Script ZHPFix
G2 - GCE: Preference [User Data\Default] [dgjkhjdcljddbedokogakmmdjgnbeanf] Speed Analysis 2 v.1.0.0.5 (D�sactiv�) =>PUP.SpeedAnalysis
G2 - GCE: Preference [User Data\Default] [gflandjopdloblmlcoiidmncpinmmacn] Zula Games v.1.0.0.6 (D�sactiv�) =>Adware.InstallBrain
G2 - GCE: Preference [User Data\Default] [licjnkifamhpbaefhdpacpmihicfbomb] PricePeep v.2.2.0.3 (Activ�) =>Adware.PricePeep
M2 - MFEP: prefs.js [Nicole - kcdf26ls.default\speedanalysis02@SpeedAnalysis.com] [] Speed Analysis 2 v1.0.0.3 (..) =>PUP.SpeedAnalysis
M2 - MFEP: prefs.js [Nicole - kcdf26ls.default\zulagames@ZulaGames.com] [] Zula Games v1.0.0.5 (..) =>Adware.InstallBrain
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qvo6.com =>Hijacker.Qvo6
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://search.qvo6.com =>Hijacker.Qvo6
O2 - BHO: Speed Analysis 2 [64Bits] - {18DBB6CE-3148-4FEC-B481-103CB3290427} . (.SpeedAnalysis.com - ScriptHost.) -- C:\Program Files (x86)\Speed Analysis 2\ScriptHost.dll =>PUP.SpeedAnalysis
O2 - BHO: Zula Games [64Bits] - {A9337080-7CBF-4E3E-80C1-3867BEDD88E0} . (.ZulaGames.com - ScriptHost.) -- C:\Program Files (x86)\Zula Games\ScriptHost.dll =>Adware.InstallBrain
O4 - GS\Desktop [Public]: PC Performer.lnk . (.PerformerSoft LLC - PC Performer.) -- C:\Program Files (x86)\PC Performer\PCPerformer.exe =>Rogue.PCPerformer
O4 - GS\Desktop [Nicole]: SpeedAnalysis.lnk - Cl� orpheline =>PUP.SpeedAnalysis
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\PC Performer_DEFAULT.job [278] =>Rogue.PCPerformer
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\PC Performer_UPDATES.job [286] =>Rogue.PCPerformer
[MD5.F64487396AB10165DC80BC15CF854D31] [APT] [EPUpdater] (...) -- C:\Users\Nicole\AppData\Roaming\BabSolution\Shared\BabMaint.exe [10320] =>Hijacker.BabSolution
[MD5.26135C4C84D63AA01B4BB20D8D2208EC] [APT] [PC Performer] (.PerformerSoft LLC.) -- C:\Program Files (x86)\PC Performer\PCPerformer.exe [7343616] =>Rogue.PCPerformer
[MD5.26135C4C84D63AA01B4BB20D8D2208EC] [APT] [PC Performer_DEFAULT] (.PerformerSoft LLC.) -- C:\Program Files (x86)\PC Performer\PCPerformer.exe [7343616] =>Rogue.PCPerformer
[MD5.26135C4C84D63AA01B4BB20D8D2208EC] [APT] [PC Performer_UPDATES] (.PerformerSoft LLC.) -- C:\Program Files (x86)\PC Performer\PCPerformer.exe [7343616] =>Rogue.PCPerformer
O42 - Logiciel: PC Performer - (.PerformerSoft LLC.) [HKLM][64Bits] -- PC Performer_is1 =>Rogue.PCPerformer
O42 - Logiciel: Speed Analysis 2 - (.SpeedAnalysis.com.) [HKLM][64Bits] -- Speed Analysis 2 =>PUP.SpeedAnalysis
O42 - Logiciel: VisualBee for Microsoft PowerPoint - (.VisualBee.com.) [HKCU][64Bits] -- VisualBee for Microsoft PowerPoint =>Adware.VisualBeeToolbar
O42 - Logiciel: Zula Games - (.ZulaGames.com.) [HKLM][64Bits] -- Zula Games =>Adware.InstallBrain
[HKCU\Software\AppDataLow\Software\VisualBee_V.1] =>Adware.VisualBeeToolbar
[HKCU\Software\BabSolution] =>Hijacker.BabSolution
[HKCU\Software\USyndication] =>Trojan.USyndication
[HKCU\Software\usyndication.com] =>Trojan.USyndication
[HKLM\Software\Wow6432Node\DProtect] =>Trojan.Staser
O43 - CFD: 07/10/2013 - 07:32:03 - [11,878] ----D C:\Program Files (x86)\PC Performer =>Rogue.PCPerformer
O43 - CFD: 07/10/2013 - 07:31:26 - [2,482] ----D C:\Program Files (x86)\Speed Analysis 2 =>PUP.SpeedAnalysis
O43 - CFD: 07/10/2013 - 07:31:01 - [2,355] ----D C:\Program Files (x86)\Zula Games =>Adware.InstallBrain
O43 - CFD: 07/10/2013 - 07:31:00 - [0] ----D C:\ProgramData\Babylon =>Toolbar.Babylon
O43 - CFD: 07/10/2013 - 07:31:14 - [0,003] ----D C:\ProgramData\IBUpdaterService =>Adware.InstallBrain
O43 - CFD: 07/10/2013 - 07:31:30 - [1,265] ----D C:\Users\Nicole\AppData\Roaming\BabSolution =>Hijacker.BabSolution
O43 - CFD: 07/10/2013 - 07:31:00 - [0,003] ----D C:\Users\Nicole\AppData\Roaming\Babylon =>Toolbar.Babylon
O43 - CFD: 07/10/2013 - 07:31:24 - [0,081] ----D C:\Users\Nicole\AppData\Roaming\SpeedAnalysis2 =>PUP.SpeedAnalysis
O43 - CFD: 06/10/2013 - 08:35:42 - [66,863] ----D C:\Users\Nicole\AppData\Local\VisualBeeClient =>Adware.VisualBeeToolbar
O44 - LFC:[MD5.5F9F3B0534551815C07F73C03FF84C5F] - 07/10/2013 - 06:32:04 ---A- . (.PerformerSoft LLC - PC Performer.) -- C:\Windows\SysNative\roboot64.exe [19456] =>Rogue.PCPerformer
O44 - LFC:[MD5.5F9F3B0534551815C07F73C03FF84C5F] - 07/10/2013 - 06:32:04 ---A- . (.PerformerSoft LLC - PC Performer.) -- C:\Windows\System32\roboot64.exe [19456] =>Rogue.PCPerformer
O61 - LFC: 05/10/2013 - 08:21:20 ---A- . (...) -- C:\Users\Nicole\AppData\Roaming\SearchProtect\ffprotect\SProtectorRepository\EN [717] =>PUP.Mocaflix
O61 - LFC: 07/10/2013 - 06:30:14 ---A- . (...) -- C:\Users\Nicole\AppData\Roaming\speedanalysis.ico [30894] =>PUP.SpeedAnalysis
O61 - LFC: 07/10/2013 - 06:31:54 ---A- . (...) -- C:\Users\Nicole\AppData\Roaming\Babylon\log_file.txt [2704] =>Toolbar.Babylon
O61 - LFC: 07/10/2013 - 06:32:34 ---A- . (...) -- C:\Users\Nicole\AppData\Roaming\PerformerSoft\PC Performer\ExcludeList.rcp [6] =>Rogue.PCPerformer
O61 - LFC: 07/10/2013 - 06:32:34 ---A- . (...) -- C:\Users\Nicole\AppData\Roaming\PerformerSoft\PC Performer\French_rcp.dat [49798] =>Rogue.PCPerformer
O61 - LFC: 07/10/2013 - 06:32:34 ---A- . (...) -- C:\Users\Nicole\AppData\Roaming\PerformerSoft\PC Performer\TempHLList.rcp [6] =>Rogue.PCPerformer
O61 - LFC: 07/10/2013 - 06:32:34 ---A- . (...) -- C:\Users\Nicole\AppData\Roaming\PerformerSoft\PC Performer\results.rcp [60] =>Rogue.PCPerformer
O61 - LFC: 07/10/2013 - 09:54:28 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_dgjkhjdcljddbedokogakmmdjgnbeanf_0.localstorage [3072]
O61 - LFC: 07/10/2013 - 09:54:28 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_dgjkhjdcljddbedokogakmmdjgnbeanf_0.localstorage-journal [3608]
O61 - LFC: 07/10/2013 - 09:57:08 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\gflandjopdloblmlcoiidmncpinmmacn\1.0.0.6_0\background.html [379]
O61 - LFC: 07/10/2013 - 09:57:08 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\gflandjopdloblmlcoiidmncpinmmacn\1.0.0.6_0\bg.js [469]
O61 - LFC: 07/10/2013 - 09:57:08 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\gflandjopdloblmlcoiidmncpinmmacn\1.0.0.6_0\ci.bg.pack.js [8738]
O61 - LFC: 07/10/2013 - 09:57:08 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\gflandjopdloblmlcoiidmncpinmmacn\1.0.0.6_0\ci.browser.helper.js [342]
O61 - LFC: 07/10/2013 - 09:57:08 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\gflandjopdloblmlcoiidmncpinmmacn\1.0.0.6_0\ci.content.pack.js [2425]
O61 - LFC: 07/10/2013 - 09:57:08 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\gflandjopdloblmlcoiidmncpinmmacn\1.0.0.6_0\content.js [66]
O61 - LFC: 07/10/2013 - 09:57:08 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\gflandjopdloblmlcoiidmncpinmmacn\1.0.0.6_0\icon128.ico [25214]
O61 - LFC: 07/10/2013 - 09:57:08 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\gflandjopdloblmlcoiidmncpinmmacn\1.0.0.6_0\icon128.png [3518]
O61 - LFC: 07/10/2013 - 09:57:08 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\gflandjopdloblmlcoiidmncpinmmacn\1.0.0.6_0\icon16.ico [2862]
O61 - LFC: 07/10/2013 - 09:57:08 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\gflandjopdloblmlcoiidmncpinmmacn\1.0.0.6_0\icon16.png [436]
O61 - LFC: 07/10/2013 - 09:57:08 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\gflandjopdloblmlcoiidmncpinmmacn\1.0.0.6_0\icon18.ico [2862]
