Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Browser opening multiple windows, prevents login, bogging down whole system


  • Please log in to reply
17 replies to this topic

#1 Mommymd

Mommymd

  • Members
  • 49 posts
  • OFFLINE
  •  
  • Local time:09:19 AM

Posted 01 August 2015 - 01:19 PM

Hi (Sirawit),

 

My son brought me his laptop last week and said he can't login to any websites, the browser is opening a million windows, and even when he is offline trying to run MSWord the whole system is bogged down and nearly unresponsive.

 

Please help! Thanks.

Mommymd



BC AdBot (Login to Remove)

 


#2 Firehouse

Firehouse

  • Members
  • 637 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:19 PM

Posted 01 August 2015 - 01:27 PM

Hello,
 
please download MiniToolBox by Farbar and save it to your desktop.
 
Run tool as Administrator and make sure that these options are checked :
 

  • Flush DNS
  • Reset IE Proxy Settings
  • Reset FF Proxy Settings
  • List Installed Programs

Post log here .
 
Step 2
 
Download TFC by OldTimer and save it to your desktop.
 
Run it as Administrator and click on Start button.
 
If programs need reboot, allow it to do so.
 
NOTE: IF your desktop disappears, don't panic, it's normal.

 

Step 3

 

Download Rkill and save it to your desktop (prefered version is iexplore.exe).

Run tool as Administrator,it will kill all malicious processes.

Program will download and install Malwarebytes as well, and it will launch.

Make sure you have latest definitions by clicking on Update Now,then under Scan choose Threat Scan.

After scanning is done, click on Remove if malware is found,tool will ask for restart , allow it to do so.

Attach MBAM log here (you can find it in History > Application Logs).

 

Step 4

 

Scan with Norton Power Eraser

CAUTION: NPE uses aggressive methods to detect and remove malware,so do not touch any of settings !

Download NPE by Symantec and save it to your desktop.

Run the tool as Administrator,accept license agreement,and click  Scan button.

Program will ask you to reboot to continue scanning (includes rootkit scan),so allow it to restart.

After restart program will automatically launch itself and start scanning. Scanning takes 5-10 minutes,so be patient !

If malware is detected,make sure that Create restore point option is checked,then click Fix button. After that,click on Restart now to complete removal.

 

Step 5

 

Scan with Dr.Web Cure It !
 
Download Dr.Web Cure It ! and save it to your desktop.
 
Run the tool as Administrator,accept license agreement by putting a checkmark on it, and click Scan.
 
Scan may take a while so be patient !
 
If there's malware found, click on Neutralize button, if program asks for restart, allow it to do so.



#3 Mommymd

Mommymd
  • Topic Starter

  • Members
  • 49 posts
  • OFFLINE
  •  
  • Local time:09:19 AM

Posted 01 August 2015 - 08:27 PM

Here you go.  Moving on to step 2.

 

MiniToolBox by Farbar  Version: 25-07-2015 01
Ran by Vinnie (administrator) on 01-08-2015 at 21:23:56
Running from "E:\"
Microsoft Windows 7 Home Premium  Service Pack 1 (X64)
Model: Satellite L755D Manufacturer: TOSHIBA
Boot Mode: Normal
***************************************************************************

========================= Flush DNS: ===================================

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

"Reset IE Proxy Settings": IE Proxy Settings were reset.

=========================== Installed Programs ============================

64 Bit HP CIO Components Installer (HKLM\...\{C788B026-20BD-4E96-B698-533F1D6C5013}) (Version: 7.2.4 - Hewlett-Packard) Hidden
ABBYY FineReader 9.0 Sprint (HKLM-x32\...\{F9000000-0018-0000-0000-074957833700}) (Version: 9.01.513.58212 - ABBYY) Hidden
ABBYY FineReader 9.0 Sprint (HKLM-x32\...\ABBYY FineReader 9.0 Sprint) (Version: 9.01.513.58212 - ABBYY)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 2.5.1.17730 - Adobe Systems Inc.)
Adobe Flash Player 18 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 18.0.0.209 - Adobe Systems Incorporated)
Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.209 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.12) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.12 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.6 (HKLM-x32\...\Adobe Shockwave Player) (Version: 11.6.3.633 - Adobe Systems, Inc.)
AMD Catalyst Install Manager (HKLM\...\{6119B3A6-3603-9695-0398-CDF2AF0A13F8}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
AOL Toolbar (HKCU\...\AOL Toolbar) (Version:  - )
Apple Application Support (HKLM-x32\...\{D9DAD0FF-495A-472B-9F10-BAE430A26682}) (Version: 3.0.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Atheros Communications Inc.® AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.1.42 - Atheros Communications Inc.)
Best Buy pc app (HKLM\...\{FBBC4667-2521-4E78-B1BD-8706F774549B}) (Version: 3.2.0.0 - Best Buy) Hidden
Best Buy pc app (HKLM-x32\...\{FBBC4667-2521-4E78-B1BD-8706F774549B}) (Version: 3.2.0.0 - Best Buy) Hidden
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
Codec Pack Packages (HKCU\...\Codec Pack Packages) (Version:  - )
Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.51.1.0 - Conexant)
Cybernet Worlds (HKLM-x32\...\Cybernet Worlds) (Version: 3.4 - Activeworlds.com, Inc.)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
DC-Bass Source 1.3.0 (HKLM-x32\...\DC-Bass Source) (Version:  - )
DirectVobSub 2.40.4209 (HKLM-x32\...\vsfilter_is1) (Version: 2.40.4209 - MPC-HC Team)
DivX Setup (HKLM-x32\...\DivX Setup) (Version: 2.6.1.8 - DivX, LLC)
EPSON Artisan 720 Series Printer Uninstall (HKLM\...\EPSON Artisan 720 Series) (Version:  - SEIKO EPSON Corporation)
Epson Connect (HKLM-x32\...\{64BA551C-9AF6-495C-93F3-D1270E0045FC}) (Version:  - )
Epson Customer Participation (HKLM\...\{814FA673-A085-403C-9545-747FC1495069}) (Version: 1.0.0.0 - SEIKO EPSON CORPORATION)
Epson Download Navigator (HKLM-x32\...\{10F63395-157F-4B93-AB4D-702A2FF11942}) (Version: 1.0.1 - SEIKO EPSON CORPORATION)
Epson Event Manager (HKLM-x32\...\{FA9D303D-0FB2-49C7-9397-8E6B11EA892D}) (Version: 2.50.0001 - SEIKO EPSON CORPORATION)
Epson FAX Utility (HKLM-x32\...\{0CBE6C93-CB2E-4378-91EE-12BE6D4E2E4A}) (Version: 1.20.00 - SEIKO EPSON CORPORATION)
Epson PC-FAX Driver (HKLM-x32\...\EPSON PC-FAX Driver 2) (Version:  - )
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
EPSON WorkForce 545 Series Printer Uninstall (HKLM\...\EPSON WorkForce 545 Series) (Version:  - SEIKO EPSON Corporation)
EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.4j - SEIKO EPSON CORPORATION)
ESET NOD32 Antivirus (HKLM\...\{89B0ECE0-A41F-4A45-98D9-D54C74338117}) (Version: 7.0.302.26 - ESET, spol s r. o.)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )
ffdshow v1.1.4399 [2012-03-22] (HKLM-x32\...\ffdshow_is1) (Version: 1.1.4399.0 - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 29.0.1547.57 - Google Inc.)
Google Toolbar for Internet Explorer (HKLM-x32\...\{18455581-E099-4BA8-BC6B-F34B2F06600C}) (Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.21.153 - Google Inc.) Hidden
Haali Media Splitter (HKLM-x32\...\HaaliMkx) (Version:  - )
High-Definition Video Playback (HKLM-x32\...\{237CCB62-8454-43E3-B158-3ACD0134852E}) (Version: 7.1.13400.42.0 - Nero AG) Hidden
Horizon v2.5.11.1 (HKLM-x32\...\d4cfeebc-b821-40b7-9f81-d366b1466f03_is1) (Version: 2.5.11.1 - Daring Development Inc.)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.2024 - HP Photo Creations Powered by RocketLife)
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.7.0 - LIGHTNING UK!)
InetStat (HKCU\...\InetStat) (Version: 0.5b - InetStat)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.32 - Irfan Skiljan)
iTunes (HKLM\...\{5A68A656-979F-4168-8795-E2E368AA4DC2}) (Version: 11.2.2.3 - Apple Inc.)
Java 7 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.250 - Oracle)
Java™ 6 Update 20 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216020FF}) (Version: 6.0.200 - Sun Microsystems, Inc.)
Junk Mail filter update (HKLM-x32\...\{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Lagarith Lossless Codec (1.3.27) (HKLM-x32\...\{F59AC46C-10C3-4023-882C-4212A92283B3}_is1) (Version:  - )
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version:  - )
Malwarebytes Anti-Malware version 2.0.1.1004 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.1.1004 - Malwarebytes Corporation)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.11.149.2 - McAfee, Inc.)
Mesh Runtime (HKLM-x32\...\{8C6D6116-B724-4810-8F2D-D047E6B7D68E}) (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 (HKLM-x32\...\{5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}) (Version: 9.0.30411 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
MiPony 2.0.2 (HKLM-x32\...\MiPony) (Version: 2.0.2 - )
Modio (HKLM-x32\...\{3DA224A5-666B-4941-8998-2F19C6D126A5}_is1) (Version:  - GameTuts)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Nero 10 Menu TemplatePack 1 (HKLM-x32\...\{42C8B7DF-FEB0-4D51-B169-506B6BEC5797}) (Version: 10.2.10000.0.0 - Nero AG)
Nero 10 Menu TemplatePack 2 (HKLM-x32\...\{E712C273-7564-4C8E-AA59-0FA19BC35117}) (Version: 10.2.10000.0.0 - Nero AG)
Nero 10 Menu TemplatePack 3 (HKLM-x32\...\{92146419-AE44-4C8B-A48B-0ABB1B5EC026}) (Version: 10.2.10100.1.0 - Nero AG)
Nero 10 Movie ThemePack 1 (HKLM-x32\...\{43FBAB46-5969-4200-9958-1FF81FEE506F}) (Version: 10.2.10000.11.0 - Nero AG)
Nero 10 Movie ThemePack 2 (HKLM-x32\...\{70F19404-B96C-4EBB-AD2B-3574F8736197}) (Version: 10.2.10100.1.0 - Nero AG)
Nero 10 Movie ThemePack 3 (HKLM-x32\...\{DD238642-14C7-4D54-8BD7-FAD6DEA9999B}) (Version: 10.2.10100.1.0 - Nero AG)
Nero 10 Movie ThemePack 4 (HKLM-x32\...\{A70B0C7B-3527-4D53-A694-E9492ECE9EE1}) (Version: 10.2.10100.1.0 - Nero AG)
Nero 10 PiP EffectPack 1 (HKLM-x32\...\{EF3A4DAE-F16F-4AC1-87BB-FE00A784084F}) (Version: 10.2.10000.0.0 - Nero AG)
Nero 10 Sample ImagePack (HKLM-x32\...\{ACD15FDF-FC42-4175-B477-576F92FF2256}) (Version: 10.2.10000.11.0 - Nero AG)
Nero 10 Sample Videos (HKLM-x32\...\{92A10E9D-EA00-4A46-8F22-EEA660992D61}) (Version: 10.2.10000.11.0 - Nero AG)
Nero 10 Video TransitionPack 1 (HKLM-x32\...\{85BEC8F6-9AA3-43FF-B56B-8276277137B3}) (Version: 10.2.10000.0.0 - Nero AG)
Nero BackItUp 10 (HKLM-x32\...\{68AB6930-5BFF-4FF6-923B-516A91984FE6}) (Version: 5.6.11000.11.100 - Nero AG)
Nero Burning ROM 10 (HKLM-x32\...\{7A5D731D-B4B3-490E-B339-75685712BAAB}) (Version: 10.2.11000.12.100 - Nero AG)
Nero BurnRights 10 (HKLM-x32\...\{943CFD7D-5336-47AF-9418-E02473A5A517}) (Version: 4.2.10300.0.102 - Nero AG)
Nero CoverDesigner 10 (HKLM-x32\...\{FCF00A6E-FB58-477A-ABE9-232907105521}) (Version: 5.2.10700.7.100 - Nero AG)
Nero DiscSpeed 10 (HKLM-x32\...\{34490F4E-48D0-492E-8249-B48BECF0537C}) (Version: 6.2.10300.1.100 - Nero AG)
Nero Express 10 (HKLM-x32\...\{70550193-1C22-445C-8FA4-564E155DB1A7}) (Version: 10.2.11100.12.100 - Nero AG)
Nero InfoTool 10 (HKLM-x32\...\{F412B4AF-388C-4FF5-9B2F-33DB1C536953}) (Version: 7.2.10300.5.100 - Nero AG)
Nero MediaHub 10 (HKLM-x32\...\{1F7FB68F-52F6-46A3-B42F-38CE46295AE5}) (Version: 1.2.12300.27.100 - Nero AG)
Nero Multimedia Suite 10 Platinum HD (HKLM-x32\...\{277C1559-4CF7-44FF-8D07-98AA9C13AABD}) (Version: 10.5.10900 - Nero AG)
Nero Recode 10 (HKLM-x32\...\{8ECEC853-5C3D-4B10-B5C7-FF11FF724807}) (Version: 4.8.10400.3.100 - Nero AG)
Nero RescueAgent 10 (HKLM-x32\...\{E337E787-CF61-4B7B-B84F-509202A54023}) (Version: 3.2.10600.7.100 - Nero AG)
Nero SoundTrax 10 (HKLM-x32\...\{E1EE5339-5D32-458F-BAAB-B19F6301BCE2}) (Version: 4.8.10200.1.100 - Nero AG)
Nero StartSmart 10 (HKLM-x32\...\{F61D489E-6C44-49AC-AD02-7DA8ACA73A65}) (Version: 10.2.11100.10.100 - Nero AG)
Nero Update (HKLM-x32\...\{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}) (Version: 1.0.0018 - Nero AG)
Nero Vision 10 (HKLM-x32\...\{9A4297F3-2A51-4ED9-92CA-4BCB8380947E}) (Version: 7.2.14700.9.100 - Nero AG)
Nero WaveEditor 10 (HKLM-x32\...\{EDCDFAD5-DF80-4600-A493-E9DAD6810230}) (Version: 5.8.10400.2.100 - Nero AG)
OpenSource Flash Video Splitter 1.0.0.5 (HKLM-x32\...\OpenSource Flash Video Splitter) (Version: 1.0.0.5 - )
PassShow (HKLM-x32\...\912138fe-a986-4780-ad7a-24960030e414) (Version:  - PassShow Software)
PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)
PlayReady PC Runtime x86 (HKLM-x32\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation)
QuickTime (HKLM-x32\...\{7BE15435-2D3E-4B58-867F-9C75BED0208C}) (Version: 7.71.80.42 - Apple Inc.)
Realtek USB 2.0 Reader Driver (HKLM-x32\...\{62BBB2F0-E220-4821-A564-730807D2C34D}) (Version: 1.0.0.14 - Realtek Semiconductor Corp.)
Realtek WLAN Driver (HKLM-x32\...\{9D3D8C60-A55F-4fed-B2B9-173001290E16}) (Version: 2.00.0013 - REALTEK Semiconductor Corp.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.4.0.9058 - Microsoft Corporation)
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
SmartMusic (HKLM-x32\...\{287324A5-8034-4720-ACE4-497956793955}) (Version: 1.1.2557 - MakeMusic, Inc.)
swMSM (HKLM-x32\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.2.11.1 - Synaptics Incorporated)
TOSHIBA Application Installer (HKLM-x32\...\{970472D0-F5F9-4158-A6E3-1AE49EFEF2D3}) (Version: 9.0.1.1 - TOSHIBA)
TOSHIBA Assist (HKLM-x32\...\{C2A276E3-154E-44DC-AAF1-FFDD7FD30E35}) (Version: 4.02.02 - TOSHIBA CORPORATION)
Toshiba Book Place (HKLM-x32\...\{92C7DC44-DAD3-49FE-B89B-F92C6BA9A331}) (Version: 2.2.6775 - K-NFB Reading Technology, Inc.)
TOSHIBA Bulletin Board (HKLM-x32\...\InstallShield_{C14518AF-1A0F-4D39-8011-69BAA01CD380}) (Version: 1.6.08.64 - TOSHIBA Corporation)
TOSHIBA Disc Creator (HKLM\...\{5DA0E02F-970B-424B-BF41-513A5018E4C0}) (Version: 2.1.0.9 for x64 - TOSHIBA Corporation)
TOSHIBA eco Utility (HKLM\...\{6FF9A012-0254-41E9-81E2-F538C4B53611}) (Version: 1.3.2.64 - TOSHIBA Corporation)
TOSHIBA Face Recognition (HKLM-x32\...\InstallShield_{F67FA545-D8E5-4209-86B1-AEE045D1003F}) (Version: 3.1.8.64 - TOSHIBA Corporation)
TOSHIBA Hardware Setup (HKLM-x32\...\InstallShield_{C4FFA951-9678-4D51-84B4-AFD15D3C45AD}) (Version: 4.09.02.00 - TOSHIBA)
TOSHIBA HDD/SSD Alert (HKLM\...\{D4322448-B6AF-4316-B859-D8A0E84DCB38}) (Version: 3.1.64.8 - TOSHIBA Corporation)
TOSHIBA Media Controller (HKLM-x32\...\{C7A4F26F-F9B0-41B2-8659-99181108CDE3}) (Version: 1.0.86.2 - TOSHIBA CORPORATION)
TOSHIBA Media Controller Plug-in (HKLM-x32\...\{F26FDF57-483E-42C8-A9C9-EEE1EDB256E0}) (Version: 1.0.6.1 - TOSHIBA CORPORATION)
TOSHIBA PC Health Monitor (HKLM\...\{9DECD0F9-D3E8-48B0-A390-1CF09F54E3A4}) (Version: 1.7.7.64 - TOSHIBA Corporation)
TOSHIBA Quality Application (HKLM-x32\...\{E69992ED-A7F6-406C-9280-1C156417BC49}) (Version: 1.0.3 - TOSHIBA)
TOSHIBA Recovery Media Creator (HKLM-x32\...\{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}) (Version: 2.1.3.5109 - TOSHIBA CORPORATION)
TOSHIBA ReelTime (HKLM-x32\...\InstallShield_{24811C12-F4A9-4D0F-8494-A7B8FE46123C}) (Version: 1.7.18.64 - TOSHIBA Corporation)
TOSHIBA Resolution+ Plug-in for Windows Media Player (HKLM-x32\...\{6CB76C9D-80C2-4CB3-A4CD-D96B239E3F94}) (Version: 1.1.0 - TOSHIBA Corporation)
TOSHIBA Service Station (HKLM-x32\...\{AC6569FA-6919-442A-8552-073BE69E247A}) (Version: 2.1.52 - TOSHIBA)
TOSHIBA Sleep Utility (HKLM-x32\...\{654F7484-88C5-46DC-AB32-C66BCB0E2102}) (Version: 1.4.2.8 - TOSHIBA Corporation)
TOSHIBA Supervisor Password (HKLM-x32\...\InstallShield_{CBD6B23D-41D5-4A46-8019-6208516C9712}) (Version: 4.09.02.00 - TOSHIBA)
TOSHIBA Value Added Package (HKLM-x32\...\InstallShield_{066CFFF8-12BF-4390-A673-75F95EFF188E}) (Version: 1.5.10.64 - TOSHIBA Corporation)
TOSHIBA Web Camera Application (HKLM-x32\...\InstallShield_{6F3C8901-EBD3-470D-87F8-AC210F6E5E02}) (Version: 2.0.0.21 - TOSHIBA Corporation)
TOSHIBA Wireless LAN Indicator (HKLM-x32\...\{5BA99779-6E12-49EF-BE49-F35B1EDB4DF9}) (Version: 1.0.4 - TOSHIBA CORPORATION)
ToshibaRegistration (HKLM-x32\...\{5AF550B4-BB67-4E7E-82F1-2C4300279050}) (Version: 1.0.4 - Toshiba)
Unity Web Player (HKCU\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
VC80CRTRedist - 8.0.50727.6195 (HKLM-x32\...\{933B4015-4618-4716-A828-5289FC03165F}) (Version: 1.2.0 - DivX, Inc) Hidden
Visual Studio 2008 x64 Redistributables (HKLM-x32\...\{FCDBEA60-79F0-4FAE-BBA8-55A26C609A49}) (Version: 10.0.0.2 - AVG Technologies)
Visual Studio 2010 x64 Redistributables (HKLM\...\{21B133D6-5979-47F0-BE1C-F6A6B304693F}) (Version: 13.0.0.1 - AVG Technologies)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
WinRAR 4.01 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 4.01.0 - win.rar GmbH)
WinSCP 4.3.6 (HKLM-x32\...\winscp3_is1) (Version: 4.3.6 - Martin Prikryl)
WMV9/VC-1 Video Playback (HKLM\...\{ADF96813-AFAD-7A71-402D-2D2795401B9E}) (Version: 1.00.0000 - ATI Technologies Inc.) Hidden
Xvid Video Codec (HKLM-x32\...\Xvid Video Codec 1.3.2) (Version: 1.3.2 - Xvid Team)

