uTalk

Official forum for Utopia Community

You are not logged in.

#26 Re: Off Topic » Iexplore.exe Virus Help » 2021-03-09 12:45:48

Malwarebytes Log 2

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 1/3/2015
Scan Time: 11:58:31 AM
Logfile:
Administrator: Yes

Version: 2.00.4.1028
Malware Database: v2015.01.03.07
Rootkit Database: v2014.12.30.01
License: Premium
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: CASZ

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 477855
Time Elapsed: 40 min, 55 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Warn
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 4
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector, Quarantined, [61a2e310345536007e5fda750102d62a],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\signatures, Quarantined, [61a2e310345536007e5fda750102d62a],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates, Quarantined, [61a2e310345536007e5fda750102d62a],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\CASZ\AppData\Roaming\systweak\Advanced System Protector, Quarantined, [20e3d41f52374fe7e7f6b699b44f38c8],

Files: 4
PUP.Optional.AdvancedSystemProtector.A, C:\Users\CASZ\AppData\Roaming\systweak\Advanced System Protector\ASPLog.txt, Quarantined, [20e3d41f52374fe7e7f6b699b44f38c8],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\CASZ\AppData\Roaming\systweak\Advanced System Protector\QDetail.db, Quarantined, [20e3d41f52374fe7e7f6b699b44f38c8],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\CASZ\AppData\Roaming\systweak\Advanced System Protector\Settings.db, Quarantined, [20e3d41f52374fe7e7f6b699b44f38c8],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\CASZ\AppData\Roaming\systweak\Advanced System Protector\Update.ini, Quarantined, [20e3d41f52374fe7e7f6b699b44f38c8],

Physical Sectors: 0
(No malicious items detected)


(end)

#27 Re: Off Topic » Iexplore.exe Virus Help » 2021-03-09 10:08:11

Malwarebytes Log 1 Part 2

PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\french_asp_FR.ini, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\French_uninst.ini, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\german_asp_DE.ini, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\German_uninst.ini, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\greek_uninst_el.ini, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Interop.IWshRuntimeLibrary.dll, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\italian_asp_IT.ini, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Italian_uninst.ini, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Communication.dll, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\danish_asp_DA.ini, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Danish_uninst.ini, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\dutch_asp_NL.ini, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Dutch_uninst.ini, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\eng_asp_en.ini, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\eng_uninst.ini, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\filetypehelper.exe, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Finnish_asp_FI.ini, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Finnish_uninst_fi.ini, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\russian_asp_ru.ini, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\russian_uninst_ru.ini, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\scandll.dll, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\spanish_asp_ES.ini, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\spanish_uninst.ini, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\swedish_asp_SV.ini, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\swedish_uninst.ini, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\System.Core.dll, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\System.Data.SQLite.dll, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\japanese_asp_JA.ini, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Japanese_uninst.ini, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\korean_uninst_ko.ini, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\loading_withWhiteBG.avi, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Microsoft.Win32.TaskScheduler.DLL, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\norwegian_asp_NO.ini, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Norwegian_uninst.ini, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\polish_uninst_pl.ini, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\portugese_uninst_pt.ini, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\portuguese_asp_PT-BR.ini, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Portuguese_uninst.ini, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Register Advanced-System Protector.lnk, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\TPS.ico, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\clamunpack\clamscan.exe, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\clamunpack\libclamav.dll, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\clamunpack\readme.txt, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.Multiplug, C:\Program Files (x86)\youtubeadblocker\1mEC5ewRmizzkW.dat, Quarantined, [cd30c82a4f3aa98da9b68ba3ea19c63a],
PUP.Optional.Multiplug, C:\Program Files (x86)\youtubeadblocker\1mEC5ewRmizzkW.exe, Quarantined, [cd30c82a4f3aa98da9b68ba3ea19c63a],
PUP.Optional.Multiplug, C:\Program Files (x86)\youtubeadblocker\1mEC5ewRmizzkW.tlb, Quarantined, [cd30c82a4f3aa98da9b68ba3ea19c63a],
PUP.Optional.Multiplug, C:\Program Files (x86)\youtubeadblocker\1mEC5ewRmizzkW.x64.dll, Quarantined, [cd30c82a4f3aa98da9b68ba3ea19c63a],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\ient.json, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\install.data, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\msvcp110.dll, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\skin\bk_shadow.png, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\skin\btn.png, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\skin\close.png, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\skin\main.xml, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\skin\main.xml.bak, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\skin\image\ck_box.png, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\skin\image\ck_check.png, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\skin\image\radio_bk.png, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\skin\image\radio_check.png, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\data.html, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\indexIE.html, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\indexIE8.html, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\main.css, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\ver.txt, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\google_trends.png, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\icon128.png, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\icon16.png, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\icon48.png, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\loading.gif, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\logo32.ico, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\common.js, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\ga.js, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\jquery-1.11.0.min.js, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\jquery.autocomplete.js, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\js.js, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\library.js, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\xagainit-ie8.js, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\xagainit2.0.js, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\en-US\messages.json, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-419\messages.json, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-ES\messages.json, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-BE\messages.json, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CA\messages.json, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CH\messages.json, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-FR\messages.json, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-LU\messages.json, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-CH\messages.json, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-IT\messages.json, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pl\messages.json, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt\messages.json, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt-BR\messages.json, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru\messages.json, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru-MO\messages.json, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\tr-TR\messages.json, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\vi-VI\messages.json, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-CN\messages.json, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-TW\messages.json, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.DownTango.A, C:\Program Files (x86)\Red Sky\DownTango\libeay32.dll, Quarantined, [f40934bee5a40432e8c684c918eb0cf4],
PUP.Optional.DownTango.A, C:\Program Files (x86)\Red Sky\DownTango\ssleay32.dll, Quarantined, [f40934bee5a40432e8c684c918eb0cf4],
PUP.Optional.DownTango.A, C:\Users\CASZ\AppData\Local\DownTango\application.log, Quarantined, [af4e03ef7019c472cfe0e469b84b7f81],
PUP.Optional.DownTango.A, C:\Users\CASZ\AppData\Local\DownTango\config.db, Quarantined, [af4e03ef7019c472cfe0e469b84b7f81],
PUP.Optional.DownTango.A, C:\Users\CASZ\AppData\Local\DownTango\corefiles.db, Quarantined, [af4e03ef7019c472cfe0e469b84b7f81],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\aspsetup_update.exe, Quarantined, [7a83876b99f0b97dd3974906f11235cb],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System Protector\AddonSafelist, Quarantined, [d627fef4a7e2ac8aaebc202fdf24629e],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System Protector\laststatus.lic, Quarantined, [d627fef4a7e2ac8aaebc202fdf24629e],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System Protector\log.xslt, Quarantined, [d627fef4a7e2ac8aaebc202fdf24629e],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System Protector\status.lic, Quarantined, [d627fef4a7e2ac8aaebc202fdf24629e],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System Protector\signatures\completedatabase.db, Quarantined, [d627fef4a7e2ac8aaebc202fdf24629e],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System Protector\signatures\Cookies.bin, Quarantined, [d627fef4a7e2ac8aaebc202fdf24629e],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System Protector\signatures\DigSign.bin, Quarantined, [d627fef4a7e2ac8aaebc202fdf24629e],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System Protector\signatures\FilePathFIX.bin, Quarantined, [d627fef4a7e2ac8aaebc202fdf24629e],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System Protector\signatures\FilePaths.bin, Quarantined, [d627fef4a7e2ac8aaebc202fdf24629e],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System Protector\signatures\FileSignature.bin, Quarantined, [d627fef4a7e2ac8aaebc202fdf24629e],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System Protector\signatures\Folders.bin, Quarantined, [d627fef4a7e2ac8aaebc202fdf24629e],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System Protector\signatures\Md5.bin, Quarantined, [d627fef4a7e2ac8aaebc202fdf24629e],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System Protector\signatures\Registry.bin, Quarantined, [d627fef4a7e2ac8aaebc202fdf24629e],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System Protector\signatures\SetupSign.bin, Quarantined, [d627fef4a7e2ac8aaebc202fdf24629e],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System Protector\signatures\StrSetupSign.bin, Quarantined, [d627fef4a7e2ac8aaebc202fdf24629e],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System Protector\updates\100oupdate.zip, Quarantined, [d627fef4a7e2ac8aaebc202fdf24629e],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System Protector\updates\1997completedatabase.zip, Quarantined, [d627fef4a7e2ac8aaebc202fdf24629e],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System Protector\updates\2060mupdate.zip, Quarantined, [d627fef4a7e2ac8aaebc202fdf24629e],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System Protector\updates\2061update.zip, Quarantined, [d627fef4a7e2ac8aaebc202fdf24629e],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System Protector\updates\2062update.zip, Quarantined, [d627fef4a7e2ac8aaebc202fdf24629e],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System Protector\updates\2063update.zip, Quarantined, [d627fef4a7e2ac8aaebc202fdf24629e],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System Protector\updates\2064update.zip, Quarantined, [d627fef4a7e2ac8aaebc202fdf24629e],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System Protector\updates\2065update.zip, Quarantined, [d627fef4a7e2ac8aaebc202fdf24629e],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System Protector\updates\2066update.zip, Quarantined, [d627fef4a7e2ac8aaebc202fdf24629e],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System Protector\updates\2067update.zip, Quarantined, [d627fef4a7e2ac8aaebc202fdf24629e],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System Protector\updates\2068update.zip, Quarantined, [d627fef4a7e2ac8aaebc202fdf24629e],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System Protector\updates\2069update.zip, Quarantined, [d627fef4a7e2ac8aaebc202fdf24629e],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System Protector\updates\2070update.zip, Quarantined, [d627fef4a7e2ac8aaebc202fdf24629e],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System Protector\updates\2071update.zip, Quarantined, [d627fef4a7e2ac8aaebc202fdf24629e],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System Protector\updates\2072update.zip, Quarantined, [d627fef4a7e2ac8aaebc202fdf24629e],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System Protector\updates\2073update.zip, Quarantined, [d627fef4a7e2ac8aaebc202fdf24629e],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System Protector\updates\2074update.zip, Quarantined, [d627fef4a7e2ac8aaebc202fdf24629e],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System Protector\updates\2075update.zip, Quarantined, [d627fef4a7e2ac8aaebc202fdf24629e],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System Protector\updates\2076update.zip, Quarantined, [d627fef4a7e2ac8aaebc202fdf24629e],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System Protector\updates\2077update.zip, Quarantined, [d627fef4a7e2ac8aaebc202fdf24629e],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System Protector\updates\2078update.zip, Quarantined, [d627fef4a7e2ac8aaebc202fdf24629e],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System Protector\updates\2079update.zip, Quarantined, [d627fef4a7e2ac8aaebc202fdf24629e],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System Protector\updates\2080update.zip, Quarantined, [d627fef4a7e2ac8aaebc202fdf24629e],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System Protector\updates\2081update.zip, Quarantined, [d627fef4a7e2ac8aaebc202fdf24629e],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System Protector\updates\2082update.zip, Quarantined, [d627fef4a7e2ac8aaebc202fdf24629e],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System Protector\updates\2083update.zip, Quarantined, [d627fef4a7e2ac8aaebc202fdf24629e],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System Protector\updates\2084update.zip, Quarantined, [d627fef4a7e2ac8aaebc202fdf24629e],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\CASZ\AppData\Roaming\systweak\Advanced System Protector\ASPLog.txt, Quarantined, [25d8dd15494070c6adbdf05f32d17789],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\CASZ\AppData\Roaming\systweak\Advanced System Protector\QDetail.db, Quarantined, [25d8dd15494070c6adbdf05f32d17789],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\CASZ\AppData\Roaming\systweak\Advanced System Protector\Settings.db, Quarantined, [25d8dd15494070c6adbdf05f32d17789],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\CASZ\AppData\Roaming\systweak\Advanced System Protector\Update.ini, Quarantined, [25d8dd15494070c6adbdf05f32d17789],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\CASZ\AppData\Roaming\systweak\Advanced-System Protector\ASPLog.txt, Quarantined, [5ca16f8397f26dc9aebc68e7669d738d],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\CASZ\AppData\Roaming\systweak\Advanced-System Protector\QDetail.db, Quarantined, [5ca16f8397f26dc9aebc68e7669d738d],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\CASZ\AppData\Roaming\systweak\Advanced-System Protector\Settings.db, Quarantined, [5ca16f8397f26dc9aebc68e7669d738d],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\CASZ\AppData\Roaming\systweak\Advanced-System Protector\Update.ini, Quarantined, [5ca16f8397f26dc9aebc68e7669d738d],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\CASZ\AppData\Roaming\systweak\Advanced-System Protector\Logs\log_01-01-15_06-21-01.xml, Quarantined, [5ca16f8397f26dc9aebc68e7669d738d],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\CASZ\AppData\Roaming\systweak\Advanced-System Protector\Logs\log_02-01-15_03-52-09.xml, Quarantined, [5ca16f8397f26dc9aebc68e7669d738d],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\CASZ\AppData\Roaming\systweak\Advanced-System Protector\Logs\log_17-12-14_02-39-19.xml, Quarantined, [5ca16f8397f26dc9aebc68e7669d738d],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\CASZ\AppData\Roaming\systweak\Advanced-System Protector\Logs\log_21-12-14_11-41-46.xml, Quarantined, [5ca16f8397f26dc9aebc68e7669d738d],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\CASZ\AppData\Roaming\systweak\Advanced-System Protector\Logs\log_22-12-14_08-06-48.xml, Quarantined, [5ca16f8397f26dc9aebc68e7669d738d],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\CASZ\AppData\Roaming\systweak\Advanced-System Protector\Logs\log_23-12-14_06-54-53.xml, Quarantined, [5ca16f8397f26dc9aebc68e7669d738d],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\CASZ\AppData\Roaming\systweak\Advanced-System Protector\Logs\log_24-12-14_04-03-31.xml, Quarantined, [5ca16f8397f26dc9aebc68e7669d738d],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\CASZ\AppData\Roaming\systweak\Advanced-System Protector\Logs\log_25-12-14_05-49-09.xml, Quarantined, [5ca16f8397f26dc9aebc68e7669d738d],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\CASZ\AppData\Roaming\systweak\Advanced-System Protector\Logs\log_25-12-14_11-34-53.xml, Quarantined, [5ca16f8397f26dc9aebc68e7669d738d],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\CASZ\AppData\Roaming\systweak\Advanced-System Protector\Logs\log_26-12-14_03-45-26.xml, Quarantined, [5ca16f8397f26dc9aebc68e7669d738d],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\CASZ\AppData\Roaming\systweak\Advanced-System Protector\Logs\log_27-12-14_04-20-17.xml, Quarantined, [5ca16f8397f26dc9aebc68e7669d738d],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\CASZ\AppData\Roaming\systweak\Advanced-System Protector\Logs\log_28-12-14_05-00-13.xml, Quarantined, [5ca16f8397f26dc9aebc68e7669d738d],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\CASZ\AppData\Roaming\systweak\Advanced-System Protector\Logs\log_31-12-14_06-59-34.xml, Quarantined, [5ca16f8397f26dc9aebc68e7669d738d],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\CASZ\AppData\Roaming\systweak\Advanced-System Protector\Logs\SMLog.xml, Quarantined, [5ca16f8397f26dc9aebc68e7669d738d],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\CASZ\AppData\Roaming\systweak\Advanced-System Protector\native\nativeapp.out, Quarantined, [5ca16f8397f26dc9aebc68e7669d738d],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\CASZ\AppData\Roaming\systweak\Advanced-System Protector\Quarantine\pup.optional-nz._qt_, Quarantined, [5ca16f8397f26dc9aebc68e7669d738d],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\CASZ\AppData\Roaming\systweak\Advanced-System Protector\Quarantine\pup.optional-snk._qt_, Quarantined, [5ca16f8397f26dc9aebc68e7669d738d],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\CASZ\AppData\Roaming\systweak\Advanced-System Protector\Quarantine\pup.optional-wsas._qt_, Quarantined, [5ca16f8397f26dc9aebc68e7669d738d],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\CASZ\AppData\Roaming\systweak\Advanced-System Protector\Quarantine\pup.optional._qt_, Quarantined, [5ca16f8397f26dc9aebc68e7669d738d],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\CASZ\AppData\Roaming\systweak\Advanced-System Protector\Quarantine\Restricted Settings._qt_, Quarantined, [5ca16f8397f26dc9aebc68e7669d738d],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\CASZ\AppData\Roaming\systweak\Advanced-System Protector\Quarantine\trojan.agent._qt_, Quarantined, [5ca16f8397f26dc9aebc68e7669d738d],
PUP.Optional.ExtendedProtection.A, C:\Users\CASZ\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogfjmhfnldnajmfaofeiaepghjenbgjo\1.4.1_0\background.html, Quarantined, [9f5e8b673356da5ca3d30d500bf8e51b],
PUP.Optional.ExtendedProtection.A, C:\Users\CASZ\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogfjmhfnldnajmfaofeiaepghjenbgjo\1.4.1_0\background.js, Quarantined, [9f5e8b673356da5ca3d30d500bf8e51b],
PUP.Optional.ExtendedProtection.A, C:\Users\CASZ\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogfjmhfnldnajmfaofeiaepghjenbgjo\1.4.1_0\data.json, Quarantined, [9f5e8b673356da5ca3d30d500bf8e51b],
PUP.Optional.ExtendedProtection.A, C:\Users\CASZ\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogfjmhfnldnajmfaofeiaepghjenbgjo\1.4.1_0\icon128.png, Quarantined, [9f5e8b673356da5ca3d30d500bf8e51b],
PUP.Optional.ExtendedProtection.A, C:\Users\CASZ\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogfjmhfnldnajmfaofeiaepghjenbgjo\1.4.1_0\inject.js, Quarantined, [9f5e8b673356da5ca3d30d500bf8e51b],
PUP.Optional.ExtendedProtection.A, C:\Users\CASZ\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogfjmhfnldnajmfaofeiaepghjenbgjo\1.4.1_0\jquery.js, Quarantined, [9f5e8b673356da5ca3d30d500bf8e51b],
PUP.Optional.ExtendedProtection.A, C:\Users\CASZ\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogfjmhfnldnajmfaofeiaepghjenbgjo\1.4.1_0\manifest.json, Quarantined, [9f5e8b673356da5ca3d30d500bf8e51b],
PUP.Optional.ExtendedProtection.A, C:\Users\CASZ\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogfjmhfnldnajmfaofeiaepghjenbgjo\1.4.1_0\xa.js, Quarantined, [9f5e8b673356da5ca3d30d500bf8e51b],
PUP.Optional.ExtendedProtection.A, C:\Users\CASZ\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogfjmhfnldnajmfaofeiaepghjenbgjo\1.4.1_0\xagainit.js, Quarantined, [9f5e8b673356da5ca3d30d500bf8e51b],
PUP.Optional.ExtendedProtection.A, C:\Users\CASZ\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogfjmhfnldnajmfaofeiaepghjenbgjo\1.4.1_1\background.html, Quarantined, [9f5e8b673356da5ca3d30d500bf8e51b],
PUP.Optional.ExtendedProtection.A, C:\Users\CASZ\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogfjmhfnldnajmfaofeiaepghjenbgjo\1.4.1_1\background.js, Quarantined, [9f5e8b673356da5ca3d30d500bf8e51b],
PUP.Optional.ExtendedProtection.A, C:\Users\CASZ\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogfjmhfnldnajmfaofeiaepghjenbgjo\1.4.1_1\data.json, Quarantined, [9f5e8b673356da5ca3d30d500bf8e51b],
PUP.Optional.ExtendedProtection.A, C:\Users\CASZ\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogfjmhfnldnajmfaofeiaepghjenbgjo\1.4.1_1\icon128.png, Quarantined, [9f5e8b673356da5ca3d30d500bf8e51b],
PUP.Optional.ExtendedProtection.A, C:\Users\CASZ\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogfjmhfnldnajmfaofeiaepghjenbgjo\1.4.1_1\inject.js, Quarantined, [9f5e8b673356da5ca3d30d500bf8e51b],
PUP.Optional.ExtendedProtection.A, C:\Users\CASZ\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogfjmhfnldnajmfaofeiaepghjenbgjo\1.4.1_1\jquery.js, Quarantined, [9f5e8b673356da5ca3d30d500bf8e51b],
PUP.Optional.ExtendedProtection.A, C:\Users\CASZ\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogfjmhfnldnajmfaofeiaepghjenbgjo\1.4.1_1\manifest.json, Quarantined, [9f5e8b673356da5ca3d30d500bf8e51b],
PUP.Optional.ExtendedProtection.A, C:\Users\CASZ\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogfjmhfnldnajmfaofeiaepghjenbgjo\1.4.1_1\xa.js, Quarantined, [9f5e8b673356da5ca3d30d500bf8e51b],
PUP.Optional.ExtendedProtection.A, C:\Users\CASZ\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogfjmhfnldnajmfaofeiaepghjenbgjo\1.4.1_1\xagainit.js, Quarantined, [9f5e8b673356da5ca3d30d500bf8e51b],
PUP.Optional.QuickStart.A, C:\Users\CASZ\AppData\Roaming\Mozilla\Firefox\Profiles\6umba1y0.default\prefs.js, Good: (), Bad: (user_pref("browser.newtab.url", "chrome://quick_start/content/index.html");), Replaced,[bc41787a8affb87e6d6d209e21e4cc34]

Physical Sectors: 0
(No malicious items detected)


(end)

#28 Re: Off Topic » Iexplore.exe Virus Help » 2021-03-09 09:52:24

Malwarebytes Log 1 Part 1
Malwarebytes Anti-Malware
www.malwarebytes.org
Scan Date: 1/2/2015
Scan Time: 9:06:17 PM
Logfile:
Administrator: No

Version: 2.00.4.1028
Malware Database: v2015.01.03.01
Rootkit Database: v2014.12.30.01
License: Premium
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: CASZ

