFTWARE\ONE SYSTEM CARE, , [00aac2f66b1fa59141a456300104d927], 
PUP.Optional.DealPly.A, HKU\S-1-5-21-26751967-809291980-3467015544-1000\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\gaiilaahiahdejapggenmdmafpmbipje, , [27837840bfcb1422ba1dec36c73d5ea2], 
PUP.Optional.OneSystemCare.A, HKU\S-1-5-21-26751967-809291980-3467015544-501\SOFTWARE\ONE SYSTEM CARE, , [723822960d7db284bc29077f887dfb05], 
 
Registry Values: 15
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\POLICIES\GOOGLE\UPDATE|DisableAutoUpdateChecksCheckboxValue, 1, , [8b1feace8efc91a5cd2a840223e29868]
PUP.Optional.PlayBryte, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS\5.0\USER AGENT\POST PLATFORM|playbrytetoolbar_Playbryte, , [51598335424891a5dddb00232cd9e818], 
PUP.Optional.Inminet.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{e20d6e44-c692-4329-d495-57e2996fc3ed}|DisplayName, inminet, , [2e7c11a7c7c36bcb95ee94f342c325db]
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\WOW6432NODE\POLICIES\GOOGLE\UPDATE|DisableAutoUpdateChecksCheckboxValue, 1, , [8822dbddb1d9b18539be1d69ee17be42]
PUP.Optional.MultiPlug.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\jokydeki|ImagePath, C:\Users\Hack Station\AppData\Local\8D7DE861-1433523496-11E1-B017-0A13A937A7A5\cnsm94CA.tmp, , [5654e4d494f693a359ab2756c73ead53]
PUP.Optional.MultiPlug.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\sysenyfo|ImagePath, C:\Users\Nancy\AppData\Roaming\8D7DE861-1433536892-11E1-B017-0A13A937A7A5\nsaD64B.tmpfs, , [1496fbbd9ceecf67c0430875b352cf31]
PUP.Optional.MultiPlug.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\timuneqi|ImagePath, C:\Users\Nancy\AppData\Roaming\8D7DE861-1433536892-11E1-B017-0A13A937A7A5\hnsf2388.tmp, , [f6b44870c0caf04633d1cab351b4b14f]
PUP.Optional.Package.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\serveras|ImagePath, C:\Users\Hack Station\AppData\Roaming\ASPackage\ASSrv.exe, , [4a60f8c0404a3bfbc755b7380003de22]
PUP.Optional.Coupoon.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\UPDATECHECK|ImagePath, C:\Program Files (x86)\Coupoon\UpdateCheck.exe run , , [3971feba2d5da2944cf1087bb94c7c84]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-26751967-809291980-3467015544-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EF7F527E-C349-4FFA-87C1-847380E5EEFD}|AppName, Torntv V6.0-enabler.exe-buttonutil.exe, , [852553655c2eaf87cb46671d2fd660a0]
PUP.Optional.Spigot.A, HKU\S-1-5-21-26751967-809291980-3467015544-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{18B47D08-B02C-4A96-A007-77A6F3858F9F}|URL, http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=714647&p={searchTerms}, , [8d1d8434f7930630c03ecd205ca733cd]
PUP.Optional.OneSystemCare.A, HKU\S-1-5-21-26751967-809291980-3467015544-1000\SOFTWARE\ONE SYSTEM CARE|AdvertsLink1, http://dl.softservers.net/121002138/DriverPro.exe, , [00aac2f66b1fa59141a456300104d927]
PUP.Optional.OneSystemCare.A, HKU\S-1-5-21-26751967-809291980-3467015544-1000\SOFTWARE\ONE SYSTEM CARE|AdvertsLink2, http://dl.softservers.net/171002138/LiveSupport.exe, , [1b8f2c8c4446ae883fa60482be47f60a]
PUP.Optional.OneSystemCare.A, HKU\S-1-5-21-26751967-809291980-3467015544-501\SOFTWARE\ONE SYSTEM CARE|AdvertsLink1, http://dl.softservers.net/121002138/DriverPro.exe, , [723822960d7db284bc29077f887dfb05]
PUP.Optional.OneSystemCare.A, HKU\S-1-5-21-26751967-809291980-3467015544-501\SOFTWARE\ONE SYSTEM CARE|AdvertsLink2, http://dl.softservers.net/171002138/LiveSupport.exe, , [87235f59fb8f5cda19cc87ff8f7619e7]
 
Registry Data: 3
Trojan.DNSChanger, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS\Interfaces\{526FC5A3-CC5B-4A64-9A5A-13A8EB9059C0}|NameServer, 81.218.119.5,82.163.142.130, Good: (), Bad: (81.218.119.5,82.163.142.130),,[54567741d2b89e989dfaca74fa0ced13]
Trojan.DNSChanger, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS\Interfaces\{7C0FF764-64A1-4402-B7FB-775348D15D0B}|NameServer, 81.218.119.5,82.163.142.130, Good: (), Bad: (81.218.119.5,82.163.142.130),,[dbcf45732466e84e6f284ef0e323ac54]
Trojan.DNSChanger, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS\Interfaces\{85BF7BF7-E3B3-48EC-94C4-62910A97B632}|NameServer, 81.218.119.5,82.163.142.130, Good: (), Bad: (81.218.119.5,82.163.142.130),,[c8e2308895f5d066791e310d848244bc]
 
