Jump to content

Build Theme!
  •  
  • Infected?

WE'RE SURE THAT YOU'LL LOVE US!

Hey there! :wub: Looks like you're enjoying the discussion, but you're not signed up for an account. When you create an account, we remember exactly what you've read, so you always come right back where you left off. You also get notifications, here and via email, whenever new posts are made. You can like posts to share the love. :D Join 92790 other members! Anybody can ask, anybody can answer. Consistently helpful members may be invited to become staff. Here's how it works. Virus cleanup? Start here -> Malware Removal Forum.

Try What the Tech -- It's free!


Photo

very slow on startup and I see www.v9.com in browser when super slow [

v9.com super slow

  • This topic is locked This topic is locked
37 replies to this topic

#1 ronlewjr

ronlewjr

    Authentic Member

  • Authentic Member
  • PipPip
  • 42 posts

Posted 20 September 2014 - 10:34 AM

Hello, the computer is running very slow at startup.  usually about 3-4 minutes before I can access an internet site, just a home page like yahoo.com.  Usually very fast, but not anymore.  I notice when I click on home button on google to re-initiate since nothing is coming up, I see www.v9.com.  i looked that up and see it is a virus/browser information taker...
Norton shows nothing wrong.
Thank you for your assistance. I am using an alienware 2012 desktop computer. so it should be fast enough.
 
 
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:57:39 AM, on 9/20/2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16660)
Boot mode: Normal
 
Running processes:
C:\Users\g\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe
C:\Program Files (x86)\AlienRespawn\TOASTER.EXE
C:\Program Files (x86)\AlienRespawn\COMPONENTS\SCHEDULER\STSERVICE.EXE
C:\Program Files (x86)\AlienRespawn\Components\DSUpdate\DSUpd.exe
C:\Program Files (x86)\Norton 360\Engine\21.5.0.19\N360.exe
C:\Program Files\Alienware\Command Center\AlienFusionController.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\g\Desktop\HiJackThis.exe
 
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.v9.com/?t...psd&t=34706a08d
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.bing.com/...q={searchTerms}
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.v9.com/?t...psd&t=34706a08d
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.v9.com/?t...psd&t=34706a08d
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.v9.com...q={searchTerms}
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.v9.com...q={searchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.v9.com/?t...psd&t=34706a08d
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.bing.com/...q={searchTerms}
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.bing.com/...q={searchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\21.5.0.19\coIEPlg.dll
O2 - BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\21.5.0.19\IPS\IPSBHO.DLL
O2 - BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~4\Office15\URLREDIR.DLL
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~4\Office15\GROOVEEX.DLL
O2 - BHO: Act.UI.InternetExplorer.Plugins.AttachFile.CAttachFile - {D5233FCD-D258-4903-89B8-FB1568E7413D} - mscoree.dll (file missing)
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\21.5.0.19\coIEPlg.dll
O3 - Toolbar: (no name) - {ae07101b-46d4-4a98-af68-0333ea26e113} - (no file)
O4 - HKCU\..\Run: [Artisan 720(Network)] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIGYA.EXE /FU "C:\Windows\TEMP\E_S2BB7.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [LiveSupport] "C:\Program Files (x86)\LiveSupport\LiveSupport.exe" /noshow /log
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: Attach Web page to ACT! contact - {6F431AC3-364A-478b-BBDB-89C7CE1B18F6} - mscoree.dll (file missing)
O9 - Extra 'Tools' menuitem: Attach Web page to ACT! contact... - {6F431AC3-364A-478b-BBDB-89C7CE1B18F6} - mscoree.dll (file missing)
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra button: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm (file missing) (HKCU)
O9 - Extra 'Tools' menuitem: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm (file missing) (HKCU)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://www.samsungsetup.com
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O20 - AppInit_DLLs: c:\windows\syswow64\nvinit.dll 
O23 - Service: ACT! Scheduler - Sage Software, Inc. - C:\Program Files (x86)\ACT\Act for Windows\Act.Scheduler.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Andrea RT Filters Service (AERTFilters) - Andrea Electronics Corporation - C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Alienware Fusion Service (AlienFusionService) - Alienware - C:\Program Files\Alienware\Command Center\AlienFusionService.exe
O23 - Service: AlienFXWindowsService - Alienware - C:\Program Files\Alienware\Command Center\AlienFXWindowsService.exe
O23 - Service: BlueStacks Android Service (BstHdAndroidSvc) - BlueStack Systems, Inc. - C:\Program Files (x86)\BlueStacks\HD-Service.exe
O23 - Service: BlueStacks Log Rotator Service (BstHdLogRotatorSvc) - BlueStack Systems, Inc. - C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
O23 - Service: Intel® Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: EpsonBidirectionalService - SEIKO EPSON CORPORATION - C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HTCMonitorService - Nero AG - C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe
O23 - Service: Intel® Capability Licensing Service Interface - Intel® Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intuit Update Service v4 (IntuitUpdateServiceV4) - Intuit Inc. - C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe
O23 - Service: Intel® Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel® Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: MSI_ODD_Service - Micro-Star Int'l Co., Ltd. - c:\Program Files (x86)\msi\ODD Monitor\ODD_Monitor.exe
O23 - Service: Norton 360 (N360) - Symantec Corporation - C:\Program Files (x86)\Norton 360\Engine\21.5.0.19\N360.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
O23 - Service: pcCMService - Alcatel-Lucent - C:\Program Files (x86)\Common Files\Motive\pcCMService.exe
O23 - Service: pcCMService64 - Alcatel-Lucent - C:\Program Files\Common Files\Motive\pcCMService.exe
O23 - Service: pcServiceHost - Alcatel-Lucent - C:\Program Files (x86)\Common Files\Motive\pcServiceHost.exe
O23 - Service: PMBDeviceInfoProvider - Sony Corporation - C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies, Inc. - C:\Program Files (x86)\WinPcap\rpcapd.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SoftThinks Agent Service (SftService) - SoftThinks SAS - C:\Program Files (x86)\AlienRespawn\sftservice.EXE
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel® Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
 
