Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 15/06/2014
Scan Time: 18:51:01
Logfile: anti Malware.txt
Administrator: Yes

Version: 2.00.2.1012
Malware Database: v2014.06.15.05
Rootkit Database: v2014.06.02.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Claude

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 302845
Time Elapsed: 3 min, 42 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 4
PUP.Optional.GreenerWeb.A, C:\Program Files (x86)\Greener Web\updateGreenerWeb.exe, 2808, Delete-on-Reboot, [f9c890e8e893c76f4acbbfe225dd7888]
PUP.Optional.GreenerWeb.A, C:\Program Files (x86)\Greener Web\bin\GreenerWeb.BrowserAdapter.exe, 4160, Delete-on-Reboot, [f9c890e8e893c76f4acbbfe225dd7888]
PUP.Optional.GreenerWeb.A, C:\Program Files (x86)\Greener Web\bin\GreenerWeb.PurBrowse64.exe, 3620, Delete-on-Reboot, [f9c890e8e893c76f4acbbfe225dd7888]
PUP.Optional.GreenerWeb.A, C:\Program Files (x86)\Greener Web\bin\utilGreenerWeb.exe, 2780, Delete-on-Reboot, [f9c890e8e893c76f4acbbfe225dd7888]

Modules: 3
PUP.Optional.GreenerWeb.A, C:\Program Files (x86)\Greener Web\bin\GreenerWebBAApp.dll, Delete-on-Reboot, [f9c890e8e893c76f4acbbfe225dd7888],
PUP.Optional.GreenerWeb.A, C:\Program Files (x86)\Greener Web\bin\{a3f28269-ad17-41a8-b032-3e0313ef8979}.dll, Delete-on-Reboot, [f9c890e8e893c76f4acbbfe225dd7888],
PUP.Optional.GreenerWeb.A, C:\Program Files (x86)\Greener Web\bin\{a3f28269-ad17-41a8-b032-3e0313ef8979}.dll, Delete-on-Reboot, [f9c890e8e893c76f4acbbfe225dd7888],

Registry Keys: 21
PUP.Optional.GreenerWeb.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{1973d53b-7311-45d7-8270-f44571c041a0}, Quarantined, [aa17d99f0b70b87e442347f6788a9b65],
PUP.Optional.GreenerWeb.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{3A1BEABE-0DC5-4615-8099-83973B843C06}, Quarantined, [aa17d99f0b70b87e442347f6788a9b65],
PUP.Optional.GreenerWeb.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{D95E57C2-53B3-4C38-BA1E-7980CB5E1803}, Quarantined, [aa17d99f0b70b87e442347f6788a9b65],
PUP.Optional.GreenerWeb.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{D95E57C2-53B3-4C38-BA1E-7980CB5E1803}, Quarantined, [aa17d99f0b70b87e442347f6788a9b65],
PUP.Optional.GreenerWeb.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{3A1BEABE-0DC5-4615-8099-83973B843C06}, Quarantined, [aa17d99f0b70b87e442347f6788a9b65],
PUP.Optional.GreenerWeb.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{1973D53B-7311-45D7-8270-F44571C041A0}, Quarantined, [aa17d99f0b70b87e442347f6788a9b65],
PUP.Optional.GreenerWeb.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Greener Web, Quarantined, [f9c890e8e893c76f4acbbfe225dd7888],
PUP.Optional.GreenerWeb.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Update Greener Web, Quarantined, [f9c890e8e893c76f4acbbfe225dd7888],
PUP.Optional.GreenerWeb.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Util Greener Web, Quarantined, [f9c890e8e893c76f4acbbfe225dd7888],
PUP.Optional.GreenerWeb.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}, Quarantined, [f9c890e8e893c76f4acbbfe225dd7888],
PUP.Optional.GreenerWeb.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}, Quarantined, [f9c890e8e893c76f4acbbfe225dd7888],
PUP.Optional.GreenerWeb.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}, Quarantined, [f9c890e8e893c76f4acbbfe225dd7888],
PUP.Optional.GreenerWeb.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}, Quarantined, [f9c890e8e893c76f4acbbfe225dd7888],
PUP.Optional.GreenerWeb.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}, Quarantined, [f9c890e8e893c76f4acbbfe225dd7888],
PUP.Optional.GreenerWeb.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}, Quarantined, [f9c890e8e893c76f4acbbfe225dd7888],
PUP.Optional.GreenerWeb.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}, Quarantined, [f9c890e8e893c76f4acbbfe225dd7888],
PUP.Optional.GreenerWeb.A, HKLM\SOFTWARE\WOW6432NODE\Greener Web, Quarantined, [f0d1a9cfe992c67023f3663b50b2fb05],
PUP.Optional.PlusHD.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Plus-HD-3.2, Quarantined, [9031c1b7116a84b258457d37847e5ba5],
PUP.Optional.GreenerWeb.A, HKU\S-1-5-21-1709958801-321113868-2083702043-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Greener Web, Quarantined, [ccf577011f5c3501e632cfd2ea18867a],
PUP.Optional.ReMarkIt.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{470e8496-47be-446f-8e3e-babc30fc20b7}, Quarantined, [dfe2f7819ae10432690990e906fe31cf],
PUP.Optional.ReMarkIt.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{470E8496-47BE-446F-8E3E-BABC30FC20B7}, Quarantined, [dfe2f7819ae10432690990e906fe31cf],