Folders: 23
PUP.Optional.WebBar.A, C:\Windows\System32\config\systemprofile\AppData\Local\WebBar, , [832792269febb383a0dd727b4cb7fa06], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\defaults, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\defaults\preferences, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\userCode, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\locale, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\locale\en-US, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Local\Updater4479, , [7d2d6a4e266455e1607ab60344bfe917], 
PUP.Optional.OneSoftPerDay.A, C:\Users\Nancy\AppData\Local\ospd_us_1094, , [1d8dcfe9662470c67bdea82b8f745ea2], 
PUP.Optional.OneSoftPerDay.A, C:\Users\Nancy\AppData\Local\ospd_us_1094\ospd_us_1094, , [1d8dcfe9662470c67bdea82b8f745ea2], 
PUP.Optional.OneSoftPerDay.A, C:\Users\Nancy\AppData\Local\ospd_us_1094\ospd_us_1094\1.10, , [1d8dcfe9662470c67bdea82b8f745ea2], 
PUP.Optional.BrowserAdBlocker.A, C:\ProgramData\Browser AdBlocker, , [98122296c9c13ef8c4d7686da45fa759], 
PUP.Optional.SupremeAdblocker.A, C:\ProgramData\Supreme AdBlocker, , [fab002b6b2d80e2881fb825424dfc23e], 
PUP.Optional.CoupExtension.A, C:\ProgramData\CoupExtension, , [93179325840685b1cc34e9f28a79e818], 
PUP.Optional.OneSystemCare.A, C:\Users\Nancy\AppData\Roaming\One System Care, , [26847b3d90fa45f14a5c915859aaf808], 
PUP.Optional.OneSystemCare.A, C:\Users\Nancy\AppData\Roaming\One System Care\WL, , [26847b3d90fa45f14a5c915859aaf808], 
 
