Malwarebytes Anti-Malware www.malwarebytes.org Scan Date: 18/10/2014 Scan Time: 17:28:18 Logfile: Export 1.txt Administrator: Yes Version: 2.00.3.1025 Malware Database: v2014.10.18.04 Rootkit Database: v2014.10.17.01 License: Trial Malware Protection: Enabled Malicious Website Protection: Enabled Self-protection: Disabled OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: test Scan Type: Threat Scan Result: Completed Objects Scanned: 366414 Time Elapsed: 6 min, 23 sec Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Enabled PUM: Enabled Processes: 0 (No malicious items detected) Modules: 0 (No malicious items detected) Registry Keys: 23 PUP.Optional.Wajam.A, HKLM\SOFTWARE\CLASSES\APPID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}, , [b27a6aac24583ff734848e4b847e8e72], PUP.Optional.Wajam.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}, , [b27a6aac24583ff734848e4b847e8e72], PUP.Optional.Snapdo.T, HKU\S-1-5-21-2557714802-1265494517-3784492151-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{006ee092-9658-4fd6-bd8e-a21a348e59f5}, , [48e473a3f48888ae2c2cc913eb17d42c], PUP.Optional.Snapdo.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{006EE092-9658-4FD6-BD8E-A21A348E59F5}, , [48e473a3f48888ae2c2cc913eb17d42c], PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{68B81CCD-A80C-4060-8947-5AE69ED01199}, , [230934e2512bb3831a0bac2d9b673ec2], PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E6B969FB-6D33-48d2-9061-8BBD4899EB08}, , [a884b95d93e9280e0d19ae2bde24df21], PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\Iminent, , [2606ed297903f73f07b0e86a54afdb25], PUP.Optional.Wajam.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\jpmbfleldcgkldadpdinhjjopdfpjfjp, , [5cd027ef9ddf3600ac7581cad03360a0], PUP.Optional.SweetIM.A, HKLM\SOFTWARE\WOW6432NODE\SWEETIM, , [06262aec126a67cf33c3442441c352ae], PUP.Optional.HQPro.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\HQPro-1, , [909caa6cf7851e18c2c450e3c53e5ea2], PUP.Optional.PlusVid.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\PlusVid, , [092317ff5527a690ba1b0a2ea162ba46], PUP.Optional.SmartSaver.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\SmartSaver+ 12, , [f7357c9ad2aa142290573e0de91ad52b], PUP.Optional.Iminent.A, HKU\S-1-5-21-2557714802-1265494517-3784492151-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Iminent, , [032974a2a5d7aa8c63558ec46b984fb1], PUP.Optional.Tuto4PC.A, HKU\S-1-5-21-2557714802-1265494517-3784492151-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\TutoTag, , [82aaa76f601c89ade6607e0d35cfd62a], PUP.Optional.CrossRider.A, HKU\S-1-5-21-2557714802-1265494517-3784492151-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, , [af7d9680a1db0d293513cbb17d876b95], PUP.Optional.ViewPassword.A, HKU\S-1-5-21-2557714802-1265494517-3784492151-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\ViewPassword, , [e448ad696616b185f0c36bc41de6d927], PUP.