Registry Values: 0
(No malicious items detected)

Registry Data: 1
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Good: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Bad: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Replaced,[d8e926526912fc3a4e968ceb39cba060]

Folders: 8
PUP.Optional.GreenerWeb.A, C:\Program Files (x86)\Greener Web, Delete-on-Reboot, [f9c890e8e893c76f4acbbfe225dd7888],
PUP.Optional.GreenerWeb.A, C:\Program Files (x86)\Greener Web\bin, Delete-on-Reboot, [f9c890e8e893c76f4acbbfe225dd7888],
PUP.Optional.GreenerWeb.A, C:\Program Files (x86)\Greener Web\bin\plugins, Quarantined, [f9c890e8e893c76f4acbbfe225dd7888],
PUP.Optional.GreenerWeb.A, C:\Program Files (x86)\Greener Web\bin\TEMP, Quarantined, [f9c890e8e893c76f4acbbfe225dd7888],
PUP.Optional.CrossRider.A, C:\Users\Claude\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek, Quarantined, [932ef18777049f972bfa315be71b916f],
PUP.Optional.CrossRider.A, C:\Users\Claude\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\0.1_0, Quarantined, [932ef18777049f972bfa315be71b916f],
PUP.Optional.CrossRider.A, C:\Users\Claude\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpmlmhpdbimdbeoebhifcphjhemhjaek, Quarantined, [05bcd0a8abd0072ffeed544189796e92],
PUP.Optional.CrossRider.A, C:\Users\Claude\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jidjhchcblhlapbcpheibgdjkajekhbh, Quarantined, [2b963444601b9b9bacbf732b0bf7eb15],