O61 - LFC: 07/10/2013 - 09:57:08 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\gflandjopdloblmlcoiidmncpinmmacn\1.0.0.6_0\icon18.png [1444]
O61 - LFC: 07/10/2013 - 09:57:08 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\gflandjopdloblmlcoiidmncpinmmacn\1.0.0.6_0\icon24.ico [2862]
O61 - LFC: 07/10/2013 - 09:57:08 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\gflandjopdloblmlcoiidmncpinmmacn\1.0.0.6_0\icon24.png [664]
O61 - LFC: 07/10/2013 - 09:57:08 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\gflandjopdloblmlcoiidmncpinmmacn\1.0.0.6_0\icon32.ico [10134]
O61 - LFC: 07/10/2013 - 09:57:08 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\gflandjopdloblmlcoiidmncpinmmacn\1.0.0.6_0\icon32.png [866]
O61 - LFC: 07/10/2013 - 09:57:08 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\gflandjopdloblmlcoiidmncpinmmacn\1.0.0.6_0\icon48.ico [25214]
O61 - LFC: 07/10/2013 - 09:57:08 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\gflandjopdloblmlcoiidmncpinmmacn\1.0.0.6_0\icon48.png [1285]
O61 - LFC: 07/10/2013 - 09:57:08 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\gflandjopdloblmlcoiidmncpinmmacn\1.0.0.6_0\jquery-1.9.1.min.js [92629]
O61 - LFC: 07/10/2013 - 09:57:08 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\gflandjopdloblmlcoiidmncpinmmacn\1.0.0.6_0\jquery.uuid.js [454]
O61 - LFC: 07/10/2013 - 09:57:08 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\gflandjopdloblmlcoiidmncpinmmacn\1.0.0.6_0\manifest.json [1277]
O61 - LFC: 07/10/2013 - 09:57:08 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\gflandjopdloblmlcoiidmncpinmmacn\1.0.0.6_0\mz\background.js [2436]
O61 - LFC: 07/10/2013 - 09:57:08 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\gflandjopdloblmlcoiidmncpinmmacn\1.0.0.6_0\mz\content.js [1843]
O61 - LFC: 07/10/2013 - 09:57:08 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\gflandjopdloblmlcoiidmncpinmmacn\1.0.0.6_0\popup.js [66]
O61 - LFC: 07/10/2013 - 09:57:08 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\gflandjopdloblmlcoiidmncpinmmacn\1.0.0.6_0\settings.json [178]
O61 - LFC: 07/10/2013 - 09:57:09 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgjkhjdcljddbedokogakmmdjgnbeanf\1.0.0.5_0\background.html [379]
O61 - LFC: 07/10/2013 - 09:57:09 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgjkhjdcljddbedokogakmmdjgnbeanf\1.0.0.5_0\bg.js [469]
O61 - LFC: 07/10/2013 - 09:57:09 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgjkhjdcljddbedokogakmmdjgnbeanf\1.0.0.5_0\ci.bg.pack.js [8738]
O61 - LFC: 07/10/2013 - 09:57:09 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgjkhjdcljddbedokogakmmdjgnbeanf\1.0.0.5_0\ci.browser.helper.js [342]
O61 - LFC: 07/10/2013 - 09:57:09 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgjkhjdcljddbedokogakmmdjgnbeanf\1.0.0.5_0\ci.content.pack.js [2425]
O61 - LFC: 07/10/2013 - 09:57:09 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgjkhjdcljddbedokogakmmdjgnbeanf\1.0.0.5_0\content.js [66]
O61 - LFC: 07/10/2013 - 09:57:09 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgjkhjdcljddbedokogakmmdjgnbeanf\1.0.0.5_0\icon128.ico [25214]
O61 - LFC: 07/10/2013 - 09:57:09 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgjkhjdcljddbedokogakmmdjgnbeanf\1.0.0.5_0\icon128.png [19407]
O61 - LFC: 07/10/2013 - 09:57:09 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgjkhjdcljddbedokogakmmdjgnbeanf\1.0.0.5_0\icon16.ico [2862]
O61 - LFC: 07/10/2013 - 09:57:09 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgjkhjdcljddbedokogakmmdjgnbeanf\1.0.0.5_0\icon16.png [826]
O61 - LFC: 07/10/2013 - 09:57:09 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgjkhjdcljddbedokogakmmdjgnbeanf\1.0.0.5_0\icon18.ico [2862]
O61 - LFC: 07/10/2013 - 09:57:09 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgjkhjdcljddbedokogakmmdjgnbeanf\1.0.0.5_0\icon18.png [1023]
O61 - LFC: 07/10/2013 - 09:57:09 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgjkhjdcljddbedokogakmmdjgnbeanf\1.0.0.5_0\icon24.ico [2862]
O61 - LFC: 07/10/2013 - 09:57:09 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgjkhjdcljddbedokogakmmdjgnbeanf\1.0.0.5_0\icon24.png [1590]
O61 - LFC: 07/10/2013 - 09:57:09 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgjkhjdcljddbedokogakmmdjgnbeanf\1.0.0.5_0\icon32.ico [10134]
O61 - LFC: 07/10/2013 - 09:57:09 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgjkhjdcljddbedokogakmmdjgnbeanf\1.0.0.5_0\icon32.png [2350]
O61 - LFC: 07/10/2013 - 09:57:09 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgjkhjdcljddbedokogakmmdjgnbeanf\1.0.0.5_0\icon48.ico [25214]
O61 - LFC: 07/10/2013 - 09:57:09 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgjkhjdcljddbedokogakmmdjgnbeanf\1.0.0.5_0\icon48.png [4463]
O61 - LFC: 07/10/2013 - 09:57:09 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgjkhjdcljddbedokogakmmdjgnbeanf\1.0.0.5_0\icon64.ico [25214]
O61 - LFC: 07/10/2013 - 09:57:09 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgjkhjdcljddbedokogakmmdjgnbeanf\1.0.0.5_0\icon64.png [7616]
O61 - LFC: 07/10/2013 - 09:57:09 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgjkhjdcljddbedokogakmmdjgnbeanf\1.0.0.5_0\jquery-1.9.1.min.js [92629]
O61 - LFC: 07/10/2013 - 09:57:09 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgjkhjdcljddbedokogakmmdjgnbeanf\1.0.0.5_0\jquery.uuid.js [454]
O61 - LFC: 07/10/2013 - 09:57:09 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgjkhjdcljddbedokogakmmdjgnbeanf\1.0.0.5_0\manifest.json [1362]
O61 - LFC: 07/10/2013 - 09:57:09 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgjkhjdcljddbedokogakmmdjgnbeanf\1.0.0.5_0\mz\background.js [2436]
O61 - LFC: 07/10/2013 - 09:57:09 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgjkhjdcljddbedokogakmmdjgnbeanf\1.0.0.5_0\mz\content.js [1843]
O61 - LFC: 07/10/2013 - 09:57:09 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgjkhjdcljddbedokogakmmdjgnbeanf\1.0.0.5_0\popup.js [66]
O61 - LFC: 07/10/2013 - 09:57:09 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgjkhjdcljddbedokogakmmdjgnbeanf\1.0.0.5_0\settings.json [200]
[MD5.89505DACB8B6A97A448F3409DAB18BCD] [SPRF][20/05/2013] (.Babylon Ltd. - Uninstaller Application.) -- C:\Users\Nicole\AppData\Local\Temp\uninst1.exe [395248] =>Toolbar.Babylon
O87 - FAEL: "{A5A13463-8DAF-4AFE-84C5-43116635B789}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe (.not file.) =>PUP.SweetIM
O87 - FAEL: "{861C205E-8F13-478B-9344-EC9F8E61FA0E}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe (.not file.) =>PUP.SweetIM
O87 - FAEL: "{6EC5EBA6-673A-4199-A578-B263DB7188BA}" |In - Private - P6 - TRUE | .(...) -- C:\Users\Nicole\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CD6OFFDT\SweetIMSetup.exe (.not file.) =>PUP.SweetIM
O87 - FAEL: "{6A0C9399-4ECA-40C7-98D1-AB6B754A11C6}" |In - Private - P17 - TRUE | .(...) -- C:\Users\Nicole\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CD6OFFDT\SweetIMSetup.exe (.not file.) =>PUP.SweetIM
O87 - FAEL: "{9C747775-9257-4FAF-A121-FF7D627896FF}" |In - Public - P6 - TRUE | .(...) -- C:\Users\Nicole\AppData\Local\DProtect\DProtectSvc.exe (.not file.) =>Trojan.Staser
O87 - FAEL: "{A6571364-B3DA-4653-B317-766F8EDB6A3B}" |In - Public - P6 - TRUE | .(...) -- C:\ProgramData\eSafe\eGdpSvc.exe (.not file.) =>PUP.eSafeSecurity