**** End of log ****



#4 Mommymd

Mommymd
  • Topic Starter

  • Members
  • 49 posts
  • OFFLINE
  •  
  • Local time:09:19 AM

Posted 01 August 2015 - 09:51 PM

hi Firehouse -

 

I couldn't get onto bleeping computer at all on my son's computer, so ran the first bit from a jump drive and posted the log, then remembered that I had MBAM on his computer from a previous issue so I ran it  - here's the log - I'll go back and start from your RKill instructions now.

Thank You.

 

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 8/1/2015
Scan Time: 9:38 PM
Logfile:
Administrator: Yes

Version: 2.1.8.1057
Malware Database: v2015.08.01.06
Rootkit Database: v2015.07.30.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Vinnie

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 380091
Time Elapsed: 42 min, 9 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 2
Spyware.InfoStealer, C:\Windows\mlwps.exe, 1400, Delete-on-Reboot, [c8e2659e3d4eac8a4fe6eb4bf1144fb1]
PUP.Optional.PrxySvrRST, C:\Program Files (x86)\Techsmart Computer\privoxy.exe, 2096, Delete-on-Reboot, [832720e3fb90231353c510fbe221f60a]

Modules: 1
PUP.Optional.PrxySvrRST, C:\Program Files (x86)\Techsmart Computer\mgwz.dll, Delete-on-Reboot, [832720e3fb90231353c510fbe221f60a],

