cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 14/08/2015
Scan Time: 08:40 ã
Logfile: malware.txt
Administrator: Yes

Version: 2.1.8.1057
Malware Database: v2015.08.14.05
Rootkit Database: v2015.08.06.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 8.1
CPU: x64
File System: NTFS
User: sameh

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 362834
Time Elapsed: 23 min, 27 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 11
Adware.PennyBee, C:\ProgramData\CersIuo\ciiuwte.exe, 1788, Delete-on-Reboot, [c8f5a266424962d45d57be09f011b54b]
Adware.PennyBee, C:\ProgramData\CersIuo\ciiuate.exe, 2368, Delete-on-Reboot, [febf4fb9e2a9989e8331f3d4679a2ad6]
PUP.Optional.Amonetize, C:\Program Files\fchk32\fchk32.exe, 2880, Delete-on-Reboot, [516ca464becd16201d6206c8a859f10f]
Trojan.Agent, C:\Users\sameh\AppData\Local\NVIDIANetwork\nvidia.exe, 3108, Delete-on-Reboot, [0ab32bdd701baa8cb204606edf229967]
PUP.Optional.Amonetize, C:\Program Files\fchk32\packages\56f17cfe-ddcd-4313-a6bf-4db3eef3a209\fchk.exe, 6156, Delete-on-Reboot, [6b52bf496328023489f8a02e26db867a]
Adware.PennyBee, C:\ProgramData\CersIuo\ciiudte.exe, 7100, Delete-on-Reboot, [0bb21deb494252e4c0f1992eeb16de22]
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\calendar.exe, 1448, Delete-on-Reboot, [c9f457b16427b97daa290f07f1122bd5]
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\CalendarServ.exe, 3812, Delete-on-Reboot, [c9f457b16427b97daa290f07f1122bd5]
PUP.Optional.ToolsUpdatePlatform.A, C:\Program Files (x86)\ToolsUpdatePlatform\UpdatePlatform.exe, 2680, Delete-on-Reboot, [f9c46d9bd2b9ae8893dc5aba8a7925db]
PUP.Optional.ExtTag.F, C:\ProgramData\ExtTag\ExtTag.exe, 7328, Delete-on-Reboot, [6657cd3bacdf3105d428a3710cf7b24e]
PUP.Optional.ExtTag.F, C:\ProgramData\ExtTag\kwbxtij4.exe, 1364, Delete-on-Reboot, [6657cd3bacdf3105d428a3710cf7b24e]

Modules: 19
Adware.PennyBee, C:\ProgramData\CersIuo\ciiu3te.dll, Delete-on-Reboot, [a41956b25e2dfa3cefc43e89ff0237c9],
Adware.PennyBee, C:\ProgramData\CersIuo\ciiu3te.dll, Delete-on-Reboot, [a41956b25e2dfa3cefc43e89ff0237c9],
Adware.PennyBee, C:\ProgramData\CersIuo\ciiu3te.dll, Delete-on-Reboot, [a41956b25e2dfa3cefc43e89ff0237c9],
Adware.PennyBee, C:\ProgramData\CersIuo\ciiu3te.dll, Delete-on-Reboot, [a41956b25e2dfa3cefc43e89ff0237c9],
Adware.PennyBee, C:\ProgramData\CersIuo\ciiu3te.dll, Delete-on-Reboot, [a41956b25e2dfa3cefc43e89ff0237c9],
Adware.PennyBee, C:\ProgramData\CersIuo\ciiu3te.dll, Delete-on-Reboot, [a41956b25e2dfa3cefc43e89ff0237c9],
Adware.PennyBee, C:\ProgramData\CersIuo\ciiu3te.dll, Delete-on-Reboot, [a41956b25e2dfa3cefc43e89ff0237c9],
Adware.PennyBee, C:\ProgramData\CersIuo\ciiu3te.dll, Delete-on-Reboot, [a41956b25e2dfa3cefc43e89ff0237c9],
Adware.PennyBee, C:\ProgramData\CersIuo\ciiu3te.dll, Delete-on-Reboot, [a41956b25e2dfa3cefc43e89ff0237c9],
Adware.PennyBee, C:\ProgramData\CersIuo\ciiu3te.dll, Delete-on-Reboot, [a41956b25e2dfa3cefc43e89ff0237c9],
Adware.PennyBee, C:\ProgramData\CersIuo\ciiu3te.dll, Delete-on-Reboot, [a41956b25e2dfa3cefc43e89ff0237c9],
Adware.PennyBee, C:\ProgramData\CersIuo\ciiu3te.dll, Delete-on-Reboot, [a41956b25e2dfa3cefc43e89ff0237c9],
Adware.PennyBee, C:\ProgramData\CersIuo\ciiu3te.dll, Delete-on-Reboot, [a41956b25e2dfa3cefc43e89ff0237c9],
Adware.PennyBee, C:\ProgramData\CersIuo\ciiu3te.dll, Delete-on-Reboot, [a41956b25e2dfa3cefc43e89ff0237c9],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\EVPDR.dll, Delete-on-Reboot, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\EVPNet.dll, Delete-on-Reboot, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\EVPTask.dll, Delete-on-Reboot, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.ExtTag.F, C:\ProgramData\ExtTag\aazipmia.dll, Delete-on-Reboot, [6657cd3bacdf3105d428a3710cf7b24e],
PUP.Optional.ExtTag.F, C:\ProgramData\ExtTag\hjmnthfy.dll, Delete-on-Reboot, [6657cd3bacdf3105d428a3710cf7b24e],

Registry Keys: 22
Adware.PennyBee, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\bolvejrij, Quarantined, [c8f5a266424962d45d57be09f011b54b],
Adware.PennyBee, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\dokriuwliu, Quarantined, [febf4fb9e2a9989e8331f3d4679a2ad6],
PUP.Optional.Amonetize, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\fchk32, Quarantined, [516ca464becd16201d6206c8a859f10f],
Trojan.Agent, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\icmui, Quarantined, [0ab32bdd701baa8cb204606edf229967],
PUP.Optional.CalendarTool.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TheCalendarService, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{D9BAB2C9-5236-48c3-AF02-67E799F09BBD}, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, HKLM\SOFTWARE\CALENDARTOOL, Quarantined, [5568e325eba079bd5481c74f35ce13ed],
PUP.Optional.Trovi.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\LAYERS\SPVC32LDR, Quarantined, [8e2f61a7e9a24de9e64ca304df25d927],
PUP.Optional.Linkury.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\snf, Delete-on-Reboot, [1ca16c9cfa9156e0789b52c59d666d93],
PUP.Optional.Linkury.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\snp, Delete-on-Reboot, [ebd2e6222b6011258c881403c53eef11],
PUP.Optional.ToolsUpdatePlatform.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\ToolsUpdatePlatform_ScheduledTask, Delete-on-Reboot, [fdc01cecafdce6501135ab6d06fd847c],
PUP.Optional.Cinema.A, HKLM\SOFTWARE\WOW6432NODE\CinemaP-1.9cV13.08-nv-ie, Quarantined, [487520e8f09b2412a14ba59a0201748c],
PUP.Optional.CrossRider.C, HKLM\SOFTWARE\WOW6432NODE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [5b62dc2c96f5132365a36db1956e6d93],
PUP.Optional.Linkury.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\IELNKSRCH, Quarantined, [922bb94f4c3f13230aaa09a553b1c33d],
PUP.Optional.ToolsUpdatePlatform.A, HKLM\SOFTWARE\WOW6432NODE\TOOLSUPDATEPLATFORM, Quarantined, [6c510008abe03ff75488436aa36117e9],
PUP.Optional.ExtTag.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EXTTAG, Quarantined, [b8050107bccf1026575651c5679c659b],
PUP.Optional.Cinema.A, HKU\S-1-5-18\SOFTWARE\CinemaP-1.9cV13.08-nv-ie, Quarantined, [704d9b6d216ade580ae39ea11fe417e9],
PUP.Optional.Crossrider.C, HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\_CrossriderRegNamePlaceHolder_, Quarantined, [b00de62209829d9909e7633e41c3de22],
PUP.Optional.Cinema.A, HKU\S-1-5-21-714430725-4008368064-3161557589-1002\SOFTWARE\CinemaP-1.9cV13.08-nv-ie, Quarantined, [8934c34542490135d31aa29df80b7e82],
PUP.Optional.Linkury.ShrtCln, HKU\S-1-5-21-714430725-4008368064-3161557589-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{IELNKSRCH}, Quarantined, [1da020e8fc8ff343c7455fbb9a69c838],
PUP.Optional.OutBrowse.A, HKU\S-1-5-21-714430725-4008368064-3161557589-1002\SOFTWARE\OB, Quarantined, [8b32eb1df09b56e0d4aae3cf63a1a65a],
PUP.Optional.ToolsUpdatePlatform.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{6A128791-4857-4484-9BB2-71D4C1257200}, Quarantined, [f9c46d9bd2b9ae8893dc5aba8a7925db],

Registry Values: 27
PUP.Optional.CalendarTool.A, HKLM\SOFTWARE\CALENDARTOOL|PartnerID, Amonetize|egy|IBD|Bundle, Quarantined, [5568e325eba079bd5481c74f35ce13ed]
PUP.Optional.Trovi.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\chrome.exe|{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb, 130579763813177244, Quarantined, [338a95737417af87d35e386fcf3515eb]
PUP.Optional.Trovi.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\explorer.xxx|{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb, 130579763813177244, Quarantined, [26976e9a1f6c7db9072a297ea95b31cf]
PUP.Optional.Trovi.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\firefox.exe|{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb, 130579763813177244, Quarantined, [3a8333d5f794b77f6dc4f5b20202d32d]
PUP.Optional.Trovi.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\iexplore.exe|{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb, 130579763813177244, Quarantined, [2b924fb9810afb3bef42287ff90b29d7]
PUP.Optional.Trovi.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\LAYERS\SPVC32Ldr|{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb, 130579763813177244, Quarantined, [8e2f61a7e9a24de9e64ca304df25d927]
