Publicité
Publicité
Format du document : text/plain
Prévisualisation
Malwarebytes Anti-Malware
www.malwarebytes.org
Scan Date: 11-Apr-16
Scan Time: 23:24
Logfile: malw.txt
Administrator: Yes
Version: 2.2.1.1043
Malware Database: v2016.04.11.07
Rootkit Database: v2016.04.09.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled
OS: Windows 10
CPU: x64
File System: NTFS
User: WALID
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 417163
Time Elapsed: 18 min, 8 sec
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled
Processes: 0
(No malicious items detected)
Modules: 0
(No malicious items detected)
Registry Keys: 22
PUP.Optional.FindWide, HKLM\SOFTWARE\CLASSES\CLSID\{0FEB2313-F89B-4AC6-8153-84025604A06A}, , [2c67eebfbddc5cda9ff09a4948ba40c0],
PUP.Optional.FindWide, HKLM\SOFTWARE\CLASSES\INTERFACE\{0FEB2313-F89B-4AC6-8153-84025604A06A}, , [2c67eebfbddc5cda9ff09a4948ba40c0],
PUP.Optional.FindWide, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{0FEB2313-F89B-4AC6-8153-84025604A06A}, , [2c67eebfbddc5cda9ff09a4948ba40c0],
PUP.Optional.FindWide, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{0FEB2313-F89B-4AC6-8153-84025604A06A}, , [2c67eebfbddc5cda9ff09a4948ba40c0],
PUP.Optional.FindWide, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{0FEB2313-F89B-4AC6-8153-84025604A06A}, , [2c67eebfbddc5cda9ff09a4948ba40c0],
PUP.Optional.FindWide, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{0FEB2313-F89B-4AC6-8153-84025604A06A}, , [2c67eebfbddc5cda9ff09a4948ba40c0],
PUP.Optional.Yontoo, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{F83D1872-D9FF-47F8-B5A0-49CC51E24EE8}, , [eaa93f6ef4a5a6905b85aa0e768c9070],
PUP.Optional.Yontoo, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{F83D1872-D9FF-47F8-B5A0-49CC51E24EE8}, , [eaa93f6ef4a5a6905b85aa0e768c9070],
PUP.Optional.RecordPage, HKU\S-1-5-21-1463019865-2507068485-2249848927-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{2335267C-DBBA-4DD5-A9D0-C4DB8E6A75A4}, , [1a79a6075c3ddd5932f7a13f6c9617e9],
PUP.Optional.RecordPage, HKU\S-1-5-21-1463019865-2507068485-2249848927-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{2335267C-DBBA-4DD5-A9D0-C4DB8E6A75A4}, , [1a79a6075c3ddd5932f7a13f6c9617e9],
PUP.Optional.SweetIM, HKU\S-1-5-21-1463019865-2507068485-2249848927-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{DEDAF650-12B8-48F5-A843-BBA100716106}, , [f3a0c3ea4059072f0290e0010af807f9],
PUP.Optional.TidyNetwork, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{72A6AB0F-2FA8-4C73-9FCB-1E62A608F001}, , [d1c2446917825dd91d9da33e51b1718f],
PUP.Optional.SearchManager.ChrPRST, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\bahkljhhdeciiaodlkppoonappfnheoi, , [7a1938753267c86e72081d8118ec1ce4],
PUP.Optional.WinYahoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2F23AB71-4AC6-41F2-A955-EA576E553146}, , [e6ad8924fa9f81b50b14bbd1e0248977],
PUP.Optional.WinYahoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B0AEE527-F4FD-46A8-88D9-3AC1DD42F71B}, , [890a6548960346f053cc5a320bf9a45c],
PUP.Optional.SearchManager.ChrPRST, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\bahkljhhdeciiaodlkppoonappfnheoi, , [e5aecce1356445f1ec8e534bd430926e],
PUP.Optional.eShield, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\dkmjljdbbgogihjcapfhgkonfmccbffp, , [098a238ab3e6270fad5687980cf8966a],
PUP.Optional.TNT, HKU\S-1-5-21-1463019865-2507068485-2249848927-1001\SOFTWARE\TNT2, , [2b682a83aaef96a0be7773d25fa54db3],
PUP.Optional.TNT, HKU\S-1-5-21-1463019865-2507068485-2249848927-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2F23AB71-4AC6-41F2-A955-EA576E553146}, , [5241614c356451e524101f26e222738d],
PUP.Optional.TNT, HKU\S-1-5-21-1463019865-2507068485-2249848927-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{FB7082B0-ED3E-4B24-82C0-F0745171DD04}, , [e7ac47661287f1453103271ed430fc04],
PUP.Optional.WinYahoo, HKU\S-1-5-21-1463019865-2507068485-2249848927-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B0AEE527-F4FD-46A8-88D9-3AC1DD42F71B}, , [c5cef6b70891d85e140a701c838122de],
PUP.Optional.ProductSetup, HKU\S-1-5-21-1463019865-2507068485-2249848927-1001\SOFTWARE\PRODUCTSETUP, , [a4ef46672178db5be49f3601867ed828],
Registry Values: 13
PUP.Optional.WinYahoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2f23ab71-4ac6-41f2-a955-ea576e553146}|URL, https://us.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f[e6ad8924fa9f81b50b14bbd1e0248977]D4%26b[e6ad8924fa9f81b50b14bbd1e0248977]DIE%26cc[e6ad8924fa9f81b50b14bbd1e0248977]Ddz%26pa[e6ad8924fa9f81b50b14bbd1e0248977]DWincy%26cd[e6ad8924fa9f81b50b14bbd1e0248977]D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr[e6ad8924fa9f81b50b14bbd1e0248977]D2105944344%26a[e6ad8924fa9f81b50b14bbd1e0248977]Dwbf_spechs_16_14%26os_ver[e6ad8924fa9f81b50b14bbd1e0248977]D10.0%26os[e6ad8924fa9f81b50b14bbd1e0248977]DWindowsB10BPro&p={searchTerms}, %4, %5
PUP.Optional.WinYahoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2f23ab71-4ac6-41f2-a955-ea576e553146}|TopResultURLFallback, https://us.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f[771c95189dfc8caaf22d3953e420847c]D4%26b[771c95189dfc8caaf22d3953e420847c]DIE%26cc[771c95189dfc8caaf22d3953e420847c]Ddz%26pa[771c95189dfc8caaf22d3953e420847c]DWincy%26cd[771c95189dfc8caaf22d3953e420847c]D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr[771c95189dfc8caaf22d3953e420847c]D2105944344%26a[771c95189dfc8caaf22d3953e420847c]Dwbf_spechs_16_14%26os_ver[771c95189dfc8caaf22d3953e420847c]D10.0%26os[771c95189dfc8caaf22d3953e420847c]DWindowsB10BPro&p={searchTerms}, %4, %5
PUP.Optional.WinYahoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B0AEE527-F4FD-46A8-88D9-3AC1DD42F71B}|URL, https://us.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f[890a6548960346f053cc5a320bf9a45c]D4%26b[890a6548960346f053cc5a320bf9a45c]DIE%26cc[890a6548960346f053cc5a320bf9a45c]Ddz%26pa[890a6548960346f053cc5a320bf9a45c]DWincy%26cd[890a6548960346f053cc5a320bf9a45c]D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr[890a6548960346f053cc5a320bf9a45c]D2105944344%26a[890a6548960346f053cc5a320bf9a45c]Dwbf_spechs_16_14%26os_ver[890a6548960346f053cc5a320bf9a45c]D10.0%26os[890a6548960346f053cc5a320bf9a45c]DWindowsB10BPro&p={searchTerms}, %4, %5
PUP.Optional.WinYahoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B0AEE527-F4FD-46A8-88D9-3AC1DD42F71B}|TopResultURLFallback, https://us.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f[c5ce6d4041589b9bcb54fb919f651be5]D4%26b[c5ce6d4041589b9bcb54fb919f651be5]DIE%26cc[c5ce6d4041589b9bcb54fb919f651be5]Ddz%26pa[c5ce6d4041589b9bcb54fb919f651be5]DWincy%26cd[c5ce6d4041589b9bcb54fb919f651be5]D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr[c5ce6d4041589b9bcb54fb919f651be5]D2105944344%26a[c5ce6d4041589b9bcb54fb919f651be5]Dwbf_spechs_16_14%26os_ver[c5ce6d4041589b9bcb54fb919f651be5]D10.0%26os[c5ce6d4041589b9bcb54fb919f651be5]DWindowsB10BPro&p={searchTerms}, %4, %5