Registry Keys: 198
Spyware.InfoStealer, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Live Malware Protection, Quarantined, [c8e2659e3d4eac8a4fe6eb4bf1144fb1],
PUP.Optional.SecureWeb.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{D3C24E2B-C820-4492-9B69-11BF7163F998}, Quarantined, [dad000036a21f93d34181b72bd45946c],
PUP.Optional.SecureWeb.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{D3C24E2B-C820-4492-9B69-11BF7163F998}, Quarantined, [dad000036a21f93d34181b72bd45946c],
PUP.Optional.SecureWeb.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{2F137995-4D26-44AD-9C4E-91055090A817}, Quarantined, [dad000036a21f93d34181b72bd45946c],
PUP.Optional.SecureWeb.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{A1E7709A-3AFB-49B8-8719-CCBF3F73CCB1}, Quarantined, [dad000036a21f93d34181b72bd45946c],
PUP.Optional.SecureWeb.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{A1E7709A-3AFB-49B8-8719-CCBF3F73CCB1}, Quarantined, [dad000036a21f93d34181b72bd45946c],
PUP.Optional.SecureWeb.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{A1E7709A-3AFB-49B8-8719-CCBF3F73CCB1}, Quarantined, [dad000036a21f93d34181b72bd45946c],
PUP.Optional.SecureWeb.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{2F137995-4D26-44AD-9C4E-91055090A817}, Quarantined, [dad000036a21f93d34181b72bd45946c],
PUP.Optional.SecureWeb.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{2F137995-4D26-44AD-9C4E-91055090A817}, Quarantined, [dad000036a21f93d34181b72bd45946c],
PUP.Optional.SecureWeb.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{D3C24E2B-C820-4492-9B69-11BF7163F998}, Quarantined, [dad000036a21f93d34181b72bd45946c],
PUP.Optional.SecureWeb.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{D3C24E2B-C820-4492-9B69-11BF7163F998}, Quarantined, [dad000036a21f93d34181b72bd45946c],
PUP.Optional.GoSearchMe.C, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{20B9D1AE-AD1A-38B4-87FE-AF278DA9861D}, Quarantined, [e0cac34095f667cf3264f4d723dfb44c],
PUP.Optional.GoSearchMe.C, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{20B9D1AE-AD1A-38B4-87FE-AF278DA9861D}, Quarantined, [e0cac34095f667cf3264f4d723dfb44c],
PUP.Optional.InetStat.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\InetStat, Quarantined, [eac049ba018a44f22776d85454afff01],
PUP.Optional.BargainJoy.A, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\khongjfjjmklggionajlpjcpmnppdace, Quarantined, [f3b721e22d5e5dd91ded9aad4bb8817f],
PUP.Optional.RealSummerSale.A, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\lladpgmmlijbmhfknhgkenkhikoaapmj, Quarantined, [ecbecf344546be78abcf57d07390a35d],
PUP.Optional.SearchQu.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2465}, Quarantined, [208a0ff4e9a27eb807710f896d9739c7],
PUP.Optional.DealPly.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\DealPly, Delete-on-Reboot, [258539caa3e864d214b5f31bfb08ca36],
PUP.Optional.DealPly.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\DealPlyUpdate, Delete-on-Reboot, [e8c2a95a7a11a1953e8b29e51ce71fe1],
PUP.Optional.DigitalSites.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Digital Sites, Delete-on-Reboot, [4268a75c4b4096a0884a8a846e95e818],
PUP.Optional.Babylon.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\EPUpdater, Delete-on-Reboot, [cddd7192563596a00c5ccf3f08fb40c0],
PUP.Optional.WebExpEnhanced.A, HKLM\SOFTWARE\WOW6432NODE\WebexpEnhancedV1, Quarantined, [ccde7192563539fda971d087c043659b],
PUP.Optional.BargainJoy.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\khongjfjjmklggionajlpjcpmnppdace, Quarantined, [1b8f996a4d3ed1652ae0da6d25deb64a],
PUP.Optional.RealSummerSale.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\lladpgmmlijbmhfknhgkenkhikoaapmj, Quarantined, [28821ee5206bef473446eb3cef1459a7],
PUP.Optional.BetterSurf.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\mmifolfpllfdhilecpdpmemhelmanajl, Quarantined, [eac0b64dc7c456e0cfe4b491a261ca36],
PUP.Optional.VideoPlayer.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\DDHFLJGMJIFMMDDJIBNAOKKLEGLJFBEB, Quarantined, [aa0046bdf992c96da8a9aa6c8d763dc3],
PUP.Optional.WebexpEnhanced.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\DMKBOBGLMJEEJPLIDFEJDGELDEPMDHBB, Quarantined, [aefc70931c6fe45288ca62b4c43fa759],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{21111111-1111-1111-1111-110211671166}, Quarantined, [703a47bc6b2010264cee5a4218ec817f],
PUP.Optional.Bandoo.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BD2E9F9F-4F7E-4B50-BACB-63CBE37C41B3}, Quarantined, [2684828124678bab9caaaff635cfd729],
PUP.Optional.PCSpeedUp.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\PCSUUCDRV, Quarantined, [b7f3946ff19aca6ca69a3f612ed646ba],
PUP.Optional.DefaultTab.A, HKU\S-1-5-18\SOFTWARE\DefaultTab, Quarantined, [d3d70bf844474ceac1a5dc4dba4910f0],
PUP.Optional.PassShow.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\APPDATALOW\SOFTWARE\PassShow, Quarantined, [00aa8182d7b4f442c95b151a4eb550b0],
PUP.Optional.BargainJoy.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\khongjfjjmklggionajlpjcpmnppdace, Quarantined, [75359271cdbe0d297e8da3a436cd53ad],
PUP.Optional.RealSummerSale.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\lladpgmmlijbmhfknhgkenkhikoaapmj, Quarantined, [129858abd3b86fc71168c0673ec5fd03],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{10B5C9EA-DAB6-4EF9-AF6E-11B445433C75}, Quarantined, [0f9b4eb5b1dac86e56e26c30788cbf41],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{112A07C6-A181-44E9-BB20-99F5EB906B31}, Quarantined, [7436d52e7b1034024eea94084bb952ae],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1273CA27-87EB-468D-B681-5CD654135ACE}, Quarantined, [1f8b7291b4d7c76f0e2a5e3e43c1b947],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{12C16148-9B05-4AE0-B76A-A29BFC1B747E}, Quarantined, [f8b229daec9fa3939d9ba4f8a75d669a],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{12CB71BF-38D1-4C9A-8D44-A0DA94C29683}, Quarantined, [09a1867d1b7003337cbc0f8dbb4952ae],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{13357D3C-7C0E-4FB1-BA19-F4E84DC78D8B}, Quarantined, [b4f628db2c5f0d290930e6b6c73d4db3],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{16B692A1-E3CA-4054-8BE0-FBCFBBAA615D}, Quarantined, [703a45bea7e48caa4aef455717ed18e8],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{171E71BC-10B1-4DED-BA7A-13EE3FF3993B}, Quarantined, [c1e99c674e3d0432aa8eabf1798bd729],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{186DECC4-9A3C-40CA-9825-5DCBEBC213C2}, Quarantined, [82288c77d4b71521c2768319d034c23e],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{18793BB9-79EF-436C-825C-D13715A41E2A}, Quarantined, [d6d40df61972b87ebe7bd6c6d3312cd4],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{19DA4FEF-7AE9-4224-83A2-BCB5C4E55B17}, Quarantined, [0f9b46bd55360e2886b3316bd92b2bd5],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1AFBB1EB-9B77-41CB-8CD1-EDD6F2C95D5E}, Quarantined, [49615fa4e3a82511ff397e1e877d7888],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1DE1052F-4AE4-4EEB-B47B-12A3C1CDACFF}, Quarantined, [1793d330503b7fb715241e7eca3ad12f],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1ECF2D8D-7AF8-4D08-B1DE-5DD0EDA663E6}, Quarantined, [b4f657ac3f4cd2645fd9faa2cf35758b],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{202A3BD6-A711-4AFD-A884-9052DE377FFC}, Quarantined, [3e6cd52e117a1c1abf7ab2ea09fbe11f],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2034648B-BA7D-4C17-946E-9FB236C06B95}, Quarantined, [3f6b21e2dfac45f1a4949705f21204fc],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2226A3A4-F018-46B6-AFD5-BB22FFF488EA}, Quarantined, [6f3bb94a236850e6e0594b51a85cbb45],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{235DD57D-CAC5-4B54-A34E-67DC5CC6187B}, Quarantined, [406abb481675e4521a1f14882dd7f50b],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2617412C-9DD8-4C30-9CFE-C734AC62231C}, Quarantined, [5c4eb1529cefde589b9d118b2cd8df21],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{270AAF2E-5F90-471A-8D7E-188445987F18}, Quarantined, [e3c7f310e2a99d99ee4a445864a052ae],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{27DD8C5E-3DA3-4744-BDA5-7DB6C1DF9C4D}, Quarantined, [b6f4a2612a616acc3305f8a426deeb15],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{286A1577-43B5-4CA9-8AB7-36CCE871758B}, Quarantined, [2387fc07602b072f2c0d08946c981de3],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2B0F23B4-E64E-46EC-A2F2-BE2288F5D13E}, Quarantined, [604adb28810a8bab6acf009c2ed612ee],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2E55AC24-50AA-41F4-B98B-81D81DF11B7F}, Quarantined, [1d8d5ea50289f046be7b297382828779],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2E5847E6-E51D-4DD8-99E7-97C018A36110}, Quarantined, [9911c83b0586ff37fa3e34685da7f907],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{30BE540A-109A-4D19-96A2-ABE795D320C5}, Quarantined, [87232ed53952d363e355b7e541c3b848],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{30EF85FA-941B-4EE5-AD39-B7E879BD1A35}, Quarantined, [634728db69226fc76ccd8e0eb54f758b],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{31E98AAC-E37C-4D46-9BFA-6B1CCF1D7F54}, Quarantined, [8129bd461873d75f3503039935cfa858],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{321D8AF7-686F-4919-96C3-18F25A1E1976}, Quarantined, [a208eb183b50a98d8fa9b4e87a8a0cf4],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{331E9946-3D75-4B88-8310-FD35D95387C7}, Quarantined, [228848bb890254e2a1973567976d9f61],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{355AA14A-2963-4F2B-8066-A95F35B4AA75}, Quarantined, [91191ee538538da984b415871fe501ff],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3578607F-9FB4-4F03-B952-C1416D868E42}, Quarantined, [d0da649fe4a74ee82613c3d9ae56738d],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{35AEDBD3-59C5-44E7-98B3-EA4D4F391F7F}, Quarantined, [00aa798a48434ee83ff96e2e44c0e917],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{35C77A7B-14F0-4AB6-8BD8-F26876D1309A}, Quarantined, [b6f456adf893ba7c18205d3fb74d6898],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3813AEF4-5AAB-4960-97E2-875CE06EEC50}, Quarantined, [44668083e6a50b2baf89019b966ef20e],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3B4BCFBB-ECE5-4D12-813C-1F126DD5FD79}, Quarantined, [802a5ca735561d195eda7923af55a060],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3C0B4FA7-6AEB-4C1A-AB55-B836D1867840}, Quarantined, [7e2cf2116a2193a31f18b1ebde26b34d],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3D556E55-AF96-4C5D-9EFB-8A6DF2E74DAD}, Quarantined, [12989f64c7c4eb4baa8efaa2c242e41c],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3D7CED2B-911A-421B-AF66-CB3CF13F207C}, Quarantined, [892118eb5e2dff373efb4458996b06fa],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3FB51DFB-D5A2-4874-8EC8-32CEB686686F}, Quarantined, [6149c83bfa910531c6738715af554db3],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4122A7E7-82E7-4482-A3FD-8596437A63ED}, Quarantined, [5258d2313457ba7c60d80e8ebd47a65a],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4173C0C4-BDBD-42C8-93D9-A1F629AF14E1}, Quarantined, [9a10dd26612a989e6bcd06968a7a2bd5],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4404DB33-ABCE-48C5-9491-50777E98B66A}, Quarantined, [8426020147442115cb6e7b2172925fa1],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{46EF4669-73C0-4F85-BB35-F16116ED5E8D}, Quarantined, [a901b54e99f2cc6a4aee891323e15ba5],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4758EA77-E942-4D5E-9FAE-58DAF3481E79}, Quarantined, [feacb94aa1ea86b03603adef798b2bd5],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{484A23D0-3C66-4002-A149-5021FCDE19B1}, Quarantined, [feacb251d5b6bf770335425abc48b24e],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{493A501E-5724-49D0-8A88-1DE6F238CA10}, Quarantined, [159530d3147788aed167a7f514f016ea],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4BA42143-A5E9-4CD3-8CEA-D09F4C46E114}, Quarantined, [892132d1bbd0092d70c97527be464ab6],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4BEA5611-DA5A-4F94-AA2C-B4B187415AD2}, Quarantined, [9614976c6e1df24412274a5223e1fd03],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4C2997C2-C759-43BD-AF99-3CEDADECA3F2}, Quarantined, [fdadc73cdfac8caa6bce6a329f65718f],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4C54F288-697A-4410-B95A-314A6FF9EAFC}, Quarantined, [c9e1649fff8c2e0825141b8147bdcc34],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4ECD944E-BF7A-459C-BEE6-A399E3212BEA}, Quarantined, [783257ac7516de582217e5b7cc38fc04],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4F850F39-1DD7-42BB-B6F5-F6B5BEE7155A}, Quarantined, [b8f26f94a2e956e00c2cbce07e8625db],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{50371E2D-B172-4327-BED0-1682C4C34469}, Quarantined, [41699d6629621026e058594331d38b75],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5240F870-9A8D-4EE0-A35A-2A1AE867E56D}, Quarantined, [17930102c7c4a1957dbbcad280849c64],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{55D8353B-C6E1-45C0-B8D4-E74CF074539A}, Quarantined, [fdad52b1d2b96fc7f940b9e359ab49b7],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{569777B5-EB06-40B3-9588-F29FD9F38586}, Quarantined, [cddd16edbad19c9a6dcbfca0e4209769],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5A59AA91-FAC6-47EE-9017-EB6CD70298C5}, Quarantined, [7733a162a1eae55163d64359659fc13f],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5AE05C76-DCE4-48F2-A1B0-FEBF5C43B437}, Quarantined, [6a4073900d7e8da96fc93a6208fc57a9],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5BECCA2D-FC49-48BC-8019-7BF62D32C8E6}, Quarantined, [9f0ba95aabe00b2b0e2b5646ed17768a],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5DFE0779-B616-4820-98C0-76E96853EC8F}, Quarantined, [28825aa948438da9d76257458381e41c],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5EBCFC99-96C3-4104-B629-9DAE6BB52174}, Quarantined, [2f7ba75ce8a368ce55e3148821e342be],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{60CAF9C6-FA24-4404-9AC3-2A66D9707014}, Quarantined, [654544bf5932ae88cd6baeee6d9723dd],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{60E4DD7A-21A7-4A49-8766-4CA93ED437AF}, Quarantined, [525813f08a01a59110282a72689c14ec],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{61DF8099-BB28-430D-A018-ED59146B4A33}, Quarantined, [4c5e9c67bbd052e42d0b386407fd6997],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{61FE4B3D-9C57-4DDF-BAB3-371CC7199BED}, Quarantined, [88228d76d2b9e84e83b59309778d40c0],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6266BF83-4DCC-4641-AD76-935674827F8B}, Quarantined, [bfeb48bb533871c5d86198048d77a35d],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6283A3A9-8FBF-4596-AC7B-C88B5E74EF5A}, Quarantined, [07a315ee54372214fb3db0ecf90b7888],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{633DC5FF-1E00-4F5D-99C0-58A486BD6DAB}, Quarantined, [7832e023c4c779bd62d77c200df79d63],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{64C493F6-CD78-49F3-876C-67EBE635A745}, Quarantined, [9e0c43c0becd9d992d0b5a4225dfcf31],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{66971A09-13BB-4ACD-B2F4-909A19FBE55E}, Quarantined, [882244bfdcafab8b3cfc3d5fb94bf30d],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{66A3BCEF-B075-4EDD-ADDE-A9551785F1D8}, Quarantined, [614935cef79495a1cf6a7329f50f29d7],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{676C76E3-EBE7-4DAC-A4EE-F7382D58B514}, Quarantined, [55557b888dfe999d46f3b3e916ee639d],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{68C12D43-3260-4BFA-BCE1-99FF6FC694D8}, Quarantined, [49618182a5e6f93dda5ea8f418ec14ec],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{697F3CA8-2637-4588-90F8-2729ED841188}, Quarantined, [16949c677813251119203b61c44030d0],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6ABDDF6D-9A1C-4F7E-89A3-95FD8A2E83BF}, Quarantined, [8822be45c1ca6fc79e9b841811f37789],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6F41E129-96C1-412B-BF69-B65834C66CD0}, Quarantined, [23878d7672197eb82e0acad236ce619f],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6F66660D-1CCD-4BBA-A23E-416A48864F75}, Quarantined, [7b2fe91a24676acc2d0b68348e76f10f],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6FA44453-8E4E-4DF4-9AF8-4FC122CE9DF8}, Quarantined, [3773ca39b5d61224dc5db0ec3fc524dc],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7124C089-8BBA-47D6-905B-B8EB606FCB15}, Quarantined, [3d6d54af8dfebc7ad069dfbd6d97946c],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{72A28210-8B40-4F21-A6AB-5D1353258DBD}, Quarantined, [16949c6773189f97c772a0fc51b35ca4],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{73ECF211-EE8F-426F-A236-7235EAE386D1}, Quarantined, [cbdf60a3cebdfb3b37023f5d49bb58a8],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7437AE46-ABC6-47B4-91B7-D39C75F0ED87}, Quarantined, [34764fb40a816dc94ced9efe0bf98b75],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{75ACBC77-3C88-406C-9CAB-303719658055}, Quarantined, [307a7192a4e7d75f8fa984188183b848],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7735D515-AF99-49BE-83BD-B6DC1BE143A6}, Quarantined, [bdedda2992f9c175ff391488ef15a759],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7A11C424-806A-4236-BFF2-1061B1E150A6}, Quarantined, [5258ed16107b48eec8702f6d758f6e92],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7A368E0E-6898-400E-BCCF-DD4DBCDE9BE7}, Quarantined, [7e2ce61db5d683b3e94f3963d82c0af6],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7C8AD873-D668-4223-BF42-CCFE7BEB514E}, Quarantined, [dad059aa2566aa8c88b1e5b743c10df3],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7DACA84D-405C-486A-B790-149AE2242DD4}, Quarantined, [a00ad92adcaf2610c376bddf08fca957],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7E137FFB-BE4A-46BA-A8FE-13B7655256E9}, Quarantined, [34769a69d4b7b185c376475564a004fc],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7F18F4B9-363B-4AD4-B5BE-A3E9685E9BBB}, Quarantined, [307a3fc429628fa7d0681686e0246997],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{81560AC9-4FF7-447A-83C0-EEB0EC9CCABF}, Quarantined, [763434cf395290a61920bfdd5fa5ce32],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{834EEC81-7F93-4376-A9E6-42E125EDC2E2}, Quarantined, [1694976cfc8f57df5cddd9c314f0ef11],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8563096F-492A-4986-BB29-60B0FF6E9951}, Quarantined, [8129a95a5536ee48be7aa7f57292e719],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{858CE737-83E8-4196-8F80-928DA1E09CFA}, Quarantined, [6a40877cbfccee4849f006967094a759],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{86128375-4CF1-48C8-BED5-B48651522F79}, Quarantined, [d9d123e02962ff3753e50c9011f38c74],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{872532F2-1721-40BE-A2ED-CBBE34E493CB}, Quarantined, [8129cd363457e650eb4d6d2f3dc75aa6],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{88250930-3402-40D9-B0B5-77DE19CE674E}, Quarantined, [28821ce7682355e1ee4a4c50699bbb45],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8917ED75-1DC4-4273-9BD8-B6B1255DB94B}, Quarantined, [9515ea1964271422f148a1fb7391dc24],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8C00D027-A400-41E2-948C-BF5C2A87F934}, Quarantined, [8b1f887b296203330c2c326a1de72fd1],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8C1E866B-A8EF-4D0F-AEC1-34C81795C4A7}, Quarantined, [b2f8976c088358de4deb6834ab597b85],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8F2687ED-A473-44C7-996E-F3705CC492E7}, Quarantined, [12983cc77813fb3b0f2abede4db751af],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{90395B6A-6BF2-454C-B730-171D7167D38B}, Quarantined, [bfeb1ce75a318bab94a4029a07fdfc04],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{915B0375-A821-45DC-816F-E3F77553BE9A}, Quarantined, [cae046bd5833b58180b904983ec6da26],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9215F20A-8C32-4C4E-825A-4C9B7E215245}, Quarantined, [a802a95a5d2e80b6a3959903e91ba55b],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{93C9F28A-C845-4B7D-AF62-3E288EE49321}, Quarantined, [2684ac57d5b6f0468eab712b966e6799],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{943B6418-389F-4046-BFFD-8248DC2DC936}, Quarantined, [e7c3cf343556270fdb5ce0bcc2429c64],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{94BC9710-D1B5-400C-9C93-774C763CFA60}, Quarantined, [1694877ca9e2d264f14706965ca822de],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{94DD1EB4-8AEA-4A3D-9C3C-D2D7F42D13E5}, Quarantined, [eebcd330692213232f093963aa5a926e],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{96AACE3E-AAA2-4225-AD4F-CB4ECF271D62}, Quarantined, [03a7a360f497e650c375e9b3f11344bc],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{97253654-C20C-4045-A3A3-51C017E1DB79}, Quarantined, [9c0e51b20586b97dd564debe4aba21df],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9774378C-7830-4813-BDD5-6E88E7B27F43}, Quarantined, [23877d8626654fe70138ecb0c93beb15],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9782392D-A7E3-48CF-9C58-B0EB518419A4}, Quarantined, [406ad92a4645013580b8039955afd22e],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9A1799BD-3F12-4B4D-96F7-63EDA92BC7A4}, Quarantined, [317953b0d3b86ec8a5944f4de12331cf],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9BCEEAA8-6440-4C91-A43F-EF23556C51FE}, Quarantined, [06a425de6b2070c6f3466438a55f7987],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A0D3722A-A76A-42F6-9BA6-57E5D21EF447}, Quarantined, [88222ed53259eb4b1a1e3d5f05ff8c74],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A14D4073-121D-4978-9553-734F96FE8494}, Quarantined, [eac0db2893f8a98dbd7bf5a7679d7b85],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A26D988E-F447-49C9-9EED-ACD2B06B3B26}, Quarantined, [5d4d768d602b4bebcb6ef4a85ea68977],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A3CE4545-9AE0-4ED2-9730-50C4D8323BF1}, Quarantined, [8a2020e3bad15dd9ae8b8d0f0ff527d9],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A6ABD12A-F7D3-48C9-A3C4-21F33DD3FFB7}, Quarantined, [377320e3b6d5d75f7fba98045aaa27d9],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A7CC79CD-3456-44C8-87C9-42C0F0F17D3D}, Quarantined, [4862847f3358a49274c4514b0ff5867a],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A858F0BA-690E-42A0-A0AC-CDA787729C13}, Quarantined, [3d6d6d96abe056e058e1acf05ba9be42],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A9EBA9AA-EBF5-4FE4-8A82-77ABBCDF36D5}, Quarantined, [505ab1522a6156e05cdc8616669e629e],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AC6D4BDF-F58D-4B42-8354-1E2AA9E3B822}, Quarantined, [b2f863a0fb900d2994a5aaf2db29ab55],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AE112176-73A6-450A-AF7D-1778E863D75D}, Quarantined, [238724df5635f3432414bae237cd3fc1],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AE65D8CF-8DD9-48F3-AFB4-A3929F5AE168}, Quarantined, [5b4f956e6d1e4aec8aae4a52b2522fd1],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AEEA2A25-661E-4C82-845C-5AE286E128A4}, Quarantined, [4466bb4845468fa77bbe2874f80c14ec],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B17EB958-3B53-4936-80C9-67F26CB75580}, Quarantined, [abff9370c3c82c0a4eead8c4f50f2dd3],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B1ECD7A9-1A19-4D6B-83D1-9D87CEF7814C}, Quarantined, [c5e563a0771459dd4fea8e0ec83cc13f],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B2485432-4D6D-4AC5-B6ED-22B6AB57AEF0}, Quarantined, [4b5f24df6a2158de340519834bb9a060],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B27E722B-8A0F-4AE2-A03A-8875D2A1BF90}, Quarantined, [4d5d29da3259e74fa594405cfc0814ec],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B42AA547-3104-4A0B-9783-D8F77A641918}, Quarantined, [4f5b7c876b20b185cd6cf6a69c68c43c],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B4DB12E5-E7C2-44DD-8D71-6F8B8EBD48B7}, Quarantined, [7c2ed1322e5dd95dc078a9f3917313ed],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B530DA1A-8912-436B-B6D6-617D5FC03DDC}, Quarantined, [4f5b80835d2ea2941b1dc7d508fc1ce4],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B63A7A3B-C70E-4A6E-B36F-E28D6EA13F8A}, Quarantined, [1c8e867d810a8fa7f444168630d4f010],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B696EC8A-1C6E-47C1-B7C0-E88FFFE26B49}, Quarantined, [abff976c2863f145c870841817edd32d],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B891AE50-D197-4E6C-B4D1-D21C4D13D391}, Quarantined, [5f4bf3100b8062d44deb128a9470e51b],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B8B2E9DB-38DD-42EC-B113-F45B71E36C3B}, Quarantined, [109a689b6e1d51e586b30c90c83cbe42],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BE059755-836A-4A93-AA4E-53E02AC58475}, Quarantined, [05a5d42fcebd44f20a2e019b3ec647b9],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BE192BCA-FDA1-4D42-9D1A-153517335753}, Quarantined, [a505e61daedd53e3ae8b3a62f2128a76],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BE6A48C7-7ADB-4D74-86BA-87A863592A11}, Quarantined, [4d5d8f74aedd51e563d5afedd331ed13],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BEBF54F6-B437-422A-AD9D-184678B8D096}, Quarantined, [7a30ad5698f3da5cbe7a8b11b1536799],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C1AB3403-ED98-4C35-AB2D-AA857738BAB4}, Quarantined, [585251b2ef9c7bbb67d1891350b4e31d],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C264E073-C67B-4A11-A1CC-791078CE7D4B}, Quarantined, [6545748ff9922e083404f6a6f41038c8],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C8124A91-7689-41BA-B881-8E2BFAFFEDE0}, Quarantined, [a109ef14d8b391a52811465652b231cf],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C9A30E25-D804-4E9F-9785-ABCDEDA08360}, Quarantined, [3872ad564b4051e58faa5646bb49738d],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CA228202-730E-4A6A-8298-2CCE28115E2A}, Quarantined, [f6b405fe7318bb7b0a2f09938480a060],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D00C254C-764D-44D4-9EFB-B37059C9F4BF}, Quarantined, [1793d330177475c168d12c70da2a6f91],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D0B0ABAE-A88A-44F4-80B6-5BCBFE4DAB9D}, Quarantined, [4862996ac7c4b08640f8e9b38b79fd03],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D6F8BEBE-652E-4E6A-9741-FAC6FF461384}, Quarantined, [0d9d92718803d85e1029b2ea5fa520e0],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DA31AB9B-4C46-4837-8C21-1B547B3348F2}, Quarantined, [d3d717ec93f8c2740a2eb7e517edca36],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DC7EDCDA-54C9-4443-A422-68619B9B913F}, Quarantined, [674313f0becde551f841fd9f20e49769],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E1858D52-D41E-446A-A831-B6BA184ACE66}, Quarantined, [f6b4d62d206b85b116235d3f758f867a],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E4050066-E7A2-4C22-B235-B86B55A12033}, Quarantined, [6b3f57ac26659d9948f0435946be07f9],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E454407F-3AEF-4299-A97C-F8A07D6934D8}, Quarantined, [01a9f60d6f1c4fe7f544128a9f65fd03],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E4BA050E-EBCF-464B-A8C3-51D6CA4EF399}, Quarantined, [416924df0784cb6ba395debe4bb98e72],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E50105D3-18AA-4B39-9796-C3779F9A252C}, Quarantined, [a3072dd6f49743f364d41e7ea064837d],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EC6BFBB2-724D-4FE7-903B-7ED465FE3BE7}, Quarantined, [3f6b7a8996f59e98ac8d8a12b54fd729],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{ED66DB2F-9F69-4F34-BEB4-74E97E1AD563}, Quarantined, [8d1da1626f1cc274f8409a02f50f4bb5],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{ED726AEC-DE4E-402E-A91E-427C13D8D414}, Quarantined, [c6e40df6c5c63df9a198a4f8937136ca],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F557A0AC-7644-4711-9117-16869C65B9D0}, Quarantined, [199113f009820b2bec4d118b7d874db3],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F84252D0-2041-4FDB-917B-F2F76B158B54}, Quarantined, [6a4014ef8902cc6a94a5fd9f0df702fe],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F88FC093-7BA2-410D-A23B-3AD825A04B46}, Quarantined, [0aa071923556c175a296c2da7e86ba46],
PUP.Optional.PrxySvrRST, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\PrivoxyService, Quarantined, [832720e3fb90231353c510fbe221f60a],