PUP.Optional.CPUMiner.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|cpuminer, C:\Windows\system32\cpuminer-gw64.exe, Quarantined, [edd02ddb8dfe7bbbcc488e1d0bf97e82]
PUP.Optional.CalendarTool.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{D9BAB2C9-5236-48c3-AF02-67E799F09BBD}|DisplayIcon, C:\Program Files (x86)\CalendarTool\2.0.0.10764\Calendar.exe, Quarantined, [8d308a7e494250e63f976fa728db6c94]
PUP.Optional.CrossBrowse.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\ACTIVE SETUP\INSTALLED COMPONENTS, Crossbrowse, Quarantined, [803d9e6ad3b88caa4918021441c2ae52]
PUP.Optional.CrossBrowse.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\ACTIVE SETUP\INSTALLED COMPONENTS|StubPath, "C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level, Quarantined, [d8e5b94fd7b4bc7abaa7bd5946bdf808]
PUP.Optional.CrossBrowse.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\ACTIVE SETUP\INSTALLED COMPONENTS|Localized Name, Crossbrowse, Quarantined, [863737d19fecbc7ad9883bdb2ed5619f]
PUP.Optional.Linkury.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\ielnksrch|DisplayName, Search the web, Quarantined, [922bb94f4c3f13230aaa09a553b1c33d]
PUP.Optional.Linkury.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\ielnksrch|URL, http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_B2udW5vgSL9Iiesic3w-47g0PurTosQhudpLyhqbN2qMjursMMI6pV5DUGtb7GQmyQch51v4haHPq_mFcvp6SC1i4eP9d9GxIvKHNkLHmmGId4Z328OB2HEnQ7rm3cSfinRqs1l_Hb90NxS5_4RpiJ0X0bdmr&q={searchTerms}, Quarantined, [704dee1a98f3c37306af2e80c83c27d9]
PUP.Optional.Linkury.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_B2udW5vgSL9Iiesic3w-47g0PurTosQhudpLyhqbN2qMjursMMI6pV5DUGtb7GQmyQch51v4haHPq_mFcvp6SC1i4eP9d9GxIvKHNkLHmmGId4Z328OB2HEnQ7rm3cSfinRqs1l_Hb90NxS5_4RpiJ0X0bdmr&q={searchTerms}, Quarantined, [aa133bcdf59642f41d99911d55afba46]
PUP.Optional.ToolsUpdatePlatform.A, HKLM\SOFTWARE\WOW6432NODE\TOOLSUPDATEPLATFORM|partner, calendar, Quarantined, [6c510008abe03ff75488436aa36117e9]
PUP.Optional.ExtTag.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EXTTAG|ImagePath, C:\ProgramData\ExtTag\ExtTag, Quarantined, [b8050107bccf1026575651c5679c659b]
PUP.Optional.Linkury.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\FCHK32|ImagePath, "C:\Program Files\fchk32\fchk32.exe" /s iid=2108260 did=Missing sid= ref= id=9af71027870da725e03bde8226cc26bb99d29e52addd8425c81bb016ddcf72e6, Quarantined, [2c91ab5dcfbc1c1a287907ab35cf6e92]
PUP.Optional.Linkury.A, HKU\S-1-5-21-714430725-4008368064-3161557589-1002\ENVIRONMENT|SNF, C:\ProgramData\ExtTags\snp.sc, Quarantined, [14a99177c9c22313788909a6798b10f0]
PUP.Optional.Linkury.A, HKU\S-1-5-21-714430725-4008368064-3161557589-1002\ENVIRONMENT|SNP, http://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D?publisher=APSFRec&co=TJ&userid=c46cab94-be67-71d9-3a47-b3618b951fb4&searchtype=sc&installDate=14/08/2015&barcodeid=50045888&channelid=888, Quarantined, [c3fa36d27516df57f30f8e210bf99c64]
PUP.Optional.Linkury.ShrtCln, HKU\S-1-5-21-714430725-4008368064-3161557589-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{ielnksrch}|DisplayName, Search the web, Quarantined, [1da020e8fc8ff343c7455fbb9a69c838]
PUP.Optional.Linkury.ShrtCln, HKU\S-1-5-21-714430725-4008368064-3161557589-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{ielnksrch}|URL, http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_B2udW5vgSL9Iiesic3w-47g0PurTosQhudpLyhqbN2qMjursMMI6pV5DUGtb7GQmyQch51v4haHPq_mFcvp6SC1i4eP9d9GxIvKHNkLHmmGId4Z328OB2HEnQ7rm3cSfinRqs1l_Hb90NxS5_4RpiJ0X0bdmr&q={searchTerms}, Quarantined, [922b50b89ceff145377bf1bd63a1ac54]
PUP.Optional.Linkury.ShrtCln, HKU\S-1-5-21-714430725-4008368064-3161557589-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_B2udW5vgSL9Iiesic3w-47g0PurTosQhudpLyhqbN2qMjursMMI6pV5DUGtb7GQmyQch51v4haHPq_mFcvp6SC1i4eP9d9GxIvKHNkLHmmGId4Z328OB2HEnQ7rm3cSfinRqs1l_Hb90NxS5_4RpiJ0X0bdmr&q={searchTerms}, Quarantined, [9627699fcfbcbc7a06ad505e976d59a7]
PUP.Optional.CrossBrowse.A, HKU\S-1-5-21-714430725-4008368064-3161557589-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|GoogleChromeAutoLaunch_D176A0D9105B5921C75031F620F08348, "C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe" --no-startup-window, Quarantined, [06b7a266a7e42313de0bf8b1a361bb45]
PUP.Optional.OutBrowse.A, HKU\S-1-5-21-714430725-4008368064-3161557589-1002\SOFTWARE\OB|monitype20, 8/13/15 23:52:46, Quarantined, [8b32eb1df09b56e0d4aae3cf63a1a65a]
PUP.Optional.OutBrowse.A, HKU\S-1-5-21-714430725-4008368064-3161557589-1002\SOFTWARE\OB|monitype22, 8/13/15 23:52:46, Quarantined, [ae0f9d6b484381b56c12f9b9bf45fd03]
PUP.Optional.OutBrowse.A, HKU\S-1-5-21-714430725-4008368064-3161557589-1002\SOFTWARE\OB|monitype24, 8/13/15 23:52:46, Quarantined, [714c2eda72196bcb8fef714164a02ad6]
PUP.Optional.OutBrowse.A, HKU\S-1-5-21-714430725-4008368064-3161557589-1002\SOFTWARE\OB|monitype27, 8/13/15 23:52:46, Quarantined, [467749bf7912d66096e8cbe7aa5af709]

Registry Data: 9
PUP.Optional.ExtTag.F, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINDOWS|AppInit_DLLs, C:\ProgramData\ExtTag\4jf3vinf.dll, Good: (), Bad: (C:\ProgramData\ExtTag\4jf3vinf.dll),Replaced,[6657cd3bacdf3105d428a3710cf7b24e]
PUP.Optional.ExtTag.F, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINDOWS|AppInit_DLLs, C:\ProgramData\ExtTag\xjroiyla.dll, Good: (), Bad: (C:\ProgramData\ExtTag\xjroiyla.dll),Replaced,[6657cd3bacdf3105d428a3710cf7b24e]
PUP.Optional.Linkury.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {ielnksrch}, Good: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Bad: ({ielnksrch}),Replaced,[88358187f497ce685b958dc51aeb9f61]
PUP.Optional.Linkury.ShrtCln, HKU\S-1-5-21-714430725-4008368064-3161557589-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_B2udW5vgSL9Iiesic3w-47g0PurTosQhudpLyhqbN2qMjursMMI6pV5DUGtb7GQmyQch51v4haHPq_m2mbTOcBBHYAN5ZUU6fHMc8WVXC2oZxtS9dph8Fs1YObzTtHwIjwynbNr2RKwsn5Fghs49TL7CbTzfx, Good: (www.google.com), Bad: (http://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_B2udW5vgSL9Iiesic3w-47g0PurTosQhudpLyhqbN2qMjursMMI6pV5DUGtb7GQmyQch51v4haHPq_m2mbTOcBBHYAN5ZUU6fHMc8WVXC2oZxtS9dph8Fs1YObzTtHwIjwynbNr2RKwsn5Fghs49TL7CbTzfx),Replaced,[8e2ff5130487b185d11a22305fa6f808]
PUP.Optional.Linkury.ShrtCln, HKU\S-1-5-21-714430725-4008368064-3161557589-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_B2udW5vgSL9Iiesic3w-47g0PurTosQhudpLyhqbN2qMjursMMI6pV5DUGtb7GQmyQch51v4haHPq_mFcvp6SC1i4eP9d9GxIvKHNkLHmmGId4Z328OB2HEnQ7rm3cSfinRqs1l_Hb90NxS5_4RpiJ0X0bdmr&q={searchTerms}, Good: (www.google.com), Bad: (http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_B2udW5vgSL9Iiesic3w-47g0PurTosQhudpLyhqbN2qMjursMMI6pV5DUGtb7GQmyQch51v4haHPq_mFcvp6SC1i4eP9d9GxIvKHNkLHmmGId4Z328OB2HEnQ7rm3cSfinRqs1l_Hb90NxS5_4RpiJ0X0bdmr&q={searchTerms}),Replaced,[e4d921e7177449ed9f4bbf93b154857b]
PUP.Optional.Linkury.ShrtCln, HKU\S-1-5-21-714430725-4008368064-3161557589-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Bar, http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_B2udW5vgSL9Iiesic3w-47g0PurTosQhudpLyhqbN2qMjursMMI6pV5DUGtb7GQmyQch51v4haHPq_mFcvp6SC1i4eP9d9GxIvKHNkLHmmGId4Z328OB2HEnQ7rm3cSfinRqs1l_Hb90NxS5_4RpiJ0X0bdmr&q={searchTerms}, Good: (www.google.com), Bad: (http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_B2udW5vgSL9Iiesic3w-47g0PurTosQhudpLyhqbN2qMjursMMI6pV5DUGtb7GQmyQch51v4haHPq_mFcvp6SC1i4eP9d9GxIvKHNkLHmmGId4Z328OB2HEnQ7rm3cSfinRqs1l_Hb90NxS5_4RpiJ0X0bdmr&q={searchTerms}),Replaced,[c0fda7613457f73f28c2371b38cd1be5]
PUP.Optional.Linkury.ShrtCln, HKU\S-1-5-21-714430725-4008368064-3161557589-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|SearchAssistant, http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_B2udW5vgSL9Iiesic3w-47g0PurTosQhudpLyhqbN2qMjursMMI6pV5DUGtb7GQmyQch51v4haHPq_mFcvp6SC1i4eP9d9GxIvKHNkLHmmGId4Z328OB2HEnQ7rm3cSfinRqs1l_Hb90NxS5_4RpiJ0X0bdmr&q={searchTerms}, Good: (www.google.com), Bad: (http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_B2udW5vgSL9Iiesic3w-47g0PurTosQhudpLyhqbN2qMjursMMI6pV5DUGtb7GQmyQch51v4haHPq_mFcvp6SC1i4eP9d9GxIvKHNkLHmmGId4Z328OB2HEnQ7rm3cSfinRqs1l_Hb90NxS5_4RpiJ0X0bdmr&q={searchTerms}),Replaced,[368732d6117a1b1b2ebc272b8e778878]