PUP.Optional.TNT2, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\FIREWALLRULES|{B2C58F98-912D-4457-B8AF-380E61CD96DD}, v2.24|Action=Allow|Active=TRUE|Dir=In|App=C:\Users\WALID\AppData\Local\TNT2\2.0.0.2030\TNT2User.exe|Name=TNT2|, , [d3c09f0ef4a5df577228197eea1a07f9]
PUP.Optional.TNT, HKU\S-1-5-21-1463019865-2507068485-2249848927-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2f23ab71-4ac6-41f2-a955-ea576e553146}|OSDFileURL, file:///C:/Users/WALID/AppData/Local/TNT2/Profiles/11467/os11467.xml, , [5241614c356451e524101f26e222738d]
PUP.Optional.TNT, HKU\S-1-5-21-1463019865-2507068485-2249848927-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2f23ab71-4ac6-41f2-a955-ea576e553146}|FaviconURL, http://mirror.mirror-files.com/tnt2/10999/eShield_16.ico, , [0192832ac9d079bd72c21d287b89e818]
PUP.Optional.eShield, HKU\S-1-5-21-1463019865-2507068485-2249848927-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2f23ab71-4ac6-41f2-a955-ea576e553146}|URL, http://search.eshield.com/serp?guid={B8A7741D-67B5-4E0E-AB39-3FEBD57C3C4C}&action=default_search&k={searchTerms}, , [266d6a43c4d506300002c35ce51fae52]
PUP.Optional.TNT, HKU\S-1-5-21-1463019865-2507068485-2249848927-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{FB7082B0-ED3E-4B24-82C0-F0745171DD04}|OSDFileURL, file:///C:/Users/WALID/AppData/Local/TNT2/Profiles/11467/yah11467.xml, , [e7ac47661287f1453103271ed430fc04]
PUP.Optional.TNT, HKU\S-1-5-21-1463019865-2507068485-2249848927-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{FB7082B0-ED3E-4B24-82C0-F0745171DD04}|FaviconURL, http://mirror.mirror-files.com/tnt2/1/Y1404.ico, , [0093b7f61c7da78f8da72a1b0004d828]
PUP.Optional.WinYahoo, HKU\S-1-5-21-1463019865-2507068485-2249848927-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B0AEE527-F4FD-46A8-88D9-3AC1DD42F71B}|URL, https://us.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f[c5cef6b70891d85e140a701c838122de]D4%26b[c5cef6b70891d85e140a701c838122de]DIE%26cc[c5cef6b70891d85e140a701c838122de]Ddz%26pa[c5cef6b70891d85e140a701c838122de]DWincy%26cd[c5cef6b70891d85e140a701c838122de]D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr[c5cef6b70891d85e140a701c838122de]D2105944344%26a[c5cef6b70891d85e140a701c838122de]Dwbf_spechs_16_14%26os_ver[c5cef6b70891d85e140a701c838122de]D10.0%26os[c5cef6b70891d85e140a701c838122de]DWindowsB10BPro&p={searchTerms}, %4, %5
PUP.Optional.WinYahoo, HKU\S-1-5-21-1463019865-2507068485-2249848927-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B0AEE527-F4FD-46A8-88D9-3AC1DD42F71B}|TopResultURLFallback, https://us.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f[078cecc182176ec8100ec4c86c981ce4]D4%26b[078cecc182176ec8100ec4c86c981ce4]DIE%26cc[078cecc182176ec8100ec4c86c981ce4]Ddz%26pa[078cecc182176ec8100ec4c86c981ce4]DWincy%26cd[078cecc182176ec8100ec4c86c981ce4]D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr[078cecc182176ec8100ec4c86c981ce4]D2105944344%26a[078cecc182176ec8100ec4c86c981ce4]Dwbf_spechs_16_14%26os_ver[078cecc182176ec8100ec4c86c981ce4]D10.0%26os[078cecc182176ec8100ec4c86c981ce4]DWindowsB10BPro&p={searchTerms}, %4, %5
PUP.Optional.ProductSetup, HKU\S-1-5-21-1463019865-2507068485-2249848927-1001\SOFTWARE\PRODUCTSETUP|tb, 0G2O2W1R0C1R1H, , [a4ef46672178db5be49f3601867ed828]
Registry Data: 3
PUP.Optional.WinYahoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=fBad: (https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Ddz%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr%3D2105944344%26a%3Dwbf_spechs_16_14%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro),,[6c27c7e68712ad89cb3560d636cf25db]D1%26bBad: (https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Ddz%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr%3D2105944344%26a%3Dwbf_spechs_16_14%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro),,[6c27c7e68712ad89cb3560d636cf25db]DIE%26ccBad: (https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Ddz%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr%3D2105944344%26a%3Dwbf_spechs_16_14%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro),,[6c27c7e68712ad89cb3560d636cf25db]Ddz%26paBad: (https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Ddz%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr%3D2105944344%26a%3Dwbf_spechs_16_14%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro),,[6c27c7e68712ad89cb3560d636cf25db]DWincy%26cdBad: (https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Ddz%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr%3D2105944344%26a%3Dwbf_spechs_16_14%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro),,[6c27c7e68712ad89cb3560d636cf25db]D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26crBad: (https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Ddz%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr%3D2105944344%26a%3Dwbf_spechs_16_14%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro),,[6c27c7e68712ad89cb3560d636cf25db]D2105944344%26aBad: (https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Ddz%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr%3D2105944344%26a%3Dwbf_spechs_16_14%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro),,[6c27c7e68712ad89cb3560d636cf25db]Dwbf_spechs_16_14%26os_verBad: (https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Ddz%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr%3D2105944344%26a%3Dwbf_spechs_16_14%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro),,[6c27c7e68712ad89cb3560d636cf25db]D10.0%26osBad: (https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Ddz%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr%3D2105944344%26a%3Dwbf_spechs_16_14%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro),,[6c27c7e68712ad89cb3560d636cf25db]DWindowsGood: (www.google.com)B10Good: (www.google.com)BPro, %4, %5
PUP.Optional.WinYahoo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=fBad: (https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Ddz%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr%3D2105944344%26a%3Dwbf_spechs_16_14%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro),,[3b58a60755449d99ff0147ef82832ad6]D1%26bBad: (https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Ddz%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr%3D2105944344%26a%3Dwbf_spechs_16_14%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro),,[3b58a60755449d99ff0147ef82832ad6]DIE%26ccBad: (https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Ddz%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr%3D2105944344%26a%3Dwbf_spechs_16_14%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro),,[3b58a60755449d99ff0147ef82832ad6]Ddz%26paBad: (https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Ddz%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr%3D2105944344%26a%3Dwbf_spechs_16_14%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro),,[3b58a60755449d99ff0147ef82832ad6]DWincy%26cdBad: (https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Ddz%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr%3D2105944344%26a%3Dwbf_spechs_16_14%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro),,[3b58a60755449d99ff0147ef82832ad6]D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26crBad: (https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Ddz%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr%3D2105944344%26a%3Dwbf_spechs_16_14%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro),,[3b58a60755449d99ff0147ef82832ad6]D2105944344%26aBad: (https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Ddz%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr%3D2105944344%26a%3Dwbf_spechs_16_14%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro),,[3b58a60755449d99ff0147ef82832ad6]Dwbf_spechs_16_14%26os_verBad: (https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Ddz%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr%3D2105944344%26a%3Dwbf_spechs_16_14%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro),,[3b58a60755449d99ff0147ef82832ad6]D10.0%26osBad: (https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Ddz%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr%3D2105944344%26a%3Dwbf_spechs_16_14%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro),,[3b58a60755449d99ff0147ef82832ad6]DWindowsGood: (www.google.com)B10Good: (www.google.com)BPro, %4, %5
PUP.Optional.WinYahoo, HKU\S-1-5-21-1463019865-2507068485-2249848927-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=fBad: (https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Ddz%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr%3D2105944344%26a%3Dwbf_spechs_16_14%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro),,[484b03aaf8a1ea4c7a84f73e4abbce32]D1%26bBad: (https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Ddz%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr%3D2105944344%26a%3Dwbf_spechs_16_14%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro),,[484b03aaf8a1ea4c7a84f73e4abbce32]DIE%26ccBad: (https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Ddz%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr%3D2105944344%26a%3Dwbf_spechs_16_14%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro),,[484b03aaf8a1ea4c7a84f73e4abbce32]Ddz%26paBad: (https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Ddz%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr%3D2105944344%26a%3Dwbf_spechs_16_14%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro),,[484b03aaf8a1ea4c7a84f73e4abbce32]DWincy%26cdBad: (https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Ddz%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr%3D2105944344%26a%3Dwbf_spechs_16_14%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro),,[484b03aaf8a1ea4c7a84f73e4abbce32]D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26crBad: (https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Ddz%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr%3D2105944344%26a%3Dwbf_spechs_16_14%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro),,[484b03aaf8a1ea4c7a84f73e4abbce32]D2105944344%26aBad: (https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Ddz%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr%3D2105944344%26a%3Dwbf_spechs_16_14%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro),,[484b03aaf8a1ea4c7a84f73e4abbce32]Dwbf_spechs_16_14%26os_verBad: (https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Ddz%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr%3D2105944344%26a%3Dwbf_spechs_16_14%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro),,[484b03aaf8a1ea4c7a84f73e4abbce32]D10.0%26osBad: (https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Ddz%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr%3D2105944344%26a%3Dwbf_spechs_16_14%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro),,[484b03aaf8a1ea4c7a84f73e4abbce32]DWindowsGood: (www.google.com)B10Good: (www.google.com)BPro, %4, %5
Folders: 24
PUP.Optional.Yontoo, C:\ProgramData\ab36fac3-93dd-4505-9add-ad6d38d4b914, , [fb987b326138221438b975b39073ff01],
PUP.Optional.Yontoo, C:\ProgramData\ab36fac3-93dd-4505-9add-ad6d38d4b914\plugins, , [fb987b326138221438b975b39073ff01],
PUP.Optional.Yontoo, C:\ProgramData\ab36fac3-93dd-4505-9add-ad6d38d4b914\plugins\12, , [fb987b326138221438b975b39073ff01],
PUP.Optional.Yontoo, C:\ProgramData\ab36fac3-93dd-4505-9add-ad6d38d4b914\plugins\12\resources, , [fb987b326138221438b975b39073ff01],
PUP.Optional.Yontoo, C:\ProgramData\ab36fac3-93dd-4505-9add-ad6d38d4b914\plugins\2, , [fb987b326138221438b975b39073ff01],
PUP.Optional.Yontoo, C:\ProgramData\ab36fac3-93dd-4505-9add-ad6d38d4b914\plugins\8, , [fb987b326138221438b975b39073ff01],
PUP.Optional.Yontoo, C:\Program Files (x86)\Common Files\ab36fac3-93dd-4505-9add-ad6d38d4b914, , [fe952d806534d95d3ab89c8c5aa9cc34],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\chrome, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\common, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\external, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\search, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\css, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\external, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\fonts, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\icons, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\icons\weather, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\images, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\_metadata, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.RecordPage, C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpencbddmmckhkfcdfhdlpecddglemfi\1.0.5690.33234_0, , [d4bf4d60c0d993a3e024302e7e877e82],
PUP.Optional.RecordPage, C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpencbddmmckhkfcdfhdlpecddglemfi, , [d4bf4d60c0d993a3e024302e7e877e82],
Files: 85
PUP.Optional.BrowseFox, C:\ProgramData\ab36fac3-93dd-4505-9add-ad6d38d4b914\plugins\12\resources\plugin.dll, , [d5be9617b7e255e153244088bb462ed2],
PUP.Optional.eShield, C:\Users\WALID\AppData\Roaming\Mozilla\Firefox\Profiles\urumrye2.default\searchplugins\eshield-safe-web.xml, , [fe95f3ba5841d16517e9d44b7094ab55],
PUP.Optional.WinYahoo, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HowToRemove.html.lnk, , [2370f5b86b2ea19556616327eb19b947],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_bahkljhhdeciiaodlkppoonappfnheoi_0.localstorage, , [6c27f8b55a3fb87e24a8a5fc84803bc5],