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 480991
Time Elapsed: 3 hr, 25 min, 11 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Warn
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 1
PUP.Optional.DeltaFix.A, C:\Program Files (x86)\DeltaFix\DeltaFix.dll, Delete-on-Reboot, [ce2f975b3059b482076cb2b2768ded13],

Registry Keys: 46
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, Quarantined, [55a846ac19700f27b9cc944f36cca25e],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}, Quarantined, [55a846ac19700f27b9cc944f36cca25e],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}, Quarantined, [55a846ac19700f27b9cc944f36cca25e],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}, Quarantined, [55a846ac19700f27b9cc944f36cca25e],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}, Quarantined, [55a846ac19700f27b9cc944f36cca25e],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, Quarantined, [55a846ac19700f27b9cc944f36cca25e],
PUP.Optional.SupTab.A, HKU\S-1-5-21-1331771087-30956632-3492572574-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, Quarantined, [55a846ac19700f27b9cc944f36cca25e],
PUP.Optional.SupTab.A, HKU\S-1-5-21-1331771087-30956632-3492572574-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, Quarantined, [55a846ac19700f27b9cc944f36cca25e],
Trojan.Agent, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{AD11DADE-C597-45D9-D8C5-1D2EB0B89613}, Quarantined, [a15c72806a1f6fc729d9da252ed3926e],
PUP.Optional.AdvancedSystemProtector.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\00212D92-C5D8-4ff4-AE50-B20F0F85C40A_Systweak_Ad~4A5BE654_is1, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, Quarantined, [ee0fea080a7f201620b8be0922e2936d],
PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\delta-homesSoftware, Quarantined, [04f924cec7c254e2200f80fce91ad729],
PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\WOW6432NODE\mystartsearchSoftware, Quarantined, [ad502bc72762f640c53c92d7b74cb848],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\supWPM, Quarantined, [da238270e5a449edd3317cfb768d5aa6],
PUP.Optional.FTDownloader.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\bbffdhejhaoiflnpooogkckfdcmmjppn, Quarantined, [c7364ea44b3eb28416335c09f11207f9],
PUP.Optional.ExtendedProtection.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\ogfjmhfnldnajmfaofeiaepghjenbgjo, Quarantined, [cc31e909bdcca690e24870f510f3a25e],
PUP.Optional.Booster.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{fc67e7a0}, Quarantined, [7e7fdb171277092d441452303fc48d73],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPDP, Quarantined, [5da0a54d4346a2946f6389edf01315eb],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPTAB, Quarantined, [ec11db1798f1a096ec17a8cfd52e4fb1],
PUP.Optional.AdvancedSystemProtector.A, HKLM\SOFTWARE\WOW6432NODE\SYSTWEAK\Advanced-System Protector, Quarantined, [96670de512779d99affe34422fd4768a],
PUP.Optional.DeltaFix.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\fc67e7a0, Quarantined, [df1e16dc94f5ae88640e174d966d2ad6],
PUP.Optional.IEPluginServices.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\APPLICATION\IePluginService, Quarantined, [a459886a29605cda07b1fe6a9a69bd43],
PUP.Optional.IEPluginServices.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\APPLICATION\IePluginServices, Quarantined, [2fce3cb6ccbdc6709b8d71fb1de6a759],
PUP.Optional.Softonic.A, HKU\S-1-5-21-1331771087-30956632-3492572574-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Softonic, Quarantined, [1ce117dbf49524124f50541159aaa45c],
PUP.Optional.WebSearches.A, HKU\S-1-5-21-1331771087-30956632-3492572574-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SupHpUISoft, Quarantined, [ba431dd591f8ad89387b0375679cb64a],
PUP.Optional.AdvancedSystemProtector.A, HKU\S-1-5-21-1331771087-30956632-3492572574-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SYSTWEAK\Advanced-System Protector, Quarantined, [53aa3db5f792af878c224c2a54af4eb2],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\TYPELIB\{1D37BD00-E9FD-40D1-80E7-1795E510ECAA}, Quarantined, [cd30c82a4f3aa98da9b68ba3ea19c63a],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\INTERFACE\{8B906AF1-C9E5-493C-9B36-8E1CBAE28522}, Quarantined, [cd30c82a4f3aa98da9b68ba3ea19c63a],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\INTERFACE\{9A71EC22-9AAE-421E-98BC-59E12779D611}, Quarantined, [cd30c82a4f3aa98da9b68ba3ea19c63a],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\INTERFACE\{B6E5186F-181F-48C2-A8C0-9191A1707AEA}, Quarantined, [cd30c82a4f3aa98da9b68ba3ea19c63a],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{8B906AF1-C9E5-493C-9B36-8E1CBAE28522}, Quarantined, [cd30c82a4f3aa98da9b68ba3ea19c63a],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{9A71EC22-9AAE-421E-98BC-59E12779D611}, Quarantined, [cd30c82a4f3aa98da9b68ba3ea19c63a],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{B6E5186F-181F-48C2-A8C0-9191A1707AEA}, Quarantined, [cd30c82a4f3aa98da9b68ba3ea19c63a],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{1D37BD00-E9FD-40D1-80E7-1795E510ECAA}, Quarantined, [cd30c82a4f3aa98da9b68ba3ea19c63a],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\CLSID\{77858244-d98f-433c-8358-4d677b1c095c}, Quarantined, [cd30c82a4f3aa98da9b68ba3ea19c63a],
PUP.Optional.Multiplug, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{77858244-D98F-433C-8358-4D677B1C095C}, Quarantined, [cd30c82a4f3aa98da9b68ba3ea19c63a],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\P77858244_d98f_433c_8358_4d677b1c095c_.P77858244_d98f_433c_8358_4d677b1c095c_, Quarantined, [cd30c82a4f3aa98da9b68ba3ea19c63a],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\P77858244_d98f_433c_8358_4d677b1c095c_.P77858244_d98f_433c_8358_4d677b1c095c_.9, Quarantined, [cd30c82a4f3aa98da9b68ba3ea19c63a],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\P77858244_d98f_433c_8358_4d677b1c095c_.P77858244_d98f_433c_8358_4d677b1c095c_, Quarantined, [cd30c82a4f3aa98da9b68ba3ea19c63a],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\P77858244_d98f_433c_8358_4d677b1c095c_.P77858244_d98f_433c_8358_4d677b1c095c_.9, Quarantined, [cd30c82a4f3aa98da9b68ba3ea19c63a],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{77858244-D98F-433C-8358-4D677B1C095C}, Quarantined, [cd30c82a4f3aa98da9b68ba3ea19c63a],
PUP.Optional.Multiplug, HKU\S-1-5-21-1331771087-30956632-3492572574-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{77858244-D98F-433C-8358-4D677B1C095C}, Quarantined, [cd30c82a4f3aa98da9b68ba3ea19c63a],
PUP.Optional.Multiplug, HKU\S-1-5-21-1331771087-30956632-3492572574-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{77858244-D98F-433C-8358-4D677B1C095C}, Quarantined, [cd30c82a4f3aa98da9b68ba3ea19c63a],
PUP.Optional.Multiplug, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{77858244-D98F-433C-8358-4D677B1C095C}, Quarantined, [cd30c82a4f3aa98da9b68ba3ea19c63a],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{77858244-D98F-433C-8358-4D677B1C095C}, Quarantined, [cd30c82a4f3aa98da9b68ba3ea19c63a],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\CLSID\{77858244-D98F-433C-8358-4D677B1C095C}\INPROCSERVER32, Quarantined, [cd30c82a4f3aa98da9b68ba3ea19c63a],

Registry Values: 3
PUP.Optional.FreeMakeConverter.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|fmconverter@gmail.com, C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\, Quarantined, [fffe5999f69379bd9e79412ac14258a8]
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPDP|dir, C:\Program Files (x86)\SupTab, Quarantined, [5da0a54d4346a2946f6389edf01315eb]
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPTAB|ptid, exp, Quarantined, [ec11db1798f1a096ec17a8cfd52e4fb1]

Registry Data: 14
PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\FIREFOX.EXE\SHELL\OPEN\COMMAND, "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" http://www.mystartsearch.com/?type=...H … N9GH4NN9GX, Good: (firefox.exe), Bad: ("C:\Program Files (x86)\Mozilla Firefox\firefox.exe" http://www.mystartsearch.com/?type=...),Replaced,[1edf00f2c9c041f589a5fa803dc8c040]
PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, http://www.mystartsearch.com/web/?t...5 … archTerms}, Good: (www.google.com), Bad: (http://www.mystartsearch.com/web/?t...),Replaced,[ba433bb7761387af4a2f2e4c1aebc43c]
PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, http://www.mystartsearch.com/?type=...H … N9GH4NN9GX, Good: (www.google.com), Bad: (http://www.mystartsearch.com/?type=...),Replaced,[02fbe50d49403006c9af98e2ed1817e9]
PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://www.mystartsearch.com/?type=...H … N9GH4NN9GX, Good: (www.google.com), Bad: (http://www.mystartsearch.com/?type=...),Replaced,[a558539f038663d39779acdce0259868]
PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, http://www.mystartsearch.com/web/?t...5 … archTerms}, Good: (www.google.com), Bad: (http://www.mystartsearch.com/web/?t...),Replaced,[f30a4da5c8c11422ef8bb7c334d1c53b]
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Good: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Bad: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Replaced,[59a40ee4fc8df046d97ebbcb7d8832ce]
PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\WOW6432NODE\CLIENTS\STARTMENUINTERNET\FIREFOX.EXE\SHELL\OPEN\COMMAND, "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" http://www.mystartsearch.com/?type=...H … N9GH4NN9GX, Good: (firefox.exe), Bad: ("C:\Program Files (x86)\Mozilla Firefox\firefox.exe" http://www.mystartsearch.com/?type=...),Replaced,[25d8935f226787afc06ea2d859ac57a9]
PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, http://www.mystartsearch.com/web/?t...5 … archTerms}, Good: (www.google.com), Bad: (http://www.mystartsearch.com/web/?t...),Replaced,[8d70c1319aef5adc4b2ee19937ce9d63]
PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, http://www.mystartsearch.com/?type=...H … N9GH4NN9GX, Good: (www.google.com), Bad: (http://www.mystartsearch.com/?type=...),Replaced,[5da046ac3158d660cdabaad0a065857b]
PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://www.mystartsearch.com/?type=...H … N9GH4NN9GX, Good: (www.google.com), Bad: (http://www.mystartsearch.com/?type=...),Replaced,[42bb43afb3d660d60f013751966f6997]
PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, http://www.mystartsearch.com/web/?t...5 … archTerms}, Good: (www.google.com), Bad: (http://www.mystartsearch.com/web/?t...),Replaced,[ba43d2203e4b48ee4139f486b1541be5]
PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Good: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Bad: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Replaced,[1edf648eb8d187afff58c4c25baa9868]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-1331771087-30956632-3492572574-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, http://www.mystartsearch.com/?type=...H … N9GH4NN9GX, Good: (www.google.com), Bad: (http://www.mystartsearch.com/?type=...),Replaced,[59a4f8faa6e3bd793546f68445c03cc4]
PUP.Optional.Delta.A, HKU\S-1-5-21-1331771087-30956632-3492572574-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, http://search.delta-homes.com/web/?...G … archTerms}, Good: (www.google.com), Bad: (http://search.delta-homes.com/web/?...),Replaced,[7f7e19d9f89155e148117b0cab5a0af6]