PUP.Optional.Linkury.ShrtCln, HKU\S-1-5-21-714430725-4008368064-3161557589-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Default_Search_URL, http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_B2udW5vgSL9Iiesic3w-47g0PurTosQhudpLyhqbN2qMjursMMI6pV5DUGtb7GQmyQch51v4haHPq_mFcvp6SC1i4eP9d9GxIvKHNkLHmmGId4Z328OB2HEnQ7rm3cSfinRqs1l_Hb90NxS5_4RpiJ0X0bdmr&q={searchTerms}, Good: (www.google.com), Bad: (http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_B2udW5vgSL9Iiesic3w-47g0PurTosQhudpLyhqbN2qMjursMMI6pV5DUGtb7GQmyQch51v4haHPq_mFcvp6SC1i4eP9d9GxIvKHNkLHmmGId4Z328OB2HEnQ7rm3cSfinRqs1l_Hb90NxS5_4RpiJ0X0bdmr&q={searchTerms}),Replaced,[8f2eaa5efb905ed8d21a60f223e2738d]
PUP.Optional.Linkury.ShrtCln, HKU\S-1-5-21-714430725-4008368064-3161557589-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {ielnksrch}, Good: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Bad: ({ielnksrch}),Replaced,[08b5ae5a29628caa905d96bcfc09a858]

Folders: 54
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764, Delete-on-Reboot, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\Config-3, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\Config7, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\Config8, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\Config9, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\DefaultConfig, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\EVPData, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin\images, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool, Delete-on-Reboot, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.MultiPlug.A, C:\Program Files (x86)\542F210B-1439502761-BD9F-82B4-7A9D287B8137, Quarantined, [4d7067a135563df978a1b6f75aaab050],
PUP.Optional.GlobalUpdate.A, C:\Users\sameh\AppData\Local\Temp\comh.185576, Quarantined, [e0dd67a1c8c33204621f8e68d32f02fe],
PUP.Optional.RegistryReviver.A, C:\ProgramData\ReviverSoft\Registry Reviver, Quarantined, [279647c1216a78befed5cc46ab58e51b],
PUP.Optional.RegistryReviver.A, C:\ProgramData\ReviverSoft\Registry Reviver\Language, Quarantined, [279647c1216a78befed5cc46ab58e51b],
PUP.Optional.RegistryReviver.A, C:\ProgramData\ReviverSoft\Registry Reviver\S-1-5-21-714430725-4008368064-3161557589-1002, Quarantined, [279647c1216a78befed5cc46ab58e51b],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\Backups, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\Logs, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ReviverSoft\Registry Reviver, Quarantined, [88352ade850679bd4491fb175da6946c],
PUP.Optional.ToolsUpdatePlatform.A, C:\ProgramData\ToolsUpdatePlatform, Quarantined, [a91426e2b2d9ce68026cde366f9456aa],
PUP.Optional.ToolsUpdatePlatform.A, C:\ProgramData\ToolsUpdatePlatform\Download, Quarantined, [a91426e2b2d9ce68026cde366f9456aa],
PUP.Optional.ToolsUpdatePlatform.A, C:\ProgramData\ToolsUpdatePlatform\Dump, Quarantined, [a91426e2b2d9ce68026cde366f9456aa],
PUP.Optional.ToolsUpdatePlatform.A, C:\Program Files (x86)\ToolsUpdatePlatform, Delete-on-Reboot, [f9c46d9bd2b9ae8893dc5aba8a7925db],
PUP.Optional.ExtTag.F, C:\ProgramData\ExtTag, Delete-on-Reboot, [6657cd3bacdf3105d428a3710cf7b24e],
PUP.Optional.ExtTag.F, C:\ProgramData\ExtTag\ondemand, Quarantined, [6657cd3bacdf3105d428a3710cf7b24e],
PUP.Optional.ExtTag.F, C:\ProgramData\ExtTag\temp, Quarantined, [6657cd3bacdf3105d428a3710cf7b24e],
PUP.Optional.ExtTag.F, C:\ProgramData\ExtTags, Quarantined, [14a957b1f2990c2ad42991832ad951af],
PUP.Optional.Linkury.A, C:\Program Files\fchk32, Delete-on-Reboot, [506dc543731853e3b4658c8a11f240c0],
PUP.Optional.Linkury.A, C:\Program Files\fchk32\packages, Delete-on-Reboot, [506dc543731853e3b4658c8a11f240c0],
PUP.Optional.Linkury.A, C:\Program Files\fchk32\packages\480c547a-5ba0-4ec6-ae79-d03dc07f45da, Quarantined, [506dc543731853e3b4658c8a11f240c0],
PUP.Optional.Linkury.A, C:\Program Files\fchk32\packages\56f17cfe-ddcd-4313-a6bf-4db3eef3a209, Delete-on-Reboot, [506dc543731853e3b4658c8a11f240c0],
PUP.Optional.Linkury.A, C:\Program Files\fchk32\packages\56f17cfe-ddcd-4313-a6bf-4db3eef3a209\setup, Quarantined, [506dc543731853e3b4658c8a11f240c0],
PUP.Optional.Linkury.A, C:\Program Files\fchk32\packages\e2b74ab4-a0e9-427f-a1a2-094576536756, Quarantined, [506dc543731853e3b4658c8a11f240c0],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\api, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\lib, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\lib\popupResource, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\userCode, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\icons, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\icons\actions, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\api, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\lib, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\lib\popupResource, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\userCode, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\icons, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\icons\actions, Quarantined, [506d37d14348de589f4aa8df778ec13f],

Files: 479
Adware.PennyBee, C:\ProgramData\CersIuo\ciiu3te.dll, Delete-on-Reboot, [a41956b25e2dfa3cefc43e89ff0237c9],
Adware.PennyBee, C:\ProgramData\CersIuo\ciiuwte.exe, Delete-on-Reboot, [c8f5a266424962d45d57be09f011b54b],
Adware.PennyBee, C:\ProgramData\CersIuo\ciiuate.exe, Delete-on-Reboot, [febf4fb9e2a9989e8331f3d4679a2ad6],
PUP.Optional.Amonetize, C:\Program Files\fchk32\fchk32.exe, Delete-on-Reboot, [516ca464becd16201d6206c8a859f10f],
Trojan.Agent, C:\Users\sameh\AppData\Local\NVIDIANetwork\nvidia.exe, Delete-on-Reboot, [0ab32bdd701baa8cb204606edf229967],
PUP.Optional.Amonetize, C:\Program Files\fchk32\packages\56f17cfe-ddcd-4313-a6bf-4db3eef3a209\fchk.exe, Delete-on-Reboot, [6b52bf496328023489f8a02e26db867a],
Adware.PennyBee, C:\ProgramData\CersIuo\ciiudte.exe, Delete-on-Reboot, [0bb21deb494252e4c0f1992eeb16de22],
Adware.PennyBee, C:\ProgramData\CersIuo\ciiu3ted.dll, Quarantined, [f8c56c9c4c3f90a6971ceaddb54cdf21],
Adware.PennyBee, C:\ProgramData\CersIuo\ciiu6te.dll, Delete-on-Reboot, [ebd2749419721f174d65547323defc04],
Adware.PennyBee, C:\ProgramData\CersIuo\ciiu6ted.dll, Quarantined, [813c92769eedca6c852d3493e41d669a],
PUP.Optional.MultiPlug.64, C:\ProgramData\ExtTag\d1owipwm.dll, Quarantined, [615cda2e3358ec4a6024b915b849ed13],
PUP.Optional.CalendarTool.A, C:\Users\sameh\AppData\Roaming\CalendarTool\download\calendar_update_2.0.0.10764\CalendarTool_Setup_En_calendarbase[2015-07-21.14.37].exe, Quarantined, [87368d7bb0db8ea8b0d47b518978c53b],
PUP.Optional.RegistryReviver.A, C:\Users\sameh\AppData\Roaming\ZHP\Quarantine\RHEng.DIR\E028FBA756F2408EB7797C2E59FCB0CD\RegistryReviverSetup_3.0.1.144_CO2.exe, Quarantined, [813cd236c6c553e31ad1d3d65da4d729],
PUP.Optional.RegistryReviver.A, C:\Users\sameh\AppData\Roaming\ZHP\Quarantine\RHEng.DIR\E028FBA756F2408EB7797C2E59FCB0CD\RegistryReviverSetup_AFD_p4v1.exe, Quarantined, [7449b3553b50f73ffaf1aefb43be9769],
PUP.Optional.Downloader, C:\Users\sameh\AppData\Roaming\ZHP\Quarantine\YourFileDownloaderUpdater.DIR\YourFileDownloaderUpdater.exe, Quarantined, [ebd2f4141279ec4aecc697f7ee13ff01],
PUP.Optional.Amonetize.A, C:\Users\sameh\Desktop\Echo B1 Vol 2_10924_i44045914_il345.exe, Quarantined, [586565a3bccfc96d63569fe526dfa060],
PUP.Optional.Nova.A, C:\Program Files (x86)\521abff7-0410-4522-96a4-a3c4e9d1e836\0144b480-2940-4cae-90aa-af64d2a51435.dll, Quarantined, [9b22e028d5b6c57188483c1dd62bda26],
PUP.Optional.Crossrider, C:\Program Files (x86)\521abff7-0410-4522-96a4-a3c4e9d1e836\edcfa783-bad7-4463-8f6f-239d1caeae77.dll, Quarantined, [a9143bcd830887afdbd52884926fd52b],
PUP.Optional.Crossrider, C:\Program Files (x86)\AnvSoft\521abff7-0410-4522-96a4-a3c4e9d1e836.dll, Quarantined, [efce20e8711a95a1b1ff7636976af10f],