Files: 137
PUP.Optional.MultiPlug.Uns, C:\ProgramData\Supreme AdBlocker\Supreme AdBlocker.exe, , [f6b4f9bf2f5bf343076998c563a039c7], 
PUP.Optional.LiveSoftAction.A, C:\$Recycle.Bin\S-1-5-21-26751967-809291980-3467015544-1003\$R7PUYRE.exe, , [32787e3a395182b4e6bb98ba3ac7639d], 
PUP.Optional.OneClickDownloader.A, C:\$Recycle.Bin\S-1-5-21-26751967-809291980-3467015544-1004\$RK2RT6B.exe, , [09a1655395f51c1afa3fd49f946dc23e], 
PUP.Optional.InstallCore.A, C:\Users\Nancy\Downloads\setup (3).exe, , [f6b46a4e672354e20e43cf77ec1508f8], 
PUP.Optional.InstallCore.A, C:\Users\Nancy\Downloads\setup (4).exe, , [5f4b3187c5c51521ea67ae98b948aa56], 
PUP.Optional.InstallCore.A, C:\Users\Nancy\Downloads\setup (5).exe, , [1496cdebd9b15adcce830244946d7e82], 
PUP.Optional.Solimba, C:\Users\Nancy\Downloads\Setup (6).exe, , [3971b602305a43f3ffdf2d0ff9085ba5], 
PUP.Optional.Solimba, C:\Users\Nancy\Downloads\Setup (7).exe, , [9317edcba6e485b1d60877c557aa867a], 
PUP.Optional.Solimba, C:\Users\Nancy\Downloads\Setup (8).exe, , [0aa08d2b7515e056c61876c652af867a], 
PUP.Optional.Solimba, C:\Users\Nancy\Downloads\Setup (9).exe, , [29814e6ae9a1191de1fdb686738ea25e], 
Hacktool.CheatEngine, C:\Users\Nancy\Downloads\DynastyWarriors8XtremeLegendsv1.02PLUS13Trainer.zip, , [109ac7f10684c571362c8fadb050cc34], 
PUP.Optional.InstallCore.A, C:\Users\Nancy\Downloads\setup (2).exe, , [edbd4b6d19719a9cc48df15535cc5da3], 
Hacktool.CheatEngine, C:\Users\Nancy\Downloads\Unconfirmed 14758.crdownload, , [06a4bff9850525116cf6221a808033cd], 
PUP.Optional.OpenCandy, C:\Users\Nancy\Downloads\DTLite4471-0337.exe, , [5555fcbcc0caf83e9c51253dbb4b5da3], 
PUP.Optional.IBryte, C:\Users\Nancy\Downloads\Setup (1).exe, , [3278ab0dc1c90234855dbe8106fb15eb], 
Hacktool.CheatEngine, C:\Users\Nancy\Downloads\rise_of_nations_extended_edition_v02009_trainer_12_mrantifun.zip, , [3f6b03b54f3bb680e67c1f1d4cb4d12f], 
PUP.Optional.SndVol.A, C:\Windows\SysWOW64\config\systemprofile\sndvol.exe, , [f5b53a7e7b0fbd790ca45e8c19eacc34], 
PUP.Optional.WebBar.A, C:\Windows\System32\config\systemprofile\AppData\Local\WebBar\wb.log, , [832792269febb383a0dd727b4cb7fa06], 
PUP.Optional.EduApp.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\firefox@eduapphome.com.xpi, , [62489325f4968caacef318d5c142768a], 
PUP.Optional.EduApp.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\jebovzzf.default\extensions\firefox@eduapphome.com.xpi, , [d6d466528dfd2115fbc6f6f7996a12ee], 
PUP.Optional.RollAround.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\jebovzzf.default\extensions\{bd26208e-294a-4642-abc1-37e7b2110a7f}.xpi, , [baf06a4e02888da998bad41d37cc7090], 
PUP.Optional.Goobzo, C:\Windows\System32\Tasks\SMW_UpdateTask_Time_333336323535383735332d5755326c785a5a5737414534, , [5b4f3682404aea4cd0923bd5be4651af], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\crossrider_statusbar.png, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\button1.png, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\button2.png, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\button3.png, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\button4.png, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\button5.png, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\icon128.png, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\icon16.png, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\icon24.png, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\icon48.png, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\panelarrow-up.png, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\popup.html, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\skin.css, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\update.css, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome.manifest, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\install.rdf, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\255c3e7cd811bb9760917cbd79b6b5cf.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\3f4f375b7a490a10840266ba6aad2423.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\5a3f81f508e8b31eddd52d209bd3f54d.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\b0ebfd2fc8f657be0661ef698dc8756b.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\background.html, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\browser.xul, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\dialog.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\e7697e4fd63abd95356b161619582e45.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\e9bd7095e3441746c11ba99e0f9f3666.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\ffCoreFilesIndex.txt, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\options.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\options.xul, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\search_dialog.xul, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\515fa033fe85bf6f7ada6574ee55d96d.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\00141e1f7fdab3a788b314b57e198c6f.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\1ee948ac0bdad5b19100144948418348.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\242dd8e00e6d5ef468a2f4ab2333865a.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\275a2481e6a30858ebda2d2efab85296.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\29cc5dc59831d35adf7a9063704f83f8.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\3013c877e9223ed6a977da48c90abb55.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\445f34e1380c146a2255632a9289d4a3.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\4727445948f9331497ba25c4002178dd.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\62bea68ea4198ecb9305ce53cb6ba948.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\6d79e27b02354f2eea3bfe9f55ff4d77.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\76f334cdfc9a1789ed17f63c719d3919.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\7703bf229ecb90d62a9bd3afcaa2efcb.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\d18e87e82f51fb92820c5934b1a3db3a.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\e1abd8834b963eed0b1677b9b12225ca.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\f400b8283d2647ffb6b30f6a63b59021.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\6fa484f20f1c0dd342e36870fcb5dad6.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\0c8dd1eddd687902372ed8300a6a075c.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\1b0d57e6603a365749a043a2fa72c68b.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\23baf27fd5067fc0a688b85c949b313d.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\2491ade1f42758ea497995bdbfd68b69.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\3955c81ff2ed1d1506a3bf7298e0fdc0.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\4edec8a8cfc8e461ec30e3c4dea85a1b.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\59cb3050c5e62a0a0701b67ef58a0a6c.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\5ea85489b412b7e8d70a1d0218a21bbd.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\802fec8482e0677d068643b24da71e22.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\8a202d854562c4911260e63d6dbd84b9.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\8a206f36fb3de877fefd4593b1f8da93.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\90018141c5621d58eefd723274dcc793.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\9aa5ffa03045d24beab16e096b913dd9.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\ab956b78a0570a3bb6ee0fe74aa46eae.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\cee0306953e7b1115c18a1eb018812e0.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\e0662e655e608806c201c36ea75b6534.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\e6dee429e77c1047774af8ae16929e0f.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\ecf5a20891ece00771a1a511c58b3df4.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\faca1c43b78b8d299c18a9e9bb4615b2.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\installer.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\defaults\preferences\prefs.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\manifest.xml, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins.json, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\273.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\119.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\13.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\14.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\16.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\17.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\178.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\195.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\220.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\234.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\246.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\252.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\253.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\281.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\288.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\289.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\300.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\334.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\335.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\345.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\354.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\356.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\376.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\385.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\389.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\390.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\391.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\4.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\47.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\64.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\7.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\78.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\9.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\91.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\userCode\background.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\userCode\extension.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\locale\en-US\translations.dtd, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.Multiplug.A, C:\Windows\System32\Tasks\Bidaily Synchronize Task[3c32], , [95153187523882b49125374d75907888], 
PUP.Optional.Multiplug.A, C:\Windows\Tasks\Bidaily Synchronize Task[3c32].job, , [41693d7b206a86b04077a0e44db87987], 
PUP.Optional.SearchModule.A, C:\Windows\System32\Tasks\SMWUpd, , [a6047b3d3357fa3c36113b4b23e209f7], 
PUP.Optional.OneSystemCare.A, C:\Windows\System32\Tasks\One System CarePeriod, , [e5c52c8c365460d66d7435518283af51], 
PUP.Optional.OneSystemCare.A, C:\Windows\Tasks\One System CarePeriod.job, , [d5d53484e5a578bece15bacceb1a13ed], 
PUP.Optional.OneSystemCare.A, C:\Windows\Tasks\One System CareStartUp.job, , [d9d13d7b8efce65072728afc0ff6f40c], 
PUP.Optional.SearchModule.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\searchplugins\smod.xml, , [b1f97b3d147641f5ad4ac8bf8d78629e], 
PUP.Optional.OneSoftPerDay.A, C:\Users\Nancy\AppData\Local\ospd_us_1094\upospd_us_1094.cyl, , [1d8dcfe9662470c67bdea82b8f745ea2], 
PUP.Optional.OneSoftPerDay.A, C:\Users\Nancy\AppData\Local\ospd_us_1094\ospd_us_1094\1.10\cnf.cyl, , [1d8dcfe9662470c67bdea82b8f745ea2], 
 