Folders: 54
PUP.Optional.DeltaFix.A, C:\Program Files (x86)\DeltaFix, Delete-on-Reboot, [ce2f975b3059b482076cb2b2768ded13],
PUP.Optional.AdvancedSystemProtector, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced-System Protector, Quarantined, [f30a866cd6b34fe7f7a98fe841c2aa56],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\clamunpack, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Temp, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.Multiplug, C:\Program Files (x86)\youtubeadblocker, Quarantined, [cd30c82a4f3aa98da9b68ba3ea19c63a],
PUP.Optional.IePluginServices.A, C:\ProgramData\IePluginServices, Quarantined, [45b827cb29606fc77d4a98a957acf30d],
PUP.Optional.IePluginServices.A, C:\ProgramData\IePluginServices\update, Quarantined, [45b827cb29606fc77d4a98a957acf30d],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\skin, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\skin\image, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\en-US, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-419, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-ES, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-BE, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CA, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CH, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-FR, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-LU, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-CH, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-IT, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pl, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt-BR, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru-MO, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\tr-TR, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\vi-VI, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-CN, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-TW, Quarantined, [c03dd919e4a5c86e35fbbf8bf112649c],
PUP.Optional.SupTab.A, C:\Users\CASZ\AppData\Roaming\SupTab, Quarantined, [0bf27280c4c50b2b2c0562e833d01fe1],
PUP.Optional.DownTango.A, C:\Program Files (x86)\Red Sky\DownTango, Quarantined, [f40934bee5a40432e8c684c918eb0cf4],
PUP.Optional.DownTango.A, C:\Users\CASZ\AppData\Local\DownTango, Quarantined, [af4e03ef7019c472cfe0e469b84b7f81],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector, Quarantined, [7a83876b99f0b97dd3974906f11235cb],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\signatures, Quarantined, [7a83876b99f0b97dd3974906f11235cb],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates, Quarantined, [7a83876b99f0b97dd3974906f11235cb],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System Protector, Quarantined, [d627fef4a7e2ac8aaebc202fdf24629e],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System Protector\signatures, Quarantined, [d627fef4a7e2ac8aaebc202fdf24629e],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System Protector\updates, Quarantined, [d627fef4a7e2ac8aaebc202fdf24629e],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\CASZ\AppData\Roaming\systweak\Advanced System Protector, Quarantined, [25d8dd15494070c6adbdf05f32d17789],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\CASZ\AppData\Roaming\systweak\Advanced-System Protector, Quarantined, [5ca16f8397f26dc9aebc68e7669d738d],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\CASZ\AppData\Roaming\systweak\Advanced-System Protector\Backup, Quarantined, [5ca16f8397f26dc9aebc68e7669d738d],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\CASZ\AppData\Roaming\systweak\Advanced-System Protector\Logs, Quarantined, [5ca16f8397f26dc9aebc68e7669d738d],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\CASZ\AppData\Roaming\systweak\Advanced-System Protector\native, Quarantined, [5ca16f8397f26dc9aebc68e7669d738d],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\CASZ\AppData\Roaming\systweak\Advanced-System Protector\Quarantine, Quarantined, [5ca16f8397f26dc9aebc68e7669d738d],
PUP.Optional.ExtendedProtection.A, C:\Users\CASZ\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogfjmhfnldnajmfaofeiaepghjenbgjo, Quarantined, [9f5e8b673356da5ca3d30d500bf8e51b],
PUP.Optional.ExtendedProtection.A, C:\Users\CASZ\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogfjmhfnldnajmfaofeiaepghjenbgjo\1.4.1_0, Quarantined, [9f5e8b673356da5ca3d30d500bf8e51b],
PUP.Optional.ExtendedProtection.A, C:\Users\CASZ\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogfjmhfnldnajmfaofeiaepghjenbgjo\1.4.1_1, Quarantined, [9f5e8b673356da5ca3d30d500bf8e51b],
PUP.Optional.EzDownloader.A, C:\Users\CASZ\AppData\Roaming\EZDownloader, Quarantined, [07f6c62c2e5be74f90ae273a20e321df],
PUP.Optional.EzDownloader.A, C:\Users\CASZ\AppData\Roaming\EZDownloader\Errors, Quarantined, [07f6c62c2e5be74f90ae273a20e321df],

Files: 234
Trojan.Agent, C:\Program Files (x86)\Missing e\Missing e.exe, Quarantined, [a15c72806a1f6fc729d9da252ed3926e],
Trojan.Agent, C:\Program Files (x86)\youtubeadblocker\1mEC5ewRmizzkW.exe, Quarantined, [f607718156335fd7bb479b647f8257a9],
PUP.Optional.SearchProtect, C:\Program Files (x86)\SupTab\Loader64.exe, Quarantined, [9f5e16dc5138c175f78d6c7923de7c84],
PUP.Optional.Skytech.A, C:\Program Files (x86)\SupTab\SearchProtect32.dll, Quarantined, [e518bd3559301b1bad90b1f5ce33e818],
Trojan.Agent, C:\$Recycle.Bin\S-1-5-21-1331771087-30956632-3492572574-1000\$RAWH47V\unisaless.exe, Quarantined, [6a93ec06513877bfdd25fe01867b8e72],
PUP.Optional.AdvancedSystemProtector, C:\Windows\System32\sasnative64.exe, Quarantined, [6c916e84a0e95bdbf07a10ad867bfb05],
PUP.Optional.OpenCandy, C:\Users\CASZ\AppData\Local\Temp\FreemakeVideoConverter_4.1.4.14.exe, Quarantined, [45b872803c4d78beffd50a23649d5fa1],
Trojan.Agent, C:\Users\CASZ\AppData\Local\Temp\tmpC3A4.tmp, Quarantined, [31cc62907514b87ec2d038ca40c244bc],
PUP.Optional.MyPCBackup.A, C:\Users\CASZ\AppData\Local\Temp\BackupSetup.exe, Quarantined, [b24be80a0287f73f81ce1fc608f92bd5],
PUP.Optional.DeltaFix.A, C:\Program Files (x86)\DeltaFix\DeltaFix.dll, Delete-on-Reboot, [ce2f975b3059b482076cb2b2768ded13],
PUP.Optional.ExtendedProtection.A, C:\Users\CASZ\AppData\Local\Google\Chrome\User Data\Default\Extensions\ep.crx, Quarantined, [1fde0ee4b2d7bf7750db85e09b68e21e],
PUP.Optional.MyStartSearch.A, C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\mystartsearch.xml, Quarantined, [eb1291618bfe72c4c13e92d6dc276799],
PUP.Optional.Conduit.A, C:\Users\CASZ\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_cap1.conduit-apps.com_0.localstorage, Quarantined, [eb1224ceaddc85b1cde0155fab58a45c],
PUP.Optional.Conduit.A, C:\Users\CASZ\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_cap1.conduit-apps.com_0.localstorage-journal, Quarantined, [ea13dc16e8a167cf624bcca826dddd23],
PUP.Optional.AdvancedSystemProtector, C:\Windows\System32\Tasks\Advanced-System Protector_startup, Quarantined, [807d16dc5a2f79bd26f5d2a5ec17e61a],
PUP.Optional.AdvancedSystemProtector, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced-System Protector\Uninstall Advanced-System Protector.lnk, Quarantined, [f30a866cd6b34fe7f7a98fe841c2aa56],
PUP.Optional.AdvancedSystemProtector, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced-System Protector\Advanced-System Protector.lnk, Quarantined, [f30a866cd6b34fe7f7a98fe841c2aa56],
PUP.Optional.AdvancedSystemProtector, C:\Users\Public\Desktop\Advanced-System Protector.lnk, Quarantined, [d4294aa84148b77f564bf78058ab8e72],
PUP.Optional.RegCleanerPro, C:\Windows\System32\Tasks\RegClean Pro, Quarantined, [03fa3eb44b3e5adc10affd7c0af958a8],
PUP.Optional.ContinueToSave.A, C:\Users\CASZ\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_continuetosave.info_0.localstorage, Quarantined, [b449faf8a0e974c22a002a5215eecc34],
PUP.Optional.ContinueToSave.A, C:\Users\CASZ\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_continuetosave.info_0.localstorage-journal, Quarantined, [7c81e70b5c2d6bcbfa307a02bd46db25],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\AdvancedSystemProtector.exe.config, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\AdvancedSystemProtector.exe, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\AppResource.dll, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\asp.ico, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\AspManager.exe, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\aspsys.dll, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\ASPUninstall.exe, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\categories.ini, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Chinese_asp_ZH-CN.ini, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Chinese_uninst.ini, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\traditionalcn_uninst_zh-tw.ini, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Turkish_uninst_tr.ini, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\unins000.dat, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\unins000.exe, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\unins000.msg, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\unrar.dll, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Xceed.Compression.dll, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Xceed.Compression.Formats.dll, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Xceed.FileSystem.dll, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Xceed.Zip.dll, Quarantined, [c538aa48fb8edb5b2139f2ec9c68cb35],

#29 Re: Off Topic » Iexplore.exe Virus Help » 2021-03-09 09:50:29

Hey, thanks for the reply I hope that with your help we get the problem solved.
Anyway, I forgot to mention this on the previous post, apart from the iexplore.exe processes showing with about 46,500k each, there seems to be a problem with dwm.exe as well as it appears to be consuming approximately 67,000k+ which it didn't consume that before, I don't know if its related to the iexplore.exe issue, but I think it does cause it appeared to behave like that when the iexplore.exe problem emerged.
Also I will post the different logs I had from the various software I used from other forums. If it helps to fast up the pace of this, Thanks.