PUP.Optional.Nova.A, C:\Program Files (x86)\AnvSoft\b3fea50b-e372-48ca-9b37-6c1cad49d2c3.dll, Quarantined, [67566b9df398d85ec30d312822df15eb],
PUP.Optional.OurSeaching.A, C:\Users\sameh\AppData\Local\Temp\amt_oursurfing.exe, Quarantined, [d8e51deb8dfe77bf3ca15032ab5a42be],
PUP.Optional.OutBrowse, C:\Users\sameh\AppData\Local\Temp\bedjejjhbj.exe, Quarantined, [15a85eaaec9fa88efe0e7e512bd6867a],
PUP.Optional.Installcore, C:\Users\sameh\AppData\Local\Temp\Echo B1 Vol 2__10924_i1580489341_il735938.exe, Quarantined, [b7062eda4f3ca78f1df9a6e0fa0b718f],
PUP.Optional.Installcore, C:\Users\sameh\AppData\Local\Temp\Echo B1 Vol 2__10924_i1580491099_il735938.exe, Quarantined, [219c0503bdce4cea2de96e182dd83dc3],
Trojan.Agent, C:\Users\sameh\AppData\Local\Temp\mWRbG.tmp, Quarantined, [249914f4048768ce05b1cd015fa2c040],
PUP.Optional.Amonetize, C:\Users\sameh\AppData\Local\Temp\nsg2337.exe, Quarantined, [7449c543e5a6ad89cfb16a6469987a86],
PUP.Optional.CrossBrowse, C:\Users\sameh\AppData\Local\Temp\166.exe, Quarantined, [ccf129dfa0eb181e4f9cd1caf0118d73],
PUP.Optional.ModGoog, C:\Users\sameh\AppData\Local\Temp\comh.185576\globalupdate.exe, Quarantined, [f8c5aa5ea3e847efb1bbf8970df4e21e],
PUP.Optional.ModGoog, C:\Users\sameh\AppData\Local\Temp\comh.185576\globalupdateBroker.exe, Quarantined, [bc0191776c1f52e433390c83b9483ac6],
PUP.Optional.ModGoog, C:\Users\sameh\AppData\Local\Temp\comh.185576\globalupdateCrashHandler.exe, Quarantined, [f6c7df293754191d6705414ef50c56aa],
PUP.Optional.ModGoog, C:\Users\sameh\AppData\Local\Temp\comh.185576\globalupdateOnDemand.exe, Quarantined, [4f6ed0387b10d75f3933325d7f82d62a],
PUP.Optional.ModGoog, C:\Users\sameh\AppData\Local\Temp\comh.185576\goopdate.dll, Quarantined, [566753b56823f244105c157a6b96ae52],
PUP.Optional.ModGoog, C:\Users\sameh\AppData\Local\Temp\comh.185576\goopdateres_en.dll, Quarantined, [3e7faf59474488ae5319a3ece61b17e9],
PUP.Optional.ModGoog, C:\Users\sameh\AppData\Local\Temp\comh.185576\npglobalupdateUpdate4.dll, Quarantined, [a41924e4345747ef6705f99630d1f709],
PUP.Optional.ModGoog, C:\Users\sameh\AppData\Local\Temp\comh.185576\psmachine.dll, Quarantined, [803d7593ec9ffb3b96d6ace37889c937],
PUP.Optional.ModGoog, C:\Users\sameh\AppData\Local\Temp\comh.185576\psuser.dll, Quarantined, [f9c40503e7a4af87224a7a15629f25db],
PUP.Optional.SavePass.A, C:\Users\sameh\AppData\Local\Temp\nswA151.tmp\Gyufvzgkhmb.exe, Quarantined, [9d208b7d503b8babe50fb8aca859837d],
Trojan.Agent, C:\Users\sameh\AppData\Local\Temp\mWRbG\file.exe, Quarantined, [bb02b5534c3f4ee8f4c2814daa57b44c],
PUP.Optional.SavePass.A, C:\Users\sameh\AppData\Local\Temp\81439502444\1P1I9LkpUSw==1.exe, Quarantined, [655851b72b60d561d61e66fe07faf10f],
PUP.Optional.Amonetize, C:\Windows\Temp\tmp2A41.tmp, Quarantined, [17a67a8e5437a39371103e904bb647b9],
Trojan.Downloader, C:\Windows\Temp\tmp3629.tmp, Quarantined, [a8150404adde6dc91c9c5876bd44ad53],
PUP.Optional.Amonetize, C:\Windows\Temp\tmpB84F.tmp, Quarantined, [8f2ef41433580e2895eca727926f59a7],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\CrashReportModuleConf.ini, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\calendar.exe, Delete-on-Reboot, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\CalendarEntry.dll, Delete-on-Reboot, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\CalendarServ.exe, Delete-on-Reboot, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\CrashReport64.exe, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\CrashUL.exe, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\EVPConfig.ini, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\EVPDR.dll, Delete-on-Reboot, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\EVPHelp.dll, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\EVPKernel.dll, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\EVPNet.dll, Delete-on-Reboot, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\EVPTask.dll, Delete-on-Reboot, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\InstallHelper.exe, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\Report.exe, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\Config-3\Config.json, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\Config-3\Festival.json, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\Config-3\Language.json, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\Config7\Config.json, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\Config7\Festival.json, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\Config7\Language.json, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\Config8\Config.json, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\Config8\Festival.json, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\Config8\Language.json, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\Config9\Config.json, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\Config9\Festival.json, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\Config9\Language.json, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\DefaultConfig\Config.json, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\DefaultConfig\Festival.json, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\DefaultConfig\Language.json, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\EVPData\History.dat, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin\skin.xml, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin\images\btn_left_normal.png, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin\images\btn_right_hover.png, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin\images\btn_switchup_hover.png, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin\images\bg_aero.png, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin\images\bg_aero1.png, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin\images\bg_classsic.png, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin\images\bg_main.png, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin\images\bg_menu.png, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin\images\bg_modern.png, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin\images\btn_checkbox_hover.png, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin\images\btn_checkbox_normal.png, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin\images\btn_checkbox_selected.png, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin\images\btn_checkbox_unselect.png, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin\images\btn_left_hover.png, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin\images\btn_left_pressed.png, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin\images\btn_mode_hover.png, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin\images\btn_mode_normal.png, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin\images\btn_mode_pressed.png, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin\images\btn_radio_hover.png, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin\images\btn_radio_normal.png, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin\images\btn_radio_selected.png, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin\images\btn_right_normal.png, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin\images\btn_right_pressed.png, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin\images\btn_scroll_disabled.png, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin\images\btn_scroll_hover.png, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin\images\btn_scroll_normal.png, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin\images\btn_scroll_pressed.png, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin\images\btn_switchdown_hover.png, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin\images\btn_switchdown_normal.png, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin\images\btn_switchdown_pressed.png, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin\images\btn_switchup_normal.png, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin\images\btn_switchup_pressed.png, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin\images\btn_today_hover