Physical Sectors: 0
(No malicious items detected)
 
 
(end)


#8 hanzo99999

hanzo99999
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:07:24 AM

Posted 09 June 2015 - 09:03 PM

Here is the updated log scanned today. Please take a look. Im not sure if those are viruses. Most of the files or folder that I opened are actually empty after the scan. So Idk if that really means unwanted items or not.

 

Here is the log: I just copy and pasted on here.

 

Malwarebytes Anti-Malware
www.malwarebytes.org
 
Scan Date: 6/9/2015
Scan Time: 5:24:11 PM
Logfile: malwarelog.txt
Administrator: Yes
 
Version: 2.01.6.1022
Malware Database: v2015.06.09.06
Rootkit Database: v2015.06.02.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled
 
OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Nancy
 
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 526981
Time Elapsed: 3 hr, 33 min, 1 sec
 
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled
 
Processes: 0
(No malicious items detected)
 
Modules: 0
(No malicious items detected)
 
Registry Keys: 34
PUP.Optional.ConsumerInput.A, HKU\S-1-5-18\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{B49699FC-1665-4414-A1CB-C4A2A4A13EEC}, , [5e4ce6d23d4df0464815046a5aa949b7], 
PUP.Optional.MySearchDial.A, HKU\S-1-5-21-26751967-809291980-3467015544-501\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{3004627E-F8E9-4E8B-909D-316753CBA923}, , [cbdf3f797911bc7ad70f049d4ab912ee], 
PUP.Optional.PlayBryte, HKU\S-1-5-21-26751967-809291980-3467015544-501\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{61E0EF7A-9BC0-45EA-9B2F-F3E9F02692BD}, , [cbdffcbc0387c571bc13086e6b987f81], 
PUP.Optional.MySearchDial.A, HKU\S-1-5-21-26751967-809291980-3467015544-501\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD}, , [991128904f3bc076e005920ff60d0ff1], 
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\POLICIES\GOOGLE\UPDATE, , [8b1feace8efc91a5cd2a840223e29868], 
PUP.Optional.CinemaPlus.A, HKLM\SOFTWARE\WOW6432NODE\CinemaPlus-3.2cV04.06, , [5357595fa4e60036a2032dd53bc96c94], 
PUP.Optional.CinemaPlus.A, HKLM\SOFTWARE\WOW6432NODE\CinemaPlus-3.2cV04.06-nv, , [74365b5d583246f0faabd42e9173aa56], 
PUP.Optional.CinemaPlus.A, HKLM\SOFTWARE\WOW6432NODE\CinemaPlus-3.2cV04.06-nv-ie, , [bceeb5032e5c8fa75d4841c1c04437c9], 
PUP.Optional.EduApp.A, HKLM\SOFTWARE\WOW6432NODE\Edu App, , [2d7d2296c0ca162087373cb147bc5aa6], 
PUP.Optional.GigaClicks.C, HKLM\SOFTWARE\WOW6432NODE\GigaClicks, , [2a804d6bd6b40a2cfbddfbf256ada858], 
PUP.Optional.Infonaut.A, HKLM\SOFTWARE\WOW6432NODE\Infonaut_1.10.0.14, , [7b2f04b4741693a312407875cb3829d7], 
PUP.Optional.OneSoftPerDay.A, HKLM\SOFTWARE\WOW6432NODE\ONESOFTPERDAY, , [32781f99eb9fe254634fe32945bf49b7], 
PUP.Optional.CrossRider.C, HKLM\SOFTWARE\WOW6432NODE\APPDATALOW\SOFTWARE\Crossrider, , [39710badcebcee48390c8468c2416b95], 
PUP.Optional.Inminet.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{E20D6E44-C692-4329-D495-57E2996FC3ED}, , [2e7c11a7c7c36bcb95ee94f342c325db], 
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\WOW6432NODE\POLICIES\GOOGLE\UPDATE, , [8822dbddb1d9b18539be1d69ee17be42], 
PUP.Optional.PCSpeedUp.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\PCSUUCDRV, , [cfdb05b3ec9e38fecb77cebaf80d45bb], 
PUP.Optional.MultiPlug.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\JOKYDEKI, , [5654e4d494f693a359ab2756c73ead53], 
PUP.Optional.MultiPlug.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SYSENYFO, , [1496fbbd9ceecf67c0430875b352cf31], 
PUP.Optional.MultiPlug.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TIMUNEQI, , [f6b44870c0caf04633d1cab351b4b14f], 
PUP.Optional.Package.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SERVERAS, , [4a60f8c0404a3bfbc755b7380003de22], 
PUP.Optional.Coupoon.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\UPDATECHECK, , [3971feba2d5da2944cf1087bb94c7c84], 
PUP.Optional.Coupoon.A, HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\coupoon, , [3c6ed0e86327ec4a5fe6bdc16b9ad12f], 
PUP.Optional.weDownload.A, HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\The weDownload Manager, , [83277741a2e8d165794ad658f90bed13], 
PUP.Optional.TornTV.A, HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\Torntv V6.0, , [8525d8e08efc78beb23caa8afb09e31d], 
PUP.Optional.Shopperz.A, HKU\S-1-5-19\SOFTWARE\{4E7638A1-6962-4e44-A6B9-F40E84FD6D09}, , [06a448707a10979f76f2b141f50ef60a], 
PUP.Optional.Shopperz.A, HKU\S-1-5-20\SOFTWARE\{4E7638A1-6962-4e44-A6B9-F40E84FD6D09}, , [b7f33a7ecac0b680ed7b8d65c53e669a], 
PUP.Optional.CinemaPlus.A, HKU\S-1-5-21-26751967-809291980-3467015544-1000\SOFTWARE\CinemaPlus-3.2cV04.06-nv, , [4268dfd9dab077bf9c0a917116ee7f81], 
PUP.Optional.CinemaPlus.A, HKU\S-1-5-21-26751967-809291980-3467015544-1000\SOFTWARE\CinemaPlus-3.2cV04.06-nv-ie, , [adfdc8f08703de586343fc06ee1625db], 
PUP.Optional.EduApp.A, HKU\S-1-5-21-26751967-809291980-3467015544-1000\SOFTWARE\Edu App, , [efbbf3c57d0df640af10f6f723e0639d], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-26751967-809291980-3467015544-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EF7F527E-C349-4FFA-87C1-847380E5EEFD}, , [852553655c2eaf87cb46671d2fd660a0], 
PUP.Optional.Spigot.A, HKU\S-1-5-21-26751967-809291980-3467015544-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{18B47D08-B02C-4A96-A007-77A6F3858F9F}, , [8d1d8434f7930630c03ecd205ca733cd], 
PUP.Optional.OneSystemCare.A, HKU\S-1-5-21-26751967-809291980-3467015544-1000\SOFTWARE\ONE SYSTEM CARE, , [00aac2f66b1fa59141a456300104d927], 
PUP.Optional.DealPly.A, HKU\S-1-5-21-26751967-809291980-3467015544-1000\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\gaiilaahiahdejapggenmdmafpmbipje, , [27837840bfcb1422ba1dec36c73d5ea2], 
PUP.Optional.OneSystemCare.A, HKU\S-1-5-21-26751967-809291980-3467015544-501\SOFTWARE\ONE SYSTEM CARE, , [723822960d7db284bc29077f887dfb05], 
 