O90 - PUC: "394E2E69484C3E34B9596DE27E4DD0A3" . (.Internet Explorer Toolbar 4.7 by SweetPacks.) -- C:\Windows\Installer\{96E2E493-C484-43E3-9B95-D62EE7D40D3A}\ARPPRODUCTICON.exe =>PUP.SweetIM
O90 - PUC: "EB8E7C929DBF19D4CBF44B077C815D45" . (.Iminent.) -- C:\Windows\Installer\{29C7E8BE-FBD9-4D91-BC4F-B470C718D554}\imbooster.ico =>Adware.IMBooster
[MD5.2A71ED886C0F766CB1A01C1146FA78FC] [WIS][12/09/2012] (.Iminent - Iminent.) -- C:\Windows\Installer\a0ec8f6.msi [8949760] =>Adware.IMBooster
[MD5.A672E4C77ED7CCC851575B10B46CC8AD] [WIS][12/09/2012] (.IMinent - IMinent Toolbar.) -- C:\Windows\Installer\a0ec8fc.msi [1019392] =>Adware.IMBooster
[HKLM\Software\Google\Chrome\Extensions\dgjkhjdcljddbedokogakmmdjgnbeanf] =>PUP.SpeedAnalysis^
[HKLM\Software\Google\Chrome\Extensions\gflandjopdloblmlcoiidmncpinmmacn] =>Adware.InstallBrain^
[HKLM\Software\Google\Chrome\Extensions\licjnkifamhpbaefhdpacpmihicfbomb] =>Adware.PricePeep^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DBB6CE-3148-4FEC-B481-103CB3290427}] =>PUP.SpeedAnalysis^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A9337080-7CBF-4E3E-80C1-3867BEDD88E0}] =>Adware.InstallBrain^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\PC Performer_is1] =>Rogue.PCPerformer^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Speed Analysis 2] =>PUP.SpeedAnalysis^
[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\VisualBee for Microsoft PowerPoint] =>Adware.VisualBeeToolbar^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Zula Games] =>Adware.InstallBrain^
[HKLM\Software\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}] =>Toolbar.Babylon
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ecdf796-c2dc-4d79-a620-cce0c0a66cc9}] =>Toolbar.Babylon
[HKLM\Software\Classes\Interface\{1B97A696-5576-43AC-A73B-E1D2C78F21E8}] =>Adware.PricePeep
[HKLM\Software\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}] =>Toolbar.Babylon
[HKLM\Software\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}] =>Toolbar.Babylon
[HKLM\Software\Classes\Interface\{75BF416E-4326-45B5-8A2D-AE32D05B930B}] =>Adware.PricePeep
[HKLM\Software\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}] =>Toolbar.Babylon
[HKLM\Software\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}] =>Toolbar.Babylon
[HKLM\Software\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}] =>Toolbar.Babylon
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D15DAF33C220F91468A1D7D57C31ACD7] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D6D0EB9FDBD90C04D92A7E729058F10D] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A189D17A469616C4688D23E192996267] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7FFA128C2B0FF414D805FC5627883401] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D3BA76A44C779424889063D5098ED2D6] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\397C771A7BCAC904697C3EC629ED33ED] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\351716A953E21214898904032EAE2E81] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E6768B6932D112438F047C54D180635] =>PUP.SweetIM
[HKLM\Software\Classes\AppID\escort.dll] =>Toolbar.Babylon
[HKLM\Software\Classes\AppID\escortapp.dll] =>Toolbar.Babylon
[HKLM\Software\Classes\AppID\escorteng.dll] =>Toolbar.Babylon
[HKLM\Software\Classes\AppID\esrv.EXE] =>Toolbar.Babylon
[HKLM\Software\Classes\escort.escortIEPane] =>PUP.Funmoods
[HKLM\Software\Classes\escort.escortIEPane.1] =>PUP.Funmoods
[HKLM\Software\Classes\Interface\{43969E3F-3E7C-4911-A8F1-79C6CA6AC731}] =>Adware.Adkubru
[HKLM\Software\Wow6432Node\Classes\Interface\{43969E3F-3E7C-4911-A8F1-79C6CA6AC731}] =>Adware.Adkubru
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\482AA67AD25E6E74E9F48BD5FBE8533C] =>Adware.IMBooster
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\82E17E6ABC34E3244B517B0CD07709E2] =>Adware.IMBooster
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\EB6AF8AEEB922FA4392548F13812E50B] =>PUP.SweetIM
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\PC Performer_is1] =>Rogue.PCPerformer
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{29633E53-BF13-41B5-9E10-19D7843BD9C3}] =>Hijacker.Proxy
[HKLM\Software\Classes\Prod.cap] =>Toolbar.Babylon
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\547B38670606DF14AA57B0BB83F3AE4D] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9EE58E3C298524145B73CBBED3CAC4D3] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\B2FD9C0A5B9838449838816A28001F4B] =>PUP.SweetIM
[HKLM\Software\Classes\Installer\Features\394E2E69484C3E34B9596DE27E4DD0A3] =>PUP.SweetIM
[HKLM\Software\Classes\Installer\Products\394E2E69484C3E34B9596DE27E4DD0A3] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\394E2E69484C3E34B9596DE27E4DD0A3] =>PUP.SweetIM
[HKLM\Software\Wow6432Node\Classes\Installer\Features\394E2E69484C3E34B9596DE27E4DD0A3] =>PUP.SweetIM
[HKLM\Software\Wow6432Node\Classes\Installer\Products\394E2E69484C3E34B9596DE27E4DD0A3] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375] =>PUP.Tarma
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5] =>PUP.Tarma
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{82E1477C-B154-48D3-9891-33D83C26BCD3}] =>PUP.Funmoods
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{82E1477C-B154-48D3-9891-33D83C26BCD3}] =>PUP.Funmoods
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\02F47BF73B948514FAACADD8CBBDF37D] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\07D5290CDBDAE4242926B8E6CA650501] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\080D9F5E1E95FEE4794CE438E635239E] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E3D8A5B48622A445A7DF73FEFF32C3F] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\789034A89BAC50E4782F0A7BDBF75632] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4318DF19719275242801CBE292063A4C] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\45FC115D1FEAEF849A4E1610D6EC8BF0] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\46A5861A389ADB844AF89E31BC9DF0A1] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49B0E1A6FF50BBE4289E4E23DE6EA0C7] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4CCCAC049F34D0540AAC13011398BEDB] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5C4389D0BFB302C479DE4178BD5D9EBA] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5D2B09BDEF4FE54418E6F3373CDBC7AC] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\61B65D3397A1FBF4CB1571B5E4F6B5B0] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\68E8A05C60DD9254591DBD16C94EDDBF] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\697E782CF574CC34CBB9566440BA12BC] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AE27A8613CF7EA4782F2886F67295E5] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\75D5168E5E176C24981B4E5DBD991078] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7CE172051F585E04187BCB97570BFA74] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86A901BA5265452499DCBF719C378EE3] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8724E58E6C7D00C48A0D4F3345EB2C26] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\88ABD1CD5C40EC84789A7F6EF86DAC5E] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\980289C22F80A7C4BB9323DC61255E4E] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