.png, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin\images\btn_today_normal.png, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin\images\btn_today_pressed.png, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin\images\icn_clover_color.png, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin\images\icn_clover_grey.png, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin\images\icn_clover_half.png, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin\images\icn_heart_color.png, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin\images\icn_heart_grey.png, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin\images\icn_heart_half.png, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin\images\icn_money_color.png, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin\images\icn_money_grey.png, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin\images\icn_money_half.png, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin\images\icn_pen_color.png, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin\images\icn_pen_grey.png, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin\images\icn_pen_half.png, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin\images\img_arrow_down.png, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin\images\img_arrow_up.png, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin\images\main_bg_bottom.png, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin\images\main_bg_frame.png, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.CalendarTool.A, C:\Program Files (x86)\CalendarTool\2.0.0.10764\skin\images\scroll.bmp, Quarantined, [c9f457b16427b97daa290f07f1122bd5],
PUP.Optional.Linkury.A, C:\Windows\System32\Tasks\snf, Quarantined, [7c418088ec9f74c264abf6218d76dd23],
PUP.Optional.Linkury.A, C:\Windows\System32\Tasks\snp, Quarantined, [625b43c517744de9769a65b25ea5926e],
PUP.Optional.ToolsUpdatePlatform.A, C:\Windows\System32\Tasks\ToolsUpdatePlatform_ScheduledTask, Quarantined, [734a3ccce1aad5619909e8327b88f40c],
PUP.Optional.ToolsUpdatePlatform.A, C:\Windows\Tasks\ToolsUpdatePlatform_ScheduledTask.job, Quarantined, [d2eb66a2dfacb185d9cab6648c77c63a],
PUP.Optional.Winsock.HijackBoot, C:\Users\sameh\AppData\Local\Temp\adblocker_installer__1439502746.txt, Quarantined, [edd0da2ed2b90e28b43eb8f1f80c6e92],
PUP.Optional.MultiPlug.A, C:\Program Files (x86)\542F210B-1439502761-BD9F-82B4-7A9D287B8137\knsp9EC8.tmpfs, Quarantined, [4d7067a135563df978a1b6f75aaab050],
PUP.Optional.MultiPlug.A, C:\Program Files (x86)\542F210B-1439502761-BD9F-82B4-7A9D287B8137\rnstB4F2.exe, Quarantined, [4d7067a135563df978a1b6f75aaab050],
PUP.Optional.MultiPlug.A, C:\Program Files (x86)\542F210B-1439502761-BD9F-82B4-7A9D287B8137\Uninstall.exe, Quarantined, [4d7067a135563df978a1b6f75aaab050],
PUP.Optional.MultiPlug.A, C:\Program Files (x86)\542F210B-1439502761-BD9F-82B4-7A9D287B8137\vnsz8395.tmp, Quarantined, [4d7067a135563df978a1b6f75aaab050],
PUP.Optional.GlobalUpdate.A, C:\Users\sameh\AppData\Local\Temp\comh.185576\globalupdateHelper.msi, Quarantined, [e0dd67a1c8c33204621f8e68d32f02fe],
PUP.Optional.RegistryReviver.A, C:\ProgramData\ReviverSoft\Registry Reviver\Language\Bulgarian.xml, Quarantined, [279647c1216a78befed5cc46ab58e51b],
PUP.Optional.RegistryReviver.A, C:\ProgramData\ReviverSoft\Registry Reviver\Language\Croatian.xml, Quarantined, [279647c1216a78befed5cc46ab58e51b],
PUP.Optional.RegistryReviver.A, C:\ProgramData\ReviverSoft\Registry Reviver\Language\Czech.xml, Quarantined, [279647c1216a78befed5cc46ab58e51b],
PUP.Optional.RegistryReviver.A, C:\ProgramData\ReviverSoft\Registry Reviver\Language\Danish.xml, Quarantined, [279647c1216a78befed5cc46ab58e51b],
PUP.Optional.RegistryReviver.A, C:\ProgramData\ReviverSoft\Registry Reviver\Language\Dutch.xml, Quarantined, [279647c1216a78befed5cc46ab58e51b],
PUP.Optional.RegistryReviver.A, C:\ProgramData\ReviverSoft\Registry Reviver\Language\English.xml, Quarantined, [279647c1216a78befed5cc46ab58e51b],
PUP.Optional.RegistryReviver.A, C:\ProgramData\ReviverSoft\Registry Reviver\Language\Finnish.xml, Quarantined, [279647c1216a78befed5cc46ab58e51b],
PUP.Optional.RegistryReviver.A, C:\ProgramData\ReviverSoft\Registry Reviver\Language\French.xml, Quarantined, [279647c1216a78befed5cc46ab58e51b],
PUP.Optional.RegistryReviver.A, C:\ProgramData\ReviverSoft\Registry Reviver\Language\German.xml, Quarantined, [279647c1216a78befed5cc46ab58e51b],
PUP.Optional.RegistryReviver.A, C:\ProgramData\ReviverSoft\Registry Reviver\Language\Greek.xml, Quarantined, [279647c1216a78befed5cc46ab58e51b],
PUP.Optional.RegistryReviver.A, C:\ProgramData\ReviverSoft\Registry Reviver\Language\Hungarian.xml, Quarantined, [279647c1216a78befed5cc46ab58e51b],
PUP.Optional.RegistryReviver.A, C:\ProgramData\ReviverSoft\Registry Reviver\Language\Indonesian.xml, Quarantined, [279647c1216a78befed5cc46ab58e51b],
PUP.Optional.RegistryReviver.A, C:\ProgramData\ReviverSoft\Registry Reviver\Language\Italian.xml, Quarantined, [279647c1216a78befed5cc46ab58e51b],
PUP.Optional.RegistryReviver.A, C:\ProgramData\ReviverSoft\Registry Reviver\Language\Japanese.xml, Quarantined, [279647c1216a78befed5cc46ab58e51b],
PUP.Optional.RegistryReviver.A, C:\ProgramData\ReviverSoft\Registry Reviver\Language\Norwegian.xml, Quarantined, [279647c1216a78befed5cc46ab58e51b],
PUP.Optional.RegistryReviver.A, C:\ProgramData\ReviverSoft\Registry Reviver\Language\Polish.xml, Quarantined, [279647c1216a78befed5cc46ab58e51b],
PUP.Optional.RegistryReviver.A, C:\ProgramData\ReviverSoft\Registry Reviver\Language\Portuguese.xml, Quarantined, [279647c1216a78befed5cc46ab58e51b],
PUP.Optional.RegistryReviver.A, C:\ProgramData\ReviverSoft\Registry Reviver\Language\Romanian.xml, Quarantined, [279647c1216a78befed5cc46ab58e51b],
PUP.Optional.RegistryReviver.A, C:\ProgramData\ReviverSoft\Registry Reviver\Language\Russian.xml, Quarantined, [279647c1216a78befed5cc46ab58e51b],
PUP.Optional.RegistryReviver.A, C:\ProgramData\ReviverSoft\Registry Reviver\Language\SimpChinese.xml, Quarantined, [279647c1216a78befed5cc46ab58e51b],
PUP.Optional.RegistryReviver.A, C:\ProgramData\ReviverSoft\Registry Reviver\Language\Spanish.xml, Quarantined, [279647c1216a78befed5cc46ab58e51b],
PUP.Optional.RegistryReviver.A, C:\ProgramData\ReviverSoft\Registry Reviver\Language\Swedish.xml, Quarantined, [279647c1216a78befed5cc46ab58e51b],
PUP.Optional.RegistryReviver.A, C:\ProgramData\ReviverSoft\Registry Reviver\Language\Thai.xml, Quarantined, [279647c1216a78befed5cc46ab58e51b],
PUP.Optional.RegistryReviver.A, C:\ProgramData\ReviverSoft\Registry Reviver\Language\TradChinese.xml, Quarantined, [279647c1216a78befed5cc46ab58e51b],
PUP.Optional.RegistryReviver.A, C:\ProgramData\ReviverSoft\Registry Reviver\Language\Turkish.xml, Quarantined, [279647c1216a78befed5cc46ab58e51b],
PUP.Optional.RegistryReviver.A, C:\ProgramData\ReviverSoft\Registry