Registry Values: 15
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\POLICIES\GOOGLE\UPDATE|DisableAutoUpdateChecksCheckboxValue, 1, , [8b1feace8efc91a5cd2a840223e29868]
PUP.Optional.PlayBryte, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS\5.0\USER AGENT\POST PLATFORM|playbrytetoolbar_Playbryte, , [51598335424891a5dddb00232cd9e818], 
PUP.Optional.Inminet.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{e20d6e44-c692-4329-d495-57e2996fc3ed}|DisplayName, inminet, , [2e7c11a7c7c36bcb95ee94f342c325db]
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\WOW6432NODE\POLICIES\GOOGLE\UPDATE|DisableAutoUpdateChecksCheckboxValue, 1, , [8822dbddb1d9b18539be1d69ee17be42]
PUP.Optional.MultiPlug.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\jokydeki|ImagePath, C:\Users\Hack Station\AppData\Local\8D7DE861-1433523496-11E1-B017-0A13A937A7A5\cnsm94CA.tmp, , [5654e4d494f693a359ab2756c73ead53]
PUP.Optional.MultiPlug.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\sysenyfo|ImagePath, C:\Users\Nancy\AppData\Roaming\8D7DE861-1433536892-11E1-B017-0A13A937A7A5\nsaD64B.tmpfs, , [1496fbbd9ceecf67c0430875b352cf31]
PUP.Optional.MultiPlug.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\timuneqi|ImagePath, C:\Users\Nancy\AppData\Roaming\8D7DE861-1433536892-11E1-B017-0A13A937A7A5\hnsf2388.tmp, , [f6b44870c0caf04633d1cab351b4b14f]
PUP.Optional.Package.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\serveras|ImagePath, C:\Users\Hack Station\AppData\Roaming\ASPackage\ASSrv.exe, , [4a60f8c0404a3bfbc755b7380003de22]
PUP.Optional.Coupoon.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\UPDATECHECK|ImagePath, C:\Program Files (x86)\Coupoon\UpdateCheck.exe run , , [3971feba2d5da2944cf1087bb94c7c84]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-26751967-809291980-3467015544-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EF7F527E-C349-4FFA-87C1-847380E5EEFD}|AppName, Torntv V6.0-enabler.exe-buttonutil.exe, , [852553655c2eaf87cb46671d2fd660a0]
PUP.Optional.Spigot.A, HKU\S-1-5-21-26751967-809291980-3467015544-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{18B47D08-B02C-4A96-A007-77A6F3858F9F}|URL, http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=714647&p={searchTerms}, , [8d1d8434f7930630c03ecd205ca733cd]
PUP.Optional.OneSystemCare.A, HKU\S-1-5-21-26751967-809291980-3467015544-1000\SOFTWARE\ONE SYSTEM CARE|AdvertsLink1, http://dl.softservers.net/121002138/DriverPro.exe, , [00aac2f66b1fa59141a456300104d927]
PUP.Optional.OneSystemCare.A, HKU\S-1-5-21-26751967-809291980-3467015544-1000\SOFTWARE\ONE SYSTEM CARE|AdvertsLink2, http://dl.softservers.net/171002138/LiveSupport.exe, , [1b8f2c8c4446ae883fa60482be47f60a]
PUP.Optional.OneSystemCare.A, HKU\S-1-5-21-26751967-809291980-3467015544-501\SOFTWARE\ONE SYSTEM CARE|AdvertsLink1, http://dl.softservers.net/121002138/DriverPro.exe, , [723822960d7db284bc29077f887dfb05]
PUP.Optional.OneSystemCare.A, HKU\S-1-5-21-26751967-809291980-3467015544-501\SOFTWARE\ONE SYSTEM CARE|AdvertsLink2, http://dl.softservers.net/171002138/LiveSupport.exe, , [87235f59fb8f5cda19cc87ff8f7619e7]
 