Registry Values: 175
PUP.Optional.WhiteSmoke.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS\{167d9323-f7cc-48f5-948a-6f012831a69f}, Quarantined, [d5d5e81b6d1e5bdb9c85e8a6eb170ff1],
PUP.Optional.WhiteSmoke.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS|{167D9323-F7CC-48F5-948A-6F012831A69F}, Quarantined, [d5d5e81b6d1e5bdb9c85e8a6eb170ff1],
PUP.Optional.InetStat.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|InetStat, C:\Users\Vinnie\AppData\Roaming\InetStat\inetstat.exe, Quarantined, [eac049ba018a44f22776d85454afff01]
PUP.Optional.SearchQu.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2465}|SuggestionsURL_JSON, http://www.searchqu.com/suggest.php?src=ieb&gct=ds&appid=107&systemid=465&qu={searchTerms}&ft=json, Quarantined, [208a0ff4e9a27eb807710f896d9739c7]
PUP.Optional.VideoPlayer.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\ddhfljgmjifmmddjibnaokklegljfbeb|path, C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta732\ch\VideoPlayerV3beta732.crx, Quarantined, [aa0046bdf992c96da8a9aa6c8d763dc3]
PUP.Optional.WebexpEnhanced.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\dmkbobglmjeejplidfejdgeldepmdhbb|path, C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha7138\ch\WebexpEnhancedV1alpha7138.crx, Quarantined, [aefc70931c6fe45288ca62b4c43fa759]
PUP.Optional.GoSearchMe.C, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\ABOUTURLS|Tabs, https://gosearch.me/?u=bc5effa041e2830c37597e90fe310b85&c=up1&src=hp&inst=1433508584, Quarantined, [644663a06f1ca1955586b4e573911ce4]
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{21111111-1111-1111-1111-110211671166}|AppName, Discount Buddy-bg.exe, Quarantined, [703a47bc6b2010264cee5a4218ec817f]
PUP.Optional.Bandoo.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BD2E9F9F-4F7E-4B50-BACB-63CBE37C41B3}|AppPath, C:\PROGRA~2\SEARCH~1\Datamngr\ToolBar, Quarantined, [2684828124678bab9caaaff635cfd729]
PUP.Optional.GoSearch.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{20B9D1AE-AD1A-38B4-87FE-AF278DA9861D}|URL, https://gosearch.me/?q={searchTerms}&u=bc5effa041e2830c37597e90fe310b85&c=up1&src=srch&inst=1433508659, Quarantined, [ddcdbd466c1fbc7a23becdc9f014936d]
PUP.Optional.GoSearchMe.C, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\ABOUTURLS|Tabs, https://gosearch.me/?u=bc5effa041e2830c37597e90fe310b85&c=up1&src=hp&inst=1433508659, Quarantined, [f7b3679cb4d788aefcdeedacbf456898]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{10B5C9EA-DAB6-4EF9-AF6E-11B445433C75}|AppName, The weDownload Manager-enabler.exe-buttonutil.exe, Quarantined, [0f9b4eb5b1dac86e56e26c30788cbf41]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{112A07C6-A181-44E9-BB20-99F5EB906B31}|AppName, The weDownload-enabler.exe-buttonutil.exe, Quarantined, [7436d52e7b1034024eea94084bb952ae]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1273CA27-87EB-468D-B681-5CD654135ACE}|AppName, The weDownload-enabler.exe-buttonutil.exe, Quarantined, [1f8b7291b4d7c76f0e2a5e3e43c1b947]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{12C16148-9B05-4AE0-B76A-A29BFC1B747E}|AppName, The weDownload-enabler.exe-buttonutil.exe, Quarantined, [f8b229daec9fa3939d9ba4f8a75d669a]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{12CB71BF-38D1-4C9A-8D44-A0DA94C29683}|AppName, The weDownload Manager-enabler.exe-buttonutil.exe, Quarantined, [09a1867d1b7003337cbc0f8dbb4952ae]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{13357D3C-7C0E-4FB1-BA19-F4E84DC78D8B}|AppName, The weDownload-enabler.exe-codedownloader.exe, Quarantined, [b4f628db2c5f0d290930e6b6c73d4db3]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{16B692A1-E3CA-4054-8BE0-FBCFBBAA615D}|AppName, The weDownload-enabler.exe-codedownloader.exe, Quarantined, [703a45bea7e48caa4aef455717ed18e8]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{171E71BC-10B1-4DED-BA7A-13EE3FF3993B}|AppName, The weDownload Manager-enabler.exe-buttonutil.exe, Quarantined, [c1e99c674e3d0432aa8eabf1798bd729]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{186DECC4-9A3C-40CA-9825-5DCBEBC213C2}|AppName, The weDownload Manager-enabler.exe-buttonutil.exe, Quarantined, [82288c77d4b71521c2768319d034c23e]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{18793BB9-79EF-436C-825C-D13715A41E2A}|AppName, The weDownload-enabler.exe-codedownloader.exe, Quarantined, [d6d40df61972b87ebe7bd6c6d3312cd4]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{19DA4FEF-7AE9-4224-83A2-BCB5C4E55B17}|AppName, The weDownload-enabler.exe-codedownloader.exe, Quarantined, [0f9b46bd55360e2886b3316bd92b2bd5]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1AFBB1EB-9B77-41CB-8CD1-EDD6F2C95D5E}|AppName, The weDownload Manager-enabler.exe-buttonutil.exe, Quarantined, [49615fa4e3a82511ff397e1e877d7888]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1DE1052F-4AE4-4EEB-B47B-12A3C1CDACFF}|AppName, The weDownload-enabler.exe-codedownloader.exe, Quarantined, [1793d330503b7fb715241e7eca3ad12f]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1ecf2d8d-7af8-4d08-b1de-5dd0eda663e6}|AppName, The weDownload-buttonutil.exe, Quarantined, [b4f657ac3f4cd2645fd9faa2cf35758b]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{202a3bd6-a711-4afd-a884-9052de377ffc}|AppName, The weDownload Manager-codedownloader.exe, Quarantined, [3e6cd52e117a1c1abf7ab2ea09fbe11f]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2034648B-BA7D-4C17-946E-9FB236C06B95}|AppName, The weDownload Manager-enabler.exe-buttonutil.exe, Quarantined, [3f6b21e2dfac45f1a4949705f21204fc]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2226A3A4-F018-46B6-AFD5-BB22FFF488EA}|AppName, The weDownload Manager-enabler.exe-codedownloader.exe, Quarantined, [6f3bb94a236850e6e0594b51a85cbb45]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{235DD57D-CAC5-4B54-A34E-67DC5CC6187B}|AppName, The weDownload Manager-enabler.exe-codedownloader.exe, Quarantined, [406abb481675e4521a1f14882dd7f50b]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2617412C-9DD8-4C30-9CFE-C734AC62231C}|AppName, The weDownload Manager-enabler.exe-buttonutil.exe, Quarantined, [5c4eb1529cefde589b9d118b2cd8df21]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{270AAF2E-5F90-471A-8D7E-188445987F18}|AppName, The weDownload Manager-enabler.exe-buttonutil.exe, Quarantined, [e3c7f310e2a99d99ee4a445864a052ae]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{27DD8C5E-3DA3-4744-BDA5-7DB6C1DF9C4D}|AppName, The weDownload-enabler.exe-buttonutil.exe, Quarantined, [b6f4a2612a616acc3305f8a426deeb15]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{286A1577-43B5-4CA9-8AB7-36CCE871758B}|AppName, The weDownload-enabler.exe-codedownloader.exe, Quarantined, [2387fc07602b072f2c0d08946c981de3]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2B0F23B4-E64E-46EC-A2F2-BE2288F5D13E}|AppName, The weDownload-enabler.exe-codedownloader.exe, Quarantined, [604adb28810a8bab6acf009c2ed612ee]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2E55AC24-50AA-41F4-B98B-81D81DF11B7F}|AppName, The weDownload-enabler.exe-codedownloader.exe, Quarantined, [1d8d5ea50289f046be7b297382828779]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2E5847E6-E51D-4DD8-99E7-97C018A36110}|AppName, The weDownload-enabler.exe-buttonutil.exe, Quarantined, [9911c83b0586ff37fa3e34685da7f907]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{30BE540A-109A-4D19-96A2-ABE795D320C5}|AppName, The weDownload Manager-enabler.exe-buttonutil.exe, Quarantined, [87232ed53952d363e355b7e541c3b848]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{30EF85FA-941B-4EE5-AD39-B7E879BD1A35}|AppName, The weDownload Manager-enabler.exe-codedownloader.exe, Quarantined, [634728db69226fc76ccd8e0eb54f758b]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{31E98AAC-E37C-4D46-9BFA-6B1CCF1D7F54}|AppName, The weDownload-enabler.exe-buttonutil.exe, Quarantined, [8129bd461873d75f3503039935cfa858]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{321D8AF7-686F-4919-96C3-18F25A1E1976}|AppName, The weDownload-enabler.exe-buttonutil.exe, Quarantined, [a208eb183b50a98d8fa9b4e87a8a0cf4]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{331E9946-3D75-4B88-8310-FD35D95387C7}|AppName, The weDownload Manager-enabler.exe-buttonutil.exe, Quarantined, [228848bb890254e2a1973567976d9f61]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{355AA14A-2963-4F2B-8066-A95F35B4AA75}|AppName, The weDownload-enabler.exe-buttonutil.exe, Quarantined, [91191ee538538da984b415871fe501ff]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3578607F-9FB4-4F03-B952-C1416D868E42}|AppName, The weDownload Manager-enabler.exe-codedownloader.exe, Quarantined, [d0da649fe4a74ee82613c3d9ae56738d]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{35AEDBD3-59C5-44E7-98B3-EA4D4F391F7F}|AppName, The weDownload Manager-enabler.exe-buttonutil.exe, Quarantined, [00aa798a48434ee83ff96e2e44c0e917]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{35C77A7B-14F0-4AB6-8BD8-F26876D1309A}|AppName, The weDownload Manager-enabler.exe-buttonutil.exe, Quarantined, [b6f456adf893ba7c18205d3fb74d6898]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3813AEF4-5AAB-4960-97E2-875CE06EEC50}|AppName, The weDownload-enabler.exe-buttonutil.exe, Quarantined, [44668083e6a50b2baf89019b966ef20e]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3B4BCFBB-ECE5-4D12-813C-1F126DD5FD79}|AppName, The weDownload Manager-enabler.exe-buttonutil.exe, Quarantined, [802a5ca735561d195eda7923af55a060]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3c0b4fa7-6aeb-4c1a-ab55-b836d1867840}|AppName, The weDownload-bg.exe, Quarantined, [7e2cf2116a2193a31f18b1ebde26b34d]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3D556E55-AF96-4C5D-9EFB-8A6DF2E74DAD}|AppName, The weDownload Manager-enabler.exe-buttonutil.exe, Quarantined, [12989f64c7c4eb4baa8efaa2c242e41c]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3D7CED2B-911A-421B-AF66-CB3CF13F207C}|AppName, The weDownload Manager-enabler.exe-codedownloader.exe, Quarantined, [892118eb5e2dff373efb4458996b06fa]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3FB51DFB-D5A2-4874-8EC8-32CEB686686F}|AppName, The weDownload-enabler.exe-codedownloader.exe, Quarantined, [6149c83bfa910531c6738715af554db3]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4122A7E7-82E7-4482-A3FD-8596437A63ED}|AppName, The weDownload Manager-enabler.exe-buttonutil.exe, Quarantined, [5258d2313457ba7c60d80e8ebd47a65a]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4173C0C4-BDBD-42C8-93D9-A1F629AF14E1}|AppName, The weDownload-enabler.exe-buttonutil.exe, Quarantined, [9a10dd26612a989e6bcd06968a7a2bd5]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4404DB33-ABCE-48C5-9491-50777E98B66A}|AppName, The weDownload Manager-enabler.exe-codedownloader.exe, Quarantined, [8426020147442115cb6e7b2172925fa1]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{46EF4669-73C0-4F85-BB35-F16116ED5E8D}|AppName, The weDownload-enabler.exe-buttonutil.exe, Quarantined, [a901b54e99f2cc6a4aee891323e15ba5]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4758EA77-E942-4D5E-9FAE-58DAF3481E79}|AppName, The weDownload Manager-enabler.exe-codedownloader.exe, Quarantined, [feacb94aa1ea86b03603adef798b2bd5]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{484A23D0-3C66-4002-A149-5021FCDE19B1}|AppName, The weDownload-enabler.exe-buttonutil.exe, Quarantined, [feacb251d5b6bf770335425abc48b24e]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{493A501E-5724-49D0-8A88-1DE6F238CA10}|AppName, The weDownload-enabler.exe-buttonutil.exe, Quarantined, [159530d3147788aed167a7f514f016ea]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4BA42143-A5E9-4CD3-8CEA-D09F4C46E114}|AppName, The weDownload Manager-enabler.exe-codedownloader.exe, Quarantined, [892132d1bbd0092d70c97527be464ab6]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4BEA5611-DA5A-4F94-AA2C-B4B187415AD2}|AppName, The weDownload-enabler.exe-codedownloader.exe, Quarantined, [9614976c6e1df24412274a5223e1fd03]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4C2997C2-C759-43BD-AF99-3CEDADECA3F2}|AppName, The weDownload Manager-enabler.exe-codedownloader.exe, Quarantined, [fdadc73cdfac8caa6bce6a329f65718f]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4C54F288-697A-4410-B95A-314A6FF9EAFC}|AppName, The weDownload-enabler.exe-codedownloader.exe, Quarantined, [c9e1649fff8c2e0825141b8147bdcc34]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4ECD944E-BF7A-459C-BEE6-A399E3212BEA}|AppName, The weDownload Manager-enabler.exe-codedownloader.exe, Quarantined, [783257ac7516de582217e5b7cc38fc04]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4f850f39-1dd7-42bb-b6f5-f6b5bee7155a}|AppName, The weDownload Manager-buttonutil.exe, Quarantined, [b8f26f94a2e956e00c2cbce07e8625db]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{50371E2D-B172-4327-BED0-1682C4C34469}|AppName, The weDownload-enabler.exe-buttonutil.exe, Quarantined, [41699d6629621026e058594331d38b75]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5240F870-9A8D-4EE0-A35A-2A1AE867E56D}|AppName, The weDownload-enabler.exe-buttonutil.exe, Quarantined, [17930102c7c4a1957dbbcad280849c64]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{55D8353B-C6E1-45C0-B8D4-E74CF074539A}|AppName, The weDownload-enabler.exe-codedownloader.exe, Quarantined, [fdad52b1d2b96fc7f940b9e359ab49b7]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{569777B5-EB06-40B3-9588-F29FD9F38586}|AppName, The weDownload-enabler.exe-buttonutil.exe, Quarantined, [cddd16edbad19c9a6dcbfca0e4209769]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5a59aa91-fac6-47ee-9017-eb6cd70298c5}|AppName, The weDownload-codedownloader.exe, Quarantined, [7733a162a1eae55163d64359659fc13f]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5AE05C76-DCE4-48F2-A1B0-FEBF5C43B437}|AppName, The weDownload-enabler.exe-buttonutil.exe, Quarantined, [6a4073900d7e8da96fc93a6208fc57a9]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5BECCA2D-FC49-48BC-8019-7BF62D32C8E6}|AppName, The weDownload-enabler.exe-codedownloader.exe, Quarantined, [9f0ba95aabe00b2b0e2b5646ed17768a]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5DFE0779-B616-4820-98C0-76E96853EC8F}|AppName, The weDownload-enabler.exe-codedownloader.exe, Quarantined, [28825aa948438da9d76257458381e41c]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5EBCFC99-96C3-4104-B629-9DAE6BB52174}|AppName, The weDownload Manager-enabler.exe-buttonutil.exe, Quarantined, [2f7ba75ce8a368ce55e3148821e342be]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{60CAF9C6-FA24-4404-9AC3-2A66D9707014}|AppName, The weDownload-enabler.exe-buttonutil.exe, Quarantined, [654544bf5932ae88cd6baeee6d9723dd]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{60E4DD7A-21A7-4A49-8766-4CA93ED437AF}|AppName, The weDownload-enabler.exe-buttonutil.exe, Quarantined, [525813f08a01a59110282a72689c14ec]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{61DF8099-BB28-430D-A018-ED59146B4A33}|AppName, The weDownload Manager-enabler.exe-buttonutil.exe, Quarantined, [4c5e9c67bbd052e42d0b386407fd6997]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{61FE4B3D-9C57-4DDF-BAB3-371CC7199BED}|AppName, The weDownload Manager-enabler.exe-buttonutil.exe, Quarantined, [88228d76d2b9e84e83b59309778d40c0]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6266BF83-4DCC-4641-AD76-935674827F8B}|AppName, The weDownload-enabler.exe-codedownloader.exe, Quarantined, [bfeb48bb533871c5d86198048d77a35d]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6283A3A9-8FBF-4596-AC7B-C88B5E74EF5A}|AppName, The weDownload Manager-enabler.exe-buttonutil.exe, Quarantined, [07a315ee54372214fb3db0ecf90b7888]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{633DC5FF-1E00-4F5D-99C0-58A486BD6DAB}|AppName, The weDownload Manager-enabler.exe-codedownloader.exe, Quarantined, [7832e023c4c779bd62d77c200df79d63]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{64C493F6-CD78-49F3-876C-67EBE635A745}|AppName, The weDownload-enabler.exe-buttonutil.exe, Quarantined, [9e0c43c0becd9d992d0b5a4225dfcf31]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{66971A09-13BB-4ACD-B2F4-909A19FBE55E}|AppName, The weDownload-enabler.exe-buttonutil.exe, Quarantined, [882244bfdcafab8b3cfc3d5fb94bf30d]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{66A3BCEF-B075-4EDD-ADDE-A9551785F1D8}|AppName, The weDownload Manager-enabler.exe-codedownloader.exe, Quarantined, [614935cef79495a1cf6a7329f50f29d7]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{676C76E3-EBE7-4DAC-A4EE-F7382D58B514}|AppName, The weDownload-enabler.exe-codedownloader.exe, Quarantined, [55557b888dfe999d46f3b3e916ee639d]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{68C12D43-3260-4BFA-BCE1-99FF6FC694D8}|AppName, The weDownload Manager-enabler.exe-buttonutil.exe, Quarantined, [49618182a5e6f93dda5ea8f418ec14ec]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{697F3CA8-2637-4588-90F8-2729ED841188}|AppName, The weDownload Manager-enabler.exe-codedownloader.exe, Quarantined, [16949c677813251119203b61c44030d0]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6ABDDF6D-9A1C-4F7E-89A3-95FD8A2E83BF}|AppName, The weDownload Manager-enabler.exe-codedownloader.exe, Quarantined, [8822be45c1ca6fc79e9b841811f37789]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6F41E129-96C1-412B-BF69-B65834C66CD0}|AppName, The