Reviver\S-1-5-21-714430725-4008368064-3161557589-1002\Settings.xml, Quarantined, [279647c1216a78befed5cc46ab58e51b],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\computerID.log, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\lci.lci, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\nfo, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\RegistryReviverUpdater.exe, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\ScanInfo, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\system_excludes, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\unfixable_excludes, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\user_excludes, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\Backups\Original.smg, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Dutch2, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\SimpChinese.xml, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Bulgarian.xml, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Bulgarian1, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Bulgarian2, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Croatian.xml, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Croatian1, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Croatian2, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Czech.xml, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Czech1, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Czech2, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Danish.xml, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Danish1, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Danish2, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Dutch.xml, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Dutch1, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\English.xml, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\English1, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\English2, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Finnish.xml, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Finnish1, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Finnish2, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\French.xml, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\French1, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\French2, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\German.xml, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\German1, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\German2, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Greek.xml, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Greek1, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Greek2, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Hungarian.xml, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Hungarian1, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Hungarian2, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Indonesian.xml, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Indonesian1, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Indonesian2, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Italian.xml, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Italian1, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Italian2, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Japanese.xml, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Japanese1, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Japanese2, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Norwegian.xml, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Norwegian1, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Norwegian2, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Polish.xml, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Polish1, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Polish2, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Portuguese.xml, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Portuguese1, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Portuguese2, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Romanian.xml, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Romanian1, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Romanian2, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Russian.xml, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Russian1, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Russian2, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\SimpChinese1, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\SimpChinese2, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Spanish.xml, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Spanish1, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Spanish2, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Swedish.xml, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Swedish1, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Swedish2, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Thai.xml, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Thai1, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Thai2, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\TradChinese.xml, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\TradChinese1, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\TradChinese2, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Turkish.xml, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Turkish1, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\defaults\Turkish2, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\Logs\6d4fc0bd-1ff2cf96-45cc3c07-719be084_logRegScan.log, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\Logs\app.log, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\Logs\License.log, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.RegistryReviver.A, C:\Program Files\ReviverSoft\Registry Reviver\Logs\ServerCommunications.log, Quarantined, [893467a1f497d85e05cfba589f6450b0],
PUP.Optional.ToolsUpdatePlatform.A, C:\ProgramData\ToolsUpdatePlatform\BrowserInfo.encode, Quarantined, [a91426e2b2d9ce68026cde366f9456aa],
PUP.Optional.ToolsUpdatePlatform.A, C:\ProgramData\ToolsUpdatePlatform\CloudUpdateInfo.encode, Quarantined, [a91426e2b2d9ce68026cde366f9456aa],
PUP.Optional.ToolsUpdatePlatform.A, C:\ProgramData\ToolsUpdatePlatform\LocalAppInfo.encode, Quarantined, [a91426e2b2d9ce68026cde366f9456aa],
PUP.Optional.ToolsUpdatePlatform.A, C:\ProgramData\ToolsUpdatePlatform\LocalInfo.encode, Quarantined, [a91426e2b2d9ce68026cde366f9456aa],
PUP.Optional.ToolsUpdatePlatform.A, C:\ProgramData\ToolsUpdatePlatform\Dump\BugReportConfig.ini, Quarantined, [a91426e2b2d9ce68026cde366f9456aa],
PUP.Optional.ToolsUpdatePlatform.A, C:\Program Files (x86)\ToolsUpdatePlatform\BrowserInfo.exe, Quarantined, [f9c46d9bd2b9ae8893dc5aba8a7925db],
PUP.Optional.ToolsUpdatePlatform.A, C:\Program Files (x86)\ToolsUpdatePlatform\CrashReport.exe, Quarantined, [f9c46d9bd2b9ae8893dc5aba8a7925db],
PUP.Optional.ToolsUpdatePlatform.A, C:\Program Files (x86)\ToolsUpdatePlatform\CrashUL.exe, Quarantined, [f9c46d9bd2b9ae8893dc5aba8a7925db],
PUP.Optional.ToolsUpdatePlatform.A, C:\Program Files (x86)\ToolsUpdatePlatform\UpdatePlatform.exe, Delete-on-Reboot, [f9c46d9bd2b9ae8893dc5aba8a7925db],
PUP.Optional.ExtTag.F, C:\ProgramData\ExtTag\4jf3vinf.dll, Quarantined, [6657cd3bacdf3105d428a3710cf7b24e],
PUP.Optional.ExtTag.F, C:\ProgramData\ExtTag\aazipmia.dll, Delete-on-Reboot, [6657cd3bacdf3105d428a3710cf7b24e],
PUP.Optional.ExtTag.F, C:\ProgramData\ExtTag\absptdiv.dll, Quarantined, [6657cd3bacdf3105d428a3710cf7b24e],
PUP.Optional.ExtTag.F, C:\ProgramData\ExtTag\bse33jxk.dll, Quarantined, [6657cd3bacdf3105d428a3710cf7b24e],
PUP.Optional.ExtTag.F, C:\ProgramData\ExtTag\conf.config, Quarantined, [6657cd3bacdf3105d428a3710cf7b24e],
PUP.Optional.ExtTag.F, C:\ProgramData\ExtTag\Config.xml, Quarantined, [6657cd3bacdf3105d428a3710cf7b24e],
PUP.Optional.ExtTag.F, C:\ProgramData\ExtTag\e4g3r3ho.exe, Quarantined, [6657cd3bacdf3105d428a3710cf7b24e],
PUP.Optional.ExtTag.F, C:\ProgramData\ExtTag\e4g3r3ho.exe.config, Quarantined, [6657cd3bacdf3105d428a3710cf7b24e],
PUP.Optional.ExtTag.F, C:\ProgramData\ExtTag\ExtTag.exe, Delete-on-Reboot, [6657cd3bacdf3105d428a3710cf7b24e],
PUP.Optional.ExtTag.F, C:\ProgramData\ExtTag\ExtTag.exe.config, Quarantined, [6657cd3bacdf3105d428a3710cf7b24e],
PUP.Optional.ExtTag.F, C:\ProgramData\ExtTag\ffiwvf1g.exe, Quarantined, [6657cd3bacdf3105d428a3710cf7b24e],
PUP.Optional.ExtTag.F, C:\ProgramData\ExtTag\ffiwvf1g.exe.config, Quarantined, [6657cd3bacdf3105d428a3710cf7b24e],
PUP.Optional.ExtTag.F, C:\ProgramData\ExtTag\fmnzinwl.dll, Quarantined, [6657cd3bacdf3105d428a3710cf7b24e],
PUP.Optional.ExtTag.F, C:\ProgramData\ExtTag\g5ynv0ly.exe, Quarantined, [6657cd3bacdf3105d428a3710cf7b24e],
PUP.Optional.ExtTag.F, C:\ProgramData\ExtTag\g5ynv0ly.exe.config, Quarantined, [6657cd3bacdf3105d428a3710cf7b24e],
PUP.Optional.ExtTag.F, C:\ProgramData\ExtTag\hjmnthfy.dll, Delete-on-Reboot, [6657cd3bacdf3105d428a3710cf7b24e],
PUP.Optional.ExtTag.F, C:\ProgramData\ExtTag\kwbxtij4.exe, Delete-on-Reboot, [6657cd3bacdf3105d428a3710cf7b24e],
PUP.Optional.ExtTag.F, C:\ProgramData\ExtTag\kwbxtij4.exe.config, Quarantined, [6657cd3bacdf3105d428a3710cf7b24e],
PUP.Optional.ExtTag.F, C:\ProgramData\ExtTag\pmkylmp4.vdb.dll, Delete-on-Reboot, [6657cd3bacdf3105d428a3710cf7b24e],
PUP.Optional.ExtTag.F, C:\ProgramData\ExtTag\xjroiyla.dll, Quarantined, [6657cd3bacdf3105d428a3710cf7b24e],
PUP.Optional.ExtTag.F, C:\ProgramData\ExtTag\yby2zgml.dll, Quarantined, [6657cd3bacdf3105d428a3710cf7b24e],
PUP.Optional.ExtTag.F, C:\ProgramData\ExtTags\ff.HP, Quarantined, [14a957b1f2990c2ad42991832ad951af],
PUP.Optional.ExtTag.F, C:\ProgramData\ExtTags\ff.NT, Quarantined, [14a957b1f2990c2ad42991832ad951af],
PUP.Optional.ExtTag.F, C:\ProgramData\ExtTags\snp.sc, Quarantined, [14a957b1f2990c2ad42991832ad951af],
PUP.Optional.Linkury.A, C:\Program Files\fchk32\config.conf, Quarantined, [506dc543731853e3b4658c8a11f240c0],
PUP.Optional.Linkury.A, C:\Program Files\fchk32\fchk32.exe.config, Quarantined, [506dc543731853e3b4658c8a11f240c0],
PUP.Optional.Linkury.A, C:\Program Files\fchk32\packages\480c547a-5ba0-4ec6-ae79-d03dc07f45da\Jackson.exe, Quarantined, [506dc543731853e3b4658c8a11f240c0],
PUP.Optional.Linkury.A, C:\Program Files\fchk32\packages\480c547a-5ba0-4ec6-ae79-d03dc07f45da\xtc.exe, Quarantined, [506dc543731853e3b4658c8a11f240c0],
PUP.Optional.Linkury.A, C:\Program Files\fchk32\packages\480c547a-5ba0-4ec6-ae79-d03dc07f45da\xtc.exe.config, Quarantined, [506dc543731853e3b4658c8a11f240c0],
PUP.Optional.Linkury.A, C:\Program Files\fchk32\packages\56f17cfe-ddcd-4313-a6bf-4db3eef3a209\conf.db, Quarantined, [506dc543731853e3b4658c8a11f240c0],
PUP.Optional.Linkury.A, C:\Program Files\fchk32\packages\56f17cfe-ddcd-4313-a6bf-4db3eef3a209\config.conf, Quarantined, [506dc543731853e3b4658c8a11f240c0],
PUP.Optional.Linkury.A, C:\Program Files\fchk32\packages\56f17cfe-ddcd-4313-a6bf-4db3eef3a209\fchk.exe.config, Quarantined, [506dc543731853e3b4658c8a11f240c0],
PUP.Optional.Linkury.A, C:\Program Files\fchk32\packages\56f17cfe-ddcd-4313-a6bf-4db3eef3a209\setup\FirefoxUpdate.40.0.exe, Quarantined, [506dc543731853e3b4658c8a11f240c0],
PUP.Optional.Linkury.A, C:\Program Files\fchk32\packages\56f17cfe-ddcd-4313-a6bf-4db3eef3a209\setup\WinrarUpdate.5.21.0.exe, Quarantined, [506dc543731853e3b4658c8a11f240c0],
PUP.Optional.Linkury.A, C:\Program Files\fchk32\packages\e2b74ab4-a0e9-427f-a1a2-094576536756\file.exe, Quarantined, [506dc543731853e3b4658c8a11f240c0],
PUP.Optional.Linkury.A, C:\Program Files\fchk32\packages\e2b74ab4-a0e9-427f-a1a2-094576536756\start.exe, Quarantined, [506dc543731853e3b4658c8a11f240c0],
PUP.Optional.Linkury.A, C:\Program Files\fchk32\packages\e2b74ab4-a0e9-427f-a1a2-094576536756\start.exe.config, Quarantined, [506dc543731853e3b4658c8a11f240c0],
PUP.Optional.Linkury.ShrtCln, C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\findit.xml, Quarantined, [a31a9c6cf992f93dd9db7217af56d22e],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\e28ab6105ab1f4cca523c435eb7ae45f.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\8b2781376afae47c88eb3d7cbc5b38cf.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\main.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\api\0a8b76dcc4e7cc1b1cccae7d38d84b8b.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\api\454a70fdace8d933a7613b71e4c1ae74.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\api\4d0845f0278f1961204fc00a11a5ee44.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\api\57d9c1ba350847112ebcfe3289f335b0.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\api\c45fa3b7ea5d296f1c97cff60fa744d5.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\api\pageAction.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\lib\7a9aef85abb3d319d32f41f6968dcceb.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\lib\06e453db9dda735a5fb0591df3a55ff9.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\lib\073074d3824ccfde2dc0b56997b6d21b.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\lib\0e841939fe2ee98b2a00929d102bcce5.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\lib\16c9637e188c16b7718687d8725732ea.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\lib\3cce0760b0bbf3ff4cffec67fd1d4933.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\lib\3d55b23727502e5309b6d665f53966d9.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\lib\4e2114a1ea790b643cef9b0447366af0.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\lib\5ee95946fbd9e2e6028768a768f0e2c1.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\lib\8381fadbd00a8ad237935258d826cf3f.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\lib\8b53a69a13662dc53e87adb7a8d242ad.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\lib\app_api.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\lib\b7b9ef5570f50ad04384f3765eee48fa.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\lib\c0f1b5becd5255029c7bc83128da86a2.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\lib\efedb5e7130cb7a53db794eacc91e518.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\lib\installer.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\lib\popupResource\newPopup.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\lib\popupResource\popup.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\background.html, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\chromeCoreFilesIndex.txt, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\manifest.json, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\popup.html, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\Settings.json, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\manifest.xml, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins.json, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\273.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\102.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\104.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\119.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\13.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\14.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\17.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\178.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\179.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\180.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\184.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\19.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\195.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\200.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\220.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\223.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\231.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\232.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\234.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\242.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\246.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\252.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\253.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\262.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\263.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\281.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\288.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\289.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\335.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\339.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\345.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\354.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\356.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\376.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\379.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\380.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\385.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\389.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\390.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\391.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\4.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\424.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\47.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\64.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\7.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\78.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\80.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\9.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\91.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\97.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\userCode\background.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\userCode\extension.js, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\icons\icon128.png, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\icons\icon16.png, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\icons\icon48.png, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\icons\actions\1.png, Quarantined, [cdf011f7b5d6c472ffc58df9798c6799],
PUP.Optional.Linkury.ShrtCln, C:\Users\sameh\AppData\Roaming\Mozilla\Firefox\Profiles\64akzrf1.default\prefs.js, Good: (), Bad: (user_pref("browser.newtab.url", "C:\ProgramData\ExtTags\ff.NT");), Replaced,[ead301072b608caa134fa5e7d62f13ed]
PUP.Optional.Linkury.ShrtCln, C:\Users\sameh\AppData\Roaming\Mozilla\Firefox\Profiles\64akzrf1.default\prefs.js, Good: (browser.startup.homepage", "https://www.malwarebytes.org/restorebrowser/), Bad: (browser.startup.homepage", "C:\ProgramData\ExtTags\ff.HP), Replaced,[dbe2ed1b9bf0d561afe41579e71e5aa6]
PUP.Optional.Linkury.ShrtCln, C:\Users\sameh\AppData\Roaming\Mozilla\Firefox\Profiles\64akzrf1.default\searchplugins\findit.xml, Quarantined, [c7f60cfca1ea16209b185237a362fe02],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\e28ab6105ab1f4cca523c435eb7ae45f.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\8b2781376afae47c88eb3d7cbc5b38cf.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\main.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\api\0a8b76dcc4e7cc1b1cccae7d38d84b8b.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\api\454a70fdace8d933a7613b71e4c1ae74.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\api\4d0845f0278f1961204fc00a11a5ee44.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\api\57d9c1ba350847112ebcfe3289f335b0.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\api\c45fa3b7ea5d296f1c97cff60fa744d5.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\api\pageAction.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\lib\7a9aef85abb3d319d32f41f6968dcceb.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\lib\06e453db9dda735a5fb0591df3a55ff9.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\lib\073074d3824ccfde2dc0b56997b6d21b.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\lib\0e841939fe2ee98b2a00929d102bcce5.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\lib\16c9637e188c16b7718687d8725732ea.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\lib\3cce0760b0bbf3ff4cffec67fd1d4933.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\lib\3d55b23727502e5309b6d665f53966d9.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\lib\4e2114a1ea790b643cef9b0447366af0.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\lib\5ee95946fbd9e2e6028768a768f0e2c1.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\lib\8381fadbd00a8ad237935258d826cf3f.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\lib\8b53a69a13662dc53e87adb7a8d242ad.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\lib\app_api.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\lib\b7b9ef5570f50ad04384f3765eee48fa.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\lib\c0f1b5becd5255029c7bc83128da86a2.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\lib\efedb5e7130cb7a53db794eacc91e518.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\lib\installer.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\lib\popupResource\newPopup.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\js\lib\popupResource\popup.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\background.html, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\chromeCoreFilesIndex.txt, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\manifest.json, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\popup.html, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\Settings.json, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\manifest.xml, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins.json, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\273.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\102.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\104.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\119.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\13.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\14.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\17.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\178.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\179.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\180.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\184.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\19.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\195.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\200.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\220.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\223.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\231.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\232.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\234.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\242.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\246.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\252.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\253.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\262.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\263.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\281.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\288.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\289.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\335.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\339.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\345.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\354.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\356.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\376.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\379.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\380.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\385.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\389.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\390.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\391.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\4.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\424.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\47.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\64.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\7.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\78.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\80.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\9.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\91.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\plugins\97.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\userCode\background.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\extensionData\userCode\extension.js, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\icons\icon128.png, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\icons\icon16.png, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\icons\icon48.png, Quarantined, [506d37d14348de589f4aa8df778ec13f],
PUP.Optional.CrossRider.A, C:\Users\sameh\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\1.26.87_0\icons\actions\1.png, Quarantined, [506d37d14348de589f4aa8df778ec13f],

Physical Sectors: 0
(No malicious items detected)


(end)

Publicité


Signaler le contenu de ce document

Publicité