cjoint

Publicité


Publicité

Format du document : application/octet-stream

Prévisualisation

[code]
HitmanPro 3.7.15.281
www.hitmanpro.com

Computer name . . . . : YASSINE-PC
Windows . . . . . . . : 6.1.1.7601.X64/4
User name . . . . . . : yassine-PC\yassine
UAC . . . . . . . . . : Enabled
License . . . . . . . : Trial (30 days left)

Scan date . . . . . . : 2017-01-09 01:31:38
Scan mode . . . . . . : Normal
Scan duration . . . . : 8m 28s
Disk access mode . . : Direct disk access (SRB)
Cloud . . . . . . . . : Internet
Reboot . . . . . . . : Yes

Threats . . . . . . . : 17
Traces . . . . . . . : 294

Objects scanned . . . : 3 020 195
Files scanned . . . . : 146 589
Remnants scanned . . : 695 837 files / 2 177 769 keys

Malware _____________________________________________________________________

C:\AdwCleaner\quarantine\files\cfclmgzmdyrfouldtogzejwngwtrlcgq\Traffic Exchange\Online-Guardian.exe -> Quarantined
Size . . . . . . . : 468 728 bytes
Age . . . . . . . : 1.1 days (2017-01-07 23:17:15)
Entropy . . . . . : 4.0
SHA-256 . . . . . : 41155751767C2898B8629A11463A48DCAF2E946C36BEE0BD68B04813ABB387E1
Product . . . . . : Online Guardian
Publisher . . . . : Microleaves LTD
Description . . . : Online.io Application
Copyright . . . . : CopyRight(C) 2016 Microleaves LTD
RSA Key Size . . . : 2048
LanguageID . . . . : 1033
Authenticode . . . : Valid
> Kaspersky . . . . : not-a-virus:AdWare.Win32.OnlineGuard.a
Fuzzy . . . . . . : 98.0
Forensic Cluster
-8.9s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\RTOP\
-8.9s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\RTOP\activity.log
-8.9s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\RTOP\hosts_backup
-8.9s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\RTOP\uclogfile.bin
-8.9s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\
-8.8s C:\AdwCleaner\quarantine\files\mdqbvfkcgrqcfqvcvcmtccsnixnesoze\
-8.8s C:\AdwCleaner\quarantine\files\mdqbvfkcgrqcfqvcvcmtccsnixnesoze\coordinator.cfg
-8.8s C:\AdwCleaner\quarantine\files\mdqbvfkcgrqcfqvcvcmtccsnixnesoze\general.cfg
-8.8s C:\AdwCleaner\quarantine\files\mdqbvfkcgrqcfqvcvcmtccsnixnesoze\S-1-5-21-1607161227-1741431587-2329729702-1000.cfg
-8.5s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\
-8.5s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\log\
-8.5s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\log\wprotectmanager_2014-05-27[20-48-24-594].log
-8.5s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\log\wprotectmanager_2014-06-12[23-06-17-127].log
-8.5s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\update\
-8.3s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\
-8.2s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Apdonlex.bin
-8.2s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Blackzenla.bin
-8.2s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\conf.config
-8.2s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Config.xml
-8.2s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Flex-Kix.dll
-8.2s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Freshing.bin
-8.2s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Holdlotfind.dat
-8.2s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Hotcom.exe
-8.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Hotcom.exe.config
-8.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Jayron.exe
-8.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Jayron.exe.config
-8.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Lotstock.dat
-8.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Mattom.bin
-8.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\md.xml
-8.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Ope-Stock.reg
-8.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Rankotin.dat
-8.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\RonApsoft.dll
-8.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Ronzap.dat
-8.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Ronzap.exe
-8.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\SaltRonfind.exe
-8.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\SaltRonfind.exe.config
-8.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Tan-Strong.dat
-8.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\uninstall.dat
-8.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Voyalex.bin
-8.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Xxx-zuntam.bin
-8.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Zertop.bin
-8.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\ondemand\
-8.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\temp\
-7.7s C:\AdwCleaner\quarantine\files\xbhaucfzkmehsjingyhelcgvklgewbnf\
-7.7s C:\AdwCleaner\quarantine\files\xbhaucfzkmehsjingyhelcgvklgewbnf\ff.HP
-7.7s C:\AdwCleaner\quarantine\files\xbhaucfzkmehsjingyhelcgvklgewbnf\ff.NT
-7.6s C:\AdwCleaner\quarantine\files\xbhaucfzkmehsjingyhelcgvklgewbnf\snp.sc
-7.5s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\
-7.5s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\Config.json
-7.5s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\set.exe
-7.5s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\set.exe.config
-7.5s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\System.Data.SQLite.dll
-7.2s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\System.Data.SQLite.Linq.dll
-7.2s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\System.Data.SQLite.xml
-7.0s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\X64\
-7.0s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\X64\SQLite.Interop.dll
-6.6s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\X86\
-6.6s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\X86\SQLite.Interop.dll
-6.0s C:\AdwCleaner\quarantine\files\vgncqxonlsljnucxseehrhsrqclssozw\
-6.0s C:\AdwCleaner\quarantine\files\vgncqxonlsljnucxseehrhsrqclssozw\Config.xml
-6.0s C:\AdwCleaner\quarantine\files\vgncqxonlsljnucxseehrhsrqclssozw\Nettrans.exe
-6.0s C:\AdwCleaner\quarantine\files\vgncqxonlsljnucxseehrhsrqclssozw\Nettrans.exe.config
-5.3s C:\AdwCleaner\quarantine\files\lzjoohgimtjqxfbwnkwkwofqdjbkiipm\
-5.3s C:\AdwCleaner\quarantine\files\lzjoohgimtjqxfbwnkwkwofqdjbkiipm\Traffic Exchange\
-5.0s C:\AdwCleaner\quarantine\files\mehetuxeizxjadbiirqxnzixrhzgfpkx\
-5.0s C:\AdwCleaner\quarantine\files\mehetuxeizxjadbiirqxnzixrhzgfpkx\ByteFence Anti-Malware.lnk
-3.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\
-3.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\aff.conf
-3.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.51.x86.dll
-3.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.52.x64.dll
-3.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.52.x86.dll
-3.2s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.60.x64.dll
-3.2s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.60.x86.dll
-3.2s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.Common.dll
-3.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AWSSDK.dll
-2.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\BackupStack.exe
-2.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Configuration Updater.exe
-2.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Crypto32.dll
-2.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Crypto64.dll
-2.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\de_DE.mo
-2.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\diffstack.dll
-2.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\es_ES.mo
-2.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\fr_FR.mo
-2.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\GetText.dll
-2.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\it_IT.mo
-2.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\LinqBridge.dll
-2.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\LogicNP.EZShellExtensions.dll
-2.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\MPCBClient.dll
-2.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\MPCBContextMenu.dll
-2.2s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\MPCBIconOverlays.dll
-2.2s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\MyPC Backup.exe
-2.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\mypcbackup.ico
-2.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\ObjectListView.dll
-2.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\pt_PT.mo
-2.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\RegisterExtensionDotNet20_x64.exe
-2.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\RegisterExtensionDotNet20_x86.exe
-2.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\RestartExplorer.exe
-2.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Service Start.exe
-2.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Shared Stack.dll
-1.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Signup Wizard.exe
-1.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\syncicon.ico
-1.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\syncing.ico
-1.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\tick.ico
-1.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\uninst.exe
-1.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\UnRegisterExtensions.exe
-1.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Updater.exe
-1.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Config\
-1.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Config\api.ts2
-1.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\
-1.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_backup_conf.db
-1.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_file_cache.db
-1.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_queues.db
-1.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_settings.db
-1.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_sig_cache.db
-1.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_version_queue.db
-1.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\
-1.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\APPLICATION.log
-1.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\AUTH.log
-1.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\BACKOFF.log
-1.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\CLIENT.log
-1.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\GRID_RECOVERY.log
-1.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\GRID_RECOVERY_INIT.log
-1.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\LICENCE.log
-1.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\NETWORK_SHARES.log
-1.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\POPUPS.log
-1.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\REMOTING.log
-1.2s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\REQUEST.log
-1.2s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\SERVICE.log
-1.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\SERVICE_prev.log
-0.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\SHELL.log
-0.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\STACK_BASE.log
-0.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\UPDATER.log
-0.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\UTC_MIGRATION.log
-0.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\WAIT_HANDLES.log
-0.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Resources\
-0.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Resources\cache\
-0.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\x64\
-0.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\x64\System.Data.SQLite.dll
-0.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\x86\
-0.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\x86\System.Data.SQLite.dll
-0.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\~updates\
-0.2s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\
-0.2s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\
-0.2s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\
-0.2s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\
-0.2s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\
-0.2s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\node_modules\hawk\
-0.2s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\node_modules\hawk\node_modules\
-0.2s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\node_modules\
-0.2s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\node_modules\hawk\node_modules\cryptiles\
-0.0s C:\AdwCleaner\quarantine\files\cfclmgzmdyrfouldtogzejwngwtrlcgq\
-0.0s C:\AdwCleaner\quarantine\files\cfclmgzmdyrfouldtogzejwngwtrlcgq\Traffic Exchange\
-0.0s C:\AdwCleaner\quarantine\files\cfclmgzmdyrfouldtogzejwngwtrlcgq\Traffic Exchange\Online-Guardian-v2.exe
0.0s C:\AdwCleaner\quarantine\files\cfclmgzmdyrfouldtogzejwngwtrlcgq\Traffic Exchange\Online-Guardian.exe
0.5s C:\AdwCleaner\quarantine\files\ffhywyhzabwssuvjmxbwjcwhazgzhqyu\
0.7s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\
0.7s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\wyy7kuna.default\
0.7s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\wyy7kuna.default\prefs.js
0.7s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\
0.7s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\wyy7kuna.default\profiles.ini
0.7s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\wyy7kuna.default\search-metadata.json
0.9s C:\AdwCleaner\quarantine\files\ceyyrbqbwuqwvfvgexlgyzektqgpvmcx.back
1.0s C:\AdwCleaner\quarantine\files\kbmtuxxvrlhxutdkaockmibfumvnhmmj.back
1.4s C:\AdwCleaner\quarantine\files\sncdtfcdtanqulwrznbwrcvytpeztggs.back
1.5s C:\AdwCleaner\quarantine\files\mdbeimfmkqbljcopbafbbbfiywbsuvfi.back
1.6s C:\AdwCleaner\quarantine\files\yeswlvywmemkbycygmndofbincjxjbme.back
1.7s C:\AdwCleaner\quarantine\files\owzrdyjvksknzzhdzxtdzlnzcdiiiyir.back
1.9s C:\AdwCleaner\quarantine\files\gzwvidnxqebdjsbuipkomfozaejiinsc.back
2.2s C:\AdwCleaner\quarantine\files\iqdsbrwxecmqbxzaxeqyjtpqwahpvnpr.back
2.6s C:\AdwCleaner\quarantine\files\qlaqaqyhrmbgmobvutntfwlejmakihrd.back
2.8s C:\AdwCleaner\quarantine\files\ojnivfnjvvbvibsbddggquowxpnuqfaq.back
2.9s C:\AdwCleaner\quarantine\files\kuzoszblwjapbodrkrazjblzfivuxqpa.back
3.0s C:\AdwCleaner\quarantine\files\alormegxhvypgmemtszjrjglcguvigel.back
3.1s C:\AdwCleaner\quarantine\files\fyqgymrawnmakhmsfwyabmdygywtdrta.back
3.3s C:\AdwCleaner\quarantine\files\cvnilvahvhtfeqlkbxdbztpksqsybayr.back
3.5s C:\AdwCleaner\quarantine\files\axuviutefnzjzwcrbakzzolrabcuohmb.back
3.7s C:\AdwCleaner\quarantine\files\jmjmnegzusfkhopstgxzvkqtjyqvjnvs.back
3.8s C:\AdwCleaner\quarantine\files\ggcropimosivavatxkivsmkdxletjxdb.back
4.0s C:\AdwCleaner\quarantine\files\eatdlmaoyunigmhgslbwogdpzfovcslk.back
4.4s C:\AdwCleaner\quarantine\files\ugnkiryliftmwjeooeomoyowdojgcjfs.back
4.9s C:\AdwCleaner\quarantine\files\txpmcaaaxezexxxsqwxbaxrswztspbmm.back
5.3s C:\AdwCleaner\quarantine\files\tnljhvwxjjsfwwqdpscdyhtruwsjvfhi.back
5.5s C:\AdwCleaner\quarantine\files\ktzlilsvsazulpgcnniwzmqbhnizbicm.back
5.7s C:\AdwCleaner\quarantine\files\rnxegndxqczyflwxureljfymgjpqgqsz.back
6.5s C:\AdwCleaner\quarantine\registry\reg_hskfuxwnsjxrsytxxeomxanthwyhrcnx.reg
6.7s C:\AdwCleaner\quarantine\registry\reg_ccfjszvfoietkaxlqrjqzklfkvbilozf.reg
7.4s C:\AdwCleaner\quarantine\registry\reg_ygvpkafhkyjeaxmbahzczjjrhwdmgrrn.reg
7.7s C:\AdwCleaner\quarantine\registry\reg_lrjkoqjaxtmrljkcsohmqpyqtpgqcdtz.reg
8.0s C:\AdwCleaner\quarantine\registry\reg_rddacduwtuwidcvbknkkiphcbbvigeyi.reg
8.4s C:\AdwCleaner\quarantine\registry\reg_djpxocawazkrdxoesetosgncagcjrhxs.reg
8.7s C:\AdwCleaner\quarantine\registry\reg_khirbwixuwokxelfsjvljqsigbxvyepv.reg
8.9s C:\AdwCleaner\quarantine\registry\reg_teodgquvsvvlewjnyebsujpakyztntzr.reg
9.1s C:\AdwCleaner\quarantine\registry\reg_bbrbhtpqufijkrkklkvkfpkjlqijvtgc.reg
9.2s C:\AdwCleaner\quarantine\registry\reg_pdunnludimmiluccwtntviiselpubxwq.reg
9.4s C:\AdwCleaner\quarantine\registry\reg_natorijmwbxszovezxlczjqbnqmefsvy.reg
9.5s C:\AdwCleaner\quarantine\registry\reg_awgvfzewjvftybyzmusgmewztpnnfcqp.reg
9.7s C:\AdwCleaner\quarantine\registry\reg_mohjwcwgwerzxnrkwpsvpipphswuzcjs.reg
9.8s C:\AdwCleaner\quarantine\registry\reg_vojydhhqbkuocihxhtuxicueyxfrxmts.reg
10.0s C:\AdwCleaner\quarantine\registry\reg_jkoadtfflawlknfsqrdkengbqviawwrq.reg
10.6s C:\AdwCleaner\quarantine\registry\reg_khamaprbgxvthvacluijibqcdahiehmv.reg
11.0s C:\AdwCleaner\quarantine\registry\reg_rbzzfjzpumgqkjdwygcchpilfoadooyi.reg
11.3s C:\AdwCleaner\quarantine\registry\reg_rqbynmyrhpduaqxgbdivozlfhvketcgk.reg
11.5s C:\AdwCleaner\quarantine\registry\reg_vorhwknlvgktfjytfbqxybdhbovaywjn.reg
11.6s C:\AdwCleaner\quarantine\registry\reg_bwvxbvarupvbqrdxppcofdaqvmvesjdy.reg
11.9s C:\AdwCleaner\quarantine\registry\reg_afckiwoamlocwmehyrjxmsksexyfptkq.reg
12.0s C:\AdwCleaner\quarantine\registry\reg_ysfdercjwwjthkzrvnavhoubpmrtwuwv.reg
12.4s C:\AdwCleaner\quarantine\registry\reg_thgyxjdtrbynkciqwofbscmkofenmuha.reg
12.5s C:\AdwCleaner\quarantine\registry\reg_ojfnxvljbkhehtlkzqxewlfbzcxehgyb.reg
12.7s C:\AdwCleaner\quarantine\registry\reg_gckjajsdtbayaobmbhyshyccnknsvptv.reg
12.9s C:\AdwCleaner\quarantine\registry\reg_rhdgykridacnkwssfercrevupqkyiibn.reg
13.0s C:\AdwCleaner\quarantine\registry\reg_gkeucpyuatjhaseiumwnsqzpgadqyozm.reg
13.1s C:\AdwCleaner\quarantine\registry\reg_fpojeddgnftvgvdddfcwsuusqspqafhb.reg
13.3s C:\AdwCleaner\quarantine\registry\reg_vyegytpnsxjnprqscifapfntjzugezjx.reg
13.4s C:\AdwCleaner\quarantine\registry\reg_heanplkumesjyoknvgbsswzqxoajuftb.reg
13.6s C:\AdwCleaner\quarantine\registry\reg_thngaongkihgggcbegxrbvygvzivxvzb.reg
13.7s C:\AdwCleaner\quarantine\registry\reg_hqajokdzagiaqznwraekundpeqxmzphe.reg
13.9s C:\AdwCleaner\quarantine\registry\reg_jprofiypdozdddybqwfwbzwcysrludfr.reg
14.3s C:\AdwCleaner\quarantine\registry\reg_exqgcdmzwkgmtvjsuzjiuvrmqcyknppp.reg
14.5s C:\AdwCleaner\quarantine\registry\reg_omziaywjnqcfyymhltxwqkwqzfhsowvn.reg
14.7s C:\AdwCleaner\quarantine\registry\reg_lxyymlnqkdjnvhydcezryogkbvvbavfw.reg
14.9s C:\AdwCleaner\quarantine\registry\reg_dlqswglljrnukcqhogdemnusjesbgyat.reg
15.0s C:\AdwCleaner\quarantine\registry\reg_aufuttutimjlpjavqhyxvqqerrqvtlsx.reg
15.1s C:\AdwCleaner\quarantine\registry\reg_cycdlhgsbsavninrgsjqkzgtdthbwapf.reg
15.2s C:\AdwCleaner\quarantine\registry\reg_pkmxtaydidocoemizibomfvccmhhaifq.reg
15.4s C:\AdwCleaner\quarantine\registry\reg_qiuofkmjgodcdcrttbgczjlxpbncpofo.reg
19.8s C:\AdwCleaner\quarantine\registry\reg_qsgsdmjearwwieauepksxvwmvvkmybts.reg
20.0s C:\AdwCleaner\quarantine\registry\reg_bvlsspiuylcrequxbwapnyvcqwqtdxwy.reg
20.3s C:\AdwCleaner\quarantine\registry\reg_mlckxsjurlujclmysvcvkdlzybrulgmb.reg
20.4s C:\AdwCleaner\quarantine\registry\reg_pirkoajenajxxoynvgfezrlcccqmtmfo.reg
20.6s C:\AdwCleaner\quarantine\registry\reg_alclxwvnnfuqivuminvxdicuwjegopfn.reg
20.8s C:\AdwCleaner\quarantine\registry\reg_xmfybppuwbajwahwnmlgzpzonmscsxaf.reg
21.0s C:\AdwCleaner\quarantine\registry\reg_bgcmtlicjubxlugsxttfbtqhuccczbcq.reg
21.2s C:\AdwCleaner\quarantine\registry\reg_sjpxzxqweupjpdggopeyeohspibkgxan.reg
21.3s C:\AdwCleaner\quarantine\registry\reg_fpledizicashgefgldqbkgviggfngqxy.reg
21.8s C:\AdwCleaner\quarantine\registry\reg_pxvfxyipfkszzyodsbbfinayqqrtocva.reg
22.1s C:\AdwCleaner\quarantine\registry\reg_tjyaqfrmcayunfgmtdgyetzjmjbxtkgy.reg
22.4s C:\AdwCleaner\quarantine\registry\reg_iiyvtcxfatqqzfgkyvllmslrurnrnqom.reg
22.5s C:\AdwCleaner\quarantine\registry\reg_ynbmxkopnhtqjzgznpomwmrufmosriea.reg
22.7s C:\AdwCleaner\quarantine\registry\reg_opquhjbhgnbnrzzqrfqjwzluwksgtghg.reg
22.9s C:\AdwCleaner\quarantine\registry\reg_fqjzfkakxadujbxahuachhajgjftjpms.reg
27.1s C:\AdwCleaner\quarantine\registry\reg_tcujcfmxnndsnftbdomfahhvpkrclfsg.reg
27.3s C:\AdwCleaner\quarantine\registry\reg_bmvrtjboexqwhowpacxfzglvgyslvjiq.reg
27.5s C:\AdwCleaner\quarantine\registry\reg_yrsdypdhaheyupjeifllbwhjjatgcjpo.reg
28.2s C:\AdwCleaner\quarantine\registry\reg_onqhxijahmpordjqbdfablpilhcxuppf.reg
28.6s C:\AdwCleaner\quarantine\registry\reg_hhyddookileqxnsvnalogjitfwxfkuqf.reg
28.8s C:\AdwCleaner\quarantine\registry\reg_kjvowlcksaqanamfyhzormuhlgheucou.reg
29.0s C:\AdwCleaner\quarantine\registry\reg_lvmrvtoxujbmqfryfhcmaaqzolgrtaiy.reg
29.3s C:\AdwCleaner\quarantine\registry\reg_qmopkfmghtanlaexuigfuptpqoyhocxw.reg
29.4s C:\AdwCleaner\quarantine\registry\reg_hakclexyqybvaltckjsglxvfozwjhnyt.reg
29.5s C:\AdwCleaner\quarantine\registry\reg_yulwxaxipehcjbwquvpujfdufeejckla.reg
30.1s C:\AdwCleaner\quarantine\registry\reg_dfntubvkriqzerggfelccusqetgcfras.reg
30.3s C:\AdwCleaner\quarantine\registry\reg_sabibiokqcebmebghomekhzlxuunofzq.reg
30.4s C:\AdwCleaner\quarantine\registry\reg_szylnxirtrcevhgciraqubmlhugrvakf.reg
30.5s C:\AdwCleaner\quarantine\registry\reg_zhjhojogymfrhcfzhpnzheofikonitje.reg
30.7s C:\AdwCleaner\quarantine\registry\reg_ywouofwdqsvrekpxrutyhysluxmctmal.reg
31.7s C:\AdwCleaner\quarantine\registry\reg_oaaqflbrtkxlixlcbmbzhwhezytanmvc.reg
31.9s C:\AdwCleaner\quarantine\registry\reg_hdhqqihbyhupqfdxgnbnoipbgrmkiqvj.reg
32.2s C:\AdwCleaner\quarantine\registry\reg_mxggwlhgtqtxomnwmqwfftrbnxgcwjwf.reg
32.4s C:\AdwCleaner\quarantine\registry\reg_bgzpmxsmvofgiwoglxnvnqngpojtfaxt.reg
32.5s C:\AdwCleaner\quarantine\registry\reg_vttoehudmrvynhjakjuxkrzcuehlksud.reg
32.7s C:\AdwCleaner\quarantine\registry\reg_fusvzanqvnxkijbyvkbphbcsqxufbzgv.reg
32.9s C:\AdwCleaner\quarantine\registry\reg_awapctldemkmmhtqprstthmdtiivsmbf.reg
33.1s C:\AdwCleaner\quarantine\registry\reg_nztdiakjqojgghsuadyxhhtbifndtyde.reg

C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Flex-Kix.dll -> Deleted
Size . . . . . . . : 358 912 bytes
Age . . . . . . . : 1.1 days (2017-01-07 23:17:07)
Entropy . . . . . : 6.2
SHA-256 . . . . . : D6ECC08A8B80FA99A642234D66E69FB3A8266640CE0809AF5F14339AA79B9459
Version . . . . . : 1.0.0.27567
> Bitdefender . . . : Trojan.Generic.18009158
> Kaspersky . . . . : not-a-virus:AdWare.Win64.Agent.lkv
Fuzzy . . . . . . : 105.0
Forensic Cluster
-0.7s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\RTOP\
-0.7s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\RTOP\activity.log
-0.7s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\RTOP\hosts_backup
-0.7s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\RTOP\uclogfile.bin
-0.7s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\
-0.6s C:\AdwCleaner\quarantine\files\mdqbvfkcgrqcfqvcvcmtccsnixnesoze\
-0.6s C:\AdwCleaner\quarantine\files\mdqbvfkcgrqcfqvcvcmtccsnixnesoze\coordinator.cfg
-0.6s C:\AdwCleaner\quarantine\files\mdqbvfkcgrqcfqvcvcmtccsnixnesoze\general.cfg
-0.5s C:\AdwCleaner\quarantine\files\mdqbvfkcgrqcfqvcvcmtccsnixnesoze\S-1-5-21-1607161227-1741431587-2329729702-1000.cfg
-0.3s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\
-0.3s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\log\
-0.3s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\log\wprotectmanager_2014-05-27[20-48-24-594].log
-0.3s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\log\wprotectmanager_2014-06-12[23-06-17-127].log
-0.3s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\update\
-0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\
-0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Apdonlex.bin
0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Blackzenla.bin
0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\conf.config
0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Config.xml
0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Flex-Kix.dll
0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Freshing.bin
0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Holdlotfind.dat
0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Hotcom.exe
0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Hotcom.exe.config
0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Jayron.exe
0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Jayron.exe.config
0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Lotstock.dat
0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Mattom.bin
0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\md.xml
0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Ope-Stock.reg
0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Rankotin.dat
0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\RonApsoft.dll
0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Ronzap.dat
0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Ronzap.exe
0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\SaltRonfind.exe
0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\SaltRonfind.exe.config
0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Tan-Strong.dat
0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\uninstall.dat
0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Voyalex.bin
0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Xxx-zuntam.bin
0.2s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Zertop.bin
0.2s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\ondemand\
0.2s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\temp\
0.5s C:\AdwCleaner\quarantine\files\xbhaucfzkmehsjingyhelcgvklgewbnf\
0.5s C:\AdwCleaner\quarantine\files\xbhaucfzkmehsjingyhelcgvklgewbnf\ff.HP
0.5s C:\AdwCleaner\quarantine\files\xbhaucfzkmehsjingyhelcgvklgewbnf\ff.NT
0.6s C:\AdwCleaner\quarantine\files\xbhaucfzkmehsjingyhelcgvklgewbnf\snp.sc
0.7s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\
0.7s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\Config.json
0.7s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\set.exe
0.7s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\set.exe.config
0.7s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\System.Data.SQLite.dll
1.0s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\System.Data.SQLite.Linq.dll
1.0s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\System.Data.SQLite.xml
1.2s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\X64\
1.2s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\X64\SQLite.Interop.dll
1.6s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\X86\
1.6s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\X86\SQLite.Interop.dll
2.2s C:\AdwCleaner\quarantine\files\vgncqxonlsljnucxseehrhsrqclssozw\
2.2s C:\AdwCleaner\quarantine\files\vgncqxonlsljnucxseehrhsrqclssozw\Config.xml
2.2s C:\AdwCleaner\quarantine\files\vgncqxonlsljnucxseehrhsrqclssozw\Nettrans.exe
2.2s C:\AdwCleaner\quarantine\files\vgncqxonlsljnucxseehrhsrqclssozw\Nettrans.exe.config
2.9s C:\AdwCleaner\quarantine\files\lzjoohgimtjqxfbwnkwkwofqdjbkiipm\
2.9s C:\AdwCleaner\quarantine\files\lzjoohgimtjqxfbwnkwkwofqdjbkiipm\Traffic Exchange\
3.2s C:\AdwCleaner\quarantine\files\mehetuxeizxjadbiirqxnzixrhzgfpkx\
3.2s C:\AdwCleaner\quarantine\files\mehetuxeizxjadbiirqxnzixrhzgfpkx\ByteFence Anti-Malware.lnk
4.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\
4.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\aff.conf
4.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.51.x86.dll
4.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.52.x64.dll
4.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.52.x86.dll
5.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.60.x64.dll
5.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.60.x86.dll
5.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.Common.dll
5.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AWSSDK.dll
5.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\BackupStack.exe
5.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Configuration Updater.exe
5.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Crypto32.dll
5.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Crypto64.dll
5.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\de_DE.mo
5.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\diffstack.dll
5.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\es_ES.mo
5.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\fr_FR.mo
5.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\GetText.dll
5.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\it_IT.mo
5.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\LinqBridge.dll
5.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\LogicNP.EZShellExtensions.dll
5.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\MPCBClient.dll
5.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\MPCBContextMenu.dll
6.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\MPCBIconOverlays.dll
6.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\MyPC Backup.exe
6.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\mypcbackup.ico
6.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\ObjectListView.dll
6.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\pt_PT.mo
6.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\RegisterExtensionDotNet20_x64.exe
6.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\RegisterExtensionDotNet20_x86.exe
6.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\RestartExplorer.exe
6.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Service Start.exe
6.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Shared Stack.dll
6.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Signup Wizard.exe
6.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\syncicon.ico
6.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\syncing.ico
6.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\tick.ico
6.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\uninst.exe
6.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\UnRegisterExtensions.exe
6.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Updater.exe
6.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Config\
6.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Config\api.ts2
6.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\
6.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_backup_conf.db
6.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_file_cache.db
6.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_queues.db
6.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_settings.db
6.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_sig_cache.db
6.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_version_queue.db
6.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\
6.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\APPLICATION.log
6.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\AUTH.log
6.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\BACKOFF.log
6.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\CLIENT.log
6.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\GRID_RECOVERY.log
6.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\GRID_RECOVERY_INIT.log
6.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\LICENCE.log
6.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\NETWORK_SHARES.log
6.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\POPUPS.log
6.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\REMOTING.log
7.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\REQUEST.log
7.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\SERVICE.log
7.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\SERVICE_prev.log
7.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\SHELL.log
7.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\STACK_BASE.log
7.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\UPDATER.log
7.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\UTC_MIGRATION.log
7.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\WAIT_HANDLES.log
7.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Resources\
7.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Resources\cache\
7.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\x64\
7.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\x64\System.Data.SQLite.dll
7.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\x86\
7.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\x86\System.Data.SQLite.dll
7.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\~updates\
8.0s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\
8.0s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\
8.0s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\
8.0s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\
8.0s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\
8.0s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\node_modules\hawk\
8.0s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\node_modules\hawk\node_modules\
8.0s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\node_modules\
8.0s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\node_modules\hawk\node_modules\cryptiles\
8.2s C:\AdwCleaner\quarantine\files\cfclmgzmdyrfouldtogzejwngwtrlcgq\
8.2s C:\AdwCleaner\quarantine\files\cfclmgzmdyrfouldtogzejwngwtrlcgq\Traffic Exchange\
8.2s C:\AdwCleaner\quarantine\files\cfclmgzmdyrfouldtogzejwngwtrlcgq\Traffic Exchange\Online-Guardian-v2.exe
8.2s C:\AdwCleaner\quarantine\files\cfclmgzmdyrfouldtogzejwngwtrlcgq\Traffic Exchange\Online-Guardian.exe
8.7s C:\AdwCleaner\quarantine\files\ffhywyhzabwssuvjmxbwjcwhazgzhqyu\
8.9s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\
8.9s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\wyy7kuna.default\
8.9s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\wyy7kuna.default\prefs.js
8.9s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\
8.9s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\wyy7kuna.default\profiles.ini
8.9s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\wyy7kuna.default\search-metadata.json
9.1s C:\AdwCleaner\quarantine\files\ceyyrbqbwuqwvfvgexlgyzektqgpvmcx.back
9.2s C:\AdwCleaner\quarantine\files\kbmtuxxvrlhxutdkaockmibfumvnhmmj.back
9.6s C:\AdwCleaner\quarantine\files\sncdtfcdtanqulwrznbwrcvytpeztggs.back
9.7s C:\AdwCleaner\quarantine\files\mdbeimfmkqbljcopbafbbbfiywbsuvfi.back
9.8s C:\AdwCleaner\quarantine\files\yeswlvywmemkbycygmndofbincjxjbme.back
10.0s C:\AdwCleaner\quarantine\files\owzrdyjvksknzzhdzxtdzlnzcdiiiyir.back
10.1s C:\AdwCleaner\quarantine\files\gzwvidnxqebdjsbuipkomfozaejiinsc.back
10.4s C:\AdwCleaner\quarantine\files\iqdsbrwxecmqbxzaxeqyjtpqwahpvnpr.back
10.8s C:\AdwCleaner\quarantine\files\qlaqaqyhrmbgmobvutntfwlejmakihrd.back
11.0s C:\AdwCleaner\quarantine\files\ojnivfnjvvbvibsbddggquowxpnuqfaq.back
11.1s C:\AdwCleaner\quarantine\files\kuzoszblwjapbodrkrazjblzfivuxqpa.back
11.2s C:\AdwCleaner\quarantine\files\alormegxhvypgmemtszjrjglcguvigel.back
11.3s C:\AdwCleaner\quarantine\files\fyqgymrawnmakhmsfwyabmdygywtdrta.back
11.5s C:\AdwCleaner\quarantine\files\cvnilvahvhtfeqlkbxdbztpksqsybayr.back
11.7s C:\AdwCleaner\quarantine\files\axuviutefnzjzwcrbakzzolrabcuohmb.back
11.9s C:\AdwCleaner\quarantine\files\jmjmnegzusfkhopstgxzvkqtjyqvjnvs.back
12.0s C:\AdwCleaner\quarantine\files\ggcropimosivavatxkivsmkdxletjxdb.back
12.2s C:\AdwCleaner\quarantine\files\eatdlmaoyunigmhgslbwogdpzfovcslk.back
12.6s C:\AdwCleaner\quarantine\files\ugnkiryliftmwjeooeomoyowdojgcjfs.back
13.2s C:\AdwCleaner\quarantine\files\txpmcaaaxezexxxsqwxbaxrswztspbmm.back
13.5s C:\AdwCleaner\quarantine\files\tnljhvwxjjsfwwqdpscdyhtruwsjvfhi.back
13.7s C:\AdwCleaner\quarantine\files\ktzlilsvsazulpgcnniwzmqbhnizbicm.back
13.9s C:\AdwCleaner\quarantine\files\rnxegndxqczyflwxureljfymgjpqgqsz.back
14.7s C:\AdwCleaner\quarantine\registry\reg_hskfuxwnsjxrsytxxeomxanthwyhrcnx.reg
14.9s C:\AdwCleaner\quarantine\registry\reg_ccfjszvfoietkaxlqrjqzklfkvbilozf.reg
15.6s C:\AdwCleaner\quarantine\registry\reg_ygvpkafhkyjeaxmbahzczjjrhwdmgrrn.reg
15.9s C:\AdwCleaner\quarantine\registry\reg_lrjkoqjaxtmrljkcsohmqpyqtpgqcdtz.reg
16.2s C:\AdwCleaner\quarantine\registry\reg_rddacduwtuwidcvbknkkiphcbbvigeyi.reg
16.6s C:\AdwCleaner\quarantine\registry\reg_djpxocawazkrdxoesetosgncagcjrhxs.reg
16.9s C:\AdwCleaner\quarantine\registry\reg_khirbwixuwokxelfsjvljqsigbxvyepv.reg
17.1s C:\AdwCleaner\quarantine\registry\reg_teodgquvsvvlewjnyebsujpakyztntzr.reg
17.3s C:\AdwCleaner\quarantine\registry\reg_bbrbhtpqufijkrkklkvkfpkjlqijvtgc.reg
17.4s C:\AdwCleaner\quarantine\registry\reg_pdunnludimmiluccwtntviiselpubxwq.reg
17.6s C:\AdwCleaner\quarantine\registry\reg_natorijmwbxszovezxlczjqbnqmefsvy.reg
17.7s C:\AdwCleaner\quarantine\registry\reg_awgvfzewjvftybyzmusgmewztpnnfcqp.reg
17.9s C:\AdwCleaner\quarantine\registry\reg_mohjwcwgwerzxnrkwpsvpipphswuzcjs.reg
18.0s C:\AdwCleaner\quarantine\registry\reg_vojydhhqbkuocihxhtuxicueyxfrxmts.reg
18.2s C:\AdwCleaner\quarantine\registry\reg_jkoadtfflawlknfsqrdkengbqviawwrq.reg
18.8s C:\AdwCleaner\quarantine\registry\reg_khamaprbgxvthvacluijibqcdahiehmv.reg
19.2s C:\AdwCleaner\quarantine\registry\reg_rbzzfjzpumgqkjdwygcchpilfoadooyi.reg
19.5s C:\AdwCleaner\quarantine\registry\reg_rqbynmyrhpduaqxgbdivozlfhvketcgk.reg
19.7s C:\AdwCleaner\quarantine\registry\reg_vorhwknlvgktfjytfbqxybdhbovaywjn.reg
19.8s C:\AdwCleaner\quarantine\registry\reg_bwvxbvarupvbqrdxppcofdaqvmvesjdy.reg
20.1s C:\AdwCleaner\quarantine\registry\reg_afckiwoamlocwmehyrjxmsksexyfptkq.reg
20.2s C:\AdwCleaner\quarantine\registry\reg_ysfdercjwwjthkzrvnavhoubpmrtwuwv.reg
20.6s C:\AdwCleaner\quarantine\registry\reg_thgyxjdtrbynkciqwofbscmkofenmuha.reg
20.7s C:\AdwCleaner\quarantine\registry\reg_ojfnxvljbkhehtlkzqxewlfbzcxehgyb.reg
20.9s C:\AdwCleaner\quarantine\registry\reg_gckjajsdtbayaobmbhyshyccnknsvptv.reg
21.1s C:\AdwCleaner\quarantine\registry\reg_rhdgykridacnkwssfercrevupqkyiibn.reg
21.2s C:\AdwCleaner\quarantine\registry\reg_gkeucpyuatjhaseiumwnsqzpgadqyozm.reg
21.3s C:\AdwCleaner\quarantine\registry\reg_fpojeddgnftvgvdddfcwsuusqspqafhb.reg
21.5s C:\AdwCleaner\quarantine\registry\reg_vyegytpnsxjnprqscifapfntjzugezjx.reg
21.6s C:\AdwCleaner\quarantine\registry\reg_heanplkumesjyoknvgbsswzqxoajuftb.reg
21.8s C:\AdwCleaner\quarantine\registry\reg_thngaongkihgggcbegxrbvygvzivxvzb.reg
21.9s C:\AdwCleaner\quarantine\registry\reg_hqajokdzagiaqznwraekundpeqxmzphe.reg
22.1s C:\AdwCleaner\quarantine\registry\reg_jprofiypdozdddybqwfwbzwcysrludfr.reg
22.5s C:\AdwCleaner\quarantine\registry\reg_exqgcdmzwkgmtvjsuzjiuvrmqcyknppp.reg
22.7s C:\AdwCleaner\quarantine\registry\reg_omziaywjnqcfyymhltxwqkwqzfhsowvn.reg
22.9s C:\AdwCleaner\quarantine\registry\reg_lxyymlnqkdjnvhydcezryogkbvvbavfw.reg
23.1s C:\AdwCleaner\quarantine\registry\reg_dlqswglljrnukcqhogdemnusjesbgyat.reg
23.2s C:\AdwCleaner\quarantine\registry\reg_aufuttutimjlpjavqhyxvqqerrqvtlsx.reg
23.3s C:\AdwCleaner\quarantine\registry\reg_cycdlhgsbsavninrgsjqkzgtdthbwapf.reg
23.4s C:\AdwCleaner\quarantine\registry\reg_pkmxtaydidocoemizibomfvccmhhaifq.reg
23.6s C:\AdwCleaner\quarantine\registry\reg_qiuofkmjgodcdcrttbgczjlxpbncpofo.reg
28.0s C:\AdwCleaner\quarantine\registry\reg_qsgsdmjearwwieauepksxvwmvvkmybts.reg
28.2s C:\AdwCleaner\quarantine\registry\reg_bvlsspiuylcrequxbwapnyvcqwqtdxwy.reg
28.5s C:\AdwCleaner\quarantine\registry\reg_mlckxsjurlujclmysvcvkdlzybrulgmb.reg
28.6s C:\AdwCleaner\quarantine\registry\reg_pirkoajenajxxoynvgfezrlcccqmtmfo.reg
28.8s C:\AdwCleaner\quarantine\registry\reg_alclxwvnnfuqivuminvxdicuwjegopfn.reg
29.0s C:\AdwCleaner\quarantine\registry\reg_xmfybppuwbajwahwnmlgzpzonmscsxaf.reg
29.2s C:\AdwCleaner\quarantine\registry\reg_bgcmtlicjubxlugsxttfbtqhuccczbcq.reg
29.4s C:\AdwCleaner\quarantine\registry\reg_sjpxzxqweupjpdggopeyeohspibkgxan.reg
29.5s C:\AdwCleaner\quarantine\registry\reg_fpledizicashgefgldqbkgviggfngqxy.reg
30.0s C:\AdwCleaner\quarantine\registry\reg_pxvfxyipfkszzyodsbbfinayqqrtocva.reg
30.3s C:\AdwCleaner\quarantine\registry\reg_tjyaqfrmcayunfgmtdgyetzjmjbxtkgy.reg
30.6s C:\AdwCleaner\quarantine\registry\reg_iiyvtcxfatqqzfgkyvllmslrurnrnqom.reg
30.7s C:\AdwCleaner\quarantine\registry\reg_ynbmxkopnhtqjzgznpomwmrufmosriea.reg
30.9s C:\AdwCleaner\quarantine\registry\reg_opquhjbhgnbnrzzqrfqjwzluwksgtghg.reg
31.1s C:\AdwCleaner\quarantine\registry\reg_fqjzfkakxadujbxahuachhajgjftjpms.reg
35.3s C:\AdwCleaner\quarantine\registry\reg_tcujcfmxnndsnftbdomfahhvpkrclfsg.reg
35.5s C:\AdwCleaner\quarantine\registry\reg_bmvrtjboexqwhowpacxfzglvgyslvjiq.reg
35.7s C:\AdwCleaner\quarantine\registry\reg_yrsdypdhaheyupjeifllbwhjjatgcjpo.reg
36.4s C:\AdwCleaner\quarantine\registry\reg_onqhxijahmpordjqbdfablpilhcxuppf.reg
36.8s C:\AdwCleaner\quarantine\registry\reg_hhyddookileqxnsvnalogjitfwxfkuqf.reg
37.1s C:\AdwCleaner\quarantine\registry\reg_kjvowlcksaqanamfyhzormuhlgheucou.reg
37.2s C:\AdwCleaner\quarantine\registry\reg_lvmrvtoxujbmqfryfhcmaaqzolgrtaiy.reg
37.5s C:\AdwCleaner\quarantine\registry\reg_qmopkfmghtanlaexuigfuptpqoyhocxw.reg
37.6s C:\AdwCleaner\quarantine\registry\reg_hakclexyqybvaltckjsglxvfozwjhnyt.reg
37.7s C:\AdwCleaner\quarantine\registry\reg_yulwxaxipehcjbwquvpujfdufeejckla.reg
38.3s C:\AdwCleaner\quarantine\registry\reg_dfntubvkriqzerggfelccusqetgcfras.reg
38.5s C:\AdwCleaner\quarantine\registry\reg_sabibiokqcebmebghomekhzlxuunofzq.reg
38.6s C:\AdwCleaner\quarantine\registry\reg_szylnxirtrcevhgciraqubmlhugrvakf.reg
38.7s C:\AdwCleaner\quarantine\registry\reg_zhjhojogymfrhcfzhpnzheofikonitje.reg
38.9s C:\AdwCleaner\quarantine\registry\reg_ywouofwdqsvrekpxrutyhysluxmctmal.reg
40.0s C:\AdwCleaner\quarantine\registry\reg_oaaqflbrtkxlixlcbmbzhwhezytanmvc.reg
40.1s C:\AdwCleaner\quarantine\registry\reg_hdhqqihbyhupqfdxgnbnoipbgrmkiqvj.reg
40.5s C:\AdwCleaner\quarantine\registry\reg_mxggwlhgtqtxomnwmqwfftrbnxgcwjwf.reg
40.6s C:\AdwCleaner\quarantine\registry\reg_bgzpmxsmvofgiwoglxnvnqngpojtfaxt.reg
40.7s C:\AdwCleaner\quarantine\registry\reg_vttoehudmrvynhjakjuxkrzcuehlksud.reg
40.9s C:\AdwCleaner\quarantine\registry\reg_fusvzanqvnxkijbyvkbphbcsqxufbzgv.reg
41.1s C:\AdwCleaner\quarantine\registry\reg_awapctldemkmmhtqprstthmdtiivsmbf.reg
41.3s C:\AdwCleaner\quarantine\registry\reg_nztdiakjqojgghsuadyxhhtbifndtyde.reg

C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Jayron.exe -> Deleted
Size . . . . . . . : 122 880 bytes
Age . . . . . . . : 1.1 days (2017-01-07 23:17:07)
Entropy . . . . . : 6.5
SHA-256 . . . . . : CE5D370F424E98BEE6A805E2336D197110946548452650F0D44851CE17829810
Version . . . . . : 2.0.0.11
Copyright . . . . : Copyright (C) 2015
> Bitdefender . . . : Gen:Variant.Graftor.304300
> HitmanPro . . . . : Mal/Generic-S
Fuzzy . . . . . . : 103.0
Forensic Cluster
-0.8s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\RTOP\
-0.8s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\RTOP\activity.log
-0.8s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\RTOP\hosts_backup
-0.8s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\RTOP\uclogfile.bin
-0.8s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\
-0.6s C:\AdwCleaner\quarantine\files\mdqbvfkcgrqcfqvcvcmtccsnixnesoze\
-0.6s C:\AdwCleaner\quarantine\files\mdqbvfkcgrqcfqvcvcmtccsnixnesoze\coordinator.cfg
-0.6s C:\AdwCleaner\quarantine\files\mdqbvfkcgrqcfqvcvcmtccsnixnesoze\general.cfg
-0.6s C:\AdwCleaner\quarantine\files\mdqbvfkcgrqcfqvcvcmtccsnixnesoze\S-1-5-21-1607161227-1741431587-2329729702-1000.cfg
-0.4s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\
-0.4s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\log\
-0.4s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\log\wprotectmanager_2014-05-27[20-48-24-594].log
-0.4s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\log\wprotectmanager_2014-06-12[23-06-17-127].log
-0.4s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\update\
-0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\
-0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Apdonlex.bin
-0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Blackzenla.bin
-0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\conf.config
-0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Config.xml
-0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Flex-Kix.dll
-0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Freshing.bin
-0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Holdlotfind.dat
-0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Hotcom.exe
0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Hotcom.exe.config
0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Jayron.exe
0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Jayron.exe.config
0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Lotstock.dat
0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Mattom.bin
0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\md.xml
0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Ope-Stock.reg
0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Rankotin.dat
0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\RonApsoft.dll
0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Ronzap.dat
0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Ronzap.exe
0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\SaltRonfind.exe
0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\SaltRonfind.exe.config
0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Tan-Strong.dat
0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\uninstall.dat
0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Voyalex.bin
0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Xxx-zuntam.bin
0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Zertop.bin
0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\ondemand\
0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\temp\
0.5s C:\AdwCleaner\quarantine\files\xbhaucfzkmehsjingyhelcgvklgewbnf\
0.5s C:\AdwCleaner\quarantine\files\xbhaucfzkmehsjingyhelcgvklgewbnf\ff.HP
0.5s C:\AdwCleaner\quarantine\files\xbhaucfzkmehsjingyhelcgvklgewbnf\ff.NT
0.5s C:\AdwCleaner\quarantine\files\xbhaucfzkmehsjingyhelcgvklgewbnf\snp.sc
0.7s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\
0.7s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\Config.json
0.7s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\set.exe
0.7s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\set.exe.config
0.7s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\System.Data.SQLite.dll
0.9s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\System.Data.SQLite.Linq.dll
1.0s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\System.Data.SQLite.xml
1.1s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\X64\
1.1s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\X64\SQLite.Interop.dll
1.5s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\X86\
1.5s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\X86\SQLite.Interop.dll
2.1s C:\AdwCleaner\quarantine\files\vgncqxonlsljnucxseehrhsrqclssozw\
2.1s C:\AdwCleaner\quarantine\files\vgncqxonlsljnucxseehrhsrqclssozw\Config.xml
2.1s C:\AdwCleaner\quarantine\files\vgncqxonlsljnucxseehrhsrqclssozw\Nettrans.exe
2.1s C:\AdwCleaner\quarantine\files\vgncqxonlsljnucxseehrhsrqclssozw\Nettrans.exe.config
2.9s C:\AdwCleaner\quarantine\files\lzjoohgimtjqxfbwnkwkwofqdjbkiipm\
2.9s C:\AdwCleaner\quarantine\files\lzjoohgimtjqxfbwnkwkwofqdjbkiipm\Traffic Exchange\
3.1s C:\AdwCleaner\quarantine\files\mehetuxeizxjadbiirqxnzixrhzgfpkx\
3.1s C:\AdwCleaner\quarantine\files\mehetuxeizxjadbiirqxnzixrhzgfpkx\ByteFence Anti-Malware.lnk
4.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\
4.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\aff.conf
4.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.51.x86.dll
4.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.52.x64.dll
4.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.52.x86.dll
4.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.60.x64.dll
4.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.60.x86.dll
5.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.Common.dll
5.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AWSSDK.dll
5.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\BackupStack.exe
5.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Configuration Updater.exe
5.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Crypto32.dll
5.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Crypto64.dll
5.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\de_DE.mo
5.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\diffstack.dll
5.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\es_ES.mo
5.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\fr_FR.mo
5.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\GetText.dll
5.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\it_IT.mo
5.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\LinqBridge.dll
5.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\LogicNP.EZShellExtensions.dll
5.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\MPCBClient.dll
5.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\MPCBContextMenu.dll
5.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\MPCBIconOverlays.dll
6.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\MyPC Backup.exe
6.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\mypcbackup.ico
6.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\ObjectListView.dll
6.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\pt_PT.mo
6.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\RegisterExtensionDotNet20_x64.exe
6.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\RegisterExtensionDotNet20_x86.exe
6.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\RestartExplorer.exe
6.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Service Start.exe
6.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Shared Stack.dll
6.2s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Signup Wizard.exe
6.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\syncicon.ico
6.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\syncing.ico
6.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\tick.ico
6.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\uninst.exe
6.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\UnRegisterExtensions.exe
6.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Updater.exe
6.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Config\
6.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Config\api.ts2
6.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\
6.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_backup_conf.db
6.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_file_cache.db
6.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_queues.db
6.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_settings.db
6.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_sig_cache.db
6.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_version_queue.db
6.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\
6.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\APPLICATION.log
6.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\AUTH.log
6.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\BACKOFF.log
6.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\CLIENT.log
6.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\GRID_RECOVERY.log
6.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\GRID_RECOVERY_INIT.log
6.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\LICENCE.log
6.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\NETWORK_SHARES.log
6.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\POPUPS.log
6.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\REMOTING.log
6.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\REQUEST.log
6.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\SERVICE.log
7.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\SERVICE_prev.log
7.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\SHELL.log
7.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\STACK_BASE.log
7.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\UPDATER.log
7.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\UTC_MIGRATION.log
7.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\WAIT_HANDLES.log
7.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Resources\
7.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Resources\cache\
7.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\x64\
7.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\x64\System.Data.SQLite.dll
7.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\x86\
7.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\x86\System.Data.SQLite.dll
7.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\~updates\
7.9s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\
7.9s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\
7.9s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\
7.9s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\
7.9s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\
7.9s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\node_modules\hawk\
7.9s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\node_modules\hawk\node_modules\
7.9s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\node_modules\
7.9s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\node_modules\hawk\node_modules\cryptiles\
8.1s C:\AdwCleaner\quarantine\files\cfclmgzmdyrfouldtogzejwngwtrlcgq\
8.1s C:\AdwCleaner\quarantine\files\cfclmgzmdyrfouldtogzejwngwtrlcgq\Traffic Exchange\
8.1s C:\AdwCleaner\quarantine\files\cfclmgzmdyrfouldtogzejwngwtrlcgq\Traffic Exchange\Online-Guardian-v2.exe
8.1s C:\AdwCleaner\quarantine\files\cfclmgzmdyrfouldtogzejwngwtrlcgq\Traffic Exchange\Online-Guardian.exe
8.7s C:\AdwCleaner\quarantine\files\ffhywyhzabwssuvjmxbwjcwhazgzhqyu\
8.8s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\
8.8s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\wyy7kuna.default\
8.8s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\wyy7kuna.default\prefs.js
8.8s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\
8.9s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\wyy7kuna.default\profiles.ini
8.9s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\wyy7kuna.default\search-metadata.json
9.0s C:\AdwCleaner\quarantine\files\ceyyrbqbwuqwvfvgexlgyzektqgpvmcx.back
9.1s C:\AdwCleaner\quarantine\files\kbmtuxxvrlhxutdkaockmibfumvnhmmj.back
9.5s C:\AdwCleaner\quarantine\files\sncdtfcdtanqulwrznbwrcvytpeztggs.back
9.7s C:\AdwCleaner\quarantine\files\mdbeimfmkqbljcopbafbbbfiywbsuvfi.back
9.8s C:\AdwCleaner\quarantine\files\yeswlvywmemkbycygmndofbincjxjbme.back
9.9s C:\AdwCleaner\quarantine\files\owzrdyjvksknzzhdzxtdzlnzcdiiiyir.back
10.1s C:\AdwCleaner\quarantine\files\gzwvidnxqebdjsbuipkomfozaejiinsc.back
10.3s C:\AdwCleaner\quarantine\files\iqdsbrwxecmqbxzaxeqyjtpqwahpvnpr.back
10.7s C:\AdwCleaner\quarantine\files\qlaqaqyhrmbgmobvutntfwlejmakihrd.back
10.9s C:\AdwCleaner\quarantine\files\ojnivfnjvvbvibsbddggquowxpnuqfaq.back
11.0s C:\AdwCleaner\quarantine\files\kuzoszblwjapbodrkrazjblzfivuxqpa.back
11.2s C:\AdwCleaner\quarantine\files\alormegxhvypgmemtszjrjglcguvigel.back
11.2s C:\AdwCleaner\quarantine\files\fyqgymrawnmakhmsfwyabmdygywtdrta.back
11.5s C:\AdwCleaner\quarantine\files\cvnilvahvhtfeqlkbxdbztpksqsybayr.back
11.6s C:\AdwCleaner\quarantine\files\axuviutefnzjzwcrbakzzolrabcuohmb.back
11.8s C:\AdwCleaner\quarantine\files\jmjmnegzusfkhopstgxzvkqtjyqvjnvs.back
12.0s C:\AdwCleaner\quarantine\files\ggcropimosivavatxkivsmkdxletjxdb.back
12.1s C:\AdwCleaner\quarantine\files\eatdlmaoyunigmhgslbwogdpzfovcslk.back
12.5s C:\AdwCleaner\quarantine\files\ugnkiryliftmwjeooeomoyowdojgcjfs.back
13.1s C:\AdwCleaner\quarantine\files\txpmcaaaxezexxxsqwxbaxrswztspbmm.back
13.5s C:\AdwCleaner\quarantine\files\tnljhvwxjjsfwwqdpscdyhtruwsjvfhi.back
13.7s C:\AdwCleaner\quarantine\files\ktzlilsvsazulpgcnniwzmqbhnizbicm.back
13.8s C:\AdwCleaner\quarantine\files\rnxegndxqczyflwxureljfymgjpqgqsz.back
14.6s C:\AdwCleaner\quarantine\registry\reg_hskfuxwnsjxrsytxxeomxanthwyhrcnx.reg
14.8s C:\AdwCleaner\quarantine\registry\reg_ccfjszvfoietkaxlqrjqzklfkvbilozf.reg
15.5s C:\AdwCleaner\quarantine\registry\reg_ygvpkafhkyjeaxmbahzczjjrhwdmgrrn.reg
15.8s C:\AdwCleaner\quarantine\registry\reg_lrjkoqjaxtmrljkcsohmqpyqtpgqcdtz.reg
16.2s C:\AdwCleaner\quarantine\registry\reg_rddacduwtuwidcvbknkkiphcbbvigeyi.reg
16.6s C:\AdwCleaner\quarantine\registry\reg_djpxocawazkrdxoesetosgncagcjrhxs.reg
16.9s C:\AdwCleaner\quarantine\registry\reg_khirbwixuwokxelfsjvljqsigbxvyepv.reg
17.0s C:\AdwCleaner\quarantine\registry\reg_teodgquvsvvlewjnyebsujpakyztntzr.reg
17.2s C:\AdwCleaner\quarantine\registry\reg_bbrbhtpqufijkrkklkvkfpkjlqijvtgc.reg
17.3s C:\AdwCleaner\quarantine\registry\reg_pdunnludimmiluccwtntviiselpubxwq.reg
17.5s C:\AdwCleaner\quarantine\registry\reg_natorijmwbxszovezxlczjqbnqmefsvy.reg
17.7s C:\AdwCleaner\quarantine\registry\reg_awgvfzewjvftybyzmusgmewztpnnfcqp.reg
17.8s C:\AdwCleaner\quarantine\registry\reg_mohjwcwgwerzxnrkwpsvpipphswuzcjs.reg
18.0s C:\AdwCleaner\quarantine\registry\reg_vojydhhqbkuocihxhtuxicueyxfrxmts.reg
18.2s C:\AdwCleaner\quarantine\registry\reg_jkoadtfflawlknfsqrdkengbqviawwrq.reg
18.7s C:\AdwCleaner\quarantine\registry\reg_khamaprbgxvthvacluijibqcdahiehmv.reg
19.1s C:\AdwCleaner\quarantine\registry\reg_rbzzfjzpumgqkjdwygcchpilfoadooyi.reg
19.4s C:\AdwCleaner\quarantine\registry\reg_rqbynmyrhpduaqxgbdivozlfhvketcgk.reg
19.6s C:\AdwCleaner\quarantine\registry\reg_vorhwknlvgktfjytfbqxybdhbovaywjn.reg
19.8s C:\AdwCleaner\quarantine\registry\reg_bwvxbvarupvbqrdxppcofdaqvmvesjdy.reg
20.0s C:\AdwCleaner\quarantine\registry\reg_afckiwoamlocwmehyrjxmsksexyfptkq.reg
20.2s C:\AdwCleaner\quarantine\registry\reg_ysfdercjwwjthkzrvnavhoubpmrtwuwv.reg
20.5s C:\AdwCleaner\quarantine\registry\reg_thgyxjdtrbynkciqwofbscmkofenmuha.reg
20.7s C:\AdwCleaner\quarantine\registry\reg_ojfnxvljbkhehtlkzqxewlfbzcxehgyb.reg
20.8s C:\AdwCleaner\quarantine\registry\reg_gckjajsdtbayaobmbhyshyccnknsvptv.reg
21.0s C:\AdwCleaner\quarantine\registry\reg_rhdgykridacnkwssfercrevupqkyiibn.reg
21.1s C:\AdwCleaner\quarantine\registry\reg_gkeucpyuatjhaseiumwnsqzpgadqyozm.reg
21.3s C:\AdwCleaner\quarantine\registry\reg_fpojeddgnftvgvdddfcwsuusqspqafhb.reg
21.4s C:\AdwCleaner\quarantine\registry\reg_vyegytpnsxjnprqscifapfntjzugezjx.reg
21.6s C:\AdwCleaner\quarantine\registry\reg_heanplkumesjyoknvgbsswzqxoajuftb.reg
21.7s C:\AdwCleaner\quarantine\registry\reg_thngaongkihgggcbegxrbvygvzivxvzb.reg
21.9s C:\AdwCleaner\quarantine\registry\reg_hqajokdzagiaqznwraekundpeqxmzphe.reg
22.1s C:\AdwCleaner\quarantine\registry\reg_jprofiypdozdddybqwfwbzwcysrludfr.reg
22.4s C:\AdwCleaner\quarantine\registry\reg_exqgcdmzwkgmtvjsuzjiuvrmqcyknppp.reg
22.7s C:\AdwCleaner\quarantine\registry\reg_omziaywjnqcfyymhltxwqkwqzfhsowvn.reg
22.8s C:\AdwCleaner\quarantine\registry\reg_lxyymlnqkdjnvhydcezryogkbvvbavfw.reg
23.0s C:\AdwCleaner\quarantine\registry\reg_dlqswglljrnukcqhogdemnusjesbgyat.reg
23.1s C:\AdwCleaner\quarantine\registry\reg_aufuttutimjlpjavqhyxvqqerrqvtlsx.reg
23.2s C:\AdwCleaner\quarantine\registry\reg_cycdlhgsbsavninrgsjqkzgtdthbwapf.reg
23.4s C:\AdwCleaner\quarantine\registry\reg_pkmxtaydidocoemizibomfvccmhhaifq.reg
23.5s C:\AdwCleaner\quarantine\registry\reg_qiuofkmjgodcdcrttbgczjlxpbncpofo.reg
27.9s C:\AdwCleaner\quarantine\registry\reg_qsgsdmjearwwieauepksxvwmvvkmybts.reg
28.1s C:\AdwCleaner\quarantine\registry\reg_bvlsspiuylcrequxbwapnyvcqwqtdxwy.reg
28.4s C:\AdwCleaner\quarantine\registry\reg_mlckxsjurlujclmysvcvkdlzybrulgmb.reg
28.6s C:\AdwCleaner\quarantine\registry\reg_pirkoajenajxxoynvgfezrlcccqmtmfo.reg
28.8s C:\AdwCleaner\quarantine\registry\reg_alclxwvnnfuqivuminvxdicuwjegopfn.reg
29.0s C:\AdwCleaner\quarantine\registry\reg_xmfybppuwbajwahwnmlgzpzonmscsxaf.reg
29.1s C:\AdwCleaner\quarantine\registry\reg_bgcmtlicjubxlugsxttfbtqhuccczbcq.reg
29.3s C:\AdwCleaner\quarantine\registry\reg_sjpxzxqweupjpdggopeyeohspibkgxan.reg
29.5s C:\AdwCleaner\quarantine\registry\reg_fpledizicashgefgldqbkgviggfngqxy.reg
30.0s C:\AdwCleaner\quarantine\registry\reg_pxvfxyipfkszzyodsbbfinayqqrtocva.reg
30.2s C:\AdwCleaner\quarantine\registry\reg_tjyaqfrmcayunfgmtdgyetzjmjbxtkgy.reg
30.5s C:\AdwCleaner\quarantine\registry\reg_iiyvtcxfatqqzfgkyvllmslrurnrnqom.reg
30.7s C:\AdwCleaner\quarantine\registry\reg_ynbmxkopnhtqjzgznpomwmrufmosriea.reg
30.9s C:\AdwCleaner\quarantine\registry\reg_opquhjbhgnbnrzzqrfqjwzluwksgtghg.reg
31.0s C:\AdwCleaner\quarantine\registry\reg_fqjzfkakxadujbxahuachhajgjftjpms.reg
35.2s C:\AdwCleaner\quarantine\registry\reg_tcujcfmxnndsnftbdomfahhvpkrclfsg.reg
35.4s C:\AdwCleaner\quarantine\registry\reg_bmvrtjboexqwhowpacxfzglvgyslvjiq.reg
35.7s C:\AdwCleaner\quarantine\registry\reg_yrsdypdhaheyupjeifllbwhjjatgcjpo.reg
36.3s C:\AdwCleaner\quarantine\registry\reg_onqhxijahmpordjqbdfablpilhcxuppf.reg
36.7s C:\AdwCleaner\quarantine\registry\reg_hhyddookileqxnsvnalogjitfwxfkuqf.reg
37.0s C:\AdwCleaner\quarantine\registry\reg_kjvowlcksaqanamfyhzormuhlgheucou.reg
37.2s C:\AdwCleaner\quarantine\registry\reg_lvmrvtoxujbmqfryfhcmaaqzolgrtaiy.reg
37.4s C:\AdwCleaner\quarantine\registry\reg_qmopkfmghtanlaexuigfuptpqoyhocxw.reg
37.5s C:\AdwCleaner\quarantine\registry\reg_hakclexyqybvaltckjsglxvfozwjhnyt.reg
37.7s C:\AdwCleaner\quarantine\registry\reg_yulwxaxipehcjbwquvpujfdufeejckla.reg
38.2s C:\AdwCleaner\quarantine\registry\reg_dfntubvkriqzerggfelccusqetgcfras.reg
38.4s C:\AdwCleaner\quarantine\registry\reg_sabibiokqcebmebghomekhzlxuunofzq.reg
38.5s C:\AdwCleaner\quarantine\registry\reg_szylnxirtrcevhgciraqubmlhugrvakf.reg
38.7s C:\AdwCleaner\quarantine\registry\reg_zhjhojogymfrhcfzhpnzheofikonitje.reg
38.8s C:\AdwCleaner\quarantine\registry\reg_ywouofwdqsvrekpxrutyhysluxmctmal.reg
39.9s C:\AdwCleaner\quarantine\registry\reg_oaaqflbrtkxlixlcbmbzhwhezytanmvc.reg
40.0s C:\AdwCleaner\quarantine\registry\reg_hdhqqihbyhupqfdxgnbnoipbgrmkiqvj.reg
40.4s C:\AdwCleaner\quarantine\registry\reg_mxggwlhgtqtxomnwmqwfftrbnxgcwjwf.reg
40.5s C:\AdwCleaner\quarantine\registry\reg_bgzpmxsmvofgiwoglxnvnqngpojtfaxt.reg
40.7s C:\AdwCleaner\quarantine\registry\reg_vttoehudmrvynhjakjuxkrzcuehlksud.reg
40.8s C:\AdwCleaner\quarantine\registry\reg_fusvzanqvnxkijbyvkbphbcsqxufbzgv.reg
41.0s C:\AdwCleaner\quarantine\registry\reg_awapctldemkmmhtqprstthmdtiivsmbf.reg
41.2s C:\AdwCleaner\quarantine\registry\reg_nztdiakjqojgghsuadyxhhtbifndtyde.reg

C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\RonApsoft.dll -> Deleted
Size . . . . . . . : 248 320 bytes
Age . . . . . . . : 1.1 days (2017-01-07 23:17:07)
Entropy . . . . . : 6.6
SHA-256 . . . . . : 4D9A03EE1BE889ECA4F57296073691513350B540A22E5CCC60B7442A95DEFC4A
Version . . . . . : 1.0.0.27567
> Bitdefender . . . : Adware.Generic.1693800
> Kaspersky . . . . : not-a-virus:AdWare.Win32.AdAgent.je
> HitmanPro . . . . : App/Generic-CK
Fuzzy . . . . . . : 105.0
Forensic Cluster
-0.8s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\RTOP\
-0.8s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\RTOP\activity.log
-0.8s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\RTOP\hosts_backup
-0.8s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\RTOP\uclogfile.bin
-0.8s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\
-0.7s C:\AdwCleaner\quarantine\files\mdqbvfkcgrqcfqvcvcmtccsnixnesoze\
-0.7s C:\AdwCleaner\quarantine\files\mdqbvfkcgrqcfqvcvcmtccsnixnesoze\coordinator.cfg
-0.7s C:\AdwCleaner\quarantine\files\mdqbvfkcgrqcfqvcvcmtccsnixnesoze\general.cfg
-0.7s C:\AdwCleaner\quarantine\files\mdqbvfkcgrqcfqvcvcmtccsnixnesoze\S-1-5-21-1607161227-1741431587-2329729702-1000.cfg
-0.5s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\
-0.5s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\log\
-0.5s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\log\wprotectmanager_2014-05-27[20-48-24-594].log
-0.4s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\log\wprotectmanager_2014-06-12[23-06-17-127].log
-0.4s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\update\
-0.2s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\
-0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Apdonlex.bin
-0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Blackzenla.bin
-0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\conf.config
-0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Config.xml
-0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Flex-Kix.dll
-0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Freshing.bin
-0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Holdlotfind.dat
-0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Hotcom.exe
-0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Hotcom.exe.config
-0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Jayron.exe
-0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Jayron.exe.config
-0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Lotstock.dat
-0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Mattom.bin
-0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\md.xml
0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Ope-Stock.reg
0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Rankotin.dat
0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\RonApsoft.dll
0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Ronzap.dat
0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Ronzap.exe
0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\SaltRonfind.exe
0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\SaltRonfind.exe.config
0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Tan-Strong.dat
0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\uninstall.dat
0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Voyalex.bin
0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Xxx-zuntam.bin
0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Zertop.bin
0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\ondemand\
0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\temp\
0.4s C:\AdwCleaner\quarantine\files\xbhaucfzkmehsjingyhelcgvklgewbnf\
0.4s C:\AdwCleaner\quarantine\files\xbhaucfzkmehsjingyhelcgvklgewbnf\ff.HP
0.4s C:\AdwCleaner\quarantine\files\xbhaucfzkmehsjingyhelcgvklgewbnf\ff.NT
0.5s C:\AdwCleaner\quarantine\files\xbhaucfzkmehsjingyhelcgvklgewbnf\snp.sc
0.6s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\
0.6s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\Config.json
0.6s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\set.exe
0.6s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\set.exe.config
0.6s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\System.Data.SQLite.dll
0.9s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\System.Data.SQLite.Linq.dll
0.9s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\System.Data.SQLite.xml
1.1s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\X64\
1.1s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\X64\SQLite.Interop.dll
1.5s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\X86\
1.5s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\X86\SQLite.Interop.dll
2.1s C:\AdwCleaner\quarantine\files\vgncqxonlsljnucxseehrhsrqclssozw\
2.1s C:\AdwCleaner\quarantine\files\vgncqxonlsljnucxseehrhsrqclssozw\Config.xml
2.1s C:\AdwCleaner\quarantine\files\vgncqxonlsljnucxseehrhsrqclssozw\Nettrans.exe
2.1s C:\AdwCleaner\quarantine\files\vgncqxonlsljnucxseehrhsrqclssozw\Nettrans.exe.config
2.8s C:\AdwCleaner\quarantine\files\lzjoohgimtjqxfbwnkwkwofqdjbkiipm\
2.8s C:\AdwCleaner\quarantine\files\lzjoohgimtjqxfbwnkwkwofqdjbkiipm\Traffic Exchange\
3.1s C:\AdwCleaner\quarantine\files\mehetuxeizxjadbiirqxnzixrhzgfpkx\
3.1s C:\AdwCleaner\quarantine\files\mehetuxeizxjadbiirqxnzixrhzgfpkx\ByteFence Anti-Malware.lnk
4.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\
4.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\aff.conf
4.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.51.x86.dll
4.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.52.x64.dll
4.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.52.x86.dll
4.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.60.x64.dll
4.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.60.x86.dll
4.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.Common.dll
5.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AWSSDK.dll
5.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\BackupStack.exe
5.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Configuration Updater.exe
5.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Crypto32.dll
5.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Crypto64.dll
5.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\de_DE.mo
5.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\diffstack.dll
5.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\es_ES.mo
5.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\fr_FR.mo
5.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\GetText.dll
5.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\it_IT.mo
5.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\LinqBridge.dll
5.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\LogicNP.EZShellExtensions.dll
5.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\MPCBClient.dll
5.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\MPCBContextMenu.dll
5.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\MPCBIconOverlays.dll
5.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\MyPC Backup.exe
6.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\mypcbackup.ico
6.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\ObjectListView.dll
6.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\pt_PT.mo
6.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\RegisterExtensionDotNet20_x64.exe
6.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\RegisterExtensionDotNet20_x86.exe
6.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\RestartExplorer.exe
6.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Service Start.exe
6.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Shared Stack.dll
6.2s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Signup Wizard.exe
6.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\syncicon.ico
6.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\syncing.ico
6.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\tick.ico
6.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\uninst.exe
6.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\UnRegisterExtensions.exe
6.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Updater.exe
6.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Config\
6.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Config\api.ts2
6.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\
6.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_backup_conf.db
6.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_file_cache.db
6.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_queues.db
6.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_settings.db
6.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_sig_cache.db
6.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_version_queue.db
6.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\
6.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\APPLICATION.log
6.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\AUTH.log
6.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\BACKOFF.log
6.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\CLIENT.log
6.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\GRID_RECOVERY.log
6.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\GRID_RECOVERY_INIT.log
6.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\LICENCE.log
6.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\NETWORK_SHARES.log
6.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\POPUPS.log
6.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\REMOTING.log
6.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\REQUEST.log
6.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\SERVICE.log
7.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\SERVICE_prev.log
7.2s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\SHELL.log
7.2s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\STACK_BASE.log
7.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\UPDATER.log
7.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\UTC_MIGRATION.log
7.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\WAIT_HANDLES.log
7.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Resources\
7.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Resources\cache\
7.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\x64\
7.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\x64\System.Data.SQLite.dll
7.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\x86\
7.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\x86\System.Data.SQLite.dll
7.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\~updates\
7.8s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\
7.8s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\
7.8s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\
7.8s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\
7.8s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\
7.9s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\node_modules\hawk\
7.9s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\node_modules\hawk\node_modules\
7.9s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\node_modules\
7.9s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\node_modules\hawk\node_modules\cryptiles\
8.0s C:\AdwCleaner\quarantine\files\cfclmgzmdyrfouldtogzejwngwtrlcgq\
8.0s C:\AdwCleaner\quarantine\files\cfclmgzmdyrfouldtogzejwngwtrlcgq\Traffic Exchange\
8.0s C:\AdwCleaner\quarantine\files\cfclmgzmdyrfouldtogzejwngwtrlcgq\Traffic Exchange\Online-Guardian-v2.exe
8.1s C:\AdwCleaner\quarantine\files\cfclmgzmdyrfouldtogzejwngwtrlcgq\Traffic Exchange\Online-Guardian.exe
8.6s C:\AdwCleaner\quarantine\files\ffhywyhzabwssuvjmxbwjcwhazgzhqyu\
8.8s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\
8.8s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\wyy7kuna.default\
8.8s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\wyy7kuna.default\prefs.js
8.8s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\
8.8s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\wyy7kuna.default\profiles.ini
8.8s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\wyy7kuna.default\search-metadata.json
9.0s C:\AdwCleaner\quarantine\files\ceyyrbqbwuqwvfvgexlgyzektqgpvmcx.back
9.1s C:\AdwCleaner\quarantine\files\kbmtuxxvrlhxutdkaockmibfumvnhmmj.back
9.5s C:\AdwCleaner\quarantine\files\sncdtfcdtanqulwrznbwrcvytpeztggs.back
9.6s C:\AdwCleaner\quarantine\files\mdbeimfmkqbljcopbafbbbfiywbsuvfi.back
9.7s C:\AdwCleaner\quarantine\files\yeswlvywmemkbycygmndofbincjxjbme.back
9.8s C:\AdwCleaner\quarantine\files\owzrdyjvksknzzhdzxtdzlnzcdiiiyir.back
10.0s C:\AdwCleaner\quarantine\files\gzwvidnxqebdjsbuipkomfozaejiinsc.back
10.3s C:\AdwCleaner\quarantine\files\iqdsbrwxecmqbxzaxeqyjtpqwahpvnpr.back
10.7s C:\AdwCleaner\quarantine\files\qlaqaqyhrmbgmobvutntfwlejmakihrd.back
10.9s C:\AdwCleaner\quarantine\files\ojnivfnjvvbvibsbddggquowxpnuqfaq.back
11.0s C:\AdwCleaner\quarantine\files\kuzoszblwjapbodrkrazjblzfivuxqpa.back
11.1s C:\AdwCleaner\quarantine\files\alormegxhvypgmemtszjrjglcguvigel.back
11.2s C:\AdwCleaner\quarantine\files\fyqgymrawnmakhmsfwyabmdygywtdrta.back
11.4s C:\AdwCleaner\quarantine\files\cvnilvahvhtfeqlkbxdbztpksqsybayr.back
11.6s C:\AdwCleaner\quarantine\files\axuviutefnzjzwcrbakzzolrabcuohmb.back
11.8s C:\AdwCleaner\quarantine\files\jmjmnegzusfkhopstgxzvkqtjyqvjnvs.back
11.9s C:\AdwCleaner\quarantine\files\ggcropimosivavatxkivsmkdxletjxdb.back
12.1s C:\AdwCleaner\quarantine\files\eatdlmaoyunigmhgslbwogdpzfovcslk.back
12.5s C:\AdwCleaner\quarantine\files\ugnkiryliftmwjeooeomoyowdojgcjfs.back
13.0s C:\AdwCleaner\quarantine\files\txpmcaaaxezexxxsqwxbaxrswztspbmm.back
13.4s C:\AdwCleaner\quarantine\files\tnljhvwxjjsfwwqdpscdyhtruwsjvfhi.back
13.6s C:\AdwCleaner\quarantine\files\ktzlilsvsazulpgcnniwzmqbhnizbicm.back
13.8s C:\AdwCleaner\quarantine\files\rnxegndxqczyflwxureljfymgjpqgqsz.back
14.6s C:\AdwCleaner\quarantine\registry\reg_hskfuxwnsjxrsytxxeomxanthwyhrcnx.reg
14.8s C:\AdwCleaner\quarantine\registry\reg_ccfjszvfoietkaxlqrjqzklfkvbilozf.reg
15.5s C:\AdwCleaner\quarantine\registry\reg_ygvpkafhkyjeaxmbahzczjjrhwdmgrrn.reg
15.8s C:\AdwCleaner\quarantine\registry\reg_lrjkoqjaxtmrljkcsohmqpyqtpgqcdtz.reg
16.1s C:\AdwCleaner\quarantine\registry\reg_rddacduwtuwidcvbknkkiphcbbvigeyi.reg
16.5s C:\AdwCleaner\quarantine\registry\reg_djpxocawazkrdxoesetosgncagcjrhxs.reg
16.8s C:\AdwCleaner\quarantine\registry\reg_khirbwixuwokxelfsjvljqsigbxvyepv.reg
17.0s C:\AdwCleaner\quarantine\registry\reg_teodgquvsvvlewjnyebsujpakyztntzr.reg
17.2s C:\AdwCleaner\quarantine\registry\reg_bbrbhtpqufijkrkklkvkfpkjlqijvtgc.reg
17.3s C:\AdwCleaner\quarantine\registry\reg_pdunnludimmiluccwtntviiselpubxwq.reg
17.5s C:\AdwCleaner\quarantine\registry\reg_natorijmwbxszovezxlczjqbnqmefsvy.reg
17.6s C:\AdwCleaner\quarantine\registry\reg_awgvfzewjvftybyzmusgmewztpnnfcqp.reg
17.8s C:\AdwCleaner\quarantine\registry\reg_mohjwcwgwerzxnrkwpsvpipphswuzcjs.reg
17.9s C:\AdwCleaner\quarantine\registry\reg_vojydhhqbkuocihxhtuxicueyxfrxmts.reg
18.1s C:\AdwCleaner\quarantine\registry\reg_jkoadtfflawlknfsqrdkengbqviawwrq.reg
18.7s C:\AdwCleaner\quarantine\registry\reg_khamaprbgxvthvacluijibqcdahiehmv.reg
19.0s C:\AdwCleaner\quarantine\registry\reg_rbzzfjzpumgqkjdwygcchpilfoadooyi.reg
19.4s C:\AdwCleaner\quarantine\registry\reg_rqbynmyrhpduaqxgbdivozlfhvketcgk.reg
19.6s C:\AdwCleaner\quarantine\registry\reg_vorhwknlvgktfjytfbqxybdhbovaywjn.reg
19.7s C:\AdwCleaner\quarantine\registry\reg_bwvxbvarupvbqrdxppcofdaqvmvesjdy.reg
20.0s C:\AdwCleaner\quarantine\registry\reg_afckiwoamlocwmehyrjxmsksexyfptkq.reg
20.1s C:\AdwCleaner\quarantine\registry\reg_ysfdercjwwjthkzrvnavhoubpmrtwuwv.reg
20.5s C:\AdwCleaner\quarantine\registry\reg_thgyxjdtrbynkciqwofbscmkofenmuha.reg
20.6s C:\AdwCleaner\quarantine\registry\reg_ojfnxvljbkhehtlkzqxewlfbzcxehgyb.reg
20.8s C:\AdwCleaner\quarantine\registry\reg_gckjajsdtbayaobmbhyshyccnknsvptv.reg
21.0s C:\AdwCleaner\quarantine\registry\reg_rhdgykridacnkwssfercrevupqkyiibn.reg
21.1s C:\AdwCleaner\quarantine\registry\reg_gkeucpyuatjhaseiumwnsqzpgadqyozm.reg
21.2s C:\AdwCleaner\quarantine\registry\reg_fpojeddgnftvgvdddfcwsuusqspqafhb.reg
21.4s C:\AdwCleaner\quarantine\registry\reg_vyegytpnsxjnprqscifapfntjzugezjx.reg
21.5s C:\AdwCleaner\quarantine\registry\reg_heanplkumesjyoknvgbsswzqxoajuftb.reg
21.7s C:\AdwCleaner\quarantine\registry\reg_thngaongkihgggcbegxrbvygvzivxvzb.reg
21.8s C:\AdwCleaner\quarantine\registry\reg_hqajokdzagiaqznwraekundpeqxmzphe.reg
22.0s C:\AdwCleaner\quarantine\registry\reg_jprofiypdozdddybqwfwbzwcysrludfr.reg
22.4s C:\AdwCleaner\quarantine\registry\reg_exqgcdmzwkgmtvjsuzjiuvrmqcyknppp.reg
22.6s C:\AdwCleaner\quarantine\registry\reg_omziaywjnqcfyymhltxwqkwqzfhsowvn.reg
22.8s C:\AdwCleaner\quarantine\registry\reg_lxyymlnqkdjnvhydcezryogkbvvbavfw.reg
22.9s C:\AdwCleaner\quarantine\registry\reg_dlqswglljrnukcqhogdemnusjesbgyat.reg
23.1s C:\AdwCleaner\quarantine\registry\reg_aufuttutimjlpjavqhyxvqqerrqvtlsx.reg
23.2s C:\AdwCleaner\quarantine\registry\reg_cycdlhgsbsavninrgsjqkzgtdthbwapf.reg
23.3s C:\AdwCleaner\quarantine\registry\reg_pkmxtaydidocoemizibomfvccmhhaifq.reg
23.5s C:\AdwCleaner\quarantine\registry\reg_qiuofkmjgodcdcrttbgczjlxpbncpofo.reg
27.9s C:\AdwCleaner\quarantine\registry\reg_qsgsdmjearwwieauepksxvwmvvkmybts.reg
28.1s C:\AdwCleaner\quarantine\registry\reg_bvlsspiuylcrequxbwapnyvcqwqtdxwy.reg
28.4s C:\AdwCleaner\quarantine\registry\reg_mlckxsjurlujclmysvcvkdlzybrulgmb.reg
28.5s C:\AdwCleaner\quarantine\registry\reg_pirkoajenajxxoynvgfezrlcccqmtmfo.reg
28.7s C:\AdwCleaner\quarantine\registry\reg_alclxwvnnfuqivuminvxdicuwjegopfn.reg
28.9s C:\AdwCleaner\quarantine\registry\reg_xmfybppuwbajwahwnmlgzpzonmscsxaf.reg
29.1s C:\AdwCleaner\quarantine\registry\reg_bgcmtlicjubxlugsxttfbtqhuccczbcq.reg
29.3s C:\AdwCleaner\quarantine\registry\reg_sjpxzxqweupjpdggopeyeohspibkgxan.reg
29.4s C:\AdwCleaner\quarantine\registry\reg_fpledizicashgefgldqbkgviggfngqxy.reg
29.9s C:\AdwCleaner\quarantine\registry\reg_pxvfxyipfkszzyodsbbfinayqqrtocva.reg
30.2s C:\AdwCleaner\quarantine\registry\reg_tjyaqfrmcayunfgmtdgyetzjmjbxtkgy.reg
30.5s C:\AdwCleaner\quarantine\registry\reg_iiyvtcxfatqqzfgkyvllmslrurnrnqom.reