Malwarebytes Anti-Malware www.malwarebytes.org Scan Date: 15/12/2014 Scan Time: 16:10:21 Logfile: malwar.txt Administrator: Yes Version: 2.00.4.1028 Malware Database: v2014.12.15.03 Rootkit Database: v2014.12.14.01 License: Premium Malware Protection: Enabled Malicious Website Protection: Enabled Self-protection: Disabled OS: Windows 8.1 CPU: x64 File System: NTFS User: youssef Scan Type: Threat Scan Result: Completed Objects Scanned: 317303 Time Elapsed: 21 min, 58 sec Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Enabled Heuristics: Enabled PUP: Enabled PUM: Enabled Processes: 0 (No malicious items detected) Modules: 0 (No malicious items detected) Registry Keys: 0 (No malicious items detected) Registry Values: 1 PUP.Optional.SpeedTest, HKU\S-1-5-21-3628449973-491502367-551119154-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS|speedtest4354@BestOffers, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\speedtest4354@BestOffers, Quarantined, [3fde7fe4a7d5dc5a58067eeb5fa48c74] Registry Data: 0 (No malicious items detected) Folders: 8 PUP.Optional.SpeedTest.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\speedtest4354@BestOffers, Quarantined, [26f75c07e696a98d8f7b77be12f1ed13], PUP.Optional.SpeedTest.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\speedtest4354@BestOffers\chrome, Quarantined, [26f75c07e696a98d8f7b77be12f1ed13], PUP.Optional.SpeedTest.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\speedtest4354@BestOffers\chrome\content, Quarantined, [26f75c07e696a98d8f7b77be12f1ed13], PUP.Optional.SpeedTest.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\speedtest4354@BestOffers\chrome\skin, Quarantined, [26f75c07e696a98d8f7b77be12f1ed13], PUP.Optional.FreeGames.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\freegames4357@BestOffers, Quarantined, [e33ac49f1b61e3537f8d1e17fa09cc34], PUP.Optional.FreeGames.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\freegames4357@BestOffers\chrome, Quarantined, [e33ac49f1b61e3537f8d1e17fa09cc34], PUP.Optional.FreeGames.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\freegames4357@BestOffers\chrome\content, Quarantined, [e33ac49f1b61e3537f8d1e17fa09cc34], PUP.Optional.FreeGames.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\freegames4357@BestOffers\chrome\skin, Quarantined, [e33ac49f1b61e3537f8d1e17fa09cc34], Files: 64 PUP.Optional.Nova.A, C:\Program Files (x86)\Adobe\2044879e-7573-411e-96ce-00b1a29da58c.dll, Quarantined, [b16c99cac6b663d3f593c62e5ca59c64], PUP.Optional.Nova.A, C:\Program Files (x86)\Adobe\561d848b-85d6-42af-952d-9819ac6626d2.dll, Quarantined, [f5285f049ce01422e3a52bc98f7233cd], PUP.Optional.Nova.A, C:\Program Files (x86)\Adobe\6026db2f-8d95-4d36-a319-42373f3e9faa.dll, Quarantined, [b06da5bef48894a27018f5ff16ebae52], PUP.Optional.Nova.A, C:\Program Files (x86)\Adobe\be206fc6-7c9a-474d-b868-7ae498876ef6.dll, Quarantined, [819c66fd3f3d63d3d8b006ee936e7a86], PUP.Optional.SpeedTest.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\speedtest4354@BestOffers\chrome.manifest, Quarantined, [26f75c07e696a98d8f7b77be12f1ed13], PUP.Optional.SpeedTest.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\speedtest4354@BestOffers\icon.png, Quarantined, [26f75c07e696a98d8f7b77be12f1ed13], PUP.Optional.SpeedTest.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\speedtest4354@BestOffers\install.rdf, Quarantined, [26f75c07e696a98d8f7b77be12f1ed13], PUP.Optional.SpeedTest.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\speedtest4354@BestOffers\chrome\content\background.html, Quarantined, [26f75c07e696a98d8f7b77be12f1ed13], PUP.Optional.SpeedTest.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\speedtest4354@BestOffers\chrome\content\button.js, Quarantined, [26f75c07e696a98d8f7b77be12f1ed13], PUP.Optional.SpeedTest.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\speedtest4354@BestOffers\chrome\content\button.xml, Quarantined, [26f75c07e696a98d8f7b77be12f1ed13], PUP.Optional.SpeedTest.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\speedtest4354@BestOffers\chrome\content\config.js, Quarantined, [26f75c07e696a98d8f7b77be12f1ed13], PUP.Optional.SpeedTest.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\speedtest4354@BestOffers\chrome\content\content.js, Quarantined, [26f75c07e696a98d8f7b77be12f1ed13], PUP.Optional.SpeedTest.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\speedtest4354@BestOffers\chrome\content\framework.js, Quarantined, [26f75c07e696a98d8f7b77be12f1ed13], PUP.Optional.SpeedTest.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\speedtest4354@BestOffers\chrome\content\framework.png, Quarantined, [26f75c07e696a98d8f7b77be12f1ed13], PUP.Optional.SpeedTest.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\speedtest4354@BestOffers\chrome\content\framework.xul, Quarantined, [26f75c07e696a98d8f7b77be12f1ed13], PUP.Optional.SpeedTest.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\speedtest4354@BestOffers\chrome\content\icon128.ico, Quarantined, [26f75c07e696a98d8f7b77be12f1ed13], PUP.Optional.SpeedTest.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\speedtest4354@BestOffers\chrome\content\icon128.png, Quarantined, [26f75c07e696a98d8f7b77be12f1ed13], PUP.Optional.SpeedTest.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\speedtest4354@BestOffers\chrome\content\icon16.ico, Quarantined, [26f75c07e696a98d8f7b77be12f1ed13], PUP.Optional.SpeedTest.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\speedtest4354@BestOffers\chrome\content\icon16.png, Quarantined, [26f75c07e696a98d8f7b77be12f1ed13], PUP.Optional.SpeedTest.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\speedtest4354@BestOffers\chrome\content\icon18.ico, Quarantined, [26f75c07e696a98d8f7b77be12f1ed13], PUP.Optional.SpeedTest.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\speedtest4354@BestOffers\chrome\content\icon18.png, Quarantined, [26f75c07e696a98d8f7b77be12f1ed13], PUP.Optional.SpeedTest.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\speedtest4354@BestOffers\chrome\content\icon24.ico, Quarantined, [26f75c07e696a98d8f7b77be12f1ed13], PUP.Optional.SpeedTest.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\speedtest4354@BestOffers\chrome\content\icon24.png, Quarantined, [26f75c07e696a98d8f7b77be12f1ed13], PUP.Optional.SpeedTest.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\speedtest4354@BestOffers\chrome\content\icon32.ico, Quarantined, [26f75c07e696a98d8f7b77be12f1ed13], PUP.Optional.SpeedTest.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\speedtest4354@BestOffers\chrome\content\icon32.png, Quarantined, [26f75c07e696a98d8f7b77be12f1ed13], PUP.Optional.SpeedTest.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\speedtest4354@BestOffers\chrome\content\icon48.ico, Quarantined, [26f75c07e696a98d8f7b77be12f1ed13], PUP.Optional.SpeedTest.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\speedtest4354@BestOffers\chrome\content\icon48.png, Quarantined, [26f75c07e696a98d8f7b77be12f1ed13], PUP.Optional.SpeedTest.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\speedtest4354@BestOffers\chrome\content\icon64.ico, Quarantined, [26f75c07e696a98d8f7b77be12f1ed13], PUP.Optional.SpeedTest.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\speedtest4354@BestOffers\chrome\content\icon64.png, Quarantined, [26f75c07e696a98d8f7b77be12f1ed13], PUP.Optional.SpeedTest.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\speedtest4354@BestOffers\chrome\content\jquery-1.9.1.min.js, Quarantined, [26f75c07e696a98d8f7b77be12f1ed13], PUP.Optional.SpeedTest.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\speedtest4354@BestOffers\chrome\content\options.xul, Quarantined, [26f75c07e696a98d8f7b77be12f1ed13], PUP.Optional.SpeedTest.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\speedtest4354@BestOffers\chrome\content\rjs.js, Quarantined, [26f75c07e696a98d8f7b77be12f1ed13], PUP.Optional.SpeedTest.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\speedtest4354@BestOffers\chrome\content\settings.json, Quarantined, [26f75c07e696a98d8f7b77be12f1ed13], PUP.Optional.SpeedTest.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\speedtest4354@BestOffers\chrome\content\subscriptloader.js, Quarantined, [26f75c07e696a98d8f7b77be12f1ed13], PUP.Optional.SpeedTest.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\speedtest4354@BestOffers\chrome\skin\framework.css, Quarantined, [26f75c07e696a98d8f7b77be12f1ed13], PUP.Optional.FreeGames.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\freegames4357@BestOffers\chrome.manifest, Quarantined, [e33ac49f1b61e3537f8d1e17fa09cc34], PUP.Optional.FreeGames.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\freegames4357@BestOffers\icon.png, Quarantined, [e33ac49f1b61e3537f8d1e17fa09cc34], PUP.Optional.FreeGames.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\freegames4357@BestOffers\install.rdf, Quarantined, [e33ac49f1b61e3537f8d1e17fa09cc34], PUP.Optional.FreeGames.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\freegames4357@BestOffers\chrome\content\background.html, Quarantined, [e33ac49f1b61e3537f8d1e17fa09cc34], PUP.Optional.FreeGames.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\freegames4357@BestOffers\chrome\content\button.js, Quarantined, [e33ac49f1b61e3537f8d1e17fa09cc34], PUP.Optional.FreeGames.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\freegames4357@BestOffers\chrome\content\button.xml, Quarantined, [e33ac49f1b61e3537f8d1e17fa09cc34], PUP.Optional.FreeGames.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\freegames4357@BestOffers\chrome\content\config.js, Quarantined, [e33ac49f1b61e3537f8d1e17fa09cc34], PUP.Optional.FreeGames.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\freegames4357@BestOffers\chrome\content\content.js, Quarantined, [e33ac49f1b61e3537f8d1e17fa09cc34], PUP.Optional.FreeGames.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\freegames4357@BestOffers\chrome\content\framework.js, Quarantined, [e33ac49f1b61e3537f8d1e17fa09cc34], PUP.Optional.FreeGames.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\freegames4357@BestOffers\chrome\content\framework.png, Quarantined, [e33ac49f1b61e3537f8d1e17fa09cc34], PUP.Optional.FreeGames.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\freegames4357@BestOffers\chrome\content\framework.xul, Quarantined, [e33ac49f1b61e3537f8d1e17fa09cc34], PUP.Optional.FreeGames.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\freegames4357@BestOffers\chrome\content\icon128.ico, Quarantined, [e33ac49f1b61e3537f8d1e17fa09cc34], PUP.Optional.FreeGames.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\freegames4357@BestOffers\chrome\content\icon128.png, Quarantined, [e33ac49f1b61e3537f8d1e17fa09cc34], PUP.Optional.FreeGames.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\freegames4357@BestOffers\chrome\content\icon16.ico, Quarantined, [e33ac49f1b61e3537f8d1e17fa09cc34], PUP.Optional.FreeGames.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\freegames4357@BestOffers\chrome\content\icon16.png, Quarantined, [e33ac49f1b61e3537f8d1e17fa09cc34], PUP.Optional.FreeGames.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\freegames4357@BestOffers\chrome\content\icon18.ico, Quarantined, [e33ac49f1b61e3537f8d1e17fa09cc34], PUP.Optional.FreeGames.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\freegames4357@BestOffers\chrome\content\icon18.png, Quarantined, [e33ac49f1b61e3537f8d1e17fa09cc34], PUP.Optional.FreeGames.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\freegames4357@BestOffers\chrome\content\icon24.ico, Quarantined, [e33ac49f1b61e3537f8d1e17fa09cc34], PUP.Optional.FreeGames.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\freegames4357@BestOffers\chrome\content\icon24.png, Quarantined, [e33ac49f1b61e3537f8d1e17fa09cc34], PUP.Optional.FreeGames.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\freegames4357@BestOffers\chrome\content\icon32.ico, Quarantined, [e33ac49f1b61e3537f8d1e17fa09cc34], PUP.Optional.FreeGames.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\freegames4357@BestOffers\chrome\content\icon32.png, Quarantined, [e33ac49f1b61e3537f8d1e17fa09cc34], PUP.Optional.FreeGames.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\freegames4357@BestOffers\chrome\content\icon48.ico, Quarantined, [e33ac49f1b61e3537f8d1e17fa09cc34], PUP.Optional.FreeGames.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\freegames4357@BestOffers\chrome\content\icon48.png, Quarantined, [e33ac49f1b61e3537f8d1e17fa09cc34], PUP.Optional.FreeGames.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\freegames4357@BestOffers\chrome\content\jquery-1.9.1.min.js, Quarantined, [e33ac49f1b61e3537f8d1e17fa09cc34], PUP.Optional.FreeGames.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\freegames4357@BestOffers\chrome\content\options.xul, Quarantined, [e33ac49f1b61e3537f8d1e17fa09cc34], PUP.Optional.FreeGames.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\freegames4357@BestOffers\chrome\content\rjs.js, Quarantined, [e33ac49f1b61e3537f8d1e17fa09cc34], PUP.Optional.FreeGames.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\freegames4357@BestOffers\chrome\content\settings.json, Quarantined, [e33ac49f1b61e3537f8d1e17fa09cc34], PUP.Optional.FreeGames.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\freegames4357@BestOffers\chrome\content\subscriptloader.js, Quarantined, [e33ac49f1b61e3537f8d1e17fa09cc34], PUP.Optional.FreeGames.A, C:\Users\youssef\AppData\Roaming\Mozilla\Extensions\freegames4357@BestOffers\chrome\skin\framework.css, Quarantined, [e33ac49f1b61e3537f8d1e17fa09cc34], Physical Sectors: 0 (No malicious items detected) (end)