DDS Log with Attatchment

DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 11.0.9600.17496 BrowserJavaVersion: 10.71.2
Run by CASZ at 15:17:29 on 2015-01-03
Microsoft Windows 7 Ultimate 6.1.7601.1.1252.1.1033.18.8140.3630 [GMT -6:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {4F35CFC4-45A3-FC37-EF17-759A02E39AB1}
AV: AVG Internet Security 2015 *Enabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AV: Norton Internet Security *Disabled/Outdated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
SP: Microsoft Security Essentials *Enabled/Updated* {F4542E20-6399-F3B9-D5A7-4EE87964D00C}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: AVG Internet Security 2015 *Enabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664}
SP: Norton Internet Security *Disabled/Outdated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
FW: Norton Internet Security *Disabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
FW: AVG Internet Security 2015 *Enabled* {36AFA1E1-4CDC-7EF8-11EE-C77C3581ABA2}
.
============== Running Processes ===============
.
c:\PROGRA~2\AVG\AVG2015\avgrsa.exe
C:\Program Files (x86)\AVG\AVG2015\avgcsrva.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe
C:\Windows\system32\svchost.exe -k RPCSS
c:\Program Files\Microsoft Security Client\MsMpEng.exe
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Program Files\IDT\WDM\STacSV64.exe
C:\Windows\system32\Hpservice.exe
C:\Windows\System32\WUDFHost.exe
C:\Windows\system32\atieclxx.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe
C:\Windows\system32\taskeng.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k WbioSvcGroup
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files\IDT\WDM\AESTSr64.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\taskhost.exe
C:\Program Files (x86)\AVG\AVG2015\avgfws.exe
C:\Program Files (x86)\HP SimplePass 2011\TouchControl.exe
C:\Windows\system32\Dwm.exe
C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe
C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files (x86)\HP SimplePass 2011\BioMonitor.exe
C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe
C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE
C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE
C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler64.exe
C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE
C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE
C:\Program Files\Intel\WiFi\bin\EvtEng.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe
C:\Program Files (x86)\AVG\AVG2015\avgemca.exe
C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe
C:\Program Files (x86)\JuegosLevelUp\Hi-Rez Studios\HiPatchService.exe
C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\ccSvcHst.exe
C:\Program Files (x86)\NovaStor\NovaStor NovaBACKUP\nsService.exe
C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
c:\program files (x86)\real\realplayer\RPDS\Bin\rpdsvc.exe
C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe
C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
C:\Program Files (x86)\Roxio\RoxioNow Player\RNowSvc.exe
C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe
C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\ccSvcHst.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Windows\system32\wbem\wmiprvse.exe
c:\Program Files\Microsoft Security Client\NisSrv.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\System32\rundll32.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files\IDT\WDM\sttray64.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files (x86)\RocketDock\RocketDock.exe
C:\Windows\System32\regsvr32.exe
C:\Windows\SysWOW64\regsvr32.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Rainmeter\Rainmeter.exe
C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpConnectionManager.exe
C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
C:\Program Files (x86)\AVG\AVG2015\avgui.exe
C:\Windows\SysWOW64\RunDll32.exe
C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
C:\Windows\SysWOW64\ctfmon.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files (x86)\Hewlett-Packard\Shared\hpCaslNotification.exe
C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Common Files\Steam\SteamService.exe
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Windows\system32\svchost.exe -k SDRSVC
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe
C:\Windows\Explorer.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_235.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_235.exe
C:\Windows\System32\WUDFHost.exe
C:\Program Files (x86)\Bruteforce Save Data\BruteforceSaveData.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\cscript.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = about:blank
uSearch Bar = Preserve
uSearch Page = hxxp://www.google.com
uDefault_Page_URL = www.google.com
uDefault_Search_URL = www.google.com
mStart Page = www.google.com
mSearch Page = www.google.com
mDefault_Page_URL = www.google.com
mDefault_Search_URL = www.google.com
uProxyServer = hxxp=127.0.0.1:8555;https=127.0.0.1:8555
uProxyOverride = 127.0.0.1;localhost;10.*;192.168.*;127.0.0.1:895;127.0.0.1:896;<local>
BHO: RealNetworks Download and Record Plugin for Internet Explorer: {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll
BHO: Symantec NCO BHO: {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\coieplg.dll
BHO: Symantec Intrusion Prevention: {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\ips\ipsbho.dll
BHO: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL
BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
TB: Norton Toolbar: {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\coieplg.dll
TB: Norton Toolbar: {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\coieplg.dll
uRun: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
uRun: [RocketDock] "C:\Program Files (x86)\RocketDock\RocketDock.exe"
uRun: [Imcxsoft] regsvr32.exe C:\Users\CASZ\AppData\Local\Imcxsoft\LibcrtKit32.dll
uRun: [EPSON NX125 NX127 Series] C:\Windows\System32\spool\DRIVERS\x64\3\E_IATIGGA.EXE /FU "C:\Windows\TEMP\E_S5A5F.tmp" /EF "HKCU"
mRun: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
mRun: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
mRun: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
mRun: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
mRun: [HPOSD] C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
mRun: [HPConnectionManager] C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe
mRun: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
mRun: [EEventManager] "C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe"
mRun: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
mRun: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2015\avgui.exe" /TRAYONLY
mRun: [AdobeCS5.5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" -launchedbylogin
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
StartupFolder: C:\Users\CASZ\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\RAINME~1.LNK - C:\Program Files\Rainmeter\Rainmeter.exe
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\BLUETO~1.LNK - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\SYSTWE~1\NOVABA~1.LNK - C:\Program Files (x86)\NovaStor\NovaStor NovaBACKUP\nsCtrl.exe
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\SYSTWE~1\REALPL~1.LNK - C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin64\rpsystray.exe
mPolicies-Explorer: NoActiveDesktop = dword:1
mPolicies-Explorer: NoActiveDesktopChanges = dword:1
mPolicies-Explorer: EnableShellExecuteHooks = dword:1
mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableUIADesktopToggle = dword:0
mPolicies-System: HideFastUserSwitching = dword:0
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
IE: {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204
IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
Trusted Zone: 4game.com
Trusted Zone: clonewarsadventures.com
Trusted Zone: freerealms.com
Trusted Zone: google-analytics.com
Trusted Zone: novastor.com
Trusted Zone: novastor.com
Trusted Zone: soe.com
Trusted Zone: sony.com
DPF: {12193C65-F0E1-4DD1-AD4E-DB73C6911011} - file:///E:/activeX/DCP.cab
DPF: {7191F0AC-D686-46A8-BFCC-EA61778C74DD} - hxxps://la.mydlink.com/8D/activeX//DCS-93x/aplugLiteDL.cab
TCP: NameServer = 10.213.4.14 10.213.1.11
TCP: Interfaces\{0A56AFA7-2FFD-43B9-A3E7-137BA6623546} : NameServer = 8.8.8.8,8.8.8.8
TCP: Interfaces\{732EF926-EB8B-42F8-AE77-2C3F8D8A5ACC} : NameServer = 8.8.8.8,8.8.8.8
TCP: Interfaces\{8F9BD33E-C441-4F8A-8ED2-B1AB11ECAD95} : NameServer = 8.8.8.8,8.8.8.8
TCP: Interfaces\{9460A5EF-DCB1-44F1-891B-3FE12E1C00F8} : NameServer = 8.8.8.8,8.8.8.8
TCP: Interfaces\{ADCA6528-C351-4285-AF74-268745990D86} : NameServer = 8.8.8.8,8.8.8.8
TCP: Interfaces\{ADCA6528-C351-4285-AF74-268745990D86} : DHCPNameServer = 10.213.4.14 10.213.1.11
TCP: Interfaces\{ADCA6528-C351-4285-AF74-268745990D86}\34F40594B40234C69656E6475637 : DHCPNameServer = 192.168.1.1
TCP: Interfaces\{ADCA6528-C351-4285-AF74-268745990D86}\94E46494E4944555D403637303 : DHCPNameServer = 192.168.1.254
TCP: Interfaces\{ADCA6528-C351-4285-AF74-268745990D86}\94E46494E4944555D407239773F5548545 : DHCPNameServer = 192.168.1.254 0.0.0.0
TCP: Interfaces\{ADCA6528-C351-4285-AF74-268745990D86}\94E46494E4944555D423939333 : DHCPNameServer = 192.168.1.254
TCP: Interfaces\{ADCA6528-C351-4285-AF74-268745990D86}\94E46494E4944555D4533434835423 : DHCPNameServer = 192.168.1.254
TCP: Interfaces\{ADCA6528-C351-4285-AF74-268745990D86}\94E46494E4944555D4542303631373 : DHCPNameServer = 192.168.1.254
TCP: Interfaces\{ADCA6528-C351-4285-AF74-268745990D86}\94E46494E4944555D454831353 : DHCPNameServer = 192.168.1.254
Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
SSODL: WebCheck - <orphaned>
SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL
mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
x64-mStart Page = www.google.com
x64-mSearch Page = www.google.com
x64-mDefault_Page_URL = www.google.com
x64-mDefault_Search_URL = www.google.com
x64-BHO: RealNetworks Download and Record Plugin for Internet Explorer: {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin64.dll
x64-BHO: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL
x64-BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
x64-BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL
x64-BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
x64-Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe
x64-Run: [SynTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe
x64-Run: [Persistence] C:\Windows\System32\igfxpers.exe
x64-Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
x64-Run: [IntelWireless] "C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" /tf Intel Wireless Tray
x64-Run: [IgfxTray] C:\Windows\System32\igfxtray.exe
x64-Run: [HotKeysCmds] C:\Windows\System32\hkcmd.exe
x64-Run: [AdobeAAMUpdater-1.0] "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
x64-RunOnce: [NCPluginUpdater] "C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe" Update
x64-IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
x64-IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
x64-IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll
x64-IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
x64-Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
x64-Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll
x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - <orphaned>
x64-Notify: igfxcui - igfxdev.dll
x64-Notify: WB - C:\PROGRA~2\Stardock\OBJECT~1\WINDOW~1\fast64.dll
x64-SSODL: WebCheck - <orphaned>
x64-SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL
Hosts: 192.95.55.229 www.google-analytics.com.
Hosts: 192.95.55.229 google-analytics.com.
Hosts: 192.95.55.229 connect.facebook.net.
Hosts: 95.141.32.66 www.google-analytics.com.
Hosts: 95.141.32.66 google-analytics.com.
.
Note: multiple HOSTS entries found. Please refer to Attach.txt
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\CASZ\AppData\Roaming\Mozilla\Firefox\Profiles\6umba1y0.default\
FF - prefs.js: browser.startup.homepage - about:home
FF - prefs.js: network.proxy.type - 4
FF - plugin: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL
FF - plugin: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
FF - plugin: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
FF - plugin: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll
FF - plugin: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll
FF - plugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll
FF - plugin: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npdeployJava1.dll
FF - plugin: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll
FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrlui.dll
FF - plugin: c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll
FF - plugin: C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll
FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
FF - plugin: C:\ProgramData\HappyCloud\Application\npHappyCloudPlugin.dll
FF - plugin: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll
FF - ExtSQL: !HIDDEN! 1970-05-28 22:26; {C7E010A3-B924-DD24-96FD-0B2E450F4D81}; -
.
============= SERVICES / DRIVERS ===============
.
R0 AVGIDSHA;AVGIDSHA;C:\Windows\System32\drivers\avgidsha.sys [2014-11-18 203544]
R0 Avgloga;AVG Logging Driver;C:\Windows\System32\drivers\avgloga.sys [2014-7-18 313624]
R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;C:\Windows\System32\drivers\avgmfx64.sys [2014-10-5 124184]
R0 Avgrkx64;AVG Anti-Rootkit Driver;C:\Windows\System32\drivers\avgrkx64.sys [2014-6-18 31512]
R0 MpFilter;Microsoft Malware Protection Driver;C:\Windows\System32\drivers\MpFilter.sys [2014-7-17 269008]
R0 SymDS;Symantec Data Store;C:\Windows\System32\drivers\NISx64\1207020.003\symds64.sys [2013-1-15 450680]
R0 SymEFA;Symantec Extended File Attributes;C:\Windows\System32\drivers\NISx64\1207020.003\symefa64.sys [2013-1-15 912504]
R1 Avgdiska;AVG Disk Driver;C:\Windows\System32\drivers\avgdiska.sys [2014-6-18 153368]
R1 Avgfwfd;AVG network filter service;C:\Windows\System32\drivers\avgfwd6a.sys [2013-9-26 57144]
R1 AVGIDSDriver;AVGIDSDriver;C:\Windows\System32\drivers\avgidsdrivera.sys [2014-12-8 260888]
R1 Avgldx64;AVG AVI Loader Driver;C:\Windows\System32\drivers\avgldx64.sys [2014-8-28 243480]
R1 Avgtdia;AVG TDI Driver;C:\Windows\System32\drivers\avgtdia.sys [2014-10-10 274200]
R1 avgtp;avgtp;C:\Windows\System32\drivers\avgtpx64.sys [2013-1-16 50976]
R1 BHDrvx64;BHDrvx64;C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\BASHDefs\20101123.003\BHDrvx64.sys [2011-6-12 953904]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;C:\Windows\System32\drivers\dtsoftbus01.sys [2013-1-16 283200]
R1 IDSVia64;IDSVia64;C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\IPSDefs\20101201.001\IDSviA64.sys [2011-6-12 476792]
R1 SymIRON;Symantec Iron Driver;C:\Windows\System32\drivers\NISx64\1207020.003\ironx64.sys [2013-1-15 171128]
R1 SymNetS;Symantec Network Security WFP Driver;C:\Windows\System32\drivers\NISx64\1207020.003\symnets.sys [2013-1-15 386168]
R2 AESTFilters;Andrea ST Filters Service;C:\Program Files\IDT\WDM\AESTSr64.exe [2013-3-6 89600]
R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\System32\atiesrxx.exe [2011-6-12 204288]
R2 avgfws;AVG Firewall;C:\Program Files (x86)\AVG\AVG2015\avgfws.exe [2014-12-18 1486664]
R2 AVGIDSAgent;AVGIDSAgent;C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe [2014-12-18 3432976]
R2 avgwd;AVG WatchDog;C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe [2014-12-18 298080]
R2 c2cautoupdatesvc;Skype Click to Call Updater;C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2014-7-14 1390176]
R2 c2cpnrsvc;Skype Click to Call PNR Service;C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2014-7-14 1767520]
R2 EPSON_EB_RPCV4_04;EPSON V5 Service4(04);C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE [2013-7-9 166400]
R2 EPSON_PM_RPCV4_04;EPSON V3 Service4(04);C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE [2013-7-9 128512]
R2 FPLService;TrueSuiteService;C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe [2011-2-17 265544]
R2 FreemakeVideoCapture;FreemakeVideoCapture;C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe [2013-1-14 9216]
R2 HiPatchService;Hi-Rez Studios Authenticate and Update Service;C:\Program Files (x86)\JuegosLevelUp\Hi-Rez Studios\HiPatchService.exe [2014-11-25 9216]
R2 HPClientSvc;HP Client Services;C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe [2010-10-11 346168]
R2 HPDrvMntSvc.exe;HP Quick Synchronization Service;C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2011-2-28 92216]
R2 hpsrv;HP Service;C:\Windows\System32\hpservice.exe [2011-1-26 30520]
R2 HPWMISVC;HPWMISVC;C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [2010-11-9 26680]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-6-12 13336]
R2 MBAMScheduler;MBAMScheduler;C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [2015-1-2 1871160]
R2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2015-1-2 969016]
R2 NIS;Norton Internet Security;C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\ccsvchst.exe [2013-1-15 130008]
R2 NisDrv;Microsoft Network Inspection System;C:\Windows\System32\drivers\NisDrvWFP.sys [2012-8-31 125584]
R2 nsService;NovaStor NovaBACKUP Backup/Copy Engine;C:\Program Files (x86)\NovaStor\NovaStor NovaBACKUP\nsService.exe [2011-11-11 371856]
R2 RealNetworks Downloader Resolver Service;RealNetworks Downloader Resolver Service;C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [2014-10-26 39568]
R2 RealPlayer Cloud Service;RealPlayer Cloud Service;C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpdsvc.exe [2014-12-15 1141848]
R2 RealPlayerUpdateSvc;RealPlayer Update Service;C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe [2014-10-30 31856]
R2 RoxioNow Service;RoxioNow Service;C:\Program Files (x86)\Roxio\RoxioNow Player\RNowSvc.exe [2010-11-26 399344]
R2 RzKLService;RzKLService;C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe [2014-4-17 105448]
R2 UNS;Intel(R) Management and Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-6-12 2656280]
R3 clwvd;CyberLink WebCam Virtual Driver;C:\Windows\System32\drivers\clwvd.sys [2012-8-3 40432]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2011-6-12 132656]
R3 hpCMSrv;HP Connection Manager 4.0 Service;C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe [2011-2-15 1071160]
R3 IntcDAud;Intel(R) Display Audio;C:\Windows\System32\drivers\IntcDAud.sys [2014-3-30 450520]
R3 intelkmd;intelkmd;C:\Windows\System32\drivers\igdpmd64.sys [2011-8-9 12289472]
R3 MBAMProtector;MBAMProtector;C:\Windows\System32\drivers\mbam.sys [2015-1-2 25816]
R3 MBAMSwissArmy;MBAMSwissArmy;C:\Windows\System32\drivers\MBAMSwissArmy.sys [2015-1-2 129752]
R3 NisSrv;Microsoft Network Inspection;C:\Program Files\Microsoft Security Client\NisSrv.exe [2014-8-22 368624]
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;C:\Windows\System32\drivers\nusb3hub.sys [2013-8-12 107912]
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;C:\Windows\System32\drivers\nusb3xhc.sys [2013-8-12 226696]
R3 RSPCIESTOR;Realtek PCIE CardReader Driver;C:\Windows\System32\drivers\RtsPStor.sys [2014-1-7 359128]
R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2013-4-10 849992]
R3 ScreamBAudioSvc;ScreamBee Audio;C:\Windows\System32\drivers\ScreamingBAudio64.sys [2010-7-1 38992]
R3 wdkmd;Intel WiDi KMD;C:\Windows\System32\drivers\WDKMD.sys [2011-2-16 42392]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-9-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-9-11 124088]
S2 ezSharedSvc;Easybits Services for Windows;C:\Windows\System32\ezSharedSvcHost.exe --> C:\Windows\System32\ezSharedSvcHost.exe [?]
S2 Freemake Improver;Freemake Improver;C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [2014-9-23 108032]
S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-12-11 315496]
S3 Backup Client Agent Service;Backup Client Agent Service;C:\Program Files (x86)\NovaStor\NovaStor NovaBACKUP\ManagementServer.Agent.Service.exe [2011-11-8 217600]
S3 BBSvc;Bing Bar Update Service;C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-3-1 183560]
S3 btwampfl;Bluetooth AMP USB Filter;C:\Windows\System32\drivers\btwampfl.sys [2011-6-12 344616]
S3 btwl2cap;Bluetooth L2CAP Service;C:\Windows\System32\drivers\btwl2cap.sys [2011-6-12 39464]
S3 GamesAppService;GamesAppService;"C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe" --> C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [?]
S3 HTCAND64;HTC Device Driver;C:\Windows\System32\drivers\ANDROIDUSB.sys [2009-11-2 33736]