--
End of file - 14979 bytes
 

    Advertisements

Register to Remove


#2 ken545

ken545

    Forum God

  • Retired Classroom Teacher
  • 23,219 posts
  • Interests:Fighting Malware and cooking some great Italian and TexMex food
  • MVP

Posted 20 September 2014 - 10:45 AM

:welcome:

 

Lets do this, I am providing the link and information for running Malwarebytes in case you need it, run this in order please

 

 

-AdwCleaner-by Xplode
 
Click on this link to download : ADWCleaner
Click on ONE of the Two Blue Download Now buttons That have a blue arrow beside them and save it to your desktop.
 
Do not click on any links in the top Advertisment.
 
  •  
  • Close all open programs and internet browsers.
  • Double click on AdwCleaner.exe to run the tool.
  • Click on Scan.
  • After the scan is complete click on "Clean"
  • Confirm each time with Ok.
  • Your computer will be rebooted automatically. A text file will open after the restart.
  • Please post the content of that logfile with your next reply.
  • You can find the logfile at C:\AdwCleaner[S1].txt as well.
 
 
 
===============================================================================
 
 
thisisujrt.gif Please download Junkware Removal Tool to your desktop.
  •  
  • Shut down your protection software now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message.
 
 
 
 
===============================================================================
 
Download Malwarebytes' Anti-Malware  to your desktop. 
 
  •  
  • Windows XP : Double click on the icon to run it.
  • Windows Vista, Windows 7 & 8 : Right click and select "Run as Administrator"
 
 
MBAMDashboard_zpsddef9b5f.gif
 
  •  
  • On the Dashboard click on Update Now
  • Go to the Setting Tab
  • Under Setting go to Detection and Protection
  • Under PUP and PUM make sure both are set to show Treat Detections as Malware
  • Go to Advanced setting and make sure Automatically Quarantine Detected Items is checked
  • Then on the Dashboard click on Scan
  • Make sure to select THREAT SCAN
  • Then click on Scan
  • When the scan is finished and the log pops up...select Copy to Clipboard
  • Please paste the log back into this thread for review
  • Exit Malwarebytes
 

 

 

 



 
 
The forum is staffed by volunteers who donate their time and expertise.
If you feel you have been helped, please consider a donation.
donate.gif
 
Find us on Facebook
Please LIKE and SHARE
 
 
Just a reminder that threads will be closed if no reply in 3 days.

#3 ken545

ken545

    Forum God

  • Retired Classroom Teacher
  • 23,219 posts
  • Interests:Fighting Malware and cooking some great Italian and TexMex food
  • MVP

Posted 23 September 2014 - 07:07 AM

Still with me ?



