WE'RE SURE THAT YOU'LL LOVE US!

Hey there! :wub: Looks like you're enjoying the discussion, but you're not signed up for an account. When you create an account, we remember exactly what you've read, so you always come right back where you left off. You also get notifications, here and via email, whenever new posts are made. You can like posts to share the love. Join 93084 other members! Anybody can ask, anybody can answer. Consistently helpful members may be invited to become staff. Here's how it works. Virus cleanup? Start here -> Malware Removal Forum.

Try What the Tech -- It's free!

Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

very slow on startup and I see www.v9.com in browser when super slow [

Started by ronlewjr , Sep 20 2014 10:34 AM

v9.com super slow

This topic is locked

37 replies to this topic

#1 ronlewjr

Authentic Member

Authentic Member
42 posts

Posted 20 September 2014 - 10:34 AM

Hello, the computer is running very slow at startup. usually about 3-4 minutes before I can access an internet site, just a home page like yahoo.com. Usually very fast, but not anymore. I notice when I click on home button on google to re-initiate since nothing is coming up, I see www.v9.com. i looked that up and see it is a virus/browser information taker...

Norton shows nothing wrong.

Thank you for your assistance. I am using an alienware 2012 desktop computer. so it should be fast enough.

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 8:57:39 AM, on 9/20/2014

Platform: Windows 7 SP1 (WinNT 6.00.3505)

MSIE: Internet Explorer v10.0 (10.00.9200.16660)

Boot mode: Normal

Running processes:

C:\Users\g\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe

C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

C:\Program Files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe

C:\Program Files (x86)\AlienRespawn\TOASTER.EXE

C:\Program Files (x86)\AlienRespawn\COMPONENTS\SCHEDULER\STSERVICE.EXE

C:\Program Files (x86)\AlienRespawn\Components\DSUpdate\DSUpd.exe

C:\Program Files (x86)\Norton 360\Engine\21.5.0.19\N360.exe

C:\Program Files\Alienware\Command Center\AlienFusionController.exe

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Users\g\Desktop\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.v9.com/?t...psd&t=34706a08d

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.bing.com/...q={searchTerms}

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.v9.com/?t...psd&t=34706a08d

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.v9.com/?t...psd&t=34706a08d

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.v9.com...q={searchTerms}

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.v9.com...q={searchTerms}

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.v9.com/?t...psd&t=34706a08d

R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.bing.com/...q={searchTerms}

R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.bing.com/...q={searchTerms}

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll

O2 - BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\21.5.0.19\coIEPlg.dll

O2 - BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\21.5.0.19\IPS\IPSBHO.DLL

O2 - BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll

O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~4\Office15\URLREDIR.DLL

O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~4\Office15\GROOVEEX.DLL

O2 - BHO: Act.UI.InternetExplorer.Plugins.AttachFile.CAttachFile - {D5233FCD-D258-4903-89B8-FB1568E7413D} - mscoree.dll (file missing)

O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll

O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\21.5.0.19\coIEPlg.dll

O3 - Toolbar: (no name) - {ae07101b-46d4-4a98-af68-0333ea26e113} - (no file)

O4 - HKCU\..\Run: [Artisan 720(Network)] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIGYA.EXE /FU "C:\Windows\TEMP\E_S2BB7.tmp" /EF "HKCU"

O4 - HKCU\..\Run: [LiveSupport] "C:\Program Files (x86)\LiveSupport\LiveSupport.exe" /noshow /log

O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')

O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll

O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll

O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll

O9 - Extra button: Attach Web page to ACT! contact - {6F431AC3-364A-478b-BBDB-89C7CE1B18F6} - mscoree.dll (file missing)

O9 - Extra 'Tools' menuitem: Attach Web page to ACT! contact... - {6F431AC3-364A-478b-BBDB-89C7CE1B18F6} - mscoree.dll (file missing)

O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll

O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll

O9 - Extra button: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm (file missing) (HKCU)

O9 - Extra 'Tools' menuitem: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm (file missing) (HKCU)

O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

O15 - Trusted Zone: http://www.samsungsetup.com

O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL

O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL

O20 - AppInit_DLLs: c:\windows\syswow64\nvinit.dll

O23 - Service: ACT! Scheduler - Sage Software, Inc. - C:\Program Files (x86)\ACT\Act for Windows\Act.Scheduler.exe

O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

O23 - Service: Andrea RT Filters Service (AERTFilters) - Andrea Electronics Corporation - C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe

O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

O23 - Service: Alienware Fusion Service (AlienFusionService) - Alienware - C:\Program Files\Alienware\Command Center\AlienFusionService.exe

O23 - Service: AlienFXWindowsService - Alienware - C:\Program Files\Alienware\Command Center\AlienFXWindowsService.exe

O23 - Service: BlueStacks Android Service (BstHdAndroidSvc) - BlueStack Systems, Inc. - C:\Program Files (x86)\BlueStacks\HD-Service.exe

O23 - Service: BlueStacks Log Rotator Service (BstHdLogRotatorSvc) - BlueStack Systems, Inc. - C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe

O23 - Service: Intel® Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe

O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)

O23 - Service: EpsonBidirectionalService - SEIKO EPSON CORPORATION - C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe

O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)

O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: HTCMonitorService - Nero AG - C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe

O23 - Service: Intel® Capability Licensing Service Interface - Intel® Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe

O23 - Service: Intuit Update Service v4 (IntuitUpdateServiceV4) - Intuit Inc. - C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe

O23 - Service: Intel® Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe

O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: Intel® Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

O23 - Service: MSI_ODD_Service - Micro-Star Int'l Co., Ltd. - c:\Program Files (x86)\msi\ODD Monitor\ODD_Monitor.exe

O23 - Service: Norton 360 (N360) - Symantec Corporation - C:\Program Files (x86)\Norton 360\Engine\21.5.0.19\N360.exe

O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)

O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe

O23 - Service: pcCMService - Alcatel-Lucent - C:\Program Files (x86)\Common Files\Motive\pcCMService.exe

O23 - Service: pcCMService64 - Alcatel-Lucent - C:\Program Files\Common Files\Motive\pcCMService.exe

O23 - Service: pcServiceHost - Alcatel-Lucent - C:\Program Files (x86)\Common Files\Motive\pcServiceHost.exe

O23 - Service: PMBDeviceInfoProvider - Sony Corporation - C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe

O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe

O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies, Inc. - C:\Program Files (x86)\WinPcap\rpcapd.exe

O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: SoftThinks Agent Service (SftService) - SoftThinks SAS - C:\Program Files (x86)\AlienRespawn\sftservice.EXE

O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe

O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)

O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)

O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

O23 - Service: Intel® Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe

O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)

O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)

O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

End of file - 14979 bytes

Advertisements

Register to Remove

#2 ken545

Forum God

Retired Classroom Teacher
23,225 posts

Interests:Fighting Malware and cooking some great Italian and TexMex food

Posted 20 September 2014 - 10:45 AM

:welcome:

Lets do this, I am providing the link and information for running Malwarebytes in case you need it, run this in order please

-AdwCleaner-by Xplode

Click on this link to download : ADWCleaner

Click on ONE of the Two Blue Download Now buttons That have a blue arrow beside them and save it to your desktop.

Do not click on any links in the top Advertisment.

Close all open programs and internet browsers.

Double click on AdwCleaner.exe to run the tool.

Click on Scan.

After the scan is complete click on "Clean"

Confirm each time with Ok.

Your computer will be rebooted automatically. A text file will open after the restart.

Please post the content of that logfile with your next reply.

You can find the logfile at C:\AdwCleaner[S1].txt as well.

===============================================================================

Please download Junkware Removal Tool to your desktop.

Shut down your protection software now to avoid potential conflicts.

Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".

The tool will open and start scanning your system.

Please be patient as this can take a while to complete depending on your system's specifications.

On completion, a log (JRT.txt) is saved to your desktop and will automatically open.

Post the contents of JRT.txt into your next message.

===============================================================================

Download Malwarebytes' Anti-Malware to your desktop.

Windows XP : Double click on the icon to run it.

Windows Vista, Windows 7 & 8 : Right click and select "Run as Administrator"

On the Dashboard click on Update Now

Go to the Setting Tab

Under Setting go to Detection and Protection

Under PUP and PUM make sure both are set to show Treat Detections as Malware

Go to Advanced setting and make sure Automatically Quarantine Detected Items is checked

Then on the Dashboard click on Scan

Make sure to select THREAT SCAN

Then click on Scan

When the scan is finished and the log pops up...select Copy to Clipboard

Please paste the log back into this thread for review

Exit Malwarebytes

The forum is staffed by volunteers who donate their time and expertise.
If you feel you have been helped, please consider a donation.

Find us on Facebook
Please LIKE and SHARE

Just a reminder that threads will be closed if no reply in 3 days.