9A4B7EF3789F871419D9302583B20C15] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A6C53B0F76C44004A8F36716213017DB] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AB676B0E1B9EFA049B9F7DDDA9645734] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B31BBB0B825EDEF45AB0FE7099C68C81] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B471D8D7319336B4CA89374ED0D7B806] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B59F2D8189784CC46A4597F2842480B0] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BC30043663AA2CA4DA1DAA9CA5FDCC75] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BD746FB95FB8E5B45BF66BE54D5FD91F] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CCF399FCD6D2D3F46BF02A1378654FC9] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D149C1355C98DE24E82CEFBD996FE06A] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB59FDB786388EA4D897F3EE715683AC] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB8DAD19CFBCC2049A4477183787E8C5] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E1C820A74ED67374BA048B52CB3C3804] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EC65F200D112357449C8B1BC3CFA03D0] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F327D0C73C0973644A21E8CC852267A0] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FA96423FE2B98E248A3B23548D1E22D9] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FDC83385E6C239F4C876A77A37DF581D] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\34EDDB1BFB3A2D448845F3EFD0F15A43] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\427EA997C413D1D47907CBFC7B2DB432] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F754C503375A13344B22388E18DFE87E] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1E264E0A5959A1C46BA9175A878B12EA] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E4748F9A4181FCE46A23C13B517B9420] =>PUP.SweetIM
[HKLM\Software\Classes\delta.deltaappCore] =>PUP.Funmoods
[HKLM\Software\Classes\delta.deltaappCore.1] =>PUP.Funmoods
[HKLM\Software\Classes\delta.deltadskBnd] =>PUP.Funmoods
[HKLM\Software\Classes\delta.deltadskBnd.1] =>PUP.Funmoods
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F1057DD419AED0B468AD8888429E139A] =>Adware.IMBooster
[HKCU\Software\USyndication] =>Trojan.USyndication
[HKCU\Software\usyndication.com] =>Trojan.USyndication
[HKLM\Software\Wow6432Node\Google\Chrome\Extensions\gflandjopdloblmlcoiidmncpinmmacn] =>Adware.InstallBrain
[HKLM\Software\Classes\AppID\escorTlbr.DLL] =>PUP.Funmoods
[HKLM\Software\Wow6432Node\Classes\escort.escortIEPane] =>PUP.Funmoods
[HKLM\Software\Wow6432Node\Classes\escort.escortIEPane.1] =>PUP.Funmoods
[HKLM\Software\Wow6432Node\Classes\AppID\escort.DLL] =>PUP.Funmoods
[HKLM\Software\Wow6432Node\Classes\AppID\escortApp.DLL] =>PUP.Funmoods
[HKLM\Software\Wow6432Node\Classes\AppID\escortEng.DLL] =>PUP.Funmoods
[HKLM\Software\Wow6432Node\Classes\AppID\escorTlbr.DLL] =>PUP.Funmoods
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC] =>Adware.Boxore^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08E33F7B61DEFF24BB9673ED7D467636] =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094] =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\12BF94BD06C95F343A77631402B9556A] =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2124D8A8CF720FD44866190AF560228E] =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\27A325ACED8CA4743A30127638591ADB] =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536] =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\350D17402BD84234EAF7D32F08172D7C] =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3EE8C5F419057E1478A654868CEE60B5] =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4735D908D66E1BA46B6C2D7185A12B2B] =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\69D6A6B2ED56AF24EA6335EAD6E91CA4] =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\76D8378E2DDAED3428720A631F6E3BF0] =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EDC790504E1834DBC20C9A04328FD2] =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\97C3D0F82E712E241A2F969F45E3351C] =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9A001B259DB7D694E818BE29B973992C] =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9E7F556BF224D804D96A96F0F6344789] =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BAE2EC163C6A68A48921573E0E7E199D] =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BF4F885EDEE45644EB1E0C99E0162399] =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C06C6662FA5B04646829E4A460857770] =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE21F3FD57B244142880EF15A165A156] =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CEEB3E14ABE8270419B0FD762E18F7C6] =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ED1B5E9A3BDB51349BF96E842C062D98] =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FECBC2BC14DA6CD459BD59A041709836] =>PUP.SweetIM^
C:\Users\Nicole\AppData\Roaming\Mozilla\Firefox\Profiles\kcdf26ls.default\speedanalysis02@SpeedAnalysis.com =>PUP.SpeedAnalysis^
C:\Users\Nicole\AppData\Roaming\Mozilla\Firefox\Profiles\kcdf26ls.default\zulagames@ZulaGames.com =>Adware.InstallBrain^
C:\Program Files (x86)\PC Performer =>Rogue.PCPerformer^
C:\Program Files (x86)\Speed Analysis 2 =>PUP.SpeedAnalysis^
C:\Program Files (x86)\Zula Games =>Adware.InstallBrain^
C:\ProgramData\Babylon =>Toolbar.Babylon^
C:\ProgramData\IBUpdaterService =>Adware.InstallBrain^
C:\Users\Nicole\AppData\Roaming\BabSolution =>Hijacker.BabSolution^
C:\Users\Nicole\AppData\Roaming\Babylon =>Toolbar.Babylon^
C:\Users\Nicole\AppData\Roaming\SpeedAnalysis2 =>PUP.SpeedAnalysis^
C:\Users\Nicole\AppData\Local\VisualBeeClient =>Adware.VisualBeeToolbar^
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Performer =>Rogue.PCPerformer
C:\Users\Nicole\AppData\LocalLow\PriceGong =>Adware.PriceGong
C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgjkhjdcljddbedokogakmmdjgnbeanf =>PUP.SpeedAnalysis
C:\Users\Nicole\AppData\Roaming\Mozilla\Firefox\Profiles\kcdf26ls.default\Extensions\ffxtlbr@delta.com =>PUP.Funmoods
C:\Users\Nicole\AppData\Roaming\Mozilla\Firefox\Profiles\kcdf26ls.default\Extensions\speedanalysis02@SpeedAnalysis.com =>PUP.SpeedAnalysis
C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\gflandjopdloblmlcoiidmncpinmmacn =>Adware.InstallBrain^
C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\licjnkifamhpbaefhdpacpmihicfbomb =>Adware.PricePeep^
C:\Program Files (x86)\Speed Analysis 2\ScriptHost.dll =>PUP.SpeedAnalysis^
C:\Program Files (x86)\Zula Games\ScriptHost.dll =>Adware.InstallBrain^
C:\Program Files (x86)\PC Performer\PCPerformer.exe =>Rogue.PCPerformer^
C:\Windows\Tasks\PC Performer_DEFAULT.job =>Rogue.PCPerformer^
C:\Windows\Tasks\PC Performer_UPDATES.job =>Rogue.PCPerformer^
C:\Users\Nicole\AppData\Roaming\BabSolution\Shared\BabMaint.exe =>Hijacker.BabSolution^
[HKCU\Software\AppDataLow\Software\VisualBee_V.1] =>Adware.VisualBeeToolbar^
[HKCU\Software\BabSolution] =>Hijacker.BabSolution^
[HKLM\Software\Wow6432Node\DProtect] =>Trojan.Staser^
C:\Windows\SysNative\roboot64.exe =>Rogue.PCPerformer^
C:\Windows\System32\roboot64.exe =>Rogue.PCPerformer^
C:\Users\Nicole\AppData\Roaming\SearchProtect\ffprotect\SProtectorRepository\EN =>PUP.Mocaflix^
C:\Users\Nicole\AppData\Roaming\speedanalysis.ico =>PUP.SpeedAnalysis^