Registry Data: 3
Trojan.DNSChanger, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS\Interfaces\{526FC5A3-CC5B-4A64-9A5A-13A8EB9059C0}|NameServer, 81.218.119.5,82.163.142.130, Good: (), Bad: (81.218.119.5,82.163.142.130),,[54567741d2b89e989dfaca74fa0ced13]
Trojan.DNSChanger, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS\Interfaces\{7C0FF764-64A1-4402-B7FB-775348D15D0B}|NameServer, 81.218.119.5,82.163.142.130, Good: (), Bad: (81.218.119.5,82.163.142.130),,[dbcf45732466e84e6f284ef0e323ac54]
Trojan.DNSChanger, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS\Interfaces\{85BF7BF7-E3B3-48EC-94C4-62910A97B632}|NameServer, 81.218.119.5,82.163.142.130, Good: (), Bad: (81.218.119.5,82.163.142.130),,[c8e2308895f5d066791e310d848244bc]
 
Folders: 23
PUP.Optional.WebBar.A, C:\Windows\System32\config\systemprofile\AppData\Local\WebBar, , [832792269febb383a0dd727b4cb7fa06], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\defaults, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\defaults\preferences, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\userCode, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\locale, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\locale\en-US, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Local\Updater4479, , [7d2d6a4e266455e1607ab60344bfe917], 
PUP.Optional.OneSoftPerDay.A, C:\Users\Nancy\AppData\Local\ospd_us_1094, , [1d8dcfe9662470c67bdea82b8f745ea2], 
PUP.Optional.OneSoftPerDay.A, C:\Users\Nancy\AppData\Local\ospd_us_1094\ospd_us_1094, , [1d8dcfe9662470c67bdea82b8f745ea2], 
PUP.Optional.OneSoftPerDay.A, C:\Users\Nancy\AppData\Local\ospd_us_1094\ospd_us_1094\1.10, , [1d8dcfe9662470c67bdea82b8f745ea2], 
PUP.Optional.BrowserAdBlocker.A, C:\ProgramData\Browser AdBlocker, , [98122296c9c13ef8c4d7686da45fa759], 
PUP.Optional.SupremeAdblocker.A, C:\ProgramData\Supreme AdBlocker, , [fab002b6b2d80e2881fb825424dfc23e], 
PUP.Optional.CoupExtension.A, C:\ProgramData\CoupExtension, , [93179325840685b1cc34e9f28a79e818], 
PUP.Optional.OneSystemCare.A, C:\Users\Nancy\AppData\Roaming\One System Care, , [26847b3d90fa45f14a5c915859aaf808], 
PUP.Optional.OneSystemCare.A, C:\Users\Nancy\AppData\Roaming\One System Care\WL, , [26847b3d90fa45f14a5c915859aaf808], 
 