#3 ken545

Forum God

Retired Classroom Teacher
23,225 posts

Interests:Fighting Malware and cooking some great Italian and TexMex food

Posted 23 September 2014 - 07:07 AM

Still with me ?

The forum is staffed by volunteers who donate their time and expertise.
If you feel you have been helped, please consider a donation.

Find us on Facebook
Please LIKE and SHARE

Just a reminder that threads will be closed if no reply in 3 days.

#4 ronlewjr

Authentic Member

Authentic Member
42 posts

Posted 23 September 2014 - 08:34 AM

wow, i just received an email of your response. thank you so much for responding so quickly, I will start to do as you directed. Sorry for not responding earlier, as I said I just received notice of your response. Thank you. Ron

#5 ken545

Forum God

Retired Classroom Teacher
23,225 posts

Interests:Fighting Malware and cooking some great Italian and TexMex food

Posted 23 September 2014 - 09:18 AM

Ok Ron, glad I didn't lose you

The forum is staffed by volunteers who donate their time and expertise.
If you feel you have been helped, please consider a donation.

Find us on Facebook
Please LIKE and SHARE

Just a reminder that threads will be closed if no reply in 3 days.

#6 ronlewjr

Authentic Member

Authentic Member
42 posts

Posted 23 September 2014 - 10:21 AM

Just got back, my son ran in to tell me he needed a ride to school. starting to work on the stuff you wrote above. thanks again. Ron

#7 ronlewjr

Authentic Member

Authentic Member
42 posts

Posted 23 September 2014 - 10:30 AM

# AdwCleaner v3.310 - Report created 23/09/2014 at 09:25:56

# Updated 12/09/2014 by Xplode

# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)

# Username : g - RONS-ALIENWARE

# Running from : C:\Users\g\Desktop\adwcleaner_3.310.exe

# Option : Clean

***** [ Services ] *****

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\apn

Folder Deleted : C:\Users\g\AppData\LocalLow\Conduit

Folder Deleted : C:\Users\g\Documents\Optimizer Pro

Folder Deleted : C:\Users\Titus\AppData\Local\Conduit

Folder Deleted : C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk

[!] Folder Deleted : C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk

File Deleted : C:\Users\g\AppData\Roaming\LiveSupport.exe_log.txt

File Deleted : C:\Users\g\AppData\Roaming\regsvr32.exe_log.txt

File Deleted : C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.azlyrics.com_0.localstorage

File Deleted : C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.azlyrics.com_0.localstorage-journal

File Deleted : C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.lyricsfreak.com_0.localstorage

File Deleted : C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.lyricsfreak.com_0.localstorage-journal

***** [ Scheduled Tasks ] *****

***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASAPI32

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASMANCS

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E993643-8FBC-44FE-BC85-D318495C4D96}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{E69D4A59-73DE-4E38-9FB3-740EC4D9060D}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}

Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}

Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}

Key Deleted : HKCU\Software\anchorfree

Key Deleted : HKCU\Software\SmartBar

Key Deleted : HKCU\Software\SoftwareUpdater

Key Deleted : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}

Key Deleted : HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}

Key Deleted : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}

Key Deleted : HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}

Key Deleted : HKLM\SOFTWARE\V9Software

Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3152E1F19977892449DC968802CE8964

Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16660

-\\ Mozilla Firefox v30.0 (en-US)

[ File : C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\prefs.js ]

-\\ Google Chrome v37.0.2062.120

[ File : C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted [Search Provider] : hxxp://search.aol.com/aol/search?q={searchTerms}

Deleted [Search Provider] : hxxp://www.ask.com/web?q={searchTerms}

Deleted [Search Provider] : hxxp://search.v9.com/web/?type=ds&ts=1407651854&from=air&uid=ST1000DM003-9YN162_Z1D2D90QXXXXZ1D2D90Q&i=psd&t=34706a08d&q={searchTerms}

*************************

AdwCleaner[R0].txt - [4004 octets] - [23/09/2014 09:24:37]

AdwCleaner[S0].txt - [3761 octets] - [23/09/2014 09:25:56]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [3821 octets] ##########

#8 ronlewjr

Authentic Member

Authentic Member
42 posts

Posted 23 September 2014 - 10:40 AM

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.2.0 (09.22.2014:1)

OS: Windows 7 Home Premium x64

Ran by g on Tue 09/23/2014 at 9:33:39.73

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Registry Values

~~~ Registry Keys