weDownload-enabler.exe-buttonutil.exe, Quarantined, [23878d7672197eb82e0acad236ce619f]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6F66660D-1CCD-4BBA-A23E-416A48864F75}|AppName, The weDownload-enabler.exe-buttonutil.exe, Quarantined, [7b2fe91a24676acc2d0b68348e76f10f]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6FA44453-8E4E-4DF4-9AF8-4FC122CE9DF8}|AppName, The weDownload-enabler.exe-codedownloader.exe, Quarantined, [3773ca39b5d61224dc5db0ec3fc524dc]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7124C089-8BBA-47D6-905B-B8EB606FCB15}|AppName, The weDownload-enabler.exe-codedownloader.exe, Quarantined, [3d6d54af8dfebc7ad069dfbd6d97946c]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{72A28210-8B40-4F21-A6AB-5D1353258DBD}|AppName, The weDownload Manager-enabler.exe-codedownloader.exe, Quarantined, [16949c6773189f97c772a0fc51b35ca4]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{73ECF211-EE8F-426F-A236-7235EAE386D1}|AppName, The weDownload Manager-enabler.exe-codedownloader.exe, Quarantined, [cbdf60a3cebdfb3b37023f5d49bb58a8]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7437AE46-ABC6-47B4-91B7-D39C75F0ED87}|AppName, The weDownload Manager-enabler.exe-codedownloader.exe, Quarantined, [34764fb40a816dc94ced9efe0bf98b75]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{75ACBC77-3C88-406C-9CAB-303719658055}|AppName, The weDownload Manager-enabler.exe-buttonutil.exe, Quarantined, [307a7192a4e7d75f8fa984188183b848]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7735D515-AF99-49BE-83BD-B6DC1BE143A6}|AppName, The weDownload-enabler.exe-buttonutil.exe, Quarantined, [bdedda2992f9c175ff391488ef15a759]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7A11C424-806A-4236-BFF2-1061B1E150A6}|AppName, The weDownload-enabler.exe-buttonutil.exe, Quarantined, [5258ed16107b48eec8702f6d758f6e92]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7A368E0E-6898-400E-BCCF-DD4DBCDE9BE7}|AppName, The weDownload-enabler.exe-buttonutil.exe, Quarantined, [7e2ce61db5d683b3e94f3963d82c0af6]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7C8AD873-D668-4223-BF42-CCFE7BEB514E}|AppName, The weDownload-enabler.exe-codedownloader.exe, Quarantined, [dad059aa2566aa8c88b1e5b743c10df3]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7DACA84D-405C-486A-B790-149AE2242DD4}|AppName, The weDownload-enabler.exe-codedownloader.exe, Quarantined, [a00ad92adcaf2610c376bddf08fca957]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7E137FFB-BE4A-46BA-A8FE-13B7655256E9}|AppName, The weDownload-enabler.exe-codedownloader.exe, Quarantined, [34769a69d4b7b185c376475564a004fc]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7F18F4B9-363B-4AD4-B5BE-A3E9685E9BBB}|AppName, The weDownload Manager-enabler.exe-buttonutil.exe, Quarantined, [307a3fc429628fa7d0681686e0246997]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{81560AC9-4FF7-447A-83C0-EEB0EC9CCABF}|AppName, The weDownload-enabler.exe-codedownloader.exe, Quarantined, [763434cf395290a61920bfdd5fa5ce32]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{834EEC81-7F93-4376-A9E6-42E125EDC2E2}|AppName, The weDownload Manager-enabler.exe-codedownloader.exe, Quarantined, [1694976cfc8f57df5cddd9c314f0ef11]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8563096F-492A-4986-BB29-60B0FF6E9951}|AppName, The weDownload-enabler.exe-buttonutil.exe, Quarantined, [8129a95a5536ee48be7aa7f57292e719]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{858CE737-83E8-4196-8F80-928DA1E09CFA}|AppName, The weDownload-enabler.exe-codedownloader.exe, Quarantined, [6a40877cbfccee4849f006967094a759]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{86128375-4CF1-48C8-BED5-B48651522F79}|AppName, The weDownload Manager-enabler.exe-buttonutil.exe, Quarantined, [d9d123e02962ff3753e50c9011f38c74]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{872532F2-1721-40BE-A2ED-CBBE34E493CB}|AppName, The weDownload Manager-enabler.exe-buttonutil.exe, Quarantined, [8129cd363457e650eb4d6d2f3dc75aa6]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{88250930-3402-40D9-B0B5-77DE19CE674E}|AppName, The weDownload Manager-enabler.exe-buttonutil.exe, Quarantined, [28821ce7682355e1ee4a4c50699bbb45]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8917ED75-1DC4-4273-9BD8-B6B1255DB94B}|AppName, The weDownload Manager-enabler.exe-codedownloader.exe, Quarantined, [9515ea1964271422f148a1fb7391dc24]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8C00D027-A400-41E2-948C-BF5C2A87F934}|AppName, The weDownload Manager-enabler.exe-buttonutil.exe, Quarantined, [8b1f887b296203330c2c326a1de72fd1]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8C1E866B-A8EF-4D0F-AEC1-34C81795C4A7}|AppName, The weDownload-enabler.exe-buttonutil.exe, Quarantined, [b2f8976c088358de4deb6834ab597b85]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8F2687ED-A473-44C7-996E-F3705CC492E7}|AppName, The weDownload-enabler.exe-codedownloader.exe, Quarantined, [12983cc77813fb3b0f2abede4db751af]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{90395B6A-6BF2-454C-B730-171D7167D38B}|AppName, The weDownload-enabler.exe-buttonutil.exe, Quarantined, [bfeb1ce75a318bab94a4029a07fdfc04]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{915B0375-A821-45DC-816F-E3F77553BE9A}|AppName, The weDownload Manager-enabler.exe-codedownloader.exe, Quarantined, [cae046bd5833b58180b904983ec6da26]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9215F20A-8C32-4C4E-825A-4C9B7E215245}|AppName, The weDownload Manager-enabler.exe-buttonutil.exe, Quarantined, [a802a95a5d2e80b6a3959903e91ba55b]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{93C9F28A-C845-4B7D-AF62-3E288EE49321}|AppName, The weDownload-enabler.exe-codedownloader.exe, Quarantined, [2684ac57d5b6f0468eab712b966e6799]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{943b6418-389f-4046-bffd-8248dc2dc936}|AppName, The weDownload Manager-bg.exe, Quarantined, [e7c3cf343556270fdb5ce0bcc2429c64]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{94BC9710-D1B5-400C-9C93-774C763CFA60}|AppName, The weDownload-enabler.exe-buttonutil.exe, Quarantined, [1694877ca9e2d264f14706965ca822de]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{94DD1EB4-8AEA-4A3D-9C3C-D2D7F42D13E5}|AppName, The weDownload-enabler.exe-buttonutil.exe, Quarantined, [eebcd330692213232f093963aa5a926e]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{96AACE3E-AAA2-4225-AD4F-CB4ECF271D62}|AppName, The weDownload Manager-enabler.exe-buttonutil.exe, Quarantined, [03a7a360f497e650c375e9b3f11344bc]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{97253654-C20C-4045-A3A3-51C017E1DB79}|AppName, The weDownload-enabler.exe-codedownloader.exe, Quarantined, [9c0e51b20586b97dd564debe4aba21df]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9774378C-7830-4813-BDD5-6E88E7B27F43}|AppName, The weDownload Manager-enabler.exe-codedownloader.exe, Quarantined, [23877d8626654fe70138ecb0c93beb15]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9782392D-A7E3-48CF-9C58-B0EB518419A4}|AppName, The weDownload Manager-enabler.exe-buttonutil.exe, Quarantined, [406ad92a4645013580b8039955afd22e]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9A1799BD-3F12-4B4D-96F7-63EDA92BC7A4}|AppName, The weDownload-enabler.exe-codedownloader.exe, Quarantined, [317953b0d3b86ec8a5944f4de12331cf]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9BCEEAA8-6440-4C91-A43F-EF23556C51FE}|AppName, The weDownload Manager-enabler.exe-codedownloader.exe, Quarantined, [06a425de6b2070c6f3466438a55f7987]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A0D3722A-A76A-42F6-9BA6-57E5D21EF447}|AppName, The weDownload-enabler.exe-buttonutil.exe, Quarantined, [88222ed53259eb4b1a1e3d5f05ff8c74]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A14D4073-121D-4978-9553-734F96FE8494}|AppName, The weDownload-enabler.exe-buttonutil.exe, Quarantined, [eac0db2893f8a98dbd7bf5a7679d7b85]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A26D988E-F447-49C9-9EED-ACD2B06B3B26}|AppName, The weDownload Manager-enabler.exe-codedownloader.exe, Quarantined, [5d4d768d602b4bebcb6ef4a85ea68977]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A3CE4545-9AE0-4ED2-9730-50C4D8323BF1}|AppName, The weDownload Manager-enabler.exe-codedownloader.exe, Quarantined, [8a2020e3bad15dd9ae8b8d0f0ff527d9]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A6ABD12A-F7D3-48C9-A3C4-21F33DD3FFB7}|AppName, The weDownload Manager-enabler.exe-codedownloader.exe, Quarantined, [377320e3b6d5d75f7fba98045aaa27d9]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A7CC79CD-3456-44C8-87C9-42C0F0F17D3D}|AppName, The weDownload Manager-enabler.exe-buttonutil.exe, Quarantined, [4862847f3358a49274c4514b0ff5867a]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A858F0BA-690E-42A0-A0AC-CDA787729C13}|AppName, The weDownload Manager-enabler.exe-codedownloader.exe, Quarantined, [3d6d6d96abe056e058e1acf05ba9be42]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A9EBA9AA-EBF5-4FE4-8A82-77ABBCDF36D5}|AppName, The weDownload Manager-enabler.exe-buttonutil.exe, Quarantined, [505ab1522a6156e05cdc8616669e629e]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AC6D4BDF-F58D-4B42-8354-1E2AA9E3B822}|AppName, The weDownload Manager-enabler.exe-codedownloader.exe, Quarantined, [b2f863a0fb900d2994a5aaf2db29ab55]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AE112176-73A6-450A-AF7D-1778E863D75D}|AppName, The weDownload-enabler.exe-buttonutil.exe, Quarantined, [238724df5635f3432414bae237cd3fc1]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AE65D8CF-8DD9-48F3-AFB4-A3929F5AE168}|AppName, The weDownload-enabler.exe-buttonutil.exe, Quarantined, [5b4f956e6d1e4aec8aae4a52b2522fd1]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AEEA2A25-661E-4C82-845C-5AE286E128A4}|AppName, The weDownload-enabler.exe-codedownloader.exe, Quarantined, [4466bb4845468fa77bbe2874f80c14ec]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B17EB958-3B53-4936-80C9-67F26CB75580}|AppName, The weDownload Manager-enabler.exe-buttonutil.exe, Quarantined, [abff9370c3c82c0a4eead8c4f50f2dd3]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B1ECD7A9-1A19-4D6B-83D1-9D87CEF7814C}|AppName, The weDownload-enabler.exe-codedownloader.exe, Quarantined, [c5e563a0771459dd4fea8e0ec83cc13f]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B2485432-4D6D-4AC5-B6ED-22B6AB57AEF0}|AppName, The weDownload-enabler.exe-codedownloader.exe, Quarantined, [4b5f24df6a2158de340519834bb9a060]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B27E722B-8A0F-4AE2-A03A-8875D2A1BF90}|AppName, The weDownload Manager-enabler.exe-codedownloader.exe, Quarantined, [4d5d29da3259e74fa594405cfc0814ec]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B42AA547-3104-4A0B-9783-D8F77A641918}|AppName, The weDownload-enabler.exe-codedownloader.exe, Quarantined, [4f5b7c876b20b185cd6cf6a69c68c43c]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B4DB12E5-E7C2-44DD-8D71-6F8B8EBD48B7}|AppName, The weDownload Manager-enabler.exe-buttonutil.exe, Quarantined, [7c2ed1322e5dd95dc078a9f3917313ed]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B530DA1A-8912-436B-B6D6-617D5FC03DDC}|AppName, The weDownload Manager-enabler.exe-buttonutil.exe, Quarantined, [4f5b80835d2ea2941b1dc7d508fc1ce4]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B63A7A3B-C70E-4A6E-B36F-E28D6EA13F8A}|AppName, The weDownload Manager-enabler.exe-buttonutil.exe, Quarantined, [1c8e867d810a8fa7f444168630d4f010]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B696EC8A-1C6E-47C1-B7C0-E88FFFE26B49}|AppName, The weDownload-enabler.exe-buttonutil.exe, Quarantined, [abff976c2863f145c870841817edd32d]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B891AE50-D197-4E6C-B4D1-D21C4D13D391}|AppName, The weDownload-enabler.exe-buttonutil.exe, Quarantined, [5f4bf3100b8062d44deb128a9470e51b]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B8B2E9DB-38DD-42EC-B113-F45B71E36C3B}|AppName, The weDownload-enabler.exe-codedownloader.exe, Quarantined, [109a689b6e1d51e586b30c90c83cbe42]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BE059755-836A-4A93-AA4E-53E02AC58475}|AppName, The weDownload Manager-enabler.exe-buttonutil.exe, Quarantined, [05a5d42fcebd44f20a2e019b3ec647b9]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BE192BCA-FDA1-4D42-9D1A-153517335753}|AppName, The weDownload-enabler.exe-codedownloader.exe, Quarantined, [a505e61daedd53e3ae8b3a62f2128a76]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BE6A48C7-7ADB-4D74-86BA-87A863592A11}|AppName, The weDownload-enabler.exe-buttonutil.exe, Quarantined, [4d5d8f74aedd51e563d5afedd331ed13]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BEBF54F6-B437-422A-AD9D-184678B8D096}|AppName, The weDownload-enabler.exe-buttonutil.exe, Quarantined, [7a30ad5698f3da5cbe7a8b11b1536799]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C1AB3403-ED98-4C35-AB2D-AA857738BAB4}|AppName, The weDownload-enabler.exe-buttonutil.exe, Quarantined, [585251b2ef9c7bbb67d1891350b4e31d]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C264E073-C67B-4A11-A1CC-791078CE7D4B}|AppName, The weDownload Manager-enabler.exe-buttonutil.exe, Quarantined, [6545748ff9922e083404f6a6f41038c8]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C8124A91-7689-41BA-B881-8E2BFAFFEDE0}|AppName, The weDownload Manager-enabler.exe-codedownloader.exe, Quarantined, [a109ef14d8b391a52811465652b231cf]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C9A30E25-D804-4E9F-9785-ABCDEDA08360}|AppName, The weDownload Manager-enabler.exe-codedownloader.exe, Quarantined, [3872ad564b4051e58faa5646bb49738d]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CA228202-730E-4A6A-8298-2CCE28115E2A}|AppName, The weDownload Manager-enabler.exe-codedownloader.exe, Quarantined, [f6b405fe7318bb7b0a2f09938480a060]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D00C254C-764D-44D4-9EFB-B37059C9F4BF}|AppName, The weDownload-enabler.exe-codedownloader.exe, Quarantined, [1793d330177475c168d12c70da2a6f91]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D0B0ABAE-A88A-44F4-80B6-5BCBFE4DAB9D}|AppName, The weDownload-enabler.exe-buttonutil.exe, Quarantined, [4862996ac7c4b08640f8e9b38b79fd03]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D6F8BEBE-652E-4E6A-9741-FAC6FF461384}|AppName, The weDownload-enabler.exe-codedownloader.exe, Quarantined, [0d9d92718803d85e1029b2ea5fa520e0]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DA31AB9B-4C46-4837-8C21-1B547B3348F2}|AppName, The weDownload Manager-enabler.exe-buttonutil.exe, Quarantined, [d3d717ec93f8c2740a2eb7e517edca36]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DC7EDCDA-54C9-4443-A422-68619B9B913F}|AppName, The weDownload-enabler.exe-codedownloader.exe, Quarantined, [674313f0becde551f841fd9f20e49769]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E1858D52-D41E-446A-A831-B6BA184ACE66}|AppName, The weDownload Manager-enabler.exe-codedownloader.exe, Quarantined, [f6b4d62d206b85b116235d3f758f867a]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E4050066-E7A2-4C22-B235-B86B55A12033}|AppName, The weDownload Manager-enabler.exe-buttonutil.exe, Quarantined, [6b3f57ac26659d9948f0435946be07f9]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E454407F-3AEF-4299-A97C-F8A07D6934D8}|AppName, The weDownload-enabler.exe-codedownloader.exe, Quarantined, [01a9f60d6f1c4fe7f544128a9f65fd03]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E4BA050E-EBCF-464B-A8C3-51D6CA4EF399}|AppName, The weDownload-enabler.exe-buttonutil.exe, Quarantined, [416924df0784cb6ba395debe4bb98e72]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E50105D3-18AA-4B39-9796-C3779F9A252C}|AppName, The weDownload-enabler.exe-buttonutil.exe, Quarantined, [a3072dd6f49743f364d41e7ea064837d]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EC6BFBB2-724D-4FE7-903B-7ED465FE3BE7}|AppName, The weDownload-enabler.exe-codedownloader.exe, Quarantined, [3f6b7a8996f59e98ac8d8a12b54fd729]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{ED66DB2F-9F69-4F34-BEB4-74E97E1AD563}|AppName, The weDownload Manager-enabler.exe-buttonutil.exe, Quarantined, [8d1da1626f1cc274f8409a02f50f4bb5]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{ED726AEC-DE4E-402E-A91E-427C13D8D414}|AppName, The weDownload Manager-enabler.exe-codedownloader.exe, Quarantined, [c6e40df6c5c63df9a198a4f8937136ca]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F557A0AC-7644-4711-9117-16869C65B9D0}|AppName, The weDownload-enabler.exe-codedownloader.exe, Quarantined, [199113f009820b2bec4d118b7d874db3]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F84252D0-2041-4FDB-917B-F2F76B158B54}|AppName, The weDownload-enabler.exe-codedownloader.exe, Quarantined, [6a4014ef8902cc6a94a5fd9f0df702fe]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F88FC093-7BA2-410D-A23B-3AD825A04B46}|AppName, The weDownload Manager-enabler.exe-buttonutil.exe, Quarantined, [0aa071923556c175a296c2da7e86ba46]
PUP.Optional.GoSearch.A, HKU\S-1-5-21-3434012667-135298376-3586262081-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{20B9D1AE-AD1A-38B4-87FE-AF278DA9861D}|URL, https://gosearch.me/?q={searchTerms}&u=bc5effa041e2830c37597e90fe310b85&c=up1&src=srch&inst=1433508659, Quarantined, [7e2ca360a7e48da9568a692dfd0710f0]

Registry Data: 0
(No malicious items detected)

Folders: 21
PUP.Optional.ConduitTB.Gen, C:\Users\Vinnie\AppData\Local\CRE, Quarantined, [fcae8f7467248caaa942f91a5fa413ed],
PUP.Optional.SweetIM.C, C:\Users\Vinnie\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}, Quarantined, [9b0fbe4544476fc7307f0711a06356aa],
PUP.Optional.InetStat.A, C:\Users\Vinnie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\InetStat, Quarantined, [feac946f7d0ec472219fb9d6857f6997],
PUP.Optional.PrxySvrRST, C:\Users\Vinnie\AppData\Roaming\Updater, Quarantined, [397104ff305ba6901a819e02cb39df21],
PUP.Optional.BetterSurf.A, C:\Users\Vinnie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dedmngkbaffkenlfdcbganndoghblmap, Quarantined, [723808fb9dee2412f02c0cdbf30f17e9],
PUP.Optional.Installmate, C:\ProgramData\InstallMate\{16782E9C-E344-47BD-A045-B9BA79870632}, Quarantined, [25853ec529624fe775666a8acd356a96],
PUP.Optional.Installmate, C:\ProgramData\InstallMate\{16782E9C-E344-47BD-A045-B9BA79870632}\CF33AAA29B823B84, Quarantined, [25853ec529624fe775666a8acd356a96],
PUP.Optional.DefaultTab.A, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\defaulttab, Quarantined, [5852ce35503b53e35ae3d4274fb3748c],
PUP.Optional.DefaultTab.A, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\defaulttab\defaulttab, Quarantined, [5852ce35503b53e35ae3d4274fb3748c],
PUP.Optional.RealSummerSale.A, C:\Users\Vinnie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lladpgmmlijbmhfknhgkenkhikoaapmj, Quarantined, [783218eb8ffc96a0fe39887606fc6f91],
PUP.Optional.RealSummerSale.A, C:\Users\Vinnie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lladpgmmlijbmhfknhgkenkhikoaapmj\5.0.0.0_0, Quarantined, [783218eb8ffc96a0fe39887606fc6f91],
PUP.Optional.RealSummerSale.A, C:\Users\Vinnie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lladpgmmlijbmhfknhgkenkhikoaapmj\5.0.0.0_0\images, Quarantined, [783218eb8ffc96a0fe39887606fc6f91],
PUP.Optional.RealSummerSale.A, C:\Users\Vinnie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lladpgmmlijbmhfknhgkenkhikoaapmj\5.0.0.0_1, Quarantined, [783218eb8ffc96a0fe39887606fc6f91],
PUP.Optional.RealSummerSale.A, C:\Users\Vinnie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lladpgmmlijbmhfknhgkenkhikoaapmj\5.0.0.0_1\images, Quarantined, [783218eb8ffc96a0fe39887606fc6f91],
PUP.Optional.Conduit.A, C:\Users\Vinnie\AppData\Local\Google\Chrome\User Data\Default\Extensions\neebgdeaohaofdhldpobdpfocdonmgki, Quarantined, [e2c8d62d305bde582bc48a77b44fc040],
PUP.Optional.PrxySvrRST, C:\Program Files (x86)\Techsmart Computer, Delete-on-Reboot, [832720e3fb90231353c510fbe221f60a],
PUP.Optional.SecureWeb, C:\Program Files (x86)\Mozilla Firefox\distribution\bundles\bc5effa041e2830c37597e90fe310b85\content, Quarantined, [1f8b33d0ee9d16205aefed8dc441e21e],
PUP.Optional.SecureWeb, C:\Program Files (x86)\Mozilla Firefox\distribution\bundles\bc5effa041e2830c37597e90fe310b85, Quarantined, [1f8b33d0ee9d16205aefed8dc441e21e],
PUP.Optional.MediaPlayer.A, C:\Users\Vinnie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjigcokheopefjgnldhifcdlngoilbbi\1.1_0, Quarantined, [7d2d59aa95f69a9c97911a5f6e97e61a],
PUP.Optional.MediaPlayer.A, C:\Users\Vinnie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjigcokheopefjgnldhifcdlngoilbbi\1.1_0\images, Quarantined, [7d2d59aa95f69a9c97911a5f6e97e61a],
PUP.Optional.MediaPlayer.A, C:\Users\Vinnie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjigcokheopefjgnldhifcdlngoilbbi, Quarantined, [7d2d59aa95f69a9c97911a5f6e97e61a],