 
 
The forum is staffed by volunteers who donate their time and expertise.
If you feel you have been helped, please consider a donation.
donate.gif
 
Find us on Facebook
Please LIKE and SHARE
 
 
Just a reminder that threads will be closed if no reply in 3 days.

#4 ronlewjr

ronlewjr

    Authentic Member

  • Authentic Member
  • PipPip
  • 42 posts

Posted 23 September 2014 - 08:34 AM

wow, i just received an email of your response.  thank you so much for responding so quickly, I will start to do as you directed.  Sorry for not responding earlier, as I said I just received notice of your response.  Thank you. Ron



#5 ken545

ken545

    Forum God

  • Retired Classroom Teacher
  • 23,219 posts
  • Interests:Fighting Malware and cooking some great Italian and TexMex food
  • MVP

Posted 23 September 2014 - 09:18 AM

Ok Ron, glad I didn't lose you



 
 
The forum is staffed by volunteers who donate their time and expertise.
If you feel you have been helped, please consider a donation.
donate.gif
 
Find us on Facebook
Please LIKE and SHARE
 
 
Just a reminder that threads will be closed if no reply in 3 days.

#6 ronlewjr

ronlewjr

    Authentic Member

  • Authentic Member
  • PipPip
  • 42 posts

Posted 23 September 2014 - 10:21 AM

Just got back, my son ran in to tell me he needed a ride to school.  starting to work on the stuff you wrote above.  thanks again.  Ron



#7 ronlewjr

ronlewjr

    Authentic Member

  • Authentic Member
  • PipPip
  • 42 posts

Posted 23 September 2014 - 10:30 AM

# AdwCleaner v3.310 - Report created 23/09/2014 at 09:25:56
# Updated 12/09/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : g - RONS-ALIENWARE
# Running from : C:\Users\g\Desktop\adwcleaner_3.310.exe
# Option : Clean
 
***** [ Services ] *****
 
 
***** [ Files / Folders ] *****
 
Folder Deleted : C:\ProgramData\apn
Folder Deleted : C:\Users\g\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\g\Documents\Optimizer Pro
Folder Deleted : C:\Users\Titus\AppData\Local\Conduit
Folder Deleted : C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk
[!] Folder Deleted : C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk
File Deleted : C:\Users\g\AppData\Roaming\LiveSupport.exe_log.txt
File Deleted : C:\Users\g\AppData\Roaming\regsvr32.exe_log.txt
File Deleted : C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.azlyrics.com_0.localstorage
File Deleted : C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.azlyrics.com_0.localstorage-journal
File Deleted : C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.lyricsfreak.com_0.localstorage
File Deleted : C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.lyricsfreak.com_0.localstorage-journal
 
***** [ Scheduled Tasks ] *****
 
 
***** [ Shortcuts ] *****
 
 
***** [ Registry ] *****
 
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASMANCS
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E993643-8FBC-44FE-BC85-D318495C4D96}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{E69D4A59-73DE-4E38-9FB3-740EC4D9060D}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
Key Deleted : HKCU\Software\anchorfree
Key Deleted : HKCU\Software\SmartBar
Key Deleted : HKCU\Software\SoftwareUpdater
Key Deleted : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Deleted : HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Deleted : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Deleted : HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Key Deleted : HKLM\SOFTWARE\V9Software
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3152E1F19977892449DC968802CE8964
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467
 
***** [ Browsers ] *****
 
-\\ Internet Explorer v10.0.9200.16660
 
 
-\\ Mozilla Firefox v30.0 (en-US)
 
[ File : C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\prefs.js ]
 
 
-\\ Google Chrome v37.0.2062.120
 
[ File : C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
Deleted [Search Provider] : hxxp://search.aol.com/aol/search?q={searchTerms}
Deleted [Search Provider] : hxxp://www.ask.com/web?q={searchTerms}
Deleted [Search Provider] : hxxp://search.v9.com/web/?type=ds&ts=1407651854&from=air&uid=ST1000DM003-9YN162_Z1D2D90QXXXXZ1D2D90Q&i=psd&t=34706a08d&q={searchTerms}
 