~~~ Files

~~~ Folders

~~~ FireFox

Successfully deleted the following from C:\Users\g\AppData\Roaming\mozilla\firefox\profiles\q0x8jozo.default\prefs.js

user_pref("browser.search.defaultenginename", "v9");

user_pref("browser.search.selectedEngine", "v9");

~~~ Event Viewer Logs were cleared

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on Tue 09/23/2014 at 9:37:19.58

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

#9 ronlewjr

Authentic Member

Authentic Member
42 posts

Posted 23 September 2014 - 10:55 AM

Since i thought i had not heard from anyone regarding help, i ran malwarebytes a couple of days ago and cleared lots of stuff out. i just ran again as instructed and changed settings as you suggested.

#10 ronlewjr

Authentic Member

Authentic Member
42 posts

Posted 23 September 2014 - 10:56 AM

Malwarebytes Anti-Malware

www.malwarebytes.org

Scan Date: 9/23/2014

Scan Time: 9:46:16 AM

Logfile:

Administrator: Yes

Version: 2.00.2.1012

Malware Database: v2014.09.23.07

Rootkit Database: v2014.09.19.01

License: Trial

Malware Protection: Enabled

Malicious Website Protection: Enabled

Self-protection: Disabled

OS: Windows 7 Service Pack 1

CPU: x64

File System: NTFS

User: g

Scan Type: Threat Scan

Result: Completed

Objects Scanned: 376846

Time Elapsed: 6 min, 41 sec

Memory: Enabled

Startup: Enabled

Filesystem: Enabled

Archives: Enabled

Rootkits: Disabled

Heuristics: Enabled

PUP: Enabled

PUM: Enabled

Processes: 0

(No malicious items detected)

Modules: 0

(No malicious items detected)

Registry Keys: 0

(No malicious items detected)

Registry Values: 0

(No malicious items detected)

Registry Data: 0

(No malicious items detected)

Folders: 0

(No malicious items detected)

Files: 0

(No malicious items detected)

Physical Sectors: 0

(No malicious items detected)

(end)

Advertisements

Register to Remove

#11 ronlewjr

Authentic Member

Authentic Member
42 posts

Posted 23 September 2014 - 11:05 AM

Please let me know what else I may need to do. thank you.

When done I have another computer that is rendered useless as it seems to run on its own forwever and super slow to not be usable at all.

thanks.

Ron

#12 ken545

Forum God

Retired Classroom Teacher
23,225 posts

Interests:Fighting Malware and cooking some great Italian and TexMex food

Posted 23 September 2014 - 11:08 AM

1. Open up Malwarebytes

2. Go to the History Tab

3. Click on Application Logs

4. Click on the scan log that you ran and found items to remove

5. Click on View

6. Then on the Bottom click on Copy to Clipboard

7. Then paste it into this thread

Then go ahead and run a new scan with FRST, dont forget to check additions and post both logs please

The forum is staffed by volunteers who donate their time and expertise.
If you feel you have been helped, please consider a donation.

Find us on Facebook
Please LIKE and SHARE

Just a reminder that threads will be closed if no reply in 3 days.

#13 ronlewjr

Authentic Member

Authentic Member
42 posts

Posted 23 September 2014 - 11:22 AM

Malwarebytes Anti-Malware

www.malwarebytes.org

Scan Date: 9/21/2014

Scan Time: 8:07:46 PM

Logfile:

Administrator: Yes

Version: 2.00.2.1012

Malware Database: v2014.09.22.01

Rootkit Database: v2014.09.19.01

License: Trial

Malware Protection: Enabled

Malicious Website Protection: Enabled

Self-protection: Disabled

OS: Windows 7 Service Pack 1

CPU: x64

File System: NTFS

User: g

Scan Type: Threat Scan

Result: Completed

Objects Scanned: 376218

Time Elapsed: 7 min, 47 sec

Memory: Enabled

Startup: Enabled

Filesystem: Enabled

Archives: Enabled

Rootkits: Disabled

Heuristics: Enabled

PUP: Warn

PUM: Enabled

Processes: 0

(No malicious items detected)

Modules: 0

(No malicious items detected)

Registry Keys: 10

PUP.Optional.Snapdo.T, HKU\S-1-5-21-4093186601-1063034090-4258288859-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{006ee092-9658-4fd6-bd8e-a21a348e59f5}, Quarantined, [4762a34ddd9e53e3db5ce2e5778b9a66],

PUP.Optional.Snapdo.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{006EE092-9658-4FD6-BD8E-A21A348E59F5}, Quarantined, [4762a34ddd9e53e3db5ce2e5778b9a66],

PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, Quarantined, [95140ae6215a01358e9b4814cc38ce32],

PUP.Optional.Conduit.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\dknkjnkhedbanphkkpbpcgoblmkbfhlf, Quarantined, [f8b104ec3e3d0432f548d04349baa65a],

PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, Quarantined, [7b2e87699ae18caa8e9b4d0fc53f5fa1],

PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPDP, Quarantined, [5c4d19d7b4c773c31a1258b28a796799],

PUP.Optional.V9.A, HKLM\SOFTWARE\WOW6432NODE\V9SOFTWARE\v9hp, Quarantined, [4c5d69877704f2440c7664d252b1b34d],

PUP.Optional.PriceGong.A, HKU\S-1-5-21-4093186601-1063034090-4258288859-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\PriceGong, Quarantined, [9a0fc42ccfac94a2119657ddf40f8a76],

PUP.Optional.Qone8, HKU\S-1-5-21-4093186601-1063034090-4258288859-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, Quarantined, [3d6c945caccf0e2869bf92cad3313fc1],

PUP.Optional.FastStart.A, HKU\S-1-5-21-4093186601-1063034090-4258288859-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MOZILLA\EXTENDS, Quarantined, [affa5d93314a9a9c014f13f40af9f10f],

Registry Values: 9

PUP.Optional.V9.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, http://search.v9.com...&t=34706a08d&q={searchTerms}, Quarantined, [05a4747cea9155e13d9135e48f7403fd]

PUP.Optional.SmartBar, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{ae07101b-46d4-4a98-af68-0333ea26e113}, Smartbar, Quarantined, [4f5a638de9921f1728c366a219eae020]

PUP.Optional.V9.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, http://search.v9.com...&t=34706a08d&q={searchTerms}, Quarantined, [f1b8a44cadce8caa8f3feb2e31d29b65]

PUP.Optional.SmartBar, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{ae07101b-46d4-4a98-af68-0333ea26e113}, Smartbar, Quarantined, [a3061cd4057679bde40740c827dcce32]

PUP.Optional.FastStart.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|faststartff@gmail.com, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com, Quarantined, [96132bc53645ce68fcb7b9b629dbb24e]

PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPDP|dir, C:\Program Files (x86)\SupTab, Quarantined, [5c4d19d7b4c773c31a1258b28a796799]

PUP.Optional.Snapdo.T, HKU\S-1-5-21-4093186601-1063034090-4258288859-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {006ee092-9658-4fd6-bd8e-a21a348e59f5}, Quarantined, [2e7bf7f9e893f442f7c5cb47d23112ee]

PUP.Optional.LiveSupport, HKU\S-1-5-21-4093186601-1063034090-4258288859-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|LiveSupport, "C:\Program Files (x86)\LiveSupport\LiveSupport.exe" /noshow /log, Quarantined, [9b0ec32d97e42d09d153c469a2617c84]

PUP.Optional.FastStart.A, HKU\S-1-5-21-4093186601-1063034090-4258288859-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MOZILLA\EXTENDS|appid, faststartff@gmail.com, Quarantined, [affa5d93314a9a9c014f13f40af9f10f]

Registry Data: 10

PUP.Optional.V9.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, http://search.v9.com...&t=34706a08d&q={searchTerms}, Good: (www.google.com), Bad: (http://search.v9.com/web/?type=ds&ts=1407651854&from=air&uid=ST1000DM003-9YN162_Z1D2D90QXXXXZ1D2D90Q&i=psd&t=34706a08d&q={searchTerms}),Replaced,[892015db23580c2a108221dce321fb05]

PUP.Optional.V9.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, http://www.v9.com/?t...psd&t=34706a08d, Good: (www.google.com), Bad: (http://www.v9.com/?type=hp&ts=1407651854&from=air&uid=ST1000DM003-9YN162_Z1D2D90QXXXXZ1D2D90Q&i=psd&t=34706a08d),Replaced,[a30634bc205b171f31608e6f3bc9e51b]

PUP.Optional.V9.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://www.v9.com/?t...psd&t=34706a08d, Good: (www.google.com), Bad: (http://www.v9.com/?type=hp&ts=1407651854&from=air&uid=ST1000DM003-9YN162_Z1D2D90QXXXXZ1D2D90Q&i=psd&t=34706a08d),Replaced,[c6e318d88fec79bdefa4ae4f838101ff]

PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Good: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Bad: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Replaced,[8a1ffff1b9c216200ad8bf4819ec768a]

PUP.Optional.V9.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, http://search.v9.com...&t=34706a08d&q={searchTerms}, Good: (www.google.com), Bad: (http://search.v9.com/web/?type=ds&ts=1407651854&from=air&uid=ST1000DM003-9YN162_Z1D2D90QXXXXZ1D2D90Q&i=psd&t=34706a08d&q={searchTerms}),Replaced,[04a513ddbac1e1556c26bf3e44c0946c]

PUP.Optional.V9.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, http://www.v9.com/?t...psd&t=34706a08d, Good: (www.google.com), Bad: (http://www.v9.com/?type=hp&ts=1407651854&from=air&uid=ST1000DM003-9YN162_Z1D2D90QXXXXZ1D2D90Q&i=psd&t=34706a08d),Replaced,[3e6bd31d413a191d7b1633ca51b302fe]

PUP.Optional.V9.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://www.v9.com/?t...psd&t=34706a08d, Good: (www.google.com), Bad: (http://www.v9.com/?type=hp&ts=1407651854&from=air&uid=ST1000DM003-9YN162_Z1D2D90QXXXXZ1D2D90Q&i=psd&t=34706a08d),Replaced,[38713fb1f7848caae5ae52ab818311ef]

PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Good: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Bad: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Replaced,[dbce708089f20d293aa84cbb26dfaa56]

PUP.Optional.V9.A, HKU\S-1-5-21-4093186601-1063034090-4258288859-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://www.v9.com/?t...psd&t=34706a08d, Good: (www.google.com), Bad: (http://www.v9.com/?type=hp&ts=1407651854&from=air&uid=ST1000DM003-9YN162_Z1D2D90QXXXXZ1D2D90Q&i=psd&t=34706a08d),Replaced,[1b8e03edf883979feba0e815f50f867a]

PUP.Optional.V9.A, HKU\S-1-5-21-4093186601-1063034090-4258288859-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, http://www.v9.com/?t...psd&t=34706a08d, Good: (www.google.com), Bad: (http://www.v9.com/?type=hp&ts=1407651854&from=air&uid=ST1000DM003-9YN162_Z1D2D90QXXXXZ1D2D90Q&i=psd&t=34706a08d),Replaced,[713889673e3daf87395024d9d72d9769]

Folders: 131

PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong, Quarantined, [f7b215db413a092dd5d2d208a75bec14],

PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data, Quarantined, [f7b215db413a092dd5d2d208a75bec14],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\bookmarks, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\bookmarks\css, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\bookmarks\img, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\classification, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\css, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\img, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\img\skin, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\dialog, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\dialog\img, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\dialog\img\skin, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\extensions, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\extensions\css, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\extensions\img, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\gameCenter, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\gameCenter\css, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\gameCenter\img, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\guide, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\guide\css, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\lastVisited, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\lastVisited\css, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\lastVisited\img, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\notice, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\notice\css, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\played, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\played\css, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\played\img, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\search, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\search\css, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\search\img, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\setup, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\setup\css, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\setup\img, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\setup\img\skin, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\shortcuts, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\shortcuts\img, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\css, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\img, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\img\skin, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather\css, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather\img, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather\img\skin, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\css, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\js, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\de, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\en, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\es, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\es_419, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\fr, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\it, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\ja, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\pl, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\pt_BR, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\pt_PT, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\ru, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\tr, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\vi, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\zh_CN, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\zh_TW, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_metadata, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\content, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\content\include, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\content\include\tools, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\content\js, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\content\js\lib, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\content\js\module, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\content\js\pack, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\en, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\en-US, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\es, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\es-419, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\fr, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