Files: 52
PUP.Optional.GreenerWeb.A, C:\Program Files (x86)\Greener Web\3DEFEC36-3E0E-4914-9C59-9509F93DE711.dll, Quarantined, [aa17d99f0b70b87e442347f6788a9b65],
PUP.Optional.GreenerWeb.A, C:\Program Files (x86)\Greener Web\GreenerWeb.ico, Quarantined, [f9c890e8e893c76f4acbbfe225dd7888],
PUP.Optional.GreenerWeb.A, C:\Program Files (x86)\Greener Web\0, Quarantined, [f9c890e8e893c76f4acbbfe225dd7888],
PUP.Optional.GreenerWeb.A, C:\Program Files (x86)\Greener Web\7za.exe, Quarantined, [f9c890e8e893c76f4acbbfe225dd7888],
PUP.Optional.GreenerWeb.A, C:\Program Files (x86)\Greener Web\GreenerWebUninstall.exe, Quarantined, [f9c890e8e893c76f4acbbfe225dd7888],
PUP.Optional.GreenerWeb.A, C:\Program Files (x86)\Greener Web\updateGreenerWeb.exe, Delete-on-Reboot, [f9c890e8e893c76f4acbbfe225dd7888],
PUP.Optional.GreenerWeb.A, C:\Program Files (x86)\Greener Web\updateGreenerWeb.InstallState, Quarantined, [f9c890e8e893c76f4acbbfe225dd7888],
PUP.Optional.GreenerWeb.A, C:\Program Files (x86)\Greener Web\bin\7za.exe, Quarantined, [f9c890e8e893c76f4acbbfe225dd7888],
PUP.Optional.GreenerWeb.A, C:\Program Files (x86)\Greener Web\bin\BrowserAdapterS.7z, Quarantined, [f9c890e8e893c76f4acbbfe225dd7888],
PUP.Optional.GreenerWeb.A, C:\Program Files (x86)\Greener Web\bin\GreenerWeb.BrowserAdapter.exe, Delete-on-Reboot, [f9c890e8e893c76f4acbbfe225dd7888],
PUP.Optional.GreenerWeb.A, C:\Program Files (x86)\Greener Web\bin\GreenerWeb.PurBrowse64.exe, Delete-on-Reboot, [f9c890e8e893c76f4acbbfe225dd7888],
PUP.Optional.GreenerWeb.A, C:\Program Files (x86)\Greener Web\bin\GreenerWeb.PurBrowseG.zip, Quarantined, [f9c890e8e893c76f4acbbfe225dd7888],
PUP.Optional.GreenerWeb.A, C:\Program Files (x86)\Greener Web\bin\GreenerWebBAApp.dll, Delete-on-Reboot, [f9c890e8e893c76f4acbbfe225dd7888],
PUP.Optional.GreenerWeb.A, C:\Program Files (x86)\Greener Web\bin\utilGreenerWeb.exe, Delete-on-Reboot, [f9c890e8e893c76f4acbbfe225dd7888],
PUP.Optional.GreenerWeb.A, C:\Program Files (x86)\Greener Web\bin\utilGreenerWeb.InstallState, Quarantined, [f9c890e8e893c76f4acbbfe225dd7888],
PUP.Optional.GreenerWeb.A, C:\Program Files (x86)\Greener Web\bin\{a3f28269-ad17-41a8-b032-3e0313ef8979}.dll, Delete-on-Reboot, [f9c890e8e893c76f4acbbfe225dd7888],
PUP.Optional.GreenerWeb.A, C:\Program Files (x86)\Greener Web\bin\plugins\GreenerWeb.Bromon.dll, Quarantined, [f9c890e8e893c76f4acbbfe225dd7888],
PUP.Optional.GreenerWeb.A, C:\Program Files (x86)\Greener Web\bin\plugins\GreenerWeb.BroStats.dll, Quarantined, [f9c890e8e893c76f4acbbfe225dd7888],
PUP.Optional.GreenerWeb.A, C:\Program Files (x86)\Greener Web\bin\plugins\GreenerWeb.BrowserAdapterS.dll, Quarantined, [f9c890e8e893c76f4acbbfe225dd7888],
PUP.Optional.GreenerWeb.A, C:\Program Files (x86)\Greener Web\bin\plugins\GreenerWeb.CompatibilityChecker.dll, Quarantined, [f9c890e8e893c76f4acbbfe225dd7888],
PUP.Optional.GreenerWeb.A, C:\Program Files (x86)\Greener Web\bin\plugins\GreenerWeb.FFUpdate.dll, Quarantined, [f9c890e8e893c76f4acbbfe225dd7888],
PUP.Optional.GreenerWeb.A, C:\Program Files (x86)\Greener Web\bin\plugins\GreenerWeb.IEUpdate.dll, Quarantined, [f9c890e8e893c76f4acbbfe225dd7888],
PUP.Optional.GreenerWeb.A, C:\Program Files (x86)\Greener Web\bin\plugins\GreenerWeb.PurBrowseG.dll, Quarantined, [f9c890e8e893c76f4acbbfe225dd7888],
PUP.Optional.Superfish.A, C:\Users\Claude\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage, Delete-on-Reboot, [1ba6bdbbe398a294a310278142c04cb4],
PUP.Optional.Superfish.A, C:\Users\Claude\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage-journal, Quarantined, [556ccaae4734ba7c9f14971104feef11],
PUP.Optional.CrossRider.A, C:\Users\Claude\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_lpmlmhpdbimdbeoebhifcphjhemhjaek_0.localstorage, Quarantined, [754cc7b1b2c9e0565cb0e7c6ec16b050],
PUP.Optional.CrossRider.A, C:\Users\Claude\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_jidjhchcblhlapbcpheibgdjkajekhbh_0.localstorage, Quarantined, [5a67eb8d3b4050e6c1a625d14eb51be5],
PUP.Optional.CrossRider.A, C:\Users\Claude\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\0.1_0\background.js, Quarantined, [932ef18777049f972bfa315be71b916f],
PUP.Optional.CrossRider.A, C:\Users\Claude\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\0.1_0\bookmarklet.js, Quarantined, [932ef18777049f972bfa315be71b916f],
PUP.Optional.CrossRider.A, C:\Users\Claude\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\0.1_0\icon-128.png, Quarantined, [932ef18777049f972bfa315be71b916f],
PUP.Optional.CrossRider.A, C:\Users\Claude\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\0.1_0\icon-16.png, Quarantined, [932ef18777049f972bfa315be71b916f],
PUP.Optional.CrossRider.A, C:\Users\Claude\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\0.1_0\icon-48.png, Quarantined, [932ef18777049f972bfa315be71b916f],
PUP.Optional.CrossRider.A, C:\Users\Claude\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\0.1_0\manifest.json, Quarantined, [932ef18777049f972bfa315be71b916f],
PUP.Optional.CrossRider.A, C:\Users\Claude\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpmlmhpdbimdbeoebhifcphjhemhjaek\000005.ldb, Quarantined, [05bcd0a8abd0072ffeed544189796e92],
PUP.Optional.CrossRider.A, C:\Users\Claude\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpmlmhpdbimdbeoebhifcphjhemhjaek\000017.ldb, Quarantined, [05bcd0a8abd0072ffeed544189796e92],
PUP.Optional.CrossRider.A, C:\Users\Claude\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpmlmhpdbimdbeoebhifcphjhemhjaek\000021.log, Quarantined, [05bcd0a8abd0072ffeed544189796e92],
PUP.Optional.CrossRider.A, C:\Users\Claude\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpmlmhpdbimdbeoebhifcphjhemhjaek\CURRENT, Quarantined, [05bcd0a8abd0072ffeed544189796e92],
PUP.Optional.CrossRider.A, C:\Users\Claude\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpmlmhpdbimdbeoebhifcphjhemhjaek\LOCK, Quarantined, [05bcd0a8abd0072ffeed544189796e92],
PUP.Optional.CrossRider.A, C:\Users\Claude\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpmlmhpdbimdbeoebhifcphjhemhjaek\LOG, Quarantined, [05bcd0a8abd0072ffeed544189796e92],
PUP.Optional.CrossRider.A, C:\Users\Claude\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpmlmhpdbimdbeoebhifcphjhemhjaek\LOG.old, Quarantined, [05bcd0a8abd0072ffeed544189796e92],
PUP.Optional.CrossRider.A, C:\Users\Claude\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpmlmhpdbimdbeoebhifcphjhemhjaek\MANIFEST-000019, Quarantined, [05bcd0a8abd0072ffeed544189796e92],
PUP.Optional.CrossRider.A, C:\Users\Claude\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jidjhchcblhlapbcpheibgdjkajekhbh\000022.sst, Quarantined, [2b963444601b9b9bacbf732b0bf7eb15],
PUP.Optional.CrossRider.A, C:\Users\Claude\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jidjhchcblhlapbcpheibgdjkajekhbh\000042.sst, Quarantined, [2b963444601b9b9bacbf732b0bf7eb15],
PUP.Optional.CrossRider.A, C:\Users\Claude\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jidjhchcblhlapbcpheibgdjkajekhbh\000051.sst, Quarantined, [2b963444601b9b9bacbf732b0bf7eb15],
PUP.Optional.CrossRider.A, C:\Users\Claude\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jidjhchcblhlapbcpheibgdjkajekhbh\000054.sst, Quarantined, [2b963444601b9b9bacbf732b0bf7eb15],
PUP.Optional.CrossRider.A, C:\Users\Claude\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jidjhchcblhlapbcpheibgdjkajekhbh\000058.log, Quarantined, [2b963444601b9b9bacbf732b0bf7eb15],
PUP.Optional.CrossRider.A, C:\Users\Claude\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jidjhchcblhlapbcpheibgdjkajekhbh\CURRENT, Quarantined, [2b963444601b9b9bacbf732b0bf7eb15],
PUP.Optional.CrossRider.A, C:\Users\Claude\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jidjhchcblhlapbcpheibgdjkajekhbh\LOCK, Quarantined, [2b963444601b9b9bacbf732b0bf7eb15],
PUP.Optional.CrossRider.A, C:\Users\Claude\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jidjhchcblhlapbcpheibgdjkajekhbh\LOG, Quarantined, [2b963444601b9b9bacbf732b0bf7eb15],
PUP.Optional.CrossRider.A, C:\Users\Claude\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jidjhchcblhlapbcpheibgdjkajekhbh\LOG.old, Quarantined, [2b963444601b9b9bacbf732b0bf7eb15],
PUP.Optional.CrossRider.A, C:\Users\Claude\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jidjhchcblhlapbcpheibgdjkajekhbh\MANIFEST-000056, Quarantined, [2b963444601b9b9bacbf732b0bf7eb15],
PUP.Optional.ASK.A, C:\Users\Claude\AppData\Local\Google\Chrome\User Data\Default\Preferences, Good: (), Bad: ( "startup_urls": [ "http://www.google.com/", "http://www.google.fr/", "http://www.google.com", "http://www.delta-search.com/?babsrc=HP_ss&mntrId=6228E0CB4E7A94BA&affID=119649&tl=gcn63171&tt=250613_gr1&tsp=4924", "http://www.amazon.fr/gp/bit/amazonserp/ref=bit_bds-p14_serp_cr_fr_display?ie=UTF8&tagbase=bds-p14&tbrId=v1_abb-channel-14_b30d443ef4b84ae385c5610cec9656a4_16_37_20130708_FR_cr_sp_BD20130708", "http://start.iminent.com/?appId=0AC0667C-5E50-4FAE-BC2A-BE3197522DEC", "http://www.search.ask.com/?o=APN10640A&gct=hp&d=473-105&v=n9602-140&t=4", "http://start.qone8.com/?type=hp&ts=1382271440&from=adks&uid=OCZ-VERTEX3_OCZ-32C7VA6ITK777H23", "http://start.iminent.com/?appId=8AC8F220-DA1C-42EA-8107-18353F04601C" ],), Replaced,[16abafc966152e08a2782e7859ab41bf]

Physical Sectors: 0
(No malicious items detected)


(end)