PUP.Optional.Yontoo, C:\ProgramData\ab36fac3-93dd-4505-9add-ad6d38d4b914\temp, , [fb987b326138221438b975b39073ff01],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\manifest.json, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\background.html, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\newtab.html, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\chrome\common.js, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\chrome\lifecycle.js, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\chrome\settings.js, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\chrome\setup.js, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\chrome\utils.js, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\common\conf-sys.js, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\common\conf.js, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\common\prefs-sys.js, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\common\prefs.js, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\common\settings-dev.js, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\external\jquery-2.1.1.min.js, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\external\md5.min.js, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\external\spectrum.css, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\external\spectrum.js, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\external\string.min.js, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\external\underscore-min.js, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\search\AutoSuggest.js, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\search\contentscript.js, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\search\newtab-base.js, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\search\search-engines.js, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\search\search-form.js, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\search\search-images.js, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\search\search-redirect.js, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\css\newtab.css, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\css\search.css, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\css\search2.css, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\css\styles.css, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\external\normalize.css, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\fonts\HelveticaNeue-Thin.otf, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\fonts\neue-bold.woff, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\fonts\neue.woff, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\icons\128.png, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\icons\16.png, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\icons\48.png, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\icons\weather\01d.svg, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\icons\weather\01n.svg, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\icons\weather\02d.svg, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\icons\weather\02n.svg, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\icons\weather\03d.svg, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\icons\weather\03n.svg, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\icons\weather\04d.svg, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\icons\weather\04n.svg, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\icons\weather\09d.svg, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\icons\weather\09n.svg, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\icons\weather\10d.svg, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\icons\weather\10n.svg, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\icons\weather\11d.svg, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\icons\weather\11n.svg, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\icons\weather\13d.svg, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\icons\weather\13n.svg, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\icons\weather\50d.svg, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\icons\weather\50n.svg, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\images\bg.jpg, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\images\bing.png, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\images\bluesky-bg.jpg, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\images\brush.png, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\images\clock.png, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\images\cloud.png, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\images\cupcake-bg.jpg, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\images\desk-bg.jpg, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\images\doodle.png, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\images\down.png, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\images\google.png, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\images\mountain-bg.jpg, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\images\sea-bg.jpg, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\images\yahoo.png, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\images\yahoo.svg, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\_metadata\verified_contents.json, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.RecordPage, C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpencbddmmckhkfcdfhdlpecddglemfi\1.0.5690.33234_0\manifest.json, , [d4bf4d60c0d993a3e024302e7e877e82],
PUP.Optional.RecordPage, C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpencbddmmckhkfcdfhdlpecddglemfi\1.0.5690.33234_0\background.js, , [d4bf4d60c0d993a3e024302e7e877e82],
PUP.Optional.RecordPage, C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpencbddmmckhkfcdfhdlpecddglemfi\1.0.5690.33234_0\content.js, , [d4bf4d60c0d993a3e024302e7e877e82],
PUP.Optional.RecordPage, C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpencbddmmckhkfcdfhdlpecddglemfi\1.0.5690.33234_0\icon.png, , [d4bf4d60c0d993a3e024302e7e877e82],
PUP.Optional.eShield, C:\Users\WALID\AppData\Roaming\Mozilla\Firefox\Profiles\urumrye2.default\prefs.js, Good: (), Bad: (user_pref("keyword.URL", "http://search.eshield.com/serp?guid={B8A7741D-67B5-4E0E-AB39-3FEBD57C3C4C}&action=default_search&k=");), ,[0d86a20bc4d5a78f53dc0b4f22e38a76]
PUP.Optional.eShield, C:\Users\WALID\AppData\Roaming\Mozilla\Firefox\Profiles\urumrye2.default\prefs.js, Good: (), Bad: (eShield Safe Web), ,[5e35fcb16138a6903b8ac59e8d7809f7]
PUP.Optional.WinYahoo, C:\Users\WALID\AppData\Roaming\Mozilla\Firefox\Profiles\urumrye2.default\searchplugins\yahoo.xml, , [2d66703d0198cd692ddf6ff12bda8878],
PUP.Optional.WinYahoo, C:\Users\WALID\AppData\Roaming\Mozilla\Firefox\Profiles\urumrye2.default\searchplugins\Search Provided by Yahoo.xml, , [e8abc3eadcbddd599d1f63fdea1be21e],
PUM.Optional.FireFoxSearchOverride, C:\Users\WALID\AppData\Roaming\Mozilla\Firefox\Profiles\urumrye2.default\user.js, , [2d66fab359404aecc0831f4126dfa25e],
Physical Sectors: 0
(No malicious items detected)
(end)
www.malwarebytes.org
Scan Date: 11-Apr-16
Scan Time: 23:24
Logfile: malw.txt
Administrator: Yes
Version: 2.2.1.1043
Malware Database: v2016.04.11.07
Rootkit Database: v2016.04.09.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled
OS: Windows 10
CPU: x64
File System: NTFS
User: WALID
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 417163
Time Elapsed: 18 min, 8 sec
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled
Processes: 0
(No malicious items detected)
Modules: 0
(No malicious items detected)
Registry Keys: 22
PUP.Optional.FindWide, HKLM\SOFTWARE\CLASSES\CLSID\{0FEB2313-F89B-4AC6-8153-84025604A06A}, , [2c67eebfbddc5cda9ff09a4948ba40c0],
PUP.Optional.FindWide, HKLM\SOFTWARE\CLASSES\INTERFACE\{0FEB2313-F89B-4AC6-8153-84025604A06A}, , [2c67eebfbddc5cda9ff09a4948ba40c0],
PUP.Optional.FindWide, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{0FEB2313-F89B-4AC6-8153-84025604A06A}, , [2c67eebfbddc5cda9ff09a4948ba40c0],
PUP.Optional.FindWide, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{0FEB2313-F89B-4AC6-8153-84025604A06A}, , [2c67eebfbddc5cda9ff09a4948ba40c0],
PUP.Optional.FindWide, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{0FEB2313-F89B-4AC6-8153-84025604A06A}, , [2c67eebfbddc5cda9ff09a4948ba40c0],
PUP.Optional.FindWide, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{0FEB2313-F89B-4AC6-8153-84025604A06A}, , [2c67eebfbddc5cda9ff09a4948ba40c0],
PUP.Optional.Yontoo, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{F83D1872-D9FF-47F8-B5A0-49CC51E24EE8}, , [eaa93f6ef4a5a6905b85aa0e768c9070],
PUP.Optional.Yontoo, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{F83D1872-D9FF-47F8-B5A0-49CC51E24EE8}, , [eaa93f6ef4a5a6905b85aa0e768c9070],
PUP.Optional.RecordPage, HKU\S-1-5-21-1463019865-2507068485-2249848927-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{2335267C-DBBA-4DD5-A9D0-C4DB8E6A75A4}, , [1a79a6075c3ddd5932f7a13f6c9617e9],
PUP.Optional.RecordPage, HKU\S-1-5-21-1463019865-2507068485-2249848927-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{2335267C-DBBA-4DD5-A9D0-C4DB8E6A75A4}, , [1a79a6075c3ddd5932f7a13f6c9617e9],
PUP.Optional.SweetIM, HKU\S-1-5-21-1463019865-2507068485-2249848927-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{DEDAF650-12B8-48F5-A843-BBA100716106}, , [f3a0c3ea4059072f0290e0010af807f9],
PUP.Optional.TidyNetwork, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{72A6AB0F-2FA8-4C73-9FCB-1E62A608F001}, , [d1c2446917825dd91d9da33e51b1718f],
PUP.Optional.SearchManager.ChrPRST, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\bahkljhhdeciiaodlkppoonappfnheoi, , [7a1938753267c86e72081d8118ec1ce4],
PUP.Optional.WinYahoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2F23AB71-4AC6-41F2-A955-EA576E553146}, , [e6ad8924fa9f81b50b14bbd1e0248977],
PUP.Optional.WinYahoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B0AEE527-F4FD-46A8-88D9-3AC1DD42F71B}, , [890a6548960346f053cc5a320bf9a45c],
PUP.Optional.SearchManager.ChrPRST, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\bahkljhhdeciiaodlkppoonappfnheoi, , [e5aecce1356445f1ec8e534bd430926e],
PUP.Optional.eShield, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\dkmjljdbbgogihjcapfhgkonfmccbffp, , [098a238ab3e6270fad5687980cf8966a],
PUP.Optional.TNT, HKU\S-1-5-21-1463019865-2507068485-2249848927-1001\SOFTWARE\TNT2, , [2b682a83aaef96a0be7773d25fa54db3],
PUP.Optional.TNT, HKU\S-1-5-21-1463019865-2507068485-2249848927-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2F23AB71-4AC6-41F2-A955-EA576E553146}, , [5241614c356451e524101f26e222738d],
PUP.Optional.TNT, HKU\S-1-5-21-1463019865-2507068485-2249848927-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{FB7082B0-ED3E-4B24-82C0-F0745171DD04}, , [e7ac47661287f1453103271ed430fc04],
PUP.Optional.WinYahoo, HKU\S-1-5-21-1463019865-2507068485-2249848927-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B0AEE527-F4FD-46A8-88D9-3AC1DD42F71B}, , [c5cef6b70891d85e140a701c838122de],
PUP.Optional.ProductSetup, HKU\S-1-5-21-1463019865-2507068485-2249848927-1001\SOFTWARE\PRODUCTSETUP, , [a4ef46672178db5be49f3601867ed828],
Registry Values: 13
PUP.Optional.WinYahoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2f23ab71-4ac6-41f2-a955-ea576e553146}|URL, https://us.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f[e6ad8924fa9f81b50b14bbd1e0248977]D4%26b[e6ad8924fa9f81b50b14bbd1e0248977]DIE%26cc[e6ad8924fa9f81b50b14bbd1e0248977]Ddz%26pa[e6ad8924fa9f81b50b14bbd1e0248977]DWincy%26cd[e6ad8924fa9f81b50b14bbd1e0248977]D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr[e6ad8924fa9f81b50b14bbd1e0248977]D2105944344%26a[e6ad8924fa9f81b50b14bbd1e0248977]Dwbf_spechs_16_14%26os_ver[e6ad8924fa9f81b50b14bbd1e0248977]D10.0%26os[e6ad8924fa9f81b50b14bbd1e0248977]DWindowsB10BPro&p={searchTerms}, %4, %5
PUP.Optional.WinYahoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2f23ab71-4ac6-41f2-a955-ea576e553146}|TopResultURLFallback, https://us.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f[771c95189dfc8caaf22d3953e420847c]D4%26b[771c95189dfc8caaf22d3953e420847c]DIE%26cc[771c95189dfc8caaf22d3953e420847c]Ddz%26pa[771c95189dfc8caaf22d3953e420847c]DWincy%26cd[771c95189dfc8caaf22d3953e420847c]D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr[771c95189dfc8caaf22d3953e420847c]D2105944344%26a[771c95189dfc8caaf22d3953e420847c]Dwbf_spechs_16_14%26os_ver[771c95189dfc8caaf22d3953e420847c]D10.0%26os[771c95189dfc8caaf22d3953e420847c]DWindowsB10BPro&p={searchTerms}, %4, %5
PUP.Optional.WinYahoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B0AEE527-F4FD-46A8-88D9-3AC1DD42F71B}|URL, https://us.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f[890a6548960346f053cc5a320bf9a45c]D4%26b[890a6548960346f053cc5a320bf9a45c]DIE%26cc[890a6548960346f053cc5a320bf9a45c]Ddz%26pa[890a6548960346f053cc5a320bf9a45c]DWincy%26cd[890a6548960346f053cc5a320bf9a45c]D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr[890a6548960346f053cc5a320bf9a45c]D2105944344%26a[890a6548960346f053cc5a320bf9a45c]Dwbf_spechs_16_14%26os_ver[890a6548960346f053cc5a320bf9a45c]D10.0%26os[890a6548960346f053cc5a320bf9a45c]DWindowsB10BPro&p={searchTerms}, %4, %5
PUP.Optional.WinYahoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B0AEE527-F4FD-46A8-88D9-3AC1DD42F71B}|TopResultURLFallback, https://us.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f[c5ce6d4041589b9bcb54fb919f651be5]D4%26b[c5ce6d4041589b9bcb54fb919f651be5]DIE%26cc[c5ce6d4041589b9bcb54fb919f651be5]Ddz%26pa[c5ce6d4041589b9bcb54fb919f651be5]DWincy%26cd[c5ce6d4041589b9bcb54fb919f651be5]D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr[c5ce6d4041589b9bcb54fb919f651be5]D2105944344%26a[c5ce6d4041589b9bcb54fb919f651be5]Dwbf_spechs_16_14%26os_ver[c5ce6d4041589b9bcb54fb919f651be5]D10.0%26os[c5ce6d4041589b9bcb54fb919f651be5]DWindowsB10BPro&p={searchTerms}, %4, %5
PUP.Optional.TNT2, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\FIREWALLRULES|{B2C58F98-912D-4457-B8AF-380E61CD96DD}, v2.24|Action=Allow|Active=TRUE|Dir=In|App=C:\Users\WALID\AppData\Local\TNT2\2.0.0.2030\TNT2User.exe|Name=TNT2|, , [d3c09f0ef4a5df577228197eea1a07f9]