\fr-BE, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\fr-CA, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\fr-CH, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\fr-LU, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\it, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\it-CH, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\pl, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\pt-BR, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\ru, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\ru-MO, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\tr, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\vi, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\zh-CN, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\zh-TW, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\skin, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\defaults, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\defaults\preferences, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\modules, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\skin, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\en-US, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-419, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-ES, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-BE, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CA, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CH, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-FR, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-LU, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-CH, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-IT, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pl, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt-BR, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru-MO, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\tr-TR, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\vi-VI, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-CN, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-TW, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

Files: 278

PUP.Optional.OptimumInstaller.A, C:\Users\g\Downloads\Setup.exe, Quarantined, [8920f2fe700b5cdad3afb5a9eb16956b],

PUP.RiskwareTool.CK, C:\Users\g\Downloads\Adobe CS6 AMTLIB 32 and 64-bit Fix.zip, Quarantined, [8425c72985f6b284a16cca6ce022c838],

PUP.Optional.AirAdInstaller, C:\Users\g\Downloads\Software_Update.exe, Quarantined, [92172cc429522412ec56a39707f96799],

PUP.Optional.V9.A, C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\v9.xml, Quarantined, [4b5e17d9473472c40b75b77fa55ec23e],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pelmeidfhdlhlbjimpabfcbnnojbboma_0.localstorage, Quarantined, [fbae9c540f6c7cba580bee81f311a55b],

PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\1.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14],

PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\10.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14],

PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\21185.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14],

PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\2229.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14],

PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\3023.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14],

PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\3620.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14],

PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\4489.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14],

PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\450.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14],

PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\a.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14],

PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\b.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14],

PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\c.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14],

PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\d.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14],

PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\e.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14],

PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\f.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14],

PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\g.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14],

PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\h.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14],

PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\i.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14],

PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\j.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14],

PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\k.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14],

PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\l.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14],

PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\m.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14],

PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\n.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14],

PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\o.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14],

PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\p.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14],

PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\q.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14],

PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\r.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14],

PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\s.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14],

PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\t.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14],

PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\u.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14],

PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\v.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14],

PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\w.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14],

PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\wlu.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14],

PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\x.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14],

PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\y.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14],

PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\z.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\background.html, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\index.html, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\jump.html, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\manifest.json, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\bookmarks\bookmarks.js, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\cloud.js, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\cloudApp.js, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\cloudWebsite.js, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\createWebsite.js, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\css\style.css, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\img\logo.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\extensions\extensions.js, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\gameCenter\gameCenter.js, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\guide\guide.js, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\guide\css\style.css, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\lastVisited\lastVisited.js, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\lastVisited\img\logo.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\notice\notice.js, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\notice\css\style.css, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\played\played.js, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\played\css\style.css, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\search\search.js, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\search\css\style.css, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\search\img\google-new-logo.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\search\img\logo.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\search\img\searchicon.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\search\img\searchicon2.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\setup\setup.js, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\setup\css\style.css, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\setup\img\logo.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\cloudWallpaper.js, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\skins.js, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\css\style.css, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\img\logo.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather\weather.js, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather\css\style.css, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather\img\logo.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\css\all.css, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\game.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\icon_128.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\icon_16.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\icon_48.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\NEW.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\shopping.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\weather.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\webstore.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\default.jpg, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\iconsprite.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\idialog_s.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\ios5_button.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\left.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\loading.gif, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\loading2.gif, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\qBoxBg.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\q_bg.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\q_bg0.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\q_left.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\q_left0.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\q_right.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\q_right0.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\right.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\selected.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\titleBg.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\js\all.js, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\js\background.js, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\js\ga.js, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\js\jq.mobi.js, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\js\jump.js, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\js\pop.js, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\js\redirect.js, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\js\xagainit.js, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\de\messages.json, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\en\messages.json, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\es\messages.json, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\es_419\messages.json, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\fr\messages.json, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\it\messages.json, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\ja\messages.json, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\pl\messages.json, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\pt_BR\messages.json, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\pt_PT\messages.json, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\ru\messages.json, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\tr\messages.json, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\vi\messages.json, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\zh_CN\messages.json, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\zh_TW\messages.json, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_metadata\verified_contents.json, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome.manifest, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\install.rdf, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\content\index.html, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\content\quick_start.js, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\content\quick_start.xul, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\content\include\speed_dial.js, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\content\js\js.js, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\content\js\lib\doT.min.js, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\content\js\lib\jquery-2.1.0.min.js, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\content\js\lib\jquery.autocomplete.js, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\content\js\pack\common.js, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\content\js\pack\ga.js, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\content\js\pack\xagainit.js, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\en\locale.properties, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\en-US\locale.properties, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\es\locale.properties, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\es-419\locale.properties, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\fr\locale.properties, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\fr-BE\locale.properties, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\fr-CA\locale.properties, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\fr-CH\locale.properties, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\fr-LU\locale.properties, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\it\locale.properties, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\it-CH\locale.properties, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\pl\locale.properties, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\pt-BR\locale.properties, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\ru\locale.properties, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\ru-MO\locale.properties, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\tr\locale.properties, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\vi\locale.properties, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\zh-CN\locale.properties, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\zh-TW\locale.properties, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\skin\default_logo.png, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\skin\googlelogo.png, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\skin\google_trends.png, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\skin\icon.png, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\skin\loading.gif, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\skin\logo.png, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\skin\newtab.ico, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\skin\simple.css, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\skin\style.css, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\defaults\preferences\fvd.js, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\defaults\preferences\preferences.js, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\modules\addonmanager.js, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\modules\aes.js, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\modules\config.js, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\modules\dialogs.js, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\modules\last_tab.js, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\modules\misc.js, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\modules\properties.js, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\modules\remoterequest.js, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\modules\restoreprefs.js, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\modules\settings.js, Quarantined, [a801a44ce49760d6898a8b638082c63a],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\BHOEnabler.exe, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\DpInterface64.dll, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\msvcp110.dll, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\msvcr110.dll, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\uninstall.exe, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\skin\btn.png, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\skin\close.png, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\skin\main.xml, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\data.html, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\indexIE.html, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\indexIE8.html, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\main.css, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\ver.txt, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\google_trends.png, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\icon128.png, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\icon16.png, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\icon48.png, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\loading.gif, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\logo32.ico, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\common.js, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\ga.js, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\jquery-1.11.0.min.js, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\jquery.autocomplete.js, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\js.js, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\library.js, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\xagainit.js, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\en-US\messages.json, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-419\messages.json, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-ES\messages.json, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-BE\messages.json, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CA\messages.json, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CH\messages.json, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-FR\messages.json, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-LU\messages.json, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-CH\messages.json, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-IT\messages.json, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pl\messages.json, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt\messages.json, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt-BR\messages.json, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru\messages.json, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru-MO\messages.json, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\tr-TR\messages.json, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\vi-VI\messages.json, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-CN\messages.json, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-TW\messages.json, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b],

PUP.Optional.V9.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\prefs.js, Good: (), Bad: (user_pref("browser.startup.homepage", "http://www.v9.com/?t...psd&t=34706a08d")

, Replaced,[a30641afa2d965d1accb9d9ea5602ad6]

PUP.Optional.V9.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\prefs.js, Good: (), Bad: (user_pref("browser.newtab.url", "http://www.v9.com/ne...psd&t=34706a08d")

, Replaced,[b0f94ca429525bdbd1ce97a48382f30d]

Physical Sectors: 0

(No malicious items detected)

(end)

#14 ronlewjr

Authentic Member

Authentic Member
42 posts

Posted 23 September 2014 - 11:26 AM

Then go ahead and run a new scan with FRST, dont forget to check additions and post both logs please

I'm sorry what is the FRST scan? and check which additions?

#15 ken545

Forum God

Retired Classroom Teacher
23,225 posts

Interests:Fighting Malware and cooking some great Italian and TexMex food

Posted 23 September 2014 - 11:26 AM

WOW :smack:

The forum is staffed by volunteers who donate their time and expertise.
If you feel you have been helped, please consider a donation.

Find us on Facebook
Please LIKE and SHARE

Just a reminder that threads will be closed if no reply in 3 days.

Body Background

skin color theme

very slow on startup and I see www.v9.com in browser when super slow [

#1 ronlewjr

Advertisements

Register to Remove

#2 ken545

#3 ken545

#4 ronlewjr

#5 ken545

#6 ronlewjr

#7 ronlewjr

#8 ronlewjr

#9 ronlewjr

#10 ronlewjr

Advertisements

Register to Remove

#11 ronlewjr

#12 ken545

#13 ronlewjr

#14 ronlewjr

#15 ken545

Related Topics

0 user(s) are reading this topic

About What the Tech

Follow Us

Body Background

skin color theme

very slow on startup and I see www.v9.com in browser when super slow [

#1 ronlewjr

Advertisements Register to Remove

#2 ken545

#3 ken545

#4 ronlewjr

#5 ken545

#6 ronlewjr

#7 ronlewjr

#8 ronlewjr

#9 ronlewjr

#10 ronlewjr

Advertisements Register to Remove

#11 ronlewjr

#12 ken545

#13 ronlewjr

#14 ronlewjr

#15 ken545

Related Topics

0 user(s) are reading this topic

About What the Tech

Follow Us

Sign In

Advertisements

Register to Remove

Advertisements

Register to Remove