Optional.InstallCore.A, HKU\S-1-5-21-2557714802-1265494517-3784492151-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE\1I1T1Q1S, , [51db0e08542874c204c2b49de122768a], PUP.Optional.InstallCore.A, HKU\S-1-5-21-2557714802-1265494517-3784492151-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE, , [e24a9d79cfad42f468a54d1bf311ce32], PUP.Optional.BubbleDock.A, HKU\S-1-5-21-2557714802-1265494517-3784492151-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\NOSIBAY\Bubble Dock Tag, , [e84495816319bf7781eeef647f84a65a], PUP.Optional.SafeFinder.A, HKU\S-1-5-21-2557714802-1265494517-3784492151-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SMARTBAR, , [35f7e92da1db2a0c87d113108b780000], PUP.Optional.Softonic.A, HKU\S-1-5-21-2557714802-1265494517-3784492151-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SOFTONIC\Universal Downloader, , [fc3042d4ff7db58132d58cb57d86e51b], PUP.Optional.SweetIM.A, HKU\S-1-5-21-2557714802-1265494517-3784492151-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SWEETIM, , [7ab2888e0f6dbb7bda1b7eea51b333cd], PUP.Optional.FileTypeAssistant, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Trusted Software Assistant_is1, , [9e8e6caaaad2023413763fd19172ff01], Registry Values: 7 PUP.Optional.SmartBar, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{ae07101b-46d4-4a98-af68-0333ea26e113}, Smartbar, , [b87462b49ede5cdaa62f110fed166f91] PUP.Optional.SmartBar, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{ae07101b-46d4-4a98-af68-0333ea26e113}, Smartbar, , [8aa25db92f4d2610973ee13f2ed556aa] PUP.Optional.SweetIM.A, HKLM\SOFTWARE\WOW6432NODE\SWEETIM|simapp_id, {BE0F4EC4-1927-4016-865F-9BE96FF25A6A}, , [06262aec126a67cf33c3442441c352ae] PUP.Optional.InstallCore.A, HKU\S-1-5-21-2557714802-1265494517-3784492151-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE|tb, 0Q1O1R1R0D1G1J1S, , [e24a9d79cfad42f468a54d1bf311ce32] PUP.Optional.Snapdo.T, HKU\S-1-5-21-2557714802-1265494517-3784492151-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {006ee092-9658-4fd6-bd8e-a21a348e59f5}, , [2c00db3be8946dc9295b2cfee51ed62a] PUP.Optional.SafeFinder.A, HKU\S-1-5-21-2557714802-1265494517-3784492151-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SMARTBAR|publisher, IrsSF, , [35f7e92da1db2a0c87d113108b780000] PUP.Optional.SweetIM.A, HKU\S-1-5-21-2557714802-1265494517-3784492151-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SWEETIM|simapp_id, {BE0F4EC4-1927-4016-865F-9BE96FF25A6A}, , [7ab2888e0f6dbb7bda1b7eea51b333cd] Registry Data: 7 PUP.Optional.SafeFinder.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, http://feed.safefinder.com/?p=mKO_AwFzXIpYRak5VLd2-qQdkN5729vVFWx88tUR7Rb9iwQjQ051PLJQ5SfLFNuEVgowPZfCB5n9hYDHi8w_2Iw8Wd3JdoxNTSHM6pRA8htqLZSo90R4AkCBNb2-1g91pU-vU18URFNPSMTZiOs3xWVhe-j0srVc8xv3DnjlM0wVA2uXxfuVAhS6AgJVEskNX0AXFt__JssVGQ,,&q={searchTerms}, Good: (www.google.com), Bad: (http://feed.safefinder.com/?p=mKO_AwFzXIpYRak5VLd2-qQdkN5729vVFWx88tUR7Rb9iwQjQ051PLJQ5SfLFNuEVgowPZfCB5n9hYDHi8w_2Iw8Wd3JdoxNTSHM6pRA8htqLZSo90R4AkCBNb2-1g91pU-vU18URFNPSMTZiOs3xWVhe-j0srVc8xv3DnjlM0wVA2uXxfuVAhS6AgJVEskNX0AXFt__JssVGQ,,&q={searchTerms}),,[16161df97705db5b5e7659bf1bea24dc] PUP.Optional.SafeFinder.A, HKU\S-1-5-21-2557714802-1265494517-3784492151-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Bar, http://feed.safefinder.com/?p=mKO_AwFzXIpYRak5VLd2-qQdkN5729vVFWx88tUR7Rb9iwQjQ051PLJQ5SfLFNuEVgowPZfCB5n9hYDHi8w_2Iw8Wd3JdoxNTSHM6pRA8htqLZSo90R4AkCBNb2-1g91pU-vU18URFNPSMTZiOs3xWVhe-j0srVc8xv3DnjlM0wVA2uXxfuVAhS94eaqEOp3Gfyk23NM1J9aQg,,&q={searchTerms}, Good: (www.google.com), Bad: (http://feed.safefinder.com/?p=mKO_AwFzXIpYRak5VLd2-qQdkN5729vVFWx88tUR7Rb9iwQjQ051PLJQ5SfLFNuEVgowPZfCB5n9hYDHi8w_2Iw8Wd3JdoxNTSHM6pRA8htqLZSo90R4AkCBNb2-1g91pU-vU18URFNPSMTZiOs3xWVhe-j0srVc8xv3DnjlM0wVA2uXxfuVAhS94eaqEOp3Gfyk23NM1J9aQg,,&q={searchTerms}),,[c26ad0465428a0966c6345d38f76fa06] PUP.Optional.SafeFinder.A, HKU\S-1-5-21-2557714802-1265494517-3784492151-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, http://feed.safefinder.com/?p=mKO_AwFzXIpYRak5VLd2-qQdkN5729vVFWx88tUR7Rb9iwQjQ051PLJQ5SfLFNuEVgowPZfCB5n9hYDHi8w_2Iw8Wd3JdoxNTSHM6pRA8htqLZSo90R4AkCBNb2-1g91pU-vU18URFNPSMTZiOs3xWVhe-j0srVc8xv3DnjlM0wVA2uXxfuVAhS94eaqEOp3Gfyk23NM1J9aQg,,&q={searchTerms}, Good: (www.google.com), Bad: (http://feed.safefinder.com/?p=mKO_AwFzXIpYRak5VLd2-qQdkN5729vVFWx88tUR7Rb9iwQjQ051PLJQ5SfLFNuEVgowPZfCB5n9hYDHi8w_2Iw8Wd3JdoxNTSHM6pRA8htqLZSo90R4AkCBNb2-1g91pU-vU18URFNPSMTZiOs3xWVhe-j0srVc8xv3DnjlM0wVA2uXxfuVAhS94eaqEOp3Gfyk23NM1J9aQg,,&q={searchTerms}),,[4ede74a22f4d3bfbd0fdc751b84d639d] PUP.Optional.SafeFinder.A, HKU\S-1-5-21-2557714802-1265494517-3784492151-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://feed.safefinder.com/?p=mKO_AwFzXIpYRak5VLd2-qQdkN5729vVFWx88tUR7Rb9iwQjQ051PLJQ5SfLFNuEVgowPZfCB5n9hYDHi8w_2Iw8Wd3JdoxNTSHM6pRA8htqLZSo90R4AkCBNbHjOuHTXf2oCYD7R8VmLY7qJFgu4kBH4p8cxPBaWnMY0Gse1pUfedTZmqhj-Yz5D-b9Ch6QNruHYH8e39uRUQ,,, Good: (www.google.com), Bad: (http://feed.safefinder.com/?p=mKO_AwFzXIpYRak5VLd2-qQdkN5729vVFWx88tUR7Rb9iwQjQ051PLJQ5SfLFNuEVgowPZfCB5n9hYDHi8w_2Iw8Wd3JdoxNTSHM6pRA8htqLZSo90R4AkCBNbHjOuHTXf2oCYD7R8VmLY7qJFgu4kBH4p8cxPBaWnMY0Gse1pUfedTZmqhj-Yz5D-b9Ch6QNruHYH8e39uRUQ,,),,[b577e92dd2aad2644e7c38e0d03537c9] PUP.Optional.SafeFinder.A, HKU\S-1-5-21-2557714802-1265494517-3784492151-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Default_Search_URL, http://feed.safefinder.com/?p=mKO_AwFzXIpYRak5VLd2-qQdkN5729vVFWx88tUR7Rb9iwQjQ051PLJQ5SfLFNuEVgowPZfCB5n9hYDHi8w_2Iw8Wd3JdoxNTSHM6pRA8htqLZSo90R4AkCBNb2-1g91pU-vU18URFNPSMTZiOs3xWVhe-j0srVc8xv3DnjlM0wVA2uXxfuVAhS94eaqEOp3Gfyk23NM1J9aQg,,&q={searchTerms}, Good: (www.google.com), Bad: (http://feed.safefinder.com/?p=mKO_AwFzXIpYRak5VLd2-qQdkN5729vVFWx88tUR7Rb9iwQjQ051PLJQ5SfLFNuEVgowPZfCB5n9hYDHi8w_2Iw8Wd3JdoxNTSHM6pRA8htqLZSo90R4AkCBNb2-1g91pU-vU18URFNPSMTZiOs3xWVhe-j0srVc8xv3DnjlM0wVA2uXxfuVAhS94eaqEOp3Gfyk23NM1J9aQg,,&q={searchTerms}),,[bf6d8f876f0dc670547e76a28184d030] PUP.Optional.SafeFinder.A, HKU\S-1-5-21-2557714802-1265494517-3784492151-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|SearchAssistant, http://feed.safefinder.com/?p=mKO_AwFzXIpYRak5VLd2-qQdkN5729vVFWx88tUR7Rb9iwQjQ051PLJQ5SfLFNuEVgowPZfCB5n9hYDHi8w_2Iw8Wd3JdoxNTSHM6pRA8htqLZSo90R4AkCBNb2-1g91pU-vU18URFNPSMTZiOs3xWVhe-j0srVc8xv3DnjlM0wVA2uXxfuVAhS94eaqEOp3Gfyk23NM1J9aQg,,&q={searchTerms}, Good: (www.google.com), Bad: (http://feed.safefinder.com/?p=mKO_AwFzXIpYRak5VLd2-qQdkN5729vVFWx88tUR7Rb9iwQjQ051PLJQ5SfLFNuEVgowPZfCB5n9hYDHi8w_2Iw8Wd3JdoxNTSHM6pRA8htqLZSo90R4AkCBNb2-1g91pU-vU18URFNPSMTZiOs3xWVhe-j0srVc8xv3DnjlM0wVA2uXxfuVAhS94eaqEOp3Gfyk23NM1J9aQg,,&q={searchTerms}),,[d359b85e9fdd2610369d041492739c64] PUP.Optional.SafeFinder.A, HKU\S-1-5-21-2557714802-1265494517-3784492151-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, http://feed.safefinder.com/?p=mKO_AwFzXIpYRak5VLd2-qQdkN5729vVFWx88tUR7Rb9iwQjQ051PLJQ5SfLFNuEVgowPZfCB5n9hYDHi8w_2Iw8Wd3JdoxNTSHM6pRA8htqLZSo90R4AkCBNb2-1g91pU-vU18URFNPSMTZiOs3xWVhe-j0srVc8xv3DnjlM0wVA2uXxfuVAhS94eaqEOp3Gfyk23NM1J9aQg,,&q={searchTerms}, Good: (www.google.com), Bad: (http://feed.safefinder.com/?p=mKO_AwFzXIpYRak5VLd2-qQdkN5729vVFWx88tUR7Rb9iwQjQ051PLJQ5SfLFNuEVgowPZfCB5n9hYDHi8w_2Iw8Wd3JdoxNTSHM6pRA8htqLZSo90R4AkCBNb2-1g91pU-vU18URFNPSMTZiOs3xWVhe-j0srVc8xv3DnjlM0wVA2uXxfuVAhS94eaqEOp3Gfyk23NM1J9aQg,,&q={searchTerms}),,[b07c65b1e89462d4dcf935e346bf3bc5] Folders: 11 PUP.Optional.Wajam.A, C:\Users\test\AppData\Local\Wajam, , [b478df374a3270c68b47c02faf53ae52], PUP.Optional.Wajam.A, C:\Users\test\AppData\Local\Wajam\Chrome, , [b478df374a3270c68b47c02faf53ae52], PUP.Optional.SmartSaver.A, C:\Program Files (x86)\SmartSaver+ 12, , [e745a96dc2ba6fc76aa5af4142c0ea16], PUP.Optional.HQPro.A, C:\Program Files (x86)\HQPro-1, , [c06cec2a5d1f7cbaa407fb05f310da26], PUP.Optional.SystemSpeedup, C:\Users\test\AppData\Roaming\systweak\ssd, , [6fbdd54145370d2938c1778da45f50b0], PUP.Optional.GlobalUpdate.A, C:\Users\test\AppData\Local\Temp\comh.213227, , [71bb9b7bd3a9f442dc6ab94d6e952ed2], PUP.Optional.GlobalUpdate.A, C:\Users\test\AppData\Local\Temp\comh.259678, , [a68684921e5eb3830c3a82840cf76d93], PUP.Optional.GlobalUpdate.A, C:\Users\test\AppData\Local\Temp\comh.349067, , [959756c05a2264d23016b74f689b22de], PUP.Optional.GenesisOffers, C:\Users\test\AppData\Local\Genesis_06160733, , [a587f422bfbdf83ea6b3719d14ef9967], PUP.Optional.FileTypeAssistant, C:\Program Files (x86)\File Type Assistant, , [9e8e6caaaad2023413763fd19172ff01], PUP.Optional.FileTypeAssistant, C:\Program Files (x86)\File Type Assistant\temp, , [9e8e6caaaad2023413763fd19172ff01], Files: 20 PUP.Optional.Installcore, C:\Users\test\Downloads\AdobeReaderSetup-20582144.exe, , [fb31a0762b51af87873cc84447be827e], PUP.Optional.Bitberry, C:\Users\test\Downloads\FreeFileViewerDMSetup.exe, , [05272beb5428f442a592e6c63dc41de3], PUP.Optional.SafeFinder.A, C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\tdkogwap.default\searchplugins\SafeFinder Search.xml, , [022aaa6cbdbf95a1e5700f148d76fa06], PUP.Optional.SweetPacks.A, C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\tdkogwap.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}.xpi, , [55d756c086f66cca29ae899f50b3a15f], PUP.Optional.SweetIM.A, C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\tdkogwap.default\searchplugins\sweetim.xml, , [76b658bebfbd65d1cf31ca7152b1d62a], PUP.Optional.Bubbledock.A, C:\Users\test\AppData\Roaming\Bubble Dock.boostrap.log, , [c369a76f90ec171fdc5356fb6c976898], PUP.Optional.Wajam.A, C:\Users\test\AppData\Local\Wajam\Chrome\wajam.crx, , [b478df374a3270c68b47c02faf53ae52], PUP.Optional.SystemSpeedup, C:\Users\test\AppData\Roaming\systweak\ssd\SSDPTstub.exe, , [6fbdd54145370d2938c1778da45f50b0], PUP.Optional.FileTypeAssistant, C:\Program Files (x86)\File Type Assistant\ftacfg.exe, , [9e8e6caaaad2023413763fd19172ff01], PUP.Optional.FileTypeAssistant, C:\Program Files (x86)\File Type Assistant\itdownload.dll, , [9e8e6caaaad2023413763fd19172ff01], PUP.Optional.FileTypeAssistant, C:\Program Files (x86)\File Type Assistant\TSASetup.exe, , [9e8e6caaaad2023413763fd19172ff01], PUP.Optional.FileTypeAssistant, C:\Program Files (x86)\File Type Assistant\tsassist.id, , [9e8e6caaaad2023413763fd19172ff01], PUP.Optional.FileTypeAssistant, C:\Program Files (x86)\File Type Assistant\tsassist.pci, , [9e8e6caaaad2023413763fd19172ff01], PUP.Optional.FileTypeAssistant, C:\Program Files (x86)\File Type Assistant\unins000.dat, , [9e8e6caaaad2023413763fd19172ff01], PUP.Optional.FileTypeAssistant, C:\Program Files (x86)\File Type Assistant\unins000.exe, , [9e8e6caaaad2023413763fd19172ff01], PUP.Optional.FileTypeAssistant, C:\Program Files (x86)\File Type Assistant\unins000.msg, , [9e8e6caaaad2023413763fd19172ff01], PUP.Optional.FileTypeAssistant, C:\Program Files (x86)\File Type Assistant\unins000.ref, , [9e8e6caaaad2023413763fd19172ff01], PUP.Optional.FileTypeAssistant, C:\Program Files (x86)\File Type Assistant\temp\~tmp.exe, , [9e8e6caaaad2023413763fd19172ff01], PUP.Optional.SafeFinder.A, C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\tdkogwap.default\prefs.js, Good: (), Bad: (user_pref("keyword.URL", "http://feed.safefinder.com/?p=mKO_AwFzXIpYRak5VLd2-qQdkN5729vVFWx88tUR7Rb9iwQjQ051PLJQ5SfLFNuEVgowPZfCB5n9hYDHi8w_2Iw8Wd3JdoxNTSHM6pRA8htqLZSo90R4AkCBNb2-1g91pU-vU18URFNPSMTZiOs3xWVhe-j0srVc8xv3DnjlM0wVA2uXxfuVAhS94eaqEOp3Gfyk23NM1J9aQg,,&q=");), ,[b9733cdaa4d839fd70d9eb6c7c896799] PUP.Optional.CrossRider.A, C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\tdkogwap.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossrider.bic", "146a399fa00e4a76855127cc405e871e");), ,[0a22b165a0dc86b029612533f015926e] Physical Sectors: 0 (No malicious items detected) (end)