PUP.Optional.TNT, HKU\S-1-5-21-1463019865-2507068485-2249848927-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2f23ab71-4ac6-41f2-a955-ea576e553146}|OSDFileURL, file:///C:/Users/WALID/AppData/Local/TNT2/Profiles/11467/os11467.xml, , [5241614c356451e524101f26e222738d]
PUP.Optional.TNT, HKU\S-1-5-21-1463019865-2507068485-2249848927-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2f23ab71-4ac6-41f2-a955-ea576e553146}|FaviconURL, http://mirror.mirror-files.com/tnt2/10999/eShield_16.ico, , [0192832ac9d079bd72c21d287b89e818]
PUP.Optional.eShield, HKU\S-1-5-21-1463019865-2507068485-2249848927-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2f23ab71-4ac6-41f2-a955-ea576e553146}|URL, http://search.eshield.com/serp?guid={B8A7741D-67B5-4E0E-AB39-3FEBD57C3C4C}&action=default_search&k={searchTerms}, , [266d6a43c4d506300002c35ce51fae52]
PUP.Optional.TNT, HKU\S-1-5-21-1463019865-2507068485-2249848927-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{FB7082B0-ED3E-4B24-82C0-F0745171DD04}|OSDFileURL, file:///C:/Users/WALID/AppData/Local/TNT2/Profiles/11467/yah11467.xml, , [e7ac47661287f1453103271ed430fc04]
PUP.Optional.TNT, HKU\S-1-5-21-1463019865-2507068485-2249848927-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{FB7082B0-ED3E-4B24-82C0-F0745171DD04}|FaviconURL, http://mirror.mirror-files.com/tnt2/1/Y1404.ico, , [0093b7f61c7da78f8da72a1b0004d828]
PUP.Optional.WinYahoo, HKU\S-1-5-21-1463019865-2507068485-2249848927-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B0AEE527-F4FD-46A8-88D9-3AC1DD42F71B}|URL, https://us.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f[c5cef6b70891d85e140a701c838122de]D4%26b[c5cef6b70891d85e140a701c838122de]DIE%26cc[c5cef6b70891d85e140a701c838122de]Ddz%26pa[c5cef6b70891d85e140a701c838122de]DWincy%26cd[c5cef6b70891d85e140a701c838122de]D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr[c5cef6b70891d85e140a701c838122de]D2105944344%26a[c5cef6b70891d85e140a701c838122de]Dwbf_spechs_16_14%26os_ver[c5cef6b70891d85e140a701c838122de]D10.0%26os[c5cef6b70891d85e140a701c838122de]DWindowsB10BPro&p={searchTerms}, %4, %5
PUP.Optional.WinYahoo, HKU\S-1-5-21-1463019865-2507068485-2249848927-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B0AEE527-F4FD-46A8-88D9-3AC1DD42F71B}|TopResultURLFallback, https://us.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f[078cecc182176ec8100ec4c86c981ce4]D4%26b[078cecc182176ec8100ec4c86c981ce4]DIE%26cc[078cecc182176ec8100ec4c86c981ce4]Ddz%26pa[078cecc182176ec8100ec4c86c981ce4]DWincy%26cd[078cecc182176ec8100ec4c86c981ce4]D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr[078cecc182176ec8100ec4c86c981ce4]D2105944344%26a[078cecc182176ec8100ec4c86c981ce4]Dwbf_spechs_16_14%26os_ver[078cecc182176ec8100ec4c86c981ce4]D10.0%26os[078cecc182176ec8100ec4c86c981ce4]DWindowsB10BPro&p={searchTerms}, %4, %5
PUP.Optional.ProductSetup, HKU\S-1-5-21-1463019865-2507068485-2249848927-1001\SOFTWARE\PRODUCTSETUP|tb, 0G2O2W1R0C1R1H, , [a4ef46672178db5be49f3601867ed828]
Registry Data: 3
PUP.Optional.WinYahoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=fBad: (https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Ddz%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr%3D2105944344%26a%3Dwbf_spechs_16_14%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro),,[6c27c7e68712ad89cb3560d636cf25db]D1%26bBad: (https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Ddz%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr%3D2105944344%26a%3Dwbf_spechs_16_14%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro),,[6c27c7e68712ad89cb3560d636cf25db]DIE%26ccBad: (https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Ddz%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr%3D2105944344%26a%3Dwbf_spechs_16_14%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro),,[6c27c7e68712ad89cb3560d636cf25db]Ddz%26paBad: (https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Ddz%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr%3D2105944344%26a%3Dwbf_spechs_16_14%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro),,[6c27c7e68712ad89cb3560d636cf25db]DWincy%26cdBad: (https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Ddz%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr%3D2105944344%26a%3Dwbf_spechs_16_14%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro),,[6c27c7e68712ad89cb3560d636cf25db]D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26crBad: (https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Ddz%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr%3D2105944344%26a%3Dwbf_spechs_16_14%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro),,[6c27c7e68712ad89cb3560d636cf25db]D2105944344%26aBad: (https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Ddz%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr%3D2105944344%26a%3Dwbf_spechs_16_14%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro),,[6c27c7e68712ad89cb3560d636cf25db]Dwbf_spechs_16_14%26os_verBad: (https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Ddz%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr%3D2105944344%26a%3Dwbf_spechs_16_14%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro),,[6c27c7e68712ad89cb3560d636cf25db]D10.0%26osBad: (https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Ddz%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr%3D2105944344%26a%3Dwbf_spechs_16_14%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro),,[6c27c7e68712ad89cb3560d636cf25db]DWindowsGood: (www.google.com)B10Good: (www.google.com)BPro, %4, %5
PUP.Optional.WinYahoo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=fBad: (https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Ddz%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr%3D2105944344%26a%3Dwbf_spechs_16_14%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro),,[3b58a60755449d99ff0147ef82832ad6]D1%26bBad: (https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Ddz%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr%3D2105944344%26a%3Dwbf_spechs_16_14%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro),,[3b58a60755449d99ff0147ef82832ad6]DIE%26ccBad: (https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Ddz%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr%3D2105944344%26a%3Dwbf_spechs_16_14%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro),,[3b58a60755449d99ff0147ef82832ad6]Ddz%26paBad: (https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Ddz%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr%3D2105944344%26a%3Dwbf_spechs_16_14%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro),,[3b58a60755449d99ff0147ef82832ad6]DWincy%26cdBad: (https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Ddz%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr%3D2105944344%26a%3Dwbf_spechs_16_14%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro),,[3b58a60755449d99ff0147ef82832ad6]D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26crBad: (https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Ddz%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr%3D2105944344%26a%3Dwbf_spechs_16_14%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro),,[3b58a60755449d99ff0147ef82832ad6]D2105944344%26aBad: (https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Ddz%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr%3D2105944344%26a%3Dwbf_spechs_16_14%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro),,[3b58a60755449d99ff0147ef82832ad6]Dwbf_spechs_16_14%26os_verBad: (https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Ddz%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr%3D2105944344%26a%3Dwbf_spechs_16_14%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro),,[3b58a60755449d99ff0147ef82832ad6]D10.0%26osBad: (https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Ddz%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr%3D2105944344%26a%3Dwbf_spechs_16_14%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro),,[3b58a60755449d99ff0147ef82832ad6]DWindowsGood: (www.google.com)B10Good: (www.google.com)BPro, %4, %5
PUP.Optional.WinYahoo, HKU\S-1-5-21-1463019865-2507068485-2249848927-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=fBad: (https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Ddz%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr%3D2105944344%26a%3Dwbf_spechs_16_14%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro),,[484b03aaf8a1ea4c7a84f73e4abbce32]D1%26bBad: (https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Ddz%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr%3D2105944344%26a%3Dwbf_spechs_16_14%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro),,[484b03aaf8a1ea4c7a84f73e4abbce32]DIE%26ccBad: (https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Ddz%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr%3D2105944344%26a%3Dwbf_spechs_16_14%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro),,[484b03aaf8a1ea4c7a84f73e4abbce32]Ddz%26paBad: (https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Ddz%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr%3D2105944344%26a%3Dwbf_spechs_16_14%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro),,[484b03aaf8a1ea4c7a84f73e4abbce32]DWincy%26cdBad: (https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Ddz%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr%3D2105944344%26a%3Dwbf_spechs_16_14%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro),,[484b03aaf8a1ea4c7a84f73e4abbce32]D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26crBad: (https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Ddz%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr%3D2105944344%26a%3Dwbf_spechs_16_14%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro),,[484b03aaf8a1ea4c7a84f73e4abbce32]D2105944344%26aBad: (https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Ddz%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr%3D2105944344%26a%3Dwbf_spechs_16_14%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro),,[484b03aaf8a1ea4c7a84f73e4abbce32]Dwbf_spechs_16_14%26os_verBad: (https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Ddz%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr%3D2105944344%26a%3Dwbf_spechs_16_14%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro),,[484b03aaf8a1ea4c7a84f73e4abbce32]D10.0%26osBad: (https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_spechs_16_14¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Ddz%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0DyEtA0DyB0EzytBzy0DtAtDyDtC0D0EtN0D0Tzu0StCyDyCtCtN1L2XzutAtFtBtDtFtDtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0FtC0AzzyCyDtGyByBtDtCtGzy0Czy0DtGyCyCyDyCtG0EtDyEyDtDtCzz0A0B0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyBzytB0D0A0CzytGyDtAtCyDtGyEtDtB0EtGzz0EzzyBtGtByDyByE0DtD0EtCyDyC0A0B2QtN0A0LzutB%26cr%3D2105944344%26a%3Dwbf_spechs_16_14%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro),,[484b03aaf8a1ea4c7a84f73e4abbce32]DWindowsGood: (www.google.com)B10Good: (www.google.com)BPro, %4, %5
Folders: 24
PUP.Optional.Yontoo, C:\ProgramData\ab36fac3-93dd-4505-9add-ad6d38d4b914, , [fb987b326138221438b975b39073ff01],
PUP.Optional.Yontoo, C:\ProgramData\ab36fac3-93dd-4505-9add-ad6d38d4b914\plugins, , [fb987b326138221438b975b39073ff01],
PUP.Optional.Yontoo, C:\ProgramData\ab36fac3-93dd-4505-9add-ad6d38d4b914\plugins\12, , [fb987b326138221438b975b39073ff01],
PUP.Optional.Yontoo, C:\ProgramData\ab36fac3-93dd-4505-9add-ad6d38d4b914\plugins\12\resources, , [fb987b326138221438b975b39073ff01],
PUP.Optional.Yontoo, C:\ProgramData\ab36fac3-93dd-4505-9add-ad6d38d4b914\plugins\2, , [fb987b326138221438b975b39073ff01],
PUP.Optional.Yontoo, C:\ProgramData\ab36fac3-93dd-4505-9add-ad6d38d4b914\plugins\8, , [fb987b326138221438b975b39073ff01],
PUP.Optional.Yontoo, C:\Program Files (x86)\Common Files\ab36fac3-93dd-4505-9add-ad6d38d4b914, , [fe952d806534d95d3ab89c8c5aa9cc34],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\chrome, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\common, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\external, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\search, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\css, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\external, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\fonts, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\icons, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\icons\weather, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\images, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\_metadata, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.RecordPage, C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpencbddmmckhkfcdfhdlpecddglemfi\1.0.5690.33234_0, , [d4bf4d60c0d993a3e024302e7e877e82],
PUP.Optional.RecordPage, C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpencbddmmckhkfcdfhdlpecddglemfi, , [d4bf4d60c0d993a3e024302e7e877e82],
Files: 85
PUP.Optional.BrowseFox, C:\ProgramData\ab36fac3-93dd-4505-9add-ad6d38d4b914\plugins\12\resources\plugin.dll, , [d5be9617b7e255e153244088bb462ed2],
PUP.Optional.eShield, C:\Users\WALID\AppData\Roaming\Mozilla\Firefox\Profiles\urumrye2.default\searchplugins\eshield-safe-web.xml, , [fe95f3ba5841d16517e9d44b7094ab55],
PUP.Optional.WinYahoo, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HowToRemove.html.lnk, , [2370f5b86b2ea19556616327eb19b947],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_bahkljhhdeciiaodlkppoonappfnheoi_0.localstorage, , [6c27f8b55a3fb87e24a8a5fc84803bc5],