C:\Users\Nicole\AppData\Roaming\Babylon\log_file.txt =>Toolbar.Babylon^
C:\Users\Nicole\AppData\Roaming\PerformerSoft\PC Performer\ExcludeList.rcp =>Rogue.PCPerformer^
C:\Users\Nicole\AppData\Roaming\PerformerSoft\PC Performer\French_rcp.dat =>Rogue.PCPerformer^
C:\Users\Nicole\AppData\Roaming\PerformerSoft\PC Performer\TempHLList.rcp =>Rogue.PCPerformer^
C:\Users\Nicole\AppData\Roaming\PerformerSoft\PC Performer\results.rcp =>Rogue.PCPerformer^
C:\Users\Nicole\AppData\Local\Temp\uninst1.exe =>Toolbar.Babylon^
C:\Windows\Installer\{96E2E493-C484-43E3-9B95-D62EE7D40D3A}\ARPPRODUCTICON.exe =>PUP.SweetIM^
C:\Windows\Installer\{29C7E8BE-FBD9-4D91-BC4F-B470C718D554}\imbooster.ico =>Adware.IMBooster^
C:\Windows\Installer\a0ec8f6.msi =>Adware.IMBooster^
C:\Windows\Installer\a0ec8fc.msi =>Adware.IMBooster^
[HKCU\Software\Safe Browser]
[HKCU\Software\WSVCUPlugin]
O43 - CFD: 27/04/2013 - 11:33:20 - [0,350] ----D C:\Users\Nicole\AppData\Roaming\Epatternslists
O43 - CFD: 06/10/2013 - 18:28:28 - [0] ----D C:\Users\Nicole\AppData\Roaming\{950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A}
O61 - LFC: 07/10/2013 - 09:44:37 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_sp-work.gv-pilot.com_0.localstorage [3072]
O61 - LFC: 07/10/2013 - 09:44:37 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_sp-work.gv-pilot.com_0.localstorage-journal [3608]
O61 - LFC: 04/10/2013 - 07:48:08 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Temp\4920_7030\crl-set [1486]
O61 - LFC: 04/10/2013 - 07:48:08 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Temp\4920_7030\manifest.fingerprint [12]
O61 - LFC: 04/10/2013 - 07:48:08 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Temp\4920_7030\manifest.json [34]
O61 - LFC: 04/10/2013 - 09:13:15 ---A- . (...) -- C:\Users\Nicole\AppData\Local\CrashDumps\MDCrashReportTool.exe.6868.dmp [1181111]
O61 - LFC: 04/10/2013 - 09:54:58 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Temp\chart_data.dat [20866]
O61 - LFC: 04/10/2013 - 10:05:02 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Temp\8572_12182\crl-set [1367]
O61 - LFC: 04/10/2013 - 10:05:02 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Temp\8572_12182\manifest.fingerprint [12]
O61 - LFC: 04/10/2013 - 10:05:02 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Temp\8572_12182\manifest.json [34]
O61 - LFC: 04/10/2013 - 10:32:21 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Temp\4D01683E.TMP [143]
O61 - LFC: 04/10/2013 - 13:45:19 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Temp\PCW2502.xml [720]
O61 - LFC: 04/10/2013 - 13:45:52 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Diagnostics\733862231\2013100412.000\PCW.0.debugreport.xml [4528]
O61 - LFC: 04/10/2013 - 13:45:52 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Diagnostics\733862231\2013100412.000\results.xsl [49097]
O61 - LFC: 04/10/2013 - 13:46:47 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Diagnostics\733862231\2013100412.000\PCW.1.debugreport.xml [3246]
O61 - LFC: 04/10/2013 - 13:46:47 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Diagnostics\733862231\2013100412.000\ResultReport.xml [2469]
O61 - LFC: 04/10/2013 - 13:46:47 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Diagnostics\733862231\2013100412.000\results.xml [624]
O61 - LFC: 04/10/2013 - 13:58:51 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Temp\PCW873E.xml [720]
O61 - LFC: 04/10/2013 - 13:58:52 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Diagnostics\733862231\2013100413.000\results.xsl [49097]
O61 - LFC: 04/10/2013 - 14:00:06 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Diagnostics\733862231\2013100413.000\PCW.0.debugreport.xml [3902]
O61 - LFC: 04/10/2013 - 14:00:06 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Diagnostics\733862231\2013100413.000\ResultReport.xml [1966]
O61 - LFC: 04/10/2013 - 14:00:06 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Diagnostics\733862231\2013100413.000\results.xml [624]
O61 - LFC: 04/10/2013 - 14:03:25 -SHA- . (...) -- C:\Users\Nicole\AppData\Local\IM\Identities\{365B352D-C07B-43B1-A3DE-25FFF99ABA73}\IMSys\{781B9B29-76A7-423F-A038-5BB34D4F48FA}\9\image\im_images\Thumbs.db [17408]
O61 - LFC: 04/10/2013 - 14:03:25 -SHA- . (...) -- C:\Users\Nicole\AppData\Local\IM\Identities\{608E465F-50E9-4966-81AA-E5615C60FECD}\IMSys\{781B9B29-76A7-423F-A038-5BB34D4F48FA}\19\image\gg_image\Thumbs.db [19456]
O61 - LFC: 04/10/2013 - 14:03:25 -SHA- . (...) -- C:\Users\Nicole\AppData\Local\IM\Identities\{608E465F-50E9-4966-81AA-E5615C60FECD}\IMSys\{781B9B29-76A7-423F-A038-5BB34D4F48FA}\2900\images\Gift\french\Thumbs.db [5632]
O61 - LFC: 04/10/2013 - 14:03:25 -SHA- . (...) -- C:\Users\Nicole\AppData\Local\IM\Identities\{608E465F-50E9-4966-81AA-E5615C60FECD}\IMSys\{781B9B29-76A7-423F-A038-5BB34D4F48FA}\2900\images\NoGift\french\Thumbs.db [5632]
O61 - LFC: 04/10/2013 - 14:03:25 -SHA- . (...) -- C:\Users\Nicole\AppData\Local\IM\Identities\{608E465F-50E9-4966-81AA-E5615C60FECD}\IMSys\{781B9B29-76A7-423F-A038-5BB34D4F48FA}\2900\images\dialog_1\Thumbs.db [10752]
O61 - LFC: 04/10/2013 - 14:03:25 -SHA- . (...) -- C:\Users\Nicole\AppData\Local\IM\Identities\{608E465F-50E9-4966-81AA-E5615C60FECD}\IMSys\{781B9B29-76A7-423F-A038-5BB34D4F48FA}\2900\images\dialog_1\french\Thumbs.db [14336]
O61 - LFC: 04/10/2013 - 14:03:25 -SHA- . (...) -- C:\Users\Nicole\AppData\Local\IM\Identities\{608E465F-50E9-4966-81AA-E5615C60FECD}\IMSys\{781B9B29-76A7-423F-A038-5BB34D4F48FA}\2900\images\email\french\Thumbs.db [13312]
O61 - LFC: 04/10/2013 - 14:03:26 -SHA- . (...) -- C:\Users\Nicole\AppData\Local\IM\Identities\{365B352D-C07B-43B1-A3DE-25FFF99ABA73}\IMSys\{781B9B29-76A7-423F-A038-5BB34D4F48FA}\7\image\im_images\Thumbs.db [17408]
O61 - LFC: 04/10/2013 - 14:03:27 -SHA- . (...) -- C:\Users\Nicole\AppData\Local\IM\Identities\{608E465F-50E9-4966-81AA-E5615C60FECD}\Message Store\Attachments\{1E8CFFE4-8215-4EB4-B3C7-84248E80E843}\Thumbs.db [10240]
O61 - LFC: 04/10/2013 - 14:03:27 -SHA- . (...) -- C:\Users\Nicole\AppData\Local\IM\Identities\{608E465F-50E9-4966-81AA-E5615C60FECD}\Message Store\Attachments\{E5707DFF-A346-447A-8E8D-A4F056B97B2E}\Thumbs.db [11264]
O61 - LFC: 04/10/2013 - 14:03:28 -SHA- . (...) -- C:\Users\Nicole\AppData\Local\IM\Identities\{608E465F-50E9-4966-81AA-E5615C60FECD}\IMSys\{781B9B29-76A7-423F-A038-5BB34D4F48FA}\15\Thumbs.db [27136]
O61 - LFC: 04/10/2013 - 14:03:28 -SHA- . (...) -- C:\Users\Nicole\AppData\Local\IM\Identities\{608E465F-50E9-4966-81AA-E5615C60FECD}\IMSys\{781B9B29-76A7-423F-A038-5BB34D4F48FA}\16\image\link_scanning\Thumbs.db [17408]
O61 - LFC: 04/10/2013 - 14:03:28 -SHA- . (...) -- C:\Users\Nicole\AppData\Local\IM\Identities\{608E465F-50E9-4966-81AA-E5615C60FECD}\IMSys\{781B9B29-76A7-423F-A038-5BB34D4F48FA}\18\image\backup\Thumbs.db [19456]
O61 - LFC: 04/10/2013 - 14:03:28 -SHA- . (...) -- C:\Users\Nicole\AppData\Local\IM\Identities\{608E465F-50E9-4966-81AA-E5615C60FECD}\IMSys\{781B9B29-76A7-423F-A038-5BB34D4F48FA}\2900\images\dialog_2\Thumbs.db [8192]
O61 - LFC: 04/10/2013 - 14:03:28 -SHA- . (...) -- C:\Users\Nicole\AppData\Local\IM\Identities\{608E465F-50E9-4966-81AA-E5615C60FECD}\Message Store\Attachments\{27C4E923-7BF8-4E24-B768-0B603881B82E}\Thumbs.db [10240]
O61 - LFC: 04/10/2013 - 14:03:28 -SHA- . (...) -- C:\Users\Nicole\AppData\Local\IM\Identities\{608E465F-50E9-4966-81AA-E5615C60FECD}\Message Store\Attachments\{283735DF-077B-4EB0-A912-699A5814F626}\Thumbs.db [10240]
O61 - LFC: 04/10/2013 - 14:03:28 -SHA- . (...) -- C:\Users\Nicole\AppData\Local\IM\Identities\{608E465F-50E9-4966-81AA-E5615C60FECD}\Message Store\Attachments\{831C1FC3-C6CD-4E8A-B239-F9DC78E79613}\Thumbs.db [10240]
O61 - LFC: 04/10/2013 - 14:03:28 -SHA- . (...) -- C:\Users\Nicole\AppData\Local\IM\Identities\{608E465F-50E9-4966-81AA-E5615C60FECD}\Message Store\Attachments\{EDA46084-767A-480E-A277-FBD661E3C172}\Thumbs.db [10240]
O61 - LFC: 04/10/2013 - 14:03:28 -SHA- . (...) -- C:\Users\Nicole\AppData\Local\IM\Identities\{608E465F-50E9-4966-81AA-E5615C60FECD}\Message Store\Attachments\{F0F44F60-609E-46CF-B610-69293E570DDA}\Thumbs.db [10240]
O61 - LFC: 04/10/2013 - 14:03:28 -SHA- . (...) -- C:\Users\Nicole\AppData\Local\IM\Runtime\LetterThumbnail\PM225472-1049-28AA-AAAA-AAAAAAAAAAAA\Thumbs.db [5632]
O61 - LFC: 04/10/2013 - 14:03:28 -SHA- . (...) -- C:\Users\Nicole\AppData\Local\IM\Runtime\Letter\B433CDFE-B71C-42C2-A5C1-D34C076A9851\Thumbs.db [7168]
O61 - LFC: 04/10/2013 - 14:03:35 -SHA- . (...) -- C:\Users\Nicole\AppData\Local\IM\Runtime\NotifierThumbnail\PN12EA1A-D9DD-45AA-AAAA-AAAAAAAAAAAA\Thumbs.db [5632]
O61 - LFC: 04/10/2013 - 14:03:35 -SHA- . (...) -- C:\Users\Nicole\AppData\Local\IM\Runtime\NotifierThumbnail\PN21CBB8-C184-40AA-AAAA-AAAAAAAAAAAA\Thumbs.db [5120]
O61 - LFC: 04/10/2013 - 14:03:35 -SHA- . (...) -- C:\Users\Nicole\AppData\Local\IM\Runtime\Skin\896E849B-DD0E-4209-8A9B-98896F32D80E\Thumbs.db [6656]
O61 - LFC: 04/10/2013 - 14:03:35 -SHA- . (...) -- C:\Users\Nicole\AppData\Local\IM\Runtime\Skin\E2FEE54A-6EB1-47C5-9027-44ABECEAF3E3\Thumbs.db [45056]
O61 - LFC: 04/10/2013 - 14:03:53 -SHA- . (...) -- C:\Users\Nicole\AppData\Local\Temp\7zS1839\setup\Thumbs.db [11776]
O61 - LFC: 04/10/2013 - 14:03:54 -SHA- . (...) -- C:\Users\Nicole\AppData\Local\Temp\7zS1839\images\Thumbs.db [131072]
O61 - LFC: 04/10/2013 - 14:04:00 -SHA- . (...) -- C:\Users\Nicole\AppData\Local\IM\Identities\{608E465F-50E9-4966-81AA-E5615C60FECD}\Message Store\Attachments\Thumbs.db [94720]
O61 - LFC: 04/10/2013 - 14:04:15 -SHA- . (...) -- C:\Users\Nicole\AppData\Local\Temp\7zS1839\images\printer_nuiimages\Thumbs.db [128000]
O61 - LFC: 04/10/2013 - 14:04:15 -SHA- . (...) -- C:\Users\Nicole\AppData\Local\Temp\7zS1839\images\printer_usbimages\Thumbs.db [84992]
O61 - LFC: 05/10/2013 - 06:02:30 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Temp\12624_18260\crl-set [627]
O61 - LFC: 05/10/2013 - 06:02:30 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Temp\12624_18260\manifest.fingerprint [12]
O61 - LFC: 05/10/2013 - 06:02:30 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Temp\12624_18260\manifest.json [34]
O61 - LFC: 05/10/2013 - 09:45:38 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Temp\AppleMediaCache\diskcacherepository.plist [1194]
O61 - LFC: 05/10/2013 - 10:01:52 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Diagnostics\733862231\2013100509.000\results.xsl [49097]
O61 - LFC: 05/10/2013 - 10:05:32 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Diagnostics\733862231\2013100509.000\PCW.0.debugreport.xml [1769]
O61 - LFC: 05/10/2013 - 10:05:32 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Diagnostics\733862231\2013100509.000\ResultReport.xml [1956]
O61 - LFC: 05/10/2013 - 10:05:32 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Diagnostics\733862231\2013100509.000\results.xml [624]
O61 - LFC: 05/10/2013 - 11:22:53 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Temp\2248_11732\crl-set [774]
O61 - LFC: 05/10/2013 - 11:22:53 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Temp\2248_11732\manifest.fingerprint [12]
O61 - LFC: 05/10/2013 - 11:22:53 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Temp\2248_11732\manifest.json [34]
O61 - LFC: 06/10/2013 - 07:13:48 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Diagnostics\733862231\2013100606.000\PCW.0.debugreport.xml [4130]
O61 - LFC: 06/10/2013 - 07:13:48 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Diagnostics\733862231\2013100606.000\results.xsl [49097]
O61 - LFC: 06/10/2013 - 07:14:06 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Diagnostics\733862231\2013100606.000\PCW.1.debugreport.xml [2846]
O61 - LFC: 06/10/2013 - 07:14:06 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Diagnostics\733862231\2013100606.000\ResultReport.xml [2469]
O61 - LFC: 06/10/2013 - 07:14:06 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Diagnostics\733862231\2013100606.000\results.xml [624]
O61 - LFC: 06/10/2013 - 07:14:06 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Diagnostics\733862231\latest.cab [8862]
O61 - LFC: 06/10/2013 - 07:20:54 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Temp\4032_2731\crl-set [449]
O61 - LFC: 06/10/2013 - 07:20:54 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Temp\4032_2731\manifest.fingerprint [12]
O61 - LFC: 06/10/2013 - 07:20:54 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Temp\4032_2731\manifest.json [34]
O61 - LFC: 06/10/2013 - 08:09:32 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Temp\HPSAActionItems.xml [2169]
O61 - LFC: 07/10/2013 - 06:05:42 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Temp\6808_4476\crl-set [749]
O61 - LFC: 07/10/2013 - 06:05:42 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Temp\6808_4476\manifest.fingerprint [12]
O61 - LFC: 07/10/2013 - 06:05:42 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Temp\6808_4476\manifest.json [34]
O61 - LFC: 07/10/2013 - 06:30:25 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Temp\broker\config.xml [5848]
O61 - LFC: 07/10/2013 - 06:30:26 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Temp\broker\ping.xml [6770]
O61 - LFC: 07/10/2013 - 06:30:26 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Temp\broker\timing.dat [125]
O61 - LFC: 07/10/2013 - 06:31:39 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Temp\~nsu.tmp\Au_.exe [42297]
O61 - LFC: 07/10/2013 - 06:31:42 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Temp\nscA9B7.tmp\Time.dll [10752]
O61 - LFC: 07/10/2013 - 06:31:44 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Temp\nsxB664.tmp\Time.dll [10752]
O61 - LFC: 07/10/2013 - 06:31:46 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Temp\nscBD37.tmp\Time.dll [10752]
O61 - LFC: 07/10/2013 - 06:31:59 ---A- . (...) -- C:\Users\Nicole\AppData\Roaming\File Scout\uninst.exe [62902]
O61 - LFC: 07/10/2013 - 08:19:36 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Temp\PrintPreview.hta [34516]
O61 - LFC: 07/10/2013 - 08:23:30 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Temp\CVR83C.tmp.cvr [0]
O61 - LFC: 07/10/2013 - 09:45:00 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Temp\8120_4629\crl-set [2194]
O61 - LFC: 07/10/2013 - 09:45:00 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Temp\8120_4629\manifest.fingerprint [12]
O61 - LFC: 07/10/2013 - 09:45:00 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Temp\8120_4629\manifest.json [34]
O3 - Toolbar\WebBrowser: (no name) [64Bits] - [HKCU]{00000000-0000-0000-0000-000000000000} Cl� orpheline
[HKCU\Software\Delta]
[HKCU\Software\?? ?? ???? ????? ??? ?? ????]
[HKLM\Software\Wow6432Node\Delta]
O43 - CFD: 07/10/2013 - 07:31:44 - [2,393] ----D C:\Program Files (x86)\Delta
O43 - CFD: 07/10/2013 - 07:31:41 - [0,259] ----D C:\Users\Nicole\AppData\Roaming\Delta
[HKCU\Software\Qtrax]
O43 - CFD: 06/06/2013 - 14:54:34 - [0] ----D C:\Users\Nicole\AppData\Roaming\uTorrent =>P2P.�Torrent
[MD5.5D61BE7DB55B026A5D61A3EED09D0EAD] - (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408] [PID.4508] =>Toolbar.Google
G1 - GCS: Preference [User Data\Default] http://www.delta-search.com =>Toolbar.DeltaSearch
G0 - GCSP: Preference [User Data\Default][HomePage] http://www.delta-search.com =>Toolbar.DeltaSearch
G0 - GCSP: Preference [User Data\Default] http://www.delta-search.com =>Toolbar.DeltaSearch
G2 - GCE: Preference [User Data\Default] [eooncjejnppfjjklapaamhcdmjbilmde] Delta Toolbar v.1.6.2 (D�sactiv�) =>Toolbar.DeltaSearch
M2 - MFEP: prefs.js [Nicole - kcdf26ls.default\ffxtlbr@delta.com] [] Delta Toolbar v1.5.0 (..) =>Toolbar.DeltaSearch
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.delta-search.com =>Toolbar.DeltaSearch
O2 - BHO: Google Toolbar Helper [64Bits] - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll =>Toolbar.Google
O2 - BHO: delta Helper Object [64Bits] - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} . (.Delta-search.com - Pas de description.) -- C:\Program Files (x86)\Delta\delta\1.8.24.6\bh\delta.dll =>Toolbar.DeltaSearch
O2 - BHO: (no name) [64Bits] - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} Cl� orpheline
O3 - Toolbar: HP SimplePass Toolbar [64Bits] - [HKLM]{C98EE38D-21E4-4A50-907D-2B56FEC7013E} . (.HP - Website Log On.) -- C:\Program Files (x86)\HP SimplePass\IEBHO.dll
O3 - Toolbar: Google Toolbar [64Bits] - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll =>Toolbar.Google
O3 - Toolbar: (no name) [64Bits] - [HKLM]{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} Cl� orpheline
O4 - GS\Desktop [Nicole]: Search.lnk . (...) -- C:\ProgramData\DSearchLink\DSearchLink.exe =>Toolbar.DeltaSearch
O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe =>Toolbar.Google
O23 - Service: (vToolbarUpdater15.2.0) . (...) - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.2.0\ToolbarUpdater.exe (.not file.) =>Toolbar.AVGSearch
O42 - Logiciel: Delta Chrome Toolbar - (.Visual Tools.) [HKLM][64Bits] -- Delta Chrome Toolbar =>Toolbar.DeltaSearch
O42 - Logiciel: Delta toolbar - (.Delta.) [HKLM][64Bits] -- delta =>Toolbar.DeltaSearch
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM][64Bits] -- {18455581-E099-4BA8-BC6B-F34B2F06600C} =>Toolbar.Google
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM][64Bits] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F} =>Toolbar.Google
[HKLM\Software\Wow6432Node\VBMZ]
[HKLM\Software\Wow6432Node\WiseConvert_1.5] =>Toolbar.Conduit
O43 - CFD: 06/10/2013 - 08:34:58 - [0] ----D C:\Program Files (x86)\Conduit
O43 - CFD: 06/10/2013 - 08:34:55 - [0,024] ----D C:\Program Files (x86)\MixiDJ_V30 =>Toolbar.MixiDJ
O43 - CFD: 06/10/2013 - 08:34:55 - [0,021] ----D C:\Program Files (x86)\SearchProtect =>Toolbar.Conduit
O43 - CFD: 06/10/2013 - 08:36:46 - [0,041] ----D C:\Program Files (x86)\Wajam =>Toolbar.Wajam
O43 - CFD: 26/01/2013 - 09:06:01 - [0] ----D C:\Program Files (x86)\WiseConvert_1.5 =>Toolbar.Conduit
O43 - CFD: 02/10/2013 - 09:11:55 - [0] ----D C:\ProgramData\Conduit
O43 - CFD: 07/10/2013 - 07:31:29 - [0,147] ----D C:\ProgramData\DSearchLink =>Toolbar.DeltaSearch
O43 - CFD: 06/06/2012 - 19:29:19 - [0,008] ----D C:\ProgramData\Yahoo! Companion
O43 - CFD: 02/08/2013 - 12:19:53 - [23,535] -SH-D C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
O43 - CFD: 02/10/2013 - 09:17:25 - [0,065] ----D C:\Users\Nicole\AppData\Roaming\SearchProtect =>Toolbar.Conduit
O43 - CFD: 02/10/2013 - 09:12:48 - [0,054] ----D C:\Users\Nicole\AppData\Local\Wajam =>Toolbar.Wajam
O61 - LFC: 04/10/2013 - 14:04:15 -SHA- . (...) -- C:\Users\Nicole\AppData\Local\Temp\avg_a09488\ProgData\AVG Secure Search\FireFoxExt\15.2.0.5\modules\skin\Thumbs.db [4608] =>Toolbar.AVGSearch
O61 - LFC: 04/10/2013 - 15:17:46 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_fb1.farm2.zynga.com_0.localstorage [75776] =>Toolbar.Zynga
O61 - LFC: 04/10/2013 - 15:17:46 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_fb1.farm2.zynga.com_0.localstorage-journal [16384] =>Toolbar.Zynga
O61 - LFC: 05/10/2013 - 10:08:00 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_search.conduit.com_0.localstorage [3072]
O61 - LFC: 05/10/2013 - 10:08:00 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_search.conduit.com_0.localstorage-journal [3608]
O61 - LFC: 05/10/2013 - 20:19:18 ---A- . (...) -- C:\Users\Nicole\AppData\Roaming\SearchProtect\bin\rep.dat [22392] =>Toolbar.Conduit
O61 - LFC: 07/10/2013 - 06:31:32 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_eooncjejnppfjjklapaamhcdmjbilmde_0.localstorage [3072]
O61 - LFC: 07/10/2013 - 06:31:41 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde\1.6.2_0\background.js [812]
O61 - LFC: 07/10/2013 - 06:31:41 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde\1.6.2_0\delta128.png [10672]
O61 - LFC: 07/10/2013 - 06:31:41 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde\1.6.2_0\delta48.png [2294]
O61 - LFC: 07/10/2013 - 06:31:41 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde\1.6.2_0\manifest.json [707]
O61 - LFC: 07/10/2013 - 06:31:41 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde\1.6.2_0\redirect.html [189]
O61 - LFC: 07/10/2013 - 06:31:41 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde\1.6.2_0\redirect.js [299]
O61 - LFC: 07/10/2013 - 10:37:49 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.delta-search.com_0.localstorage [6144] =>Toolbar.DeltaSearch
O61 - LFC: 07/10/2013 - 10:37:49 ---A- . (...) -- C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.delta-search.com_0.localstorage-journal [6704] =>Toolbar.DeltaSearch
O69 - SBI: SearchScopes [HKCU] {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} - (Delta Search) - http://www.delta-search.com =>Toolbar.DeltaSearch
O69 - SBI: SearchScopes [HKCU] {1AE2A7F7-1EDD-4D31-B0D8-9C4AB0271F17} - (Ask Search) - http://websearch.ask.com =>Toolbar.Ask
[MD5.346CA14A185E93E96F6CCCC7D2A3D304] [SPRF][27/05/2013] (.AVG Secure Search - AVG Installer.) -- C:\Users\Nicole\AppData\Local\Temp\oi_{7024469C-4F0B-4BA1-85CC-1250DCC5E2AE}.exe [3239960] =>Toolbar.AVGSearch
[MD5.8797F3592E055284D113FEAA21B71ED3] [WIS][21/09/2012] (.Google Inc. - Google Toolbar for Internet Explorer.) -- C:\Windows\Installer\87f38f4.msi [28160] =>Toolbar.Google
SS - | Auto 10/07/1658 0 | (vToolbarUpdater15.2.0) . (...) - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.2.0\ToolbarUpdater.exe =>Toolbar.AVGSearch
[HKLM\Software\Google\Chrome\Extensions\eooncjejnppfjjklapaamhcdmjbilmde] =>Toolbar.DeltaSearch^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4D91-8333-CF10577473F7}] =>Toolbar.Google^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}] =>Toolbar.DeltaSearch^
[HKLM\SYSTEM\CurrentControlSet\Services\vToolbarUpdater15.2.0] =>Toolbar.AVGSearch^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Delta Chrome Toolbar] =>Toolbar.DeltaSearch^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\delta] =>Toolbar.DeltaSearch^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{18455581-E099-4BA8-BC6B-F34B2F06600C}] =>Toolbar.Google^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{2318C2B1-4965-11d4-9B18-009027A5CD4F}] =>Toolbar.Google^
[HKLM\Software\Classes\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}] =>Toolbar.Wajam
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{493CCB71-DCAD-4257-9F08-8750F63BD792}] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Microsoft\Tracing\BingBar_RASMANCS] =>Toolbar.Bing
[HKLM\Software\Wow6432Node\WiseConvert_1.5] =>Toolbar.Conduit
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}] =>Toolbar.DeltaSearch
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}] =>Toolbar.DeltaSearch
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}] =>Toolbar.DeltaSearch
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C98EE38D-21E4-4A50-907D-2B56FEC7013E}] =>Toolbar.Agent
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C98EE38D-21E4-4A50-907D-2B56FEC7013E}] =>Toolbar.Agent
[HKLM\Software\Classes\CLSID\{C98EE38D-21E4-4A50-907D-2B56FEC7013E}] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Microsoft\Tracing\BingBar_RASAPI32] =>Toolbar.Bing
[HKLM\Software\Wow6432Node\VBMZ] =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{348C2DF3-1191-4C3E-92A6-B3A89A9D9C85}] =>Toolbar.DeltaSearch
[HKLM\Software\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}] =>Toolbar.DeltaSearch
[HKLM\Software\Wow6432Node\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}] =>Toolbar.DeltaSearch
[HKLM\Software\Classes\AppID\{39CB8175-E224-4446-8746-00566302DF8D}] =>Toolbar.DeltaSearch
[HKLM\Software\Classes\TypeLib\{39CB8175-E224-4446-8746-00566302DF8D}] =>Toolbar.DeltaSearch
[HKLM\Software\Wow6432Node\Classes\AppID\{39CB8175-E224-4446-8746-00566302DF8D}] =>Toolbar.DeltaSearch
[HKLM\Software\Classes\TypeLib\{4599D05A-D545-4069-BB42-5895B4EAE05B}] =>Toolbar.DeltaSearch
[HKLM\Software\Classes\AppID\{562B9316-C08A-444A-9482-62080DD851AE}] =>Toolbar.Freecorder
[HKLM\Software\Wow6432Node\Classes\AppID\{562B9316-C08A-444A-9482-62080DD851AE}] =>Toolbar.Freecorder
[HKLM\Software\Classes\AppID\AddonsFramework.DLL] =>Toolbar.Freecorder
[HKLM\Software\Classes\AppID\ButtonSite.DLL] =>Toolbar.Freecorder
[HKLM\Software\Classes\AppID\ScriptHost.DLL] =>Toolbar.Freecorder
[HKLM\Software\Classes\AppID\{18B9B16E-716F-43DF-A6AD-512C7D2EB983}] =>Toolbar.Freecorder
[HKLM\Software\Wow6432Node\Classes\AppID\{18B9B16E-716F-43DF-A6AD-512C7D2EB983}] =>Toolbar.Freecorder
[HKLM\Software\Classes\AppID\{19975B78-1907-4DD6-A437-4C48120F46A4}] =>Toolbar.Freecorder
[HKLM\Software\Wow6432Node\Classes\AppID\{19975B78-1907-4DD6-A437-4C48120F46A4}] =>Toolbar.Freecorder
[HKLM\Software\Classes\AppID\{562B9317-C08A-444A-9482-62080DD851AE}] =>Toolbar.Freecorder
[HKLM\Software\Wow6432Node\Classes\AppID\{562B9317-C08A-444A-9482-62080DD851AE}] =>Toolbar.Freecorder
[HKLM\Software\Classes\Interface\{045F91B3-695F-423A-98C7-8DE3C47AA020}] =>Toolbar.Freecorder
[HKLM\Software\Wow6432Node\Classes\Interface\{045F91B3-695F-423A-98C7-8DE3C47AA020}] =>Toolbar.Freecorder
[HKLM\Software\Classes\Interface\{1348BD1B-C32A-41A7-9BD4-5377AA1AB925}] =>Toolbar.Freecorder
[HKLM\Software\Wow6432Node\Classes\Interface\{1348BD1B-C32A-41A7-9BD4-5377AA1AB925}] =>Toolbar.Freecorder
[HKLM\Software\Classes\Interface\{395AFE6E-8308-48DB-89BE-ED5F4AA3D3EC}] =>Toolbar.Freecorder
[HKLM\Software\Wow6432Node\Classes\Interface\{395AFE6E-8308-48DB-89BE-ED5F4AA3D3EC}] =>Toolbar.Freecorder
[HKLM\Software\Classes\Interface\{43B390F0-6BA2-45CA-ABF2-5DB0CEE9B49D}] =>Toolbar.Freecorder
[HKLM\Software\Wow6432Node\Classes\Interface\{43B390F0-6BA2-45CA-ABF2-5DB0CEE9B49D}] =>Toolbar.Freecorder
[HKLM\Software\Classes\Interface\{94CADA2E-1D3F-419F-8A3D-06C58EDF53C8}] =>Toolbar.Freecorder
[HKLM\Software\Wow6432Node\Classes\Interface\{94CADA2E-1D3F-419F-8A3D-06C58EDF53C8}] =>Toolbar.Freecorder
[HKLM\Software\Classes\Interface\{9E52EB8B-8DD9-4605-AD36-D352BCD482F2}] =>Toolbar.Freecorder
[HKLM\Software\Wow6432Node\Classes\Interface\{9E52EB8B-8DD9-4605-AD36-D352BCD482F2}] =>Toolbar.Freecorder
[HKLM\Software\Classes\Interface\{A1440EC3-F0FA-407A-B811-DE6668C06D29}] =>Toolbar.Freecorder
[HKLM\Software\Wow6432Node\Classes\Interface\{A1440EC3-F0FA-407A-B811-DE6668C06D29}] =>Toolbar.Freecorder
[HKLM\Software\Classes\Interface\{B9A84AD0-5777-46FD-8B8F-1EBD06750FBC}] =>Toolbar.Freecorder
[HKLM\Software\Wow6432Node\Classes\Interface\{B9A84AD0-5777-46FD-8B8F-1EBD06750FBC}] =>Toolbar.Freecorder
[HKLM\Software\Classes\Interface\{C1995F88-1C7F-40D7-B0FA-6F107F6308B8}] =>Toolbar.Freecorder
[HKLM\Software\Wow6432Node\Classes\Interface\{C1995F88-1C7F-40D7-B0FA-6F107F6308B8}] =>Toolbar.Freecorder
[HKLM\Software\Classes\Interface\{C815E3DA-0823-49B0-9270-D1771D58B317}] =>Toolbar.Freecorder
[HKLM\Software\Wow6432Node\Classes\Interface\{C815E3DA-0823-49B0-9270-D1771D58B317}] =>Toolbar.Freecorder
[HKLM\Software\Classes\delta.deltaHlpr] =>Toolbar.DeltaSearch
[HKLM\Software\Classes\delta.deltaHlpr.1] =>Toolbar.DeltaSearch
[HKLM\Software\Classes\esrv.deltaESrvc] =>Toolbar.DeltaSearch
[HKLM\Software\Classes\esrv.deltaESrvc.1] =>Toolbar.DeltaSearch
[HKLM\Software\Wow6432Node\Classes\delta.deltaappCore] =>Toolbar.DeltaSearch
[HKLM\Software\Wow6432Node\Classes\delta.deltaappCore.1] =>Toolbar.DeltaSearch
[HKLM\Software\Wow6432Node\Classes\delta.deltadskBnd] =>Toolbar.DeltaSearch
[HKLM\Software\Wow6432Node\Classes\delta.deltadskBnd.1] =>Toolbar.DeltaSearch
[HKLM\Software\Wow6432Node\Classes\delta.deltaHlpr] =>Toolbar.DeltaSearch
[HKLM\Software\Wow6432Node\Classes\delta.deltaHlpr.1] =>Toolbar.DeltaSearch
[HKLM\Software\Wow6432Node\Classes\esrv.deltaESrvc] =>Toolbar.DeltaSearch
[HKLM\Software\Wow6432Node\Classes\esrv.deltaESrvc.1] =>Toolbar.DeltaSearch
[HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{2318C2B1-4965-11d4-9B18-009027A5CD4F} =>Toolbar.Google^
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:swg =>Toolbar.Google^
C:\Users\Nicole\AppData\Roaming\Mozilla\Firefox\Profiles\kcdf26ls.default\ffxtlbr@delta.com =>Toolbar.DeltaSearch^
C:\Program Files (x86)\MixiDJ_V30 =>Toolbar.MixiDJ^
C:\Program Files (x86)\SearchProtect =>Toolbar.Conduit^
C:\Program Files (x86)\Wajam =>Toolbar.Wajam^
C:\Program Files (x86)\WiseConvert_1.5 =>Toolbar.Conduit^
C:\ProgramData\DSearchLink =>Toolbar.DeltaSearch^
C:\Users\Nicole\AppData\Roaming\SearchProtect =>Toolbar.Conduit^
C:\Users\Nicole\AppData\Local\Wajam =>Toolbar.Wajam^
C:\Program Files (x86)\Conduit =>Toolbar.Conduit
C:\ProgramData\Conduit =>Toolbar.Conduit
C:\Users\Nicole\AppData\LocalLow\Conduit =>Toolbar.Conduit
C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde =>Toolbar.DeltaSearch
C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe =>Toolbar.Google^
C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll =>Toolbar.Google^
C:\Program Files (x86)\Delta\delta\1.8.24.6\bh\delta.dll =>Toolbar.DeltaSearch^
C:\ProgramData\DSearchLink\DSearchLink.exe =>Toolbar.DeltaSearch^
C:\Users\Nicole\AppData\Local\Temp\avg_a09488\ProgData\AVG Secure Search\FireFoxExt\15.2.0.5\modules\skin\Thumbs.db =>Toolbar.AVGSearch^
C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_fb1.farm2.zynga.com_0.localstorage =>Toolbar.Zynga^
C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_fb1.farm2.zynga.com_0.localstorage-journal =>Toolbar.Zynga^
C:\Users\Nicole\AppData\Roaming\SearchProtect\bin\rep.dat =>Toolbar.Conduit^
C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.delta-search.com_0.localstorage =>Toolbar.DeltaSearch^
C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.delta-search.com_0.localstorage-journal =>Toolbar.DeltaSearch^
C:\Users\Nicole\AppData\Local\Temp\oi_{7024469C-4F0B-4BA1-85CC-1250DCC5E2AE}.exe =>Toolbar.AVGSearch^
C:\Windows\Installer\87f38f4.msi =>Toolbar.Google^
C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.2.0\ToolbarUpdater.exe =>Toolbar.AVGSearch^