*************************
 
AdwCleaner[R0].txt - [4004 octets] - [23/09/2014 09:24:37]
AdwCleaner[S0].txt - [3761 octets] - [23/09/2014 09:25:56]
 
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [3821 octets] ##########


#8 ronlewjr

ronlewjr

    Authentic Member

  • Authentic Member
  • PipPip
  • 42 posts

Posted 23 September 2014 - 10:40 AM

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.2.0 (09.22.2014:1)
OS: Windows 7 Home Premium x64
Ran by g on Tue 09/23/2014 at  9:33:39.73
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 
~~~ Services
 
 
 
~~~ Registry Values
 
 
 
~~~ Registry Keys
 
 
 
~~~ Files
 
 
 
~~~ Folders
 
 
 
~~~ FireFox
 
Successfully deleted the following from C:\Users\g\AppData\Roaming\mozilla\firefox\profiles\q0x8jozo.default\prefs.js
 
user_pref("browser.search.defaultenginename", "v9");
user_pref("browser.search.selectedEngine", "v9");
 
 
 
~~~ Event Viewer Logs were cleared
 
 
 
 
 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Tue 09/23/2014 at  9:37:19.58
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


#9 ronlewjr

ronlewjr

    Authentic Member

  • Authentic Member
  • PipPip
  • 42 posts

Posted 23 September 2014 - 10:55 AM

Since i thought i had not heard from anyone regarding help, i ran malwarebytes a couple of days ago and cleared lots of stuff out.  i just ran again as instructed and changed settings as you suggested.



#10 ronlewjr

ronlewjr

    Authentic Member

  • Authentic Member
  • PipPip
  • 42 posts

Posted 23 September 2014 - 10:56 AM

Malwarebytes Anti-Malware
www.malwarebytes.org
 
Scan Date: 9/23/2014
Scan Time: 9:46:16 AM
Logfile: 
Administrator: Yes
 
Version: 2.00.2.1012
Malware Database: v2014.09.23.07
Rootkit Database: v2014.09.19.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled
 
OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: g
 
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 376846
Time Elapsed: 6 min, 41 sec
 
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled
 
Processes: 0
(No malicious items detected)
 
Modules: 0
(No malicious items detected)
 
Registry Keys: 0
(No malicious items detected)
 
Registry Values: 0
(No malicious items detected)
 
Registry Data: 0
(No malicious items detected)
 
Folders: 0
(No malicious items detected)
 
Files: 0
(No malicious items detected)
 
Physical Sectors: 0
(No malicious items detected)
 
 
(end)

    Advertisements

Register to Remove


#11 ronlewjr

ronlewjr

    Authentic Member

  • Authentic Member
  • PipPip
  • 42 posts

Posted 23 September 2014 - 11:05 AM

Please let me know what else I may need to do.  thank you.

When done I have another computer that is rendered useless as it seems to run on its own forwever and super slow to not be usable at all.

thanks.

Ron



#12 ken545

ken545

    Forum God

  • Retired Classroom Teacher
  • 23,219 posts
  • Interests:Fighting Malware and cooking some great Italian and TexMex food
  • MVP

Posted 23 September 2014 - 11:08 AM

1. Open up Malwarebytes 
2. Go to the History Tab
3. Click on Application Logs
4. Click on the scan log that you ran and found items to remove
5. Click on View
6. Then on the Bottom click on Copy to Clipboard
7. Then paste it into this thread
 
 
Then go ahead and run a new scan with FRST, dont forget to check additions and post both logs please


 
 
The forum is staffed by volunteers who donate their time and expertise.
If you feel you have been helped, please consider a donation.
donate.gif
 
Find us on Facebook
Please LIKE and SHARE
 
 
Just a reminder that threads will be closed if no reply in 3 days.

#13 ronlewjr

ronlewjr

    Authentic Member

  • Authentic Member
  • PipPip
  • 42 posts

Posted 23 September 2014 - 11:22 AM

Malwarebytes Anti-Malware
www.malwarebytes.org
 
Scan Date: 9/21/2014
Scan Time: 8:07:46 PM
Logfile: 
Administrator: Yes
 
Version: 2.00.2.1012
Malware Database: v2014.09.22.01
Rootkit Database: v2014.09.19.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled
 
OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: g
 
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 376218
Time Elapsed: 7 min, 47 sec
 
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Warn
PUM: Enabled
 
Processes: 0
(No malicious items detected)
 
Modules: 0
(No malicious items detected)
 
Registry Keys: 10
PUP.Optional.Snapdo.T, HKU\S-1-5-21-4093186601-1063034090-4258288859-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{006ee092-9658-4fd6-bd8e-a21a348e59f5}, Quarantined, [4762a34ddd9e53e3db5ce2e5778b9a66], 
PUP.Optional.Snapdo.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{006EE092-9658-4FD6-BD8E-A21A348E59F5}, Quarantined, [4762a34ddd9e53e3db5ce2e5778b9a66], 
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, Quarantined, [95140ae6215a01358e9b4814cc38ce32], 
PUP.Optional.Conduit.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\dknkjnkhedbanphkkpbpcgoblmkbfhlf, Quarantined, [f8b104ec3e3d0432f548d04349baa65a], 
PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, Quarantined, [7b2e87699ae18caa8e9b4d0fc53f5fa1], 
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPDP, Quarantined, [5c4d19d7b4c773c31a1258b28a796799], 
PUP.Optional.V9.A, HKLM\SOFTWARE\WOW6432NODE\V9SOFTWARE\v9hp, Quarantined, [4c5d69877704f2440c7664d252b1b34d], 
PUP.Optional.PriceGong.A, HKU\S-1-5-21-4093186601-1063034090-4258288859-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\PriceGong, Quarantined, [9a0fc42ccfac94a2119657ddf40f8a76], 
PUP.Optional.Qone8, HKU\S-1-5-21-4093186601-1063034090-4258288859-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, Quarantined, [3d6c945caccf0e2869bf92cad3313fc1], 
PUP.Optional.FastStart.A, HKU\S-1-5-21-4093186601-1063034090-4258288859-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MOZILLA\EXTENDS, Quarantined, [affa5d93314a9a9c014f13f40af9f10f], 
 
Registry Values: 9
PUP.Optional.V9.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, http://search.v9.com...&t=34706a08d&q={searchTerms}, Quarantined, [05a4747cea9155e13d9135e48f7403fd]
PUP.Optional.SmartBar, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{ae07101b-46d4-4a98-af68-0333ea26e113}, Smartbar, Quarantined, [4f5a638de9921f1728c366a219eae020]
PUP.Optional.V9.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, http://search.v9.com...&t=34706a08d&q={searchTerms}, Quarantined, [f1b8a44cadce8caa8f3feb2e31d29b65]
PUP.Optional.SmartBar, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{ae07101b-46d4-4a98-af68-0333ea26e113}, Smartbar, Quarantined, [a3061cd4057679bde40740c827dcce32]
PUP.Optional.FastStart.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|faststartff@gmail.com, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com, Quarantined, [96132bc53645ce68fcb7b9b629dbb24e]
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPDP|dir, C:\Program Files (x86)\SupTab, Quarantined, [5c4d19d7b4c773c31a1258b28a796799]
PUP.Optional.Snapdo.T, HKU\S-1-5-21-4093186601-1063034090-4258288859-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {006ee092-9658-4fd6-bd8e-a21a348e59f5}, Quarantined, [2e7bf7f9e893f442f7c5cb47d23112ee]
PUP.Optional.LiveSupport, HKU\S-1-5-21-4093186601-1063034090-4258288859-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|LiveSupport, "C:\Program Files (x86)\LiveSupport\LiveSupport.exe" /noshow /log, Quarantined, [9b0ec32d97e42d09d153c469a2617c84]
PUP.Optional.FastStart.A, HKU\S-1-5-21-4093186601-1063034090-4258288859-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MOZILLA\EXTENDS|appid, faststartff@gmail.com, Quarantined, [affa5d93314a9a9c014f13f40af9f10f]
 
Registry Data: 10
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Good: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Bad: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Replaced,[8a1ffff1b9c216200ad8bf4819ec768a]
PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Good: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Bad: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Replaced,[dbce708089f20d293aa84cbb26dfaa56]
PUP.Optional.V9.A, HKU\S-1-5-21-4093186601-1063034090-4258288859-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://www.v9.com/?t...psd&t=34706a08d, Good: (www.google.com), Bad: (http://www.v9.com/?type=hp&ts=1407651854&from=air&uid=ST1000DM003-9YN162_Z1D2D90QXXXXZ1D2D90Q&i=psd&t=34706a08d),Replaced,[1b8e03edf883979feba0e815f50f867a]
PUP.Optional.V9.A, HKU\S-1-5-21-4093186601-1063034090-4258288859-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, http://www.v9.com/?t...psd&t=34706a08d, Good: (www.google.com), Bad: (http://www.v9.com/?type=hp&ts=1407651854&from=air&uid=ST1000DM003-9YN162_Z1D2D90QXXXXZ1D2D90Q&i=psd&t=34706a08d),Replaced,[713889673e3daf87395024d9d72d9769]
 
Folders: 131
PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong, Quarantined, [f7b215db413a092dd5d2d208a75bec14], 
PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data, Quarantined, [f7b215db413a092dd5d2d208a75bec14], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\bookmarks, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\bookmarks\css, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\bookmarks\img, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\classification, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\classification\css, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\classification\img, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\classification\img\skin, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\css, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\img, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\img\skin, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\dialog, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\dialog\img, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\dialog\img\skin, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\extensions, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\extensions\css, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\extensions\img, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\gameCenter, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\gameCenter\css, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\gameCenter\img, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\guide, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\guide\css, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\lastVisited, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\lastVisited\css, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\lastVisited\img, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\notice, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\notice\css, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\played, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\played\css, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\played\img, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\search, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\search\css, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\search\img, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\setup, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\setup\css, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\setup\img, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\setup\img\skin, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\shortcuts, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\shortcuts\img, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\css, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\img, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\img\skin, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather\css, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather\img, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather\img\skin, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\css, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\js, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\de, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\en, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\es, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\es_419, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\fr, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\it, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\ja, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\pl, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\pt_BR, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\pt_PT, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\ru, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\tr, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\vi, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\zh_CN, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\zh_TW, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_metadata, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\content, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\content\include, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\content\include\tools, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\content\js, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\content\js\lib, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\content\js\module, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\content\js\pack, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\en, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\en-US, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\es, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\es-419, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\fr, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\fr-BE, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\fr-CA, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\fr-CH, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\fr-LU, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\it, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\it-CH, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\pl, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\pt-BR, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\ru, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\ru-MO, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\tr, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\vi, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\zh-CN, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\zh-TW, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\skin, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\defaults, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\defaults\preferences, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\modules, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\skin, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\en-US, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-419, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-ES, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-BE, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CA, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CH, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-FR, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-LU, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-CH, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-IT, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pl, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt-BR, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru-MO, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\tr-TR, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\vi-VI, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-CN, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-TW, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
 
Files: 278
PUP.Optional.OptimumInstaller.A, C:\Users\g\Downloads\Setup.exe, Quarantined, [8920f2fe700b5cdad3afb5a9eb16956b], 
PUP.RiskwareTool.CK, C:\Users\g\Downloads\Adobe CS6 AMTLIB 32 and 64-bit Fix.zip, Quarantined, [8425c72985f6b284a16cca6ce022c838], 
PUP.Optional.AirAdInstaller, C:\Users\g\Downloads\Software_Update.exe, Quarantined, [92172cc429522412ec56a39707f96799], 
PUP.Optional.V9.A, C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\v9.xml, Quarantined, [4b5e17d9473472c40b75b77fa55ec23e], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pelmeidfhdlhlbjimpabfcbnnojbboma_0.localstorage, Quarantined, [fbae9c540f6c7cba580bee81f311a55b], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pelmeidfhdlhlbjimpabfcbnnojbboma_0.localstorage-journal, Quarantined, [1693ae42562557df481b73fc53b15da3], 
PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\1.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14], 
PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\10.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14], 
PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\21185.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14], 
PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\2229.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14], 
PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\3023.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14], 
PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\3620.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14], 
PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\4489.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14], 
PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\450.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14], 
PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\a.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14], 
PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\b.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14], 
PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\c.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14], 
PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\d.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14], 
PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\e.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14], 
PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\f.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14], 
PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\g.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14], 
PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\h.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14], 
PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\i.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14], 
PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\j.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14], 
PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\k.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14], 
PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\l.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14], 
PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\m.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14], 
PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\n.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14], 
PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\o.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14], 
PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\p.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14], 
PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\q.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14], 
PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\r.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14], 
PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\s.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14], 
PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\t.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14], 
PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\u.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14], 
PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\v.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14], 
PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\w.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14], 
PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\wlu.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14], 
PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\x.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14], 
PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\y.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14], 
PUP.Optional.PriceGong.A, C:\Users\g\AppData\LocalLow\PriceGong\Data\z.txt, Quarantined, [f7b215db413a092dd5d2d208a75bec14], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\background.html, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\index.html, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\jump.html, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\manifest.json, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\bookmarks\bookmarks.js, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\bookmarks\css\style.css, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\bookmarks\img\logo.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\bookmarks\img\searchButton.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\classification\classification.js, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\classification\css\style.css, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\classification\img\logo.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\classification\img\skin\del.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\classification\img\skin\main.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\classification\img\skin\selected.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\cloud.js, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\cloudApp.js, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\cloudWebsite.js, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\createWebsite.js, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\css\style.css, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\img\logo.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\img\skin\buttonBg.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\img\skin\categoryBg.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\img\skin\icons.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\img\skin\searchBg.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\img\skin\searchButton.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\img\skin\searchLeft.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\img\skin\selected.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\img\skin\tabsBg.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\dialog\img\skin\headerBg.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\extensions\extensions.js, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\extensions\css\style.css, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\extensions\img\logo.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\gameCenter\gameCenter.js, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\gameCenter\css\style.css, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\gameCenter\img\logo.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\gameCenter\img\star.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\gameCenter\img\star_bg.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\gameCenter\img\time.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\guide\guide.js, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\guide\css\style.css, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\lastVisited\lastVisited.js, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\lastVisited\css\style.css, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\lastVisited\img\logo.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\notice\notice.js, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\notice\css\style.css, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\played\played.js, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\played\css\style.css, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\search\search.js, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\search\css\style.css, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\search\img\google-new-logo.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\search\img\logo.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\search\img\searchicon.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\search\img\searchicon2.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\setup\setup.js, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\setup\css\style.css, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\setup\img\logo.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\setup\img\skin\dialBoxStyle.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\setup\img\skin\icons.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\shortcuts\img\oBookmarks.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\shortcuts\img\oDownloads.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\shortcuts\img\oExtensions.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\shortcuts\img\oHistory.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\shortcuts\img\oNewtab.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\cloudWallpaper.js, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\skins.js, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\css\style.css, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\img\logo.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\img\skin\categoryBg.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\img\skin\delete.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\img\skin\download.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\img\skin\icons.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\img\skin\loading.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather\weather.js, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather\css\style.css, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather\img\logo.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather\img\skin\line.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather\img\skin\locationIcon.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather\img\skin\searchButton.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather\img\skin\weather.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\css\all.css, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\game.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\icon_128.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\icon_16.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\icon_48.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\NEW.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\shopping.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\weather.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\webstore.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\default.jpg, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\iconsprite.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\idialog_s.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\ios5_button.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\left.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\loading.gif, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\loading2.gif, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\qBoxBg.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\q_bg.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\q_bg0.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\q_left.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\q_left0.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\q_right.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\q_right0.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\right.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\selected.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\titleBg.png, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\js\all.js, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\js\background.js, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\js\ga.js, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\js\jq.mobi.js, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\js\jump.js, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\js\pop.js, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\js\redirect.js, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\js\xagainit.js, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\de\messages.json, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\en\messages.json, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\es\messages.json, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\es_419\messages.json, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\fr\messages.json, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\it\messages.json, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\ja\messages.json, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\pl\messages.json, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\pt_BR\messages.json, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\pt_PT\messages.json, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\ru\messages.json, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\tr\messages.json, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\vi\messages.json, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\zh_CN\messages.json, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\zh_TW\messages.json, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.QuickStart.A, C:\Users\g\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_metadata\verified_contents.json, Quarantined, [02a705ebdaa10630c0aa2ab3d42e44bc], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome.manifest, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\install.rdf, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\content\index.html, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\content\quick_start.js, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\content\quick_start.xul, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\content\include\speed_dial.js, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\content\include\tools\about_blank_hook.js, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\content\include\tools\misc.js, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\content\include\tools\popup_image_helper.js, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\content\include\tools\urlrequestor.js, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\content\js\js.js, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\content\js\lib\doT.min.js, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\content\js\lib\jquery-2.1.0.min.js, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\content\js\lib\jquery.autocomplete.js, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\content\js\module\hotSearch.js, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\content\js\module\mostgrid.js, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\content\js\module\search.js, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\content\js\module\stat.js, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\content\js\pack\common.js, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\content\js\pack\ga.js, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\content\js\pack\xagainit.js, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\en\locale.properties, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\en-US\locale.properties, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\es\locale.properties, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\es-419\locale.properties, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\fr\locale.properties, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\fr-BE\locale.properties, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\fr-CA\locale.properties, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\fr-CH\locale.properties, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\fr-LU\locale.properties, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\it\locale.properties, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\it-CH\locale.properties, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\pl\locale.properties, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\pt-BR\locale.properties, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\ru\locale.properties, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\ru-MO\locale.properties, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\tr\locale.properties, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\vi\locale.properties, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\zh-CN\locale.properties, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\locale\zh-TW\locale.properties, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\skin\default_logo.png, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\skin\googlelogo.png, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\skin\google_trends.png, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\skin\icon.png, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\skin\loading.gif, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\skin\logo.png, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\skin\newtab.ico, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\skin\simple.css, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\chrome\skin\style.css, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\defaults\preferences\fvd.js, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\defaults\preferences\preferences.js, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\modules\addonmanager.js, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\modules\aes.js, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\modules\config.js, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\modules\dialogs.js, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\modules\last_tab.js, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\modules\misc.js, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\modules\properties.js, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\modules\remoterequest.js, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\modules\restoreprefs.js, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.FastStart.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\extensions\faststartff@gmail.com\modules\settings.js, Quarantined, [a801a44ce49760d6898a8b638082c63a], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\BHOEnabler.exe, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\DpInterface64.dll, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\msvcp110.dll, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\msvcr110.dll, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\uninstall.exe, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\skin\btn.png, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\skin\close.png, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\skin\main.xml, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\data.html, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\indexIE.html, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\indexIE8.html, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\main.css, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\ver.txt, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\google_trends.png, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\icon128.png, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\icon16.png, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\icon48.png, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\loading.gif, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\logo32.ico, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\common.js, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\ga.js, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\jquery-1.11.0.min.js, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\jquery.autocomplete.js, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\js.js, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\library.js, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\xagainit.js, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\en-US\messages.json, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-419\messages.json, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-ES\messages.json, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-BE\messages.json, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CA\messages.json, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CH\messages.json, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-FR\messages.json, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-LU\messages.json, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-CH\messages.json, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-IT\messages.json, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pl\messages.json, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt\messages.json, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt-BR\messages.json, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru\messages.json, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru-MO\messages.json, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\tr-TR\messages.json, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\vi-VI\messages.json, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-CN\messages.json, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-TW\messages.json, Quarantined, [f7b21fd11e5d54e2ed82fafb10f2956b], 
PUP.Optional.V9.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\prefs.js, Good: (), Bad: (user_pref("browser.startup.homepage", "http://www.v9.com/?t...psd&t=34706a08d");), Replaced,[a30641afa2d965d1accb9d9ea5602ad6]
PUP.Optional.V9.A, C:\Users\g\AppData\Roaming\Mozilla\Firefox\Profiles\q0x8jozo.default\prefs.js, Good: (), Bad: (user_pref("browser.newtab.url", "http://www.v9.com/ne...psd&t=34706a08d");), Replaced,[b0f94ca429525bdbd1ce97a48382f30d]
 
Physical Sectors: 0
(No malicious items detected)
 
 
(end)


#14 ronlewjr

ronlewjr

    Authentic Member

  • Authentic Member
  • PipPip
  • 42 posts

Posted 23 September 2014 - 11:26 AM

Then go ahead and run a new scan with FRST, dont forget to check additions and post both logs please

 

I'm sorry what is the FRST scan? and check which additions?



#15 ken545

ken545

    Forum God

  • Retired Classroom Teacher
  • 23,219 posts
  • Interests:Fighting Malware and cooking some great Italian and TexMex food
  • MVP

Posted 23 September 2014 - 11:26 AM

WOW    :smack:



 
 
The forum is staffed by volunteers who donate their time and expertise.
If you feel you have been helped, please consider a donation.
donate.gif
 
Find us on Facebook
Please LIKE and SHARE
 
 
Just a reminder that threads will be closed if no reply in 3 days.

Related Topics



0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users