Files: 137
PUP.Optional.MultiPlug.Uns, C:\ProgramData\Supreme AdBlocker\Supreme AdBlocker.exe, , [f6b4f9bf2f5bf343076998c563a039c7], 
PUP.Optional.LiveSoftAction.A, C:\$Recycle.Bin\S-1-5-21-26751967-809291980-3467015544-1003\$R7PUYRE.exe, , [32787e3a395182b4e6bb98ba3ac7639d], 
PUP.Optional.OneClickDownloader.A, C:\$Recycle.Bin\S-1-5-21-26751967-809291980-3467015544-1004\$RK2RT6B.exe, , [09a1655395f51c1afa3fd49f946dc23e], 
PUP.Optional.InstallCore.A, C:\Users\Nancy\Downloads\setup (3).exe, , [f6b46a4e672354e20e43cf77ec1508f8], 
PUP.Optional.InstallCore.A, C:\Users\Nancy\Downloads\setup (4).exe, , [5f4b3187c5c51521ea67ae98b948aa56], 
PUP.Optional.InstallCore.A, C:\Users\Nancy\Downloads\setup (5).exe, , [1496cdebd9b15adcce830244946d7e82], 
PUP.Optional.Solimba, C:\Users\Nancy\Downloads\Setup (6).exe, , [3971b602305a43f3ffdf2d0ff9085ba5], 
PUP.Optional.Solimba, C:\Users\Nancy\Downloads\Setup (7).exe, , [9317edcba6e485b1d60877c557aa867a], 
PUP.Optional.Solimba, C:\Users\Nancy\Downloads\Setup (8).exe, , [0aa08d2b7515e056c61876c652af867a], 
PUP.Optional.Solimba, C:\Users\Nancy\Downloads\Setup (9).exe, , [29814e6ae9a1191de1fdb686738ea25e], 
Hacktool.CheatEngine, C:\Users\Nancy\Downloads\DynastyWarriors8XtremeLegendsv1.02PLUS13Trainer.zip, , [109ac7f10684c571362c8fadb050cc34], 
PUP.Optional.InstallCore.A, C:\Users\Nancy\Downloads\setup (2).exe, , [edbd4b6d19719a9cc48df15535cc5da3], 
Hacktool.CheatEngine, C:\Users\Nancy\Downloads\Unconfirmed 14758.crdownload, , [06a4bff9850525116cf6221a808033cd], 
PUP.Optional.OpenCandy, C:\Users\Nancy\Downloads\DTLite4471-0337.exe, , [5555fcbcc0caf83e9c51253dbb4b5da3], 
PUP.Optional.IBryte, C:\Users\Nancy\Downloads\Setup (1).exe, , [3278ab0dc1c90234855dbe8106fb15eb], 
Hacktool.CheatEngine, C:\Users\Nancy\Downloads\rise_of_nations_extended_edition_v02009_trainer_12_mrantifun.zip, , [3f6b03b54f3bb680e67c1f1d4cb4d12f], 
PUP.Optional.SndVol.A, C:\Windows\SysWOW64\config\systemprofile\sndvol.exe, , [f5b53a7e7b0fbd790ca45e8c19eacc34], 
PUP.Optional.WebBar.A, C:\Windows\System32\config\systemprofile\AppData\Local\WebBar\wb.log, , [832792269febb383a0dd727b4cb7fa06], 
PUP.Optional.EduApp.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\firefox@eduapphome.com.xpi, , [62489325f4968caacef318d5c142768a], 
PUP.Optional.EduApp.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\jebovzzf.default\extensions\firefox@eduapphome.com.xpi, , [d6d466528dfd2115fbc6f6f7996a12ee], 
PUP.Optional.RollAround.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\jebovzzf.default\extensions\{bd26208e-294a-4642-abc1-37e7b2110a7f}.xpi, , [baf06a4e02888da998bad41d37cc7090], 
PUP.Optional.Goobzo, C:\Windows\System32\Tasks\SMW_UpdateTask_Time_333336323535383735332d5755326c785a5a5737414534, , [5b4f3682404aea4cd0923bd5be4651af], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\crossrider_statusbar.png, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\button1.png, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\button2.png, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\button3.png, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\button4.png, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\button5.png, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\icon128.png, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\icon16.png, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\icon24.png, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\icon48.png, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\panelarrow-up.png, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\popup.html, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\skin.css, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\update.css, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome.manifest, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\install.rdf, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\255c3e7cd811bb9760917cbd79b6b5cf.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\3f4f375b7a490a10840266ba6aad2423.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\5a3f81f508e8b31eddd52d209bd3f54d.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\b0ebfd2fc8f657be0661ef698dc8756b.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\background.html, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\browser.xul, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\dialog.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\e7697e4fd63abd95356b161619582e45.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\e9bd7095e3441746c11ba99e0f9f3666.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\ffCoreFilesIndex.txt, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\options.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\options.xul, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\search_dialog.xul, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\515fa033fe85bf6f7ada6574ee55d96d.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\00141e1f7fdab3a788b314b57e198c6f.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\1ee948ac0bdad5b19100144948418348.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\242dd8e00e6d5ef468a2f4ab2333865a.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\275a2481e6a30858ebda2d2efab85296.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\29cc5dc59831d35adf7a9063704f83f8.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\3013c877e9223ed6a977da48c90abb55.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\445f34e1380c146a2255632a9289d4a3.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\4727445948f9331497ba25c4002178dd.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\62bea68ea4198ecb9305ce53cb6ba948.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\6d79e27b02354f2eea3bfe9f55ff4d77.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\76f334cdfc9a1789ed17f63c719d3919.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\7703bf229ecb90d62a9bd3afcaa2efcb.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\d18e87e82f51fb92820c5934b1a3db3a.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\e1abd8834b963eed0b1677b9b12225ca.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\f400b8283d2647ffb6b30f6a63b59021.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\6fa484f20f1c0dd342e36870fcb5dad6.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\0c8dd1eddd687902372ed8300a6a075c.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\1b0d57e6603a365749a043a2fa72c68b.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\23baf27fd5067fc0a688b85c949b313d.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\2491ade1f42758ea497995bdbfd68b69.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\3955c81ff2ed1d1506a3bf7298e0fdc0.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\4edec8a8cfc8e461ec30e3c4dea85a1b.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\59cb3050c5e62a0a0701b67ef58a0a6c.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\5ea85489b412b7e8d70a1d0218a21bbd.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\802fec8482e0677d068643b24da71e22.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\8a202d854562c4911260e63d6dbd84b9.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\8a206f36fb3de877fefd4593b1f8da93.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\90018141c5621d58eefd723274dcc793.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\9aa5ffa03045d24beab16e096b913dd9.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\ab956b78a0570a3bb6ee0fe74aa46eae.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\cee0306953e7b1115c18a1eb018812e0.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\e0662e655e608806c201c36ea75b6534.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\e6dee429e77c1047774af8ae16929e0f.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\ecf5a20891ece00771a1a511c58b3df4.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\faca1c43b78b8d299c18a9e9bb4615b2.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\installer.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\defaults\preferences\prefs.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\manifest.xml, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins.json, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\273.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\119.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\13.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\14.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\16.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\17.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\178.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\195.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\220.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\234.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\246.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\252.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\253.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\281.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\288.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\289.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\300.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\334.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\335.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\345.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\354.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\356.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\376.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\385.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\389.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\390.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\391.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\4.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\47.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\64.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\7.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\78.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\9.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\91.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\userCode\background.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\userCode\extension.js, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.CrossRider.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\locale\en-US\translations.dtd, , [5159a90fd3b72a0c2f51106e59acf40c], 
PUP.Optional.Multiplug.A, C:\Windows\System32\Tasks\Bidaily Synchronize Task[3c32], , [95153187523882b49125374d75907888], 
PUP.Optional.Multiplug.A, C:\Windows\Tasks\Bidaily Synchronize Task[3c32].job, , [41693d7b206a86b04077a0e44db87987], 
PUP.Optional.SearchModule.A, C:\Windows\System32\Tasks\SMWUpd, , [a6047b3d3357fa3c36113b4b23e209f7], 
PUP.Optional.OneSystemCare.A, C:\Windows\System32\Tasks\One System CarePeriod, , [e5c52c8c365460d66d7435518283af51], 
PUP.Optional.OneSystemCare.A, C:\Windows\Tasks\One System CarePeriod.job, , [d5d53484e5a578bece15bacceb1a13ed], 
PUP.Optional.OneSystemCare.A, C:\Windows\Tasks\One System CareStartUp.job, , [d9d13d7b8efce65072728afc0ff6f40c], 
PUP.Optional.SearchModule.A, C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\2niyeqlv.default\searchplugins\smod.xml, , [b1f97b3d147641f5ad4ac8bf8d78629e], 
PUP.Optional.OneSoftPerDay.A, C:\Users\Nancy\AppData\Local\ospd_us_1094\upospd_us_1094.cyl, , [1d8dcfe9662470c67bdea82b8f745ea2], 
PUP.Optional.OneSoftPerDay.A, C:\Users\Nancy\AppData\Local\ospd_us_1094\ospd_us_1094\1.10\cnf.cyl, , [1d8dcfe9662470c67bdea82b8f745ea2], 
 
Physical Sectors: 0
(No malicious items detected)
 
 
(end)


#9 severac

severac

  • Members
  • 872 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Serbia
  • Local time:12:24 PM

Posted 10 June 2015 - 02:25 AM

Hello,

 

did you remove this threats? As you can see, it's almost all PUP detections. 

 

 

If you recognize the PUP detection(s) as belonging to a program you installed and/or want to keep, you can add those items to the exclusion or ignore list (by right-clicking) so they will not show in future scans. If you don't recognize the detection(s), then you can remove them. 

 

MBAM also detected Trojan DNS changer:

 

Registry Data: 3

Trojan.DNSChanger, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS\Interfaces\{526FC5A3-CC5B-4A64-9A5A-13A8EB9059C0}|NameServer, 81.218.119.5,82.163.142.130, Good: (), Bad: (81.218.119.5,82.163.142.130),,[54567741d2b89e989dfaca74fa0ced13]
Trojan.DNSChanger, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS\Interfaces\{7C0FF764-64A1-4402-B7FB-775348D15D0B}|NameServer, 81.218.119.5,82.163.142.130, Good: (), Bad: (81.218.119.5,82.163.142.130),,[dbcf45732466e84e6f284ef0e323ac54]
Trojan.DNSChanger, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS\Interfaces\{85BF7BF7-E3B3-48EC-94C4-62910A97B632}|NameServer, 81.218.119.5,82.163.142.130, Good: (), Bad: (81.218.119.5,82.163.142.130),,[c8e2308895f5d066791e310d848244bc]

 

So, I suggest you to let MBAM to solve this. (I hope it will  :thumbup2: )


I would like to help you to remove malware. Let's look inside.   :busy:

But I don't know to solve all PC problems.  :smash: 

 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users