Files: 69
Spyware.InfoStealer, C:\Windows\mlwps.exe, Delete-on-Reboot, [c8e2659e3d4eac8a4fe6eb4bf1144fb1],
PUP.Optional.SecureWeb.A, C:\Program Files (x86)\Techsmart Computer\gmie.dll, Quarantined, [dad000036a21f93d34181b72bd45946c],
Trojan.Downloader, C:\Users\Vinnie\AppData\Roaming\BA68.tmp.exe, Quarantined, [d5d58d76c4c78babd1a089f53cc6817f],
Trojan.Dropper, C:\Users\Vinnie\AppData\Roaming\Updater\winupd.exe, Quarantined, [5f4bd42f058683b3ceda1f3156aa8d73],
PUP.Optional.Bundle, C:\Users\Vinnie\Downloads\Setup (1).exe, Quarantined, [6c3e5ca70d7e6acccacc267e4eb36997],
PUP.Optional.Jelbrus.A, C:\Users\Vinnie\Downloads\Jillian_Michaels_6_Week_Six_Pack (1).exe, Quarantined, [39714db67615fd397d021661d33247b9],
PUP.Optional.Jelbrus.A, C:\Users\Vinnie\Downloads\Jillian_Michaels_6_Week_Six_Pack.exe, Quarantined, [b5f5946fafdc8aac354abeb9897c3dc3],
PUP.Optional.Amonetize, C:\Users\Vinnie\Downloads\Gta 5 Money Hack Tool Downloader__3687_i691879163_il15617283.exe, Quarantined, [98129c67abe0c96d0d976bcc8977fe02],
PUP.Optional.Amonetize, C:\Users\Vinnie\Downloads\Gta V Hack Tool Downloader__3687_i691881183_il15617737.exe, Quarantined, [c6e44eb545466ec8faaa6ec9d52bd828],
PUP.Optional.TidyNetwork.A, C:\Windows\System32\Tasks\TidyNetwork Update, Quarantined, [3e6cc93aa4e7c86e230361af7c8730d0],
PUP.Optional.ConduitTB.Gen, C:\Users\Vinnie\AppData\Local\CRE\klibnahbojhkanfgaglnlalfkgpcppfi.crx, Quarantined, [fcae8f7467248caaa942f91a5fa413ed],
PUP.Optional.ConduitTB.Gen, C:\Users\Vinnie\AppData\Local\CRE\neebgdeaohaofdhldpobdpfocdonmgki.crx, Quarantined, [fcae8f7467248caaa942f91a5fa413ed],
PUP.Optional.ConduitTB.Gen, C:\Users\Vinnie\AppData\Local\CRE\nemfjadlboooiffmcelkafilagddogim.crx, Quarantined, [fcae8f7467248caaa942f91a5fa413ed],
PUP.Optional.SweetIM.C, C:\Users\Vinnie\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetNT.crx, Quarantined, [9b0fbe4544476fc7307f0711a06356aa],
PUP.Optional.Conduit.A, C:\Users\Vinnie\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_neebgdeaohaofdhldpobdpfocdonmgki_0.localstorage, Quarantined, [4b5fab5867243df91fa169baa45f32ce],
PUP.Optional.Conduit.A, C:\Users\Vinnie\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_neebgdeaohaofdhldpobdpfocdonmgki_0.localstorage-journal, Quarantined, [7b2f1be8701b1521eed2ea3950b34cb4],
PUP.Optional.Conduit.A, C:\Users\Vinnie\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_nemfjadlboooiffmcelkafilagddogim_0.localstorage, Quarantined, [7c2e4ab95a3151e5ce74e63fd23128d8],
PUP.Optional.Conduit.A, C:\Users\Vinnie\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_nemfjadlboooiffmcelkafilagddogim_0.localstorage-journal, Quarantined, [baf048bbdead072f1e2478adc43fcb35],
PUP.Optional.RealSummerSale.A, C:\Users\Vinnie\AppData\Local\RealSummerSale.crx, Quarantined, [2d7d8b787c0fa88e95e3b2756f94ff01],
PUP.Optional.InetStat.A, C:\Users\Vinnie\AppData\Roaming\InetStat\inetstat.exe, Quarantined, [eac049ba018a44f22776d85454afff01],
PUP.Optional.PassShow.A, C:\Windows\System32\Tasks\PassShow_wd, Quarantined, [1892946f87043303e85593aedc275ca4],
PUP.Optional.InetStat.A, C:\Users\Vinnie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\InetStat\InetStat.lnk, Quarantined, [feac946f7d0ec472219fb9d6857f6997],
PUP.Optional.PrxySvrRST, C:\Users\Vinnie\AppData\Roaming\Updater\winupd.exe, Quarantined, [397104ff305ba6901a819e02cb39df21],
PUP.Optional.PrxySvrRST, C:\Users\Vinnie\AppData\Roaming\Updater\tasks.dll, Quarantined, [397104ff305ba6901a819e02cb39df21],
PUP.Optional.Installmate, C:\ProgramData\InstallMate\{16782E9C-E344-47BD-A045-B9BA79870632}\20120712214140.log, Quarantined, [25853ec529624fe775666a8acd356a96],
PUP.Optional.Installmate, C:\ProgramData\InstallMate\{16782E9C-E344-47BD-A045-B9BA79870632}\20120712214601.log, Quarantined, [25853ec529624fe775666a8acd356a96],
PUP.Optional.Installmate, C:\ProgramData\InstallMate\{16782E9C-E344-47BD-A045-B9BA79870632}\20120713003438.log, Quarantined, [25853ec529624fe775666a8acd356a96],
PUP.Optional.Installmate, C:\ProgramData\InstallMate\{16782E9C-E344-47BD-A045-B9BA79870632}\Setup.dat, Quarantined, [25853ec529624fe775666a8acd356a96],
PUP.Optional.Installmate, C:\ProgramData\InstallMate\{16782E9C-E344-47BD-A045-B9BA79870632}\Setup.exe, Quarantined, [25853ec529624fe775666a8acd356a96],
PUP.Optional.Installmate, C:\ProgramData\InstallMate\{16782E9C-E344-47BD-A045-B9BA79870632}\Setup.ico, Quarantined, [25853ec529624fe775666a8acd356a96],
PUP.Optional.Installmate, C:\ProgramData\InstallMate\{16782E9C-E344-47BD-A045-B9BA79870632}\TsuDll.dll, Quarantined, [25853ec529624fe775666a8acd356a96],
PUP.Optional.Installmate, C:\ProgramData\InstallMate\{16782E9C-E344-47BD-A045-B9BA79870632}\_Setup.dll, Quarantined, [25853ec529624fe775666a8acd356a96],
PUP.Optional.Installmate, C:\ProgramData\InstallMate\{16782E9C-E344-47BD-A045-B9BA79870632}\_Setupx.dll, Quarantined, [25853ec529624fe775666a8acd356a96],
PUP.Optional.DefaultTab.A, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\defaulttab\defaulttab\DefaultTabUninstaller.exe, Quarantined, [5852ce35503b53e35ae3d4274fb3748c],
PUP.Optional.DefaultTab.A, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\defaulttab\defaulttab\Setup.z, Quarantined, [5852ce35503b53e35ae3d4274fb3748c],
PUP.Optional.RealSummerSale.A, C:\Users\Vinnie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lladpgmmlijbmhfknhgkenkhikoaapmj\5.0.0.0_0\background.js, Quarantined, [783218eb8ffc96a0fe39887606fc6f91],
PUP.Optional.RealSummerSale.A, C:\Users\Vinnie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lladpgmmlijbmhfknhgkenkhikoaapmj\5.0.0.0_0\manifest.json, Quarantined, [783218eb8ffc96a0fe39887606fc6f91],
PUP.Optional.RealSummerSale.A, C:\Users\Vinnie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lladpgmmlijbmhfknhgkenkhikoaapmj\5.0.0.0_0\images\128.png, Quarantined, [783218eb8ffc96a0fe39887606fc6f91],
PUP.Optional.RealSummerSale.A, C:\Users\Vinnie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lladpgmmlijbmhfknhgkenkhikoaapmj\5.0.0.0_0\images\16.png, Quarantined, [783218eb8ffc96a0fe39887606fc6f91],
PUP.Optional.RealSummerSale.A, C:\Users\Vinnie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lladpgmmlijbmhfknhgkenkhikoaapmj\5.0.0.0_0\images\48.png, Quarantined, [783218eb8ffc96a0fe39887606fc6f91],
PUP.Optional.RealSummerSale.A, C:\Users\Vinnie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lladpgmmlijbmhfknhgkenkhikoaapmj\5.0.0.0_1\background.js, Quarantined, [783218eb8ffc96a0fe39887606fc6f91],
PUP.Optional.RealSummerSale.A, C:\Users\Vinnie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lladpgmmlijbmhfknhgkenkhikoaapmj\5.0.0.0_1\manifest.json, Quarantined, [783218eb8ffc96a0fe39887606fc6f91],
PUP.Optional.RealSummerSale.A, C:\Users\Vinnie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lladpgmmlijbmhfknhgkenkhikoaapmj\5.0.0.0_1\images\128.png, Quarantined, [783218eb8ffc96a0fe39887606fc6f91],
PUP.Optional.RealSummerSale.A, C:\Users\Vinnie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lladpgmmlijbmhfknhgkenkhikoaapmj\5.0.0.0_1\images\16.png, Quarantined, [783218eb8ffc96a0fe39887606fc6f91],
PUP.Optional.RealSummerSale.A, C:\Users\Vinnie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lladpgmmlijbmhfknhgkenkhikoaapmj\5.0.0.0_1\images\48.png, Quarantined, [783218eb8ffc96a0fe39887606fc6f91],
PUP.Optional.PrxySvrRST, C:\Program Files (x86)\Techsmart Computer\amnet.dll, Quarantined, [832720e3fb90231353c510fbe221f60a],
PUP.Optional.PrxySvrRST, C:\Program Files (x86)\Techsmart Computer\amnet64.dll, Quarantined, [832720e3fb90231353c510fbe221f60a],
PUP.Optional.PrxySvrRST, C:\Program Files (x86)\Techsmart Computer\checkproxy.exe, Quarantined, [832720e3fb90231353c510fbe221f60a],
PUP.Optional.PrxySvrRST, C:\Program Files (x86)\Techsmart Computer\config.txt, Quarantined, [832720e3fb90231353c510fbe221f60a],
PUP.Optional.PrxySvrRST, C:\Program Files (x86)\Techsmart Computer\default.action, Quarantined, [832720e3fb90231353c510fbe221f60a],
PUP.Optional.PrxySvrRST, C:\Program Files (x86)\Techsmart Computer\default.filter, Quarantined, [832720e3fb90231353c510fbe221f60a],
PUP.Optional.PrxySvrRST, C:\Program Files (x86)\Techsmart Computer\gmff.exe, Quarantined, [832720e3fb90231353c510fbe221f60a],
PUP.Optional.PrxySvrRST, C:\Program Files (x86)\Techsmart Computer\itchromium.exe, Quarantined, [832720e3fb90231353c510fbe221f60a],
PUP.Optional.PrxySvrRST, C:\Program Files (x86)\Techsmart Computer\itchromium64.exe, Quarantined, [832720e3fb90231353c510fbe221f60a],
PUP.Optional.PrxySvrRST, C:\Program Files (x86)\Techsmart Computer\ittask.exe, Quarantined, [832720e3fb90231353c510fbe221f60a],
PUP.Optional.PrxySvrRST, C:\Program Files (x86)\Techsmart Computer\mgwz.dll, Delete-on-Reboot, [832720e3fb90231353c510fbe221f60a],
PUP.Optional.PrxySvrRST, C:\Program Files (x86)\Techsmart Computer\privoxy.exe, Delete-on-Reboot, [832720e3fb90231353c510fbe221f60a],
PUP.Optional.PrxySvrRST, C:\Program Files (x86)\Techsmart Computer\privoxy.log, Delete-on-Reboot, [832720e3fb90231353c510fbe221f60a],
PUP.Optional.SecureWeb, C:\Program Files (x86)\Mozilla Firefox\distribution\bundles\bc5effa041e2830c37597e90fe310b85\content\load.js, Quarantined, [1f8b33d0ee9d16205aefed8dc441e21e],
PUP.Optional.SecureWeb, C:\Program Files (x86)\Mozilla Firefox\distribution\bundles\bc5effa041e2830c37597e90fe310b85\content\overlay.xul, Quarantined, [1f8b33d0ee9d16205aefed8dc441e21e],
PUP.Optional.SecureWeb, C:\Program Files (x86)\Mozilla Firefox\distribution\bundles\bc5effa041e2830c37597e90fe310b85\chrome.manifest, Quarantined, [1f8b33d0ee9d16205aefed8dc441e21e],
PUP.Optional.SecureWeb, C:\Program Files (x86)\Mozilla Firefox\distribution\bundles\bc5effa041e2830c37597e90fe310b85\install.rdf, Quarantined, [1f8b33d0ee9d16205aefed8dc441e21e],
PUP.Optional.MediaPlayer.A, C:\Users\Vinnie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjigcokheopefjgnldhifcdlngoilbbi\1.1_0\manifest.json, Quarantined, [7d2d59aa95f69a9c97911a5f6e97e61a],
PUP.Optional.MediaPlayer.A, C:\Users\Vinnie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjigcokheopefjgnldhifcdlngoilbbi\1.1_0\ffMediaPlayerV1alpha842chaction.js, Quarantined, [7d2d59aa95f69a9c97911a5f6e97e61a],
PUP.Optional.MediaPlayer.A, C:\Users\Vinnie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjigcokheopefjgnldhifcdlngoilbbi\1.1_0\icon.ico, Quarantined, [7d2d59aa95f69a9c97911a5f6e97e61a],
PUP.Optional.MediaPlayer.A, C:\Users\Vinnie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjigcokheopefjgnldhifcdlngoilbbi\1.1_0\images\MediaPlayerV1alpha842_128.png, Quarantined, [7d2d59aa95f69a9c97911a5f6e97e61a],
PUP.Optional.MediaPlayer.A, C:\Users\Vinnie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjigcokheopefjgnldhifcdlngoilbbi\1.1_0\images\MediaPlayerV1alpha842_16.png, Quarantined, [7d2d59aa95f69a9c97911a5f6e97e61a],
PUP.Optional.MediaPlayer.A, C:\Users\Vinnie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjigcokheopefjgnldhifcdlngoilbbi\1.1_0\images\MediaPlayerV1alpha842_48.png, Quarantined, [7d2d59aa95f69a9c97911a5f6e97e61a],
PUP.Optional.MediaPlayer.A, C:\Users\Vinnie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjigcokheopefjgnldhifcdlngoilbbi\1.1_0\images\MediaPlayerV1alpha842_64.png, Quarantined, [7d2d59aa95f69a9c97911a5f6e97e61a],

Physical Sectors: 0
(No malicious items detected)

(end)



#5 Mommymd

Mommymd
  • Topic Starter

  • Members
  • 49 posts
  • OFFLINE
  •  
  • Local time:09:19 AM

Posted 01 August 2015 - 09:52 PM

OH - and TFC eventually stalled out and I had to terminate it in task manager. Just FYI....



#6 Mommymd

Mommymd
  • Topic Starter

  • Members
  • 49 posts
  • OFFLINE
  •  
  • Local time:09:19 AM

Posted 01 August 2015 - 10:49 PM

OK - Java wanted to update, so I let it.  Then ran RKill and it shut down a jre process. It was in a prompt window and I couldn't figure out how to copy and paste it for ou.  Ran MBAM again and all was good.  Here is the log for you:

 

Malwarebytes Anti-Malware

 

www.malwarebytes.org

 

 

Scan Date: 8/1/2015

 

Scan Time: 11:00 PM

 

Logfile:

 

Administrator: Yes

 

 

Version: 2.1.8.1057

 

Malware Database: v2015.08.01.06

 

Rootkit Database: v2015.07.30.01

 

License: Free

 

Malware Protection: Disabled

 

Malicious Website Protection: Disabled

 

Self-protection: Disabled

 

 

OS: Windows 7 Service Pack 1

 

CPU: x64

 

File System: NTFS

 

User: Vinnie

 

 

Scan Type: Threat Scan

 

Result: Completed

 

Objects Scanned: 382420

 

Time Elapsed: 36 min, 52 sec

 

 

Memory: Enabled

 

Startup: Enabled

 

Filesystem: Enabled

 

Archives: Enabled

 

Rootkits: Disabled

 

Heuristics: Enabled

 

PUP: Enabled

 

PUM: Enabled

 

 

Processes: 0

 

(No malicious items detected)

 

 

Modules: 0

 

(No malicious items detected)

 

 

Registry Keys: 0

 

(No malicious items detected)

 

 

Registry Values: 0

 

(No malicious items detected)

 

 

Registry Data: 0

 

(No malicious items detected)

 

 

Folders: 0

 

(No malicious items detected)

 

 

Files: 0

 

(No malicious items detected)

 

 

Physical Sectors: 0

 

(No malicious items detected)

 

 

 

(end)



#7 Mommymd

Mommymd
  • Topic Starter

  • Members
  • 49 posts
  • OFFLINE
  •  
  • Local time:09:19 AM

Posted 02 August 2015 - 12:06 AM

Ran NPE - it found 4 items, but was only able to remove 3. The 4th item was the Best Buy PC app - I uninstalled it in the Programs and Features.

 

Ran Dr. Web - it found two items - an adware updater and something related to Chrome - it removed both of those.

 

What next?

Thank You!



#8 Firehouse

Firehouse

  • Members
  • 637 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:19 PM

Posted 02 August 2015 - 02:19 AM

Sorry for late response, i was sleeping :)

 

Now we will uninstall following programs :

 

  • AOL Toolbar
  • Google Toolbar for Internet Explorer
  • McAfee Security Scan Plus

 

To uninstall, go to Start > Control Panel > Programs and Features.

 

After that do following :

 

 

Download AdwCleaner by Xplode and save it to your desktop.
 
Run tool as Administrator, accept terms of usage, and wait while database is updating.
 
After it's done with updating, click Scan button and wait while it's scanning.
 
All found items remove by clicking on Cleaning button, and allow tool to restart.
 
After restart will make a log which you will attach or paste in your reply.

Download JRT by Malwarebytes and save it to your desktop.

Run tool as Administrator,accept disclaimer by pressing Y, and wait while it's scanning system.

Tool will automatically scan and remove all found items, if tool requires restart, allow it to do so.

Attach log here.



#9 Mommymd

Mommymd
  • Topic Starter

  • Members
  • 49 posts
  • OFFLINE
  •  
  • Local time:09:19 AM

Posted 02 August 2015 - 01:04 PM

Hi Firehouse,

 

AOl toolbar and Google toolbar were not listed in Programs and Features. I removed McAfee.

 

Here are the results of the Adware scan:

# AdwCleaner v4.208 - Logfile created 02/08/2015 at 13:15:12

 

# Updated 09/07/2015 by Xplode

 

# Database : 2015-08-01.1 [Server]

 

# Operating system : Windows 7 Home Premium Service Pack 1 (x64)

 

# Username : Vinnie - VINNIE-PC

 

# Running from : C:\Users\Vinnie\Desktop\AdwCleaner.exe

 

# Option : Cleaning

 

 

***** [ Services ] *****

 

 

 

***** [ Files / Folders ] *****

 

 

Folder Deleted : C:\Device

 

Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SmartPCFix

 

Folder Deleted : C:\Users\Vinnie\AppData\Local\PackageAware

 

Folder Deleted : C:\Users\Vinnie\AppData\Roaming\HPAppData

 

Folder Deleted : C:\Users\Vinnie\AppData\Roaming\InetStat

 

Folder Deleted : C:\Users\Vinnie\AppData\Roaming\Systweak

 

Folder Deleted : C:\Users\Vinnie\AppData\Roaming\SmartPCFix

 

Folder Deleted : C:\Users\Vinnie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof

 

File Deleted : C:\Users\Vinnie\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_fmfnfnpmhcllokmkepffndflpnadjmma_0.localstorage

 

File Deleted : C:\Users\Vinnie\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_nemfjadlboooiffmcelkafilagddogim_0

 

File Deleted : C:\Users\Vinnie\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nemfjadlboooiffmcelkafilagddogim

 

File Deleted : C:\Users\Vinnie\AppData\Roaming\WBPU-TTL.DAT

 

 

***** [ Scheduled tasks ] *****

 

 

Task Deleted : DTChk

 

Task Deleted : DTReg

 

Task Deleted : Malware Cleaner

 

Task Deleted : SmartPCFix Task

 

Task Deleted : TidyNetwork Update

 

 

***** [ Shortcuts ] *****

 

 

 

***** [ Registry ] *****

 

 

Key Deleted : HKCU\Software\Classes\Applications\inetstat.exe

 

Value Deleted : HKLM\SOFTWARE\Policies\Google\Chrome\ExtensionInstallForcelist [1]

 

Key Deleted : HKCU\Software\InetStat

 

Key Deleted : HKCU\Software\DownLite

 

Key Deleted : HKCU\Software\AppDataLow\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}

 

Key Deleted : HKLM\SOFTWARE\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}

 

Key Deleted : HKLM\SOFTWARE\Webexp Enhanced

 

Key Deleted : HKLM\SOFTWARE\Video Player

 

Key Deleted : HKLM\SOFTWARE\VideoPlayerV3

 

Key Deleted : HKLM\SOFTWARE\Better-Surf

 

Key Deleted : HKLM\SOFTWARE\SecureWebChannel

 

Key Deleted : HKU\.DEFAULT\Software\AVG Secure Search

 

Key Deleted : HKU\.DEFAULT\Software\BrowserMngr

 

Key Deleted : HKU\.DEFAULT\Software\ImInstaller

 

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Codec Pack Packages

 

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\912138fe-a986-4780-ad7a-24960030e414

 

Data Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <local>;*.local

 

 

***** [ Web browsers ] *****

 

 

-\\ Internet Explorer v11.0.9600.17909

 

 

 

-\\ Google Chrome v29.0.1547.57

 

 

[C:\Users\Vinnie\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://searchou.com/?q={searchTerms}&id=92ef5b6e000000000000d0df9a65f496&affilt=5

 

[C:\Users\Vinnie\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://search.conduit.com/Results.aspx?q={searchTerms}&SearchSource=49&CUI=UN40610584053276324&ctid=CT3289663&UM=2

 

[C:\Users\Vinnie\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://search.conduit.com/Results.aspx?ctid=CT3300023&SearchSource=45&UM=2&q={searchTerms}

 

[C:\Users\Vinnie\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://isearch.fantastigames.com/web?src=crb&gct=ds&appid=107&systemid=465&q={searchTerms}

 

[C:\Users\Vinnie\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://en.softonic.com/s/{searchTerms}

 

[C:\Users\Vinnie\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://slirsredirect.search.aol.com/redirector/sredir?sredir=843&query={searchTerms}&invocationType=tb50-ch-webpickaol-chromesbox-en-us&tb_uuid=20120510100428299&tb_oid=10-05-2012&tb_mrud=10-05-2012

 

 

*************************

 

 

AdwCleaner[R0].txt - [72679 bytes] - [26/04/2014 17:16:44]

 

AdwCleaner[R1].txt - [41309 bytes] - [27/04/2014 13:28:14]

 

AdwCleaner[R2].txt - [4402 bytes] - [02/08/2015 13:09:36]

 

AdwCleaner[S0].txt - [32750 bytes] - [27/04/2014 13:32:34]

 

AdwCleaner[S1].txt - [4323 bytes] - [02/08/2015 13:15:12]

 

 

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [4382  bytes] ##########



#10 Firehouse

Firehouse

  • Members
  • 637 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:19 PM

Posted 02 August 2015 - 01:11 PM

I will also need JRT log.



#11 Mommymd

Mommymd
  • Topic Starter

  • Members
  • 49 posts
  • OFFLINE
  •  
  • Local time:09:19 AM

Posted 02 August 2015 - 01:16 PM

just finished it....

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

Junkware Removal Tool (JRT) by Malwarebytes

 

Version: 7.5.4 (07.27.2015:1)

 

OS: Windows 7 Home Premium x64

 

Ran by Vinnie on Sun 08/02/2015 at 14:04:52.74

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

 

 

 

 

~~~ Services

 

 

 

 

~~~ Tasks

 

 

Successfully deleted: [Task] C:\windows\Tasks\PassShow_wd.job

 

 

 

 

~~~ Registry Values

 

 

Successfully deleted: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\best buy pc app

 

 

 

 

~~~ Registry Keys

 

 

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{76AF6D0D-4009-489E-8BA3-62B508E27AF0}

 

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{76AF6D0D-4009-489E-8BA3-62B508E27AF0}

 

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{76AF6D0D-4009-489E-8BA3-62B508E27AF0}

 

 

 

 

~~~ Files

 

 

 

 

~~~ Folders

 

 

Successfully deleted: [Folder] C:\ProgramData\best buy pc app

 

Successfully deleted: [Folder] C:\ProgramData\google

 

Successfully deleted: [Folder] C:\Users\Vinnie\Appdata\Local\best buy pc app

 

 

 

 

~~~ Chrome

 

 

 

[C:\Users\Vinnie\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - default search provider reset

 

 

[C:\Users\Vinnie\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:

 

 

[C:\Users\Vinnie\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset

 

 

[C:\Users\Vinnie\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:

 

 

 

 

 

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

Scan was completed on Sun 08/02/2015 at 14:14:06.65

 

End of JRT log

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~



#12 Firehouse

Firehouse

  • Members
  • 637 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:19 PM

Posted 02 August 2015 - 01:18 PM

How is the situation now ?



#13 Mommymd

Mommymd
  • Topic Starter

  • Members
  • 49 posts
  • OFFLINE
  •  
  • Local time:09:19 AM

Posted 02 August 2015 - 01:32 PM

Seems to be all good!

 

Anything else I should do?



#14 Firehouse

Firehouse

  • Members
  • 637 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:19 PM

Posted 02 August 2015 - 01:34 PM

If everything is good, you have to do one more step and you're good to go :)

 

Download Delfix by Xplode and save it to your desktop.

 

Run tool as Administrator and make sure that these are checked :

  • Remove disinfection tools
  • Reset system settings
  • Purge system restore

Click Run and created log attach to your reply.

 

I will also recommend you to install Macrium Reflect Free , so in case of disaster you can recover in no time :) (Check my signature for link)



#15 Mommymd

Mommymd
  • Topic Starter

  • Members
  • 49 posts
  • OFFLINE
  •  
  • Local time:09:19 AM

Posted 02 August 2015 - 01:54 PM

# DelFix v10.8 - Logfile created 02/08/2015 at 14:52:32

 

# Updated 29/07/2014 by Xplode

 

# Username : Vinnie - VINNIE-PC

 

# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)

 

 

~ Removing disinfection tools ...

 

 

Deleted : C:\AdwCleaner

 

Deleted : HKLM\SOFTWARE\OldTimer Tools

 

Deleted : HKLM\SOFTWARE\AdwCleaner

 

 

~ Cleaning system restore ...

 

 

Deleted : RP #210 [Scheduled Checkpoint | 03/05/2015 22:36:15]

 

Deleted : RP #211 [Scheduled Checkpoint | 04/02/2015 01:52:17]

 

Deleted : RP #212 [Scheduled Checkpoint | 04/19/2015 03:45:41]

 

Deleted : RP #213 [Scheduled Checkpoint | 04/29/2015 01:59:45]

 

Deleted : RP #214 [Scheduled Checkpoint | 06/03/2015 20:21:42]

 

Deleted : RP #215 [Scheduled Checkpoint | 06/16/2015 04:37:09]

 

Deleted : RP #216 [Windows Update | 08/01/2015 18:48:27]

 

Deleted : RP #217 [Norton_Power_Eraser_20150802000904300 | 08/02/2015 04:09:08]

 

Deleted : RP #218 [Windows Update | 08/02/2015 05:28:38]

 

Deleted : RP #219 [JRT Pre-Junkware Removal | 08/02/2015 18:04:58]

 

 

New restore point created !

 

 

~ Resetting system settings ... OK

 

 

########## - EOF - ##########






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users