S3 IEEtwCollectorService;Internet Explorer ETW Collector Service;C:\Windows\System32\ieetwcollector.exe [2014-12-10 114688]
S3 MBAMWebAccessControl;MBAMWebAccessControl;C:\Windows\System32\drivers\mwac.sys [2015-1-2 63704]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2011-1-5 340240]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:\Windows\System32\drivers\rdpvideominiport.sys [2010-11-20 20992]
S3 SrvHsfHDA;SrvHsfHDA;C:\Windows\System32\drivers\VSTAZL6.SYS [2009-7-13 292864]
S3 SrvHsfV92;SrvHsfV92;C:\Windows\System32\drivers\VSTDPV6.SYS [2009-7-13 1485312]
S3 SrvHsfWinac;SrvHsfWinac;C:\Windows\System32\drivers\VSTCNXT6.SYS [2009-7-13 740864]
S3 SwitchBoard;Adobe SwitchBoard;C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-2-19 517096]
S3 taphss6;Anchorfree HSS VPN Adapter;C:\Windows\System32\drivers\taphss6.sys [2013-9-17 42184]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2010-11-20 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device;C:\Windows\System32\drivers\TsUsbGD.sys [2010-11-20 31232]
S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\System32\drivers\usbaapl64.sys [2012-12-13 54784]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2013-1-14 1255736]
S3 WDC_SAM;WD SCSI Pass Thru driver;C:\Windows\System32\drivers\wdcsam64.sys [2008-5-6 14464]
S4 wlcrasvc;Windows Live Mesh remote connections service;C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-9-22 57184]
.
=============== Created Last 30 ================
.
2015-01-03 20:30:17 75888 ----a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{E97285C1-A7D8-44BA-989A-9BF7BCA4D5B4}\offreg.dll
2015-01-03 20:30:04 -------- d-----w- C:\FRST
2015-01-03 19:32:33 11870360 ----a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{E97285C1-A7D8-44BA-989A-9BF7BCA4D5B4}\mpengine.dll
2015-01-03 19:26:31 -------- d-----w- C:\ProgramData\HitmanPro
2015-01-03 19:05:37 -------- d-----w- C:\AdwCleaner
2015-01-03 07:32:32 -------- d-----w- C:\Windows\pss
2015-01-03 03:03:50 129752 ----a-w- C:\Windows\System32\drivers\MBAMSwissArmy.sys
2015-01-03 03:02:31 93400 ----a-w- C:\Windows\System32\drivers\mbamchameleon.sys
2015-01-03 03:02:31 63704 ----a-w- C:\Windows\System32\drivers\mwac.sys
2015-01-03 03:02:31 25816 ----a-w- C:\Windows\System32\drivers\mbam.sys
2015-01-03 03:02:07 -------- d-----w- C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-01-03 02:00:53 -------- d-----w- C:\Users\CASZ\AppData\Roaming\AVG2015
2015-01-03 01:54:41 -------- d--h--w- C:\$AVG
2015-01-03 01:54:41 -------- d-----w- C:\ProgramData\AVG2015
2015-01-03 01:52:41 -------- d-----w- C:\Program Files (x86)\AVG
2015-01-03 01:49:03 -------- d-----w- C:\Users\CASZ\AppData\Local\MFAData
2015-01-03 01:49:03 -------- d-----w- C:\Users\CASZ\AppData\Local\Avg2015
2015-01-03 01:49:03 -------- d-----w- C:\ProgramData\MFAData
2015-01-03 00:15:14 -------- d-----w- C:\Users\CASZ\AppData\Local\Imcxsoft
2015-01-03 00:13:09 -------- d-sh--w- C:\Users\CASZ\AppData\Local\EmieBrowserModeList
2015-01-03 00:13:04 -------- d-----w- C:\Users\CASZ\AppData\Local\Ihmjsoft
2015-01-02 17:17:11 1188440 ----a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{8931C16A-A520-4C68-89AF-2A568BE7F0D6}\gapaengine.dll
2015-01-02 17:15:38 11870360 ----a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2015-01-02 01:58:39 -------- d-----w- C:\ProgramData\amfpanleeekjndiijbaehciilmkjeipb
2014-12-18 16:09:08 144384 ----a-w- C:\Windows\System32\ieUnatt.exe
2014-12-18 16:09:08 115712 ----a-w- C:\Windows\SysWow64\ieUnatt.exe
2014-12-16 06:45:27 -------- d-----w- C:\Users\CASZ\AppData\Local\{646D5578-C680-484E-A1AA-118F54C1467F}
2014-12-15 16:43:58 -------- d-----w- C:\Users\CASZ\AppData\Roaming\RealNetworks
2014-12-15 16:43:52 -------- d-----w- C:\ProgramData\Package Cache
2014-12-15 16:43:08 -------- d-----w- C:\Program Files (x86)\Common Files\xing shared
2014-12-15 16:42:34 505416 ----a-w- C:\Windows\SysWow64\msvcp71.dll
2014-12-15 16:42:34 353864 ----a-w- C:\Windows\SysWow64\msvcr71.dll
2014-12-11 05:49:11 -------- d-----w- C:\Windows\System32\appraiser
2014-12-11 05:21:31 3209728 ----a-w- C:\Windows\SysWow64\mf.dll
2014-12-11 05:21:29 4121600 ----a-w- C:\Windows\System32\mf.dll
2014-12-10 19:26:59 77824 ----a-w- C:\Windows\System32\JavaScriptCollectionAgent.dll
2014-12-10 19:24:01 165888 ----a-w- C:\Windows\System32\charmap.exe
2014-12-10 19:24:01 155136 ----a-w- C:\Windows\SysWow64\charmap.exe
2014-12-10 19:23:56 310272 ----a-w- C:\Windows\System32\WsmWmiPl.dll
2014-12-10 19:23:56 2020352 ----a-w- C:\Windows\System32\WsmSvc.dll
2014-12-10 19:23:56 1177088 ----a-w- C:\Windows\SysWow64\WsmSvc.dll
2014-12-10 19:23:55 346624 ----a-w- C:\Windows\System32\WSManMigrationPlugin.dll
2014-12-10 19:23:55 266240 ----a-w- C:\Windows\System32\WSManHTTPConfig.exe
2014-12-10 19:23:55 248832 ----a-w- C:\Windows\SysWow64\WSManMigrationPlugin.dll
2014-12-10 19:23:55 214016 ----a-w- C:\Windows\SysWow64\WsmWmiPl.dll
2014-12-10 19:23:55 198656 ----a-w- C:\Windows\SysWow64\WSManHTTPConfig.exe
2014-12-10 19:23:55 181248 ----a-w- C:\Windows\System32\WsmAuto.dll
2014-12-10 19:23:55 145920 ----a-w- C:\Windows\SysWow64\WsmAuto.dll
2014-12-10 19:23:52 2048 ----a-w- C:\Windows\SysWow64\tzres.dll
2014-12-10 19:23:52 2048 ----a-w- C:\Windows\System32\tzres.dll
2014-12-10 02:01:59 -------- d-----w- C:\Program Files (x86)\Ultra Street Fighter IV
2014-12-09 05:33:47 1892184 ----a-w- C:\Windows\SysWow64\D3DX9_42.dll
2014-12-09 05:20:17 -------- d-----w- C:\Program Files (x86)\Capcom
2014-12-09 03:24:26 260888 ----a-w- C:\Windows\System32\drivers\avgidsdrivera.sys
.
==================== Find3M ====================
.
2014-12-17 03:49:14 701616 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe
2014-12-17 03:49:13 71344 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2014-12-04 02:50:55 413184 ----a-w- C:\Windows\System32\generaltel.dll
2014-12-04 02:50:45 741376 ----a-w- C:\Windows\System32\invagent.dll
2014-12-04 02:50:40 396800 ----a-w- C:\Windows\System32\devinv.dll
2014-12-04 02:50:38 830976 ----a-w- C:\Windows\System32\appraiser.dll
2014-12-04 02:50:37 227328 ----a-w- C:\Windows\System32\aepdu.dll
2014-12-04 02:50:37 192000 ----a-w- C:\Windows\System32\aepic.dll
2014-12-04 02:44:48 1083392 ----a-w- C:\Windows\System32\aeinv.dll
2014-12-01 23:28:44 1232040 ----a-w- C:\Windows\System32\aitstatic.exe
2014-11-22 03:06:23 2724864 ----a-w- C:\Windows\System32\mshtml.tlb
2014-11-22 03:06:11 4096 ----a-w- C:\Windows\System32\ieetwcollectorres.dll
2014-11-22 02:50:39 66560 ----a-w- C:\Windows\System32\iesetup.dll
2014-11-22 02:50:10 580096 ----a-w- C:\Windows\System32\vbscript.dll
2014-11-22 02:49:54 48640 ----a-w- C:\Windows\System32\ieetwproxystub.dll
2014-11-22 02:48:20 88064 ----a-w- C:\Windows\System32\MshtmlDac.dll
2014-11-22 02:35:29 114688 ----a-w- C:\Windows\System32\ieetwcollector.exe
2014-11-22 02:34:51 814080 ----a-w- C:\Windows\System32\jscript9diag.dll
2014-11-22 02:34:07 6039552 ----a-w- C:\Windows\System32\jscript9.dll
2014-11-22 02:26:31 968704 ----a-w- C:\Windows\System32\MsSpellCheckingFacility.exe
2014-11-22 02:20:44 2724864 ----a-w- C:\Windows\SysWow64\mshtml.tlb
2014-11-22 02:07:43 501248 ----a-w- C:\Windows\SysWow64\vbscript.dll
2014-11-22 02:07:17 62464 ----a-w- C:\Windows\SysWow64\iesetup.dll
2014-11-22 02:06:32 47616 ----a-w- C:\Windows\SysWow64\ieetwproxystub.dll
2014-11-22 02:05:02 64000 ----a-w- C:\Windows\SysWow64\MshtmlDac.dll
2014-11-22 01:54:30 620032 ----a-w- C:\Windows\SysWow64\jscript9diag.dll
2014-11-22 01:47:10 1359360 ----a-w- C:\Windows\System32\mshtmlmedia.dll
2014-11-22 01:46:58 2125312 ----a-w- C:\Windows\System32\inetcpl.cpl
2014-11-22 01:40:04 60416 ----a-w- C:\Windows\SysWow64\JavaScriptCollectionAgent.dll
2014-11-22 01:29:26 4299264 ----a-w- C:\Windows\SysWow64\jscript9.dll
2014-11-22 01:28:21 2358272 ----a-w- C:\Windows\System32\wininet.dll
2014-11-22 01:22:49 2052096 ----a-w- C:\Windows\SysWow64\inetcpl.cpl
2014-11-22 01:21:57 1155072 ----a-w- C:\Windows\SysWow64\mshtmlmedia.dll
2014-11-22 01:00:20 1888256 ----a-w- C:\Windows\SysWow64\wininet.dll
2014-11-19 10:31:16 1217192 ----a-w- C:\Windows\SysWow64\FM20.DLL
2014-11-19 03:42:04 203544 ----a-w- C:\Windows\System32\drivers\avgidsha.sys
2014-11-18 01:27:29 1648 ----a-w- C:\Windows\System32\ASOROSet.bin
2014-11-11 03:09:06 1424384 ----a-w- C:\Windows\System32\WindowsCodecs.dll
2014-11-11 03:08:52 241152 ----a-w- C:\Windows\System32\pku2u.dll
2014-11-11 03:08:48 728064 ----a-w- C:\Windows\System32\kerberos.dll
2014-11-11 02:44:45 1230336 ----a-w- C:\Windows\SysWow64\WindowsCodecs.dll
2014-11-11 02:44:32 186880 ----a-w- C:\Windows\SysWow64\pku2u.dll
2014-11-11 02:44:25 550912 ----a-w- C:\Windows\SysWow64\kerberos.dll
2014-11-11 01:46:26 119296 ----a-w- C:\Windows\System32\drivers\tdx.sys
2014-10-30 11:25:26 275080 ------w- C:\Windows\System32\MpSigStub.exe
2014-10-25 01:57:59 77824 ----a-w- C:\Windows\System32\packager.dll
2014-10-25 01:32:37 67584 ----a-w- C:\Windows\SysWow64\packager.dll
2014-10-20 15:40:47 98216 ----a-w- C:\Windows\SysWow64\WindowsAccessBridge-32.dll
2014-10-18 02:05:23 861696 ----a-w- C:\Windows\System32\oleaut32.dll
2014-10-18 01:33:18 571904 ----a-w- C:\Windows\SysWow64\oleaut32.dll
2014-10-14 02:16:37 155064 ----a-w- C:\Windows\System32\drivers\ksecpkg.sys
2014-10-14 02:13:06 683520 ----a-w- C:\Windows\System32\termsrv.dll
2014-10-14 02:13:00 3241984 ----a-w- C:\Windows\System32\msi.dll
2014-10-14 02:12:57 1460736 ----a-w- C:\Windows\System32\lsasrv.dll
2014-10-14 02:09:31 146432 ----a-w- C:\Windows\System32\msaudite.dll
2014-10-14 02:07:31 681984 ----a-w- C:\Windows\System32\adtschema.dll
2014-10-14 01:50:47 22016 ----a-w- C:\Windows\SysWow64\secur32.dll
2014-10-14 01:50:41 2363904 ----a-w- C:\Windows\SysWow64\msi.dll
2014-10-14 01:49:38 96768 ----a-w- C:\Windows\SysWow64\sspicli.dll
2014-10-14 01:47:30 146432 ----a-w- C:\Windows\SysWow64\msaudite.dll
2014-10-14 01:46:02 681984 ----a-w- C:\Windows\SysWow64\adtschema.dll
2014-10-12 17:12:26 111016 ----a-w- C:\Windows\System32\WindowsAccessBridge-64.dll
2014-10-10 21:14:32 274200 ----a-w- C:\Windows\System32\drivers\avgtdia.sys
2014-10-10 00:57:42 3198976 ----a-w- C:\Windows\System32\win32k.sys
2014-10-06 02:41:40 124184 ----a-w- C:\Windows\System32\drivers\avgmfx64.sys
.
============= FINISH: 15:19:01.48 ===============

#30 Re: Off Topic » Virus / Malware Identity & file theft? » 2021-03-02 08:10:43

Im a federal civil servant for the ministry if justice, as an ingress vector im attractive

My roomatte also is. How to i isilate two networks on the same router and avoi or regain control or ownership of the domain. Imagine every legacy and enterprise ms tool co establishing themselves in every piece of nonstandard memory or location possible. Efi, virtualized lan, boot partition, network drives only addressable at a specific recursion, smbus, dram pcie and interface or device worm storage. Then it gets shared to a sequential chain of cloud platforms opened in the names of others like you. Idc if it hasnt harmed me yet. Its violated my privacy and reliability, so now it dies screaming. Every time ive formated my system becomes inoperative in a very short amount of time. Im thinking of disssembling all the components to isolate, but the bigger issue i know less about is the networking aspect since ive never worked in an enterprise model. Technology is an interest not currently a trade of mine.

#31 Off Topic » 2nd Hidden recycle bin on Windows 10 » 2021-03-02 07:38:37

HanBaoCinch
Replies: 5

I am trying to reduce the data on my laptop and ran a great little program to show me why there is so much I can’t account for. It has shone a 2nd recycle bin with a load of data in but I can’t find it to empty it or ideally get rid of it. I can’t find any help on this either? Has anyone got any ideas?

#32 Off Topic » Iexplore.exe Virus Help » 2021-03-02 07:35:44

HanBaoCinch
Replies: 9

Hey there, I have a virus situation, it seems I've been infected with a virus that disguises as iexplore.exe; it shows multiple times on my task manager and I can't kill it, it just keeps coming back over and over. I got this a few days ago so I've been searching for a solution and I've tried various different methods I found through out the internet, but it seems that the problem is still there. I also noticed that a lot of these situations from people I read on different forums have different issues and they got personalized help to solve this problem, so I decided to ask for professional help to see if I get rid of this issue.
The Methods I used were: Malwarebytes, Hitman Pro, AVG Anti-Virus, MS Security Essentials, and some Registry scans. Some of them managed to clean my PC a little more, but it didn't solve the problem.
I would appreciate any kind of help, I haven't had a virus for a long time and it really bothers me the fact that I have one now, Please help.

#33 Re: Off Topic » File system error (65535) » 2021-03-02 07:33:50

Run Chkdsk on all your partitions/drives now! Something has gone wrong with your filesystem! Seriously wrong! Boot to a command prompt (from the Vista CD) and run sfc /scannow now!

#34 Re: Off Topic » What's the point of reporting an e-mail as a phishing scam? » 2021-03-01 18:47:55

Switch to gmail and you very likely won't see these scam emails again.

#35 Off Topic » Virus / Malware Identity & file theft? » 2021-03-01 18:36:42

HanBaoCinch
Replies: 3

Operating System
Windows 10 Home 64-bit
CPU
Intel Core i5 7500 @ 3.40GHz 56 °C
Kaby Lake 14nm Technology
RAM
4x8 32.0GB Dual-Channel G.Skillz @ 1066MHz (15-15-15-36)
Motherboard
MSI Z170A KRAIT GAMING 3X (MS-7A11) (U3E1) 33 °C
Graphics
GF276 (1920x1080@60Hz)
LG FULL HD (1920x1080@60Hz)
2047MB NVIDIA GeForce GTX 1060 6GB (EVGA) 38 °C
Storage
119GB ADATA SP600 (SATA (SSD)) 30 °C
1862GB Western Digital WD My Passport 2626 USB Device (USB (SATA) (SSD)) 30 °C
Optical Drives
HL-DT-ST DVDRAM GH24NSB0
Audio
NVIDIA High Definition Audio
Hi, Ive got a virus that persists even after formats, I believe I caught it from my roomate and he recently got his identity stolen, so Im pretty scared.
I was using kapersky internet security and windows 10, upgrading from Home to to Pro when I noticed everything, my main concern is that im being roped into an evil twin situation or at least having my files stolen, or technicly shared against my will.
Theres a few different things ive found out on my own, I have a background in web programming, I understand what shells are and limited cmd-line know-how like diskpart.
Persistence; it persists by a variety of ways that each install each other, or install extensions to central windows services and processes to avoid detection. The main methods of infection are dlls and registries and svchost/ntoskernel-run services that all eventually removes your authority over everything on the computer and then shares out your files.
Methods ive seen are: Binary coinstallers installed in locations where drivers are expected(probably based of hardware) like nvidia drivers. These coinstallers refer to PCI locations as devices with memory storage abilities of some kind(maybe they are virtualized objects in a shell?) There also seems to be a set of drivers installed in an "EFI Shell" and my ethernet adapter settings, accessible from bios, go like this:
Intel Gigabit 0.0 Uefi driver Adapter PBA FFFFFF-0FF. PCI ID ADDRESS MAC etc.
Theres a bunch of VPN and Network Drive / Virtual Drive / Sharing / Remote Administration / Workgroup / Domain Administration - related services and confirgurations set up, so I installed bitdefender and requeted all connections through that adapter be refused, bought a wifi one and built its profile a little more carefully.
However, my X: drive seems also affected, so I really just want someone to help me get a handle on whats happening and what I can do to log/Identify/Prevent/Wipe it.
All my files are saved and backep up, I just need a cleaning procedure for my pc and my and my roomates, and if I should do anything with my cellphones(I have 2 androids) before I go online and hunt out if anything has been opened in my name.
Im using an administrator account, disabled all others and set up strict firewall rules. Ive installed Kapersky Ccleaner MalwareBytes ProcessHacker Bitdefender and none of them come up with anything please help!

#36 Re: Off Topic » Virus » 2021-03-01 18:34:40

Run RKill and Malwarebytes Anti-malware in safe mode. I've done this before and was able to remove viruses from my machine. You can go to www.cnet.com/downloads to find them. While in safe mode - choose safe mode with networking. This will let you get on the web to download those items. I also did a system restore to go back to a previous state. Those are my methods of getting rid of viruses. Hope this helps! Also an article: https://www.techrepublic.com/article/pr … indows-10/

#37 Re: Off Topic » Why would some people's A/V flag my domains as malicious? » 2021-03-01 18:33:12

That's just images though, if someone posts an image to the forum that is not off a secure site it will caused the mixed content warning. Are A/V software seriously freaking out over that now? That seems a little over the top. The actual login part is still encrypted.

#38 Off Topic » LastPass taking the greedy path. » 2021-02-19 14:24:21

HanBaoCinch
Replies: 3

Effective in March, the free version of LastPass will be limited to a single type of platform. If you have it on desktops and mobile devices, you will have to choose which platform will continue use LastPass, as it will no longer function on the other.
So which password manager will you be switching to? I'm still in the process of checking out alternatives.

If you don't use LastPass, which do your use, and what does it provide that you like?

#39 Off Topic » Why would some people's A/V flag my domains as malicious? » 2021-02-19 14:21:51

HanBaoCinch
Replies: 3

This was in another thread, basically lot of people saying that images from my server either don't show up, or get flagged by their antivirus as being malicious. What would cause this and how can I fix it? The domain in question is gal.redsquirrel.me, but I assume it would probably do it to all my domains as they are all on the same server, so there's uovalor.com, iceteks.com as others to check.

Is there some kind of "RBL" list that I might be in?

#40 Re: Off Topic » FTP on different ports? » 2021-02-19 10:53:34

yes
pick a port range above 6000
your server port
the client will need this as well
example
Code:
ftp://ftp.joestakeaway.com:8080

#41 Re: Off Topic » How to format my encrypted HDD? » 2021-02-19 10:52:29

Really depends on the encryption software used to encrypt it.
If we are talking about Microsoft's bitlocker, you can delete and create a new parition via the disk part command and then recreate a new partition in Windows Disk management.

#42 Off Topic » PC Matic: What's the good (or bad) word? » 2021-02-16 13:53:13

HanBaoCinch
Replies: 0

PC Matic is flooding the TV with lots of ads on how they can boost your computer's performance.  The CNET reviews are generally good, though I'm skeptical.

Is PC Matic good, bad, or can you get the same results with the free utitlies discussed on these boards?

#43 Re: Off Topic » What's the difference between encoding, encryption, and hashing? » 2021-02-15 14:43:28

John, Your answer is good and perfectly understandable about encoding, encryption, and hashing.

#44 Re: Off Topic » Hotspot shield VPN slow » 2021-02-15 14:41:40

A VPN has so far been slower than no VPN. As to the surprise about the IP address that's what a VPN does (georelocation) so my thought here is this is you learning about VPNs.

As to Hotspot being fast, that claim is against other VPNs and not a comparison to operation without a VPN.

#45 Re: Off Topic » VPN effectiveness question » 2021-02-15 14:40:24

A VPN can provide important benefits like achieving more online privacy by masking your IP address, location, search history, from being tracked by internet browsers, eavesdroppers, your ISP, and others. A VPN can also protect your sensitive information while being transferred from the sender to the receiver.

#46 Off Topic » Is file encryption important? » 2021-02-15 08:12:06

HanBaoCinch
Replies: 5

Is it important for regular people to encrypt the files on their devices? I've heard that it might even be necessary to encrypt files on cloud storage too. What do you think? And is there some particular program that is really suitable for this? I did some research and so far I thought about going with NordLocker - though it's fairly new, it seems simple enough to use and could suit my needs quite well. There's also VeraCrypt, but it's for the whole hdd and that seems overkill.

#47 Off Topic » What's the difference between encoding, encryption, and hashing? » 2021-02-15 08:08:17

HanBaoCinch
Replies: 4

Can anyone explain me clearly what's the difference between encoding, encryption, and hashing?

#48 Re: Off Topic » What is the difference between threat, vulnerability, and a risk? » 2021-02-15 08:07:07

Threat - A threat is something that may or may not happen, but if happens it has the potential to cause serious damage.

Vulnerability - A vulnerability is a security risk in a software program that puts the program or computer at danger of malicious programs.

Risk - Computer security risks can be created by malware that can infect your computer and put system and organization in a huge damage.

#49 Re: Off Topic » Is the Tutu app safe for iOS? » 2021-02-15 08:01:40

The Tutuapp is most definitely not safe, the permissions it asks for are ridiculous, the list goes on and on, if you care about your privacy it is very bad. It's also flagged as malware.”

#50 Crypton Purchase, Sale and Exchange » The list of CRP cryptocurrency exchanges » 2021-02-09 13:05:30

HanBaoCinch
Replies: 121

Cryptocurrency trading is gaining more and more popularity. This is since the crypto market is more accessible than the stock market, and assets are more volatile, allowing you to quickly get a decent income.

- Do you want to start trading cryptocurrency?

In a vast number of crypto exchanges, it is easy to get confused. After all, there are many exchanges, and you need to know which exchange is reliable, which is a one-day operation, and which exchange has the most profitable commissions.

For the CRP listing, it has been selected the most trusted exchanges that offer favorable conditions for buying, selling, exchanging, and storing cryptocurrency:

http://crp/ (internal CRP exchange)
https://cryptex.net/trade/CRPUSD
https://p2pb2b.io/trade/CRP_USDT/
https://latoken.com/exchange/CRP_USDT
https://www.lbank.info/exchange/crp/usdt
https://www.cointiger.com/en-us/#/trade … n=crp_usdt
https://www.hotbit.io/exchange?symbol=CRP1_USDT


[to be completed]

All up-to-date information about CRP exchange rate, you can find on Utopia currencies.

Detailed list of exchanges: http://exchanges (Idyll Browser)

Don’t miss your chance of profitable trading on the best crypto exchanges with CRP.

Board footer

Powered by FluxBB