PUP.Optional.Yontoo, C:\ProgramData\ab36fac3-93dd-4505-9add-ad6d38d4b914\temp, , [fb987b326138221438b975b39073ff01],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\manifest.json, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\background.html, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\newtab.html, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\chrome\common.js, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\chrome\lifecycle.js, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\chrome\settings.js, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\chrome\setup.js, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\chrome\utils.js, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\common\conf-sys.js, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\common\conf.js, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\common\prefs-sys.js, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\common\prefs.js, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\common\settings-dev.js, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\external\jquery-2.1.1.min.js, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\external\md5.min.js, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\external\spectrum.css, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\external\spectrum.js, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\external\string.min.js, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\external\underscore-min.js, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\search\AutoSuggest.js, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\search\contentscript.js, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\search\newtab-base.js, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\search\search-engines.js, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\search\search-form.js, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\search\search-images.js, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\content\search\search-redirect.js, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\css\newtab.css, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\css\search.css, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\css\search2.css, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\css\styles.css, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\external\normalize.css, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\fonts\HelveticaNeue-Thin.otf, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\fonts\neue-bold.woff, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\fonts\neue.woff, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\icons\128.png, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\icons\16.png, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\icons\48.png, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\icons\weather\01d.svg, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\icons\weather\01n.svg, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\icons\weather\02d.svg, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\icons\weather\02n.svg, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\icons\weather\03d.svg, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\icons\weather\03n.svg, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\icons\weather\04d.svg, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\icons\weather\04n.svg, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\icons\weather\09d.svg, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\icons\weather\09n.svg, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\icons\weather\10d.svg, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\icons\weather\10n.svg, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\icons\weather\11d.svg, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\icons\weather\11n.svg, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\icons\weather\13d.svg, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\icons\weather\13n.svg, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\icons\weather\50d.svg, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\icons\weather\50n.svg, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\images\bg.jpg, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\images\bing.png, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\images\bluesky-bg.jpg, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\images\brush.png, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\images\clock.png, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\images\cloud.png, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\images\cupcake-bg.jpg, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\images\desk-bg.jpg, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\images\doodle.png, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\images\down.png, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\images\google.png, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\images\mountain-bg.jpg, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\images\sea-bg.jpg, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\images\yahoo.png, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\skin\images\yahoo.svg, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.SearchManager.ChrPRST, C:\Users\WALID\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi\1.0.5.29_0\_metadata\verified_contents.json, , [bcd72984dabf0135b248c06ba360629e],
PUP.Optional.RecordPage, C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpencbddmmckhkfcdfhdlpecddglemfi\1.0.5690.33234_0\manifest.json, , [d4bf4d60c0d993a3e024302e7e877e82],
PUP.Optional.RecordPage, C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpencbddmmckhkfcdfhdlpecddglemfi\1.0.5690.33234_0\background.js, , [d4bf4d60c0d993a3e024302e7e877e82],
PUP.Optional.RecordPage, C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpencbddmmckhkfcdfhdlpecddglemfi\1.0.5690.33234_0\content.js, , [d4bf4d60c0d993a3e024302e7e877e82],
PUP.Optional.RecordPage, C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpencbddmmckhkfcdfhdlpecddglemfi\1.0.5690.33234_0\icon.png, , [d4bf4d60c0d993a3e024302e7e877e82],
PUP.Optional.eShield, C:\Users\WALID\AppData\Roaming\Mozilla\Firefox\Profiles\urumrye2.default\prefs.js, Good: (), Bad: (user_pref("keyword.URL", "http://search.eshield.com/serp?guid={B8A7741D-67B5-4E0E-AB39-3FEBD57C3C4C}&action=default_search&k=");), ,[0d86a20bc4d5a78f53dc0b4f22e38a76]
PUP.Optional.eShield, C:\Users\WALID\AppData\Roaming\Mozilla\Firefox\Profiles\urumrye2.default\prefs.js, Good: (), Bad: (eShield Safe Web), ,[5e35fcb16138a6903b8ac59e8d7809f7]
PUP.Optional.WinYahoo, C:\Users\WALID\AppData\Roaming\Mozilla\Firefox\Profiles\urumrye2.default\searchplugins\yahoo.xml, , [2d66703d0198cd692ddf6ff12bda8878],
PUP.Optional.WinYahoo, C:\Users\WALID\AppData\Roaming\Mozilla\Firefox\Profiles\urumrye2.default\searchplugins\Search Provided by Yahoo.xml, , [e8abc3eadcbddd599d1f63fdea1be21e],
PUM.Optional.FireFoxSearchOverride, C:\Users\WALID\AppData\Roaming\Mozilla\Firefox\Profiles\urumrye2.default\user.js, , [2d66fab359404aecc0831f4126dfa25e],
Physical Sectors: 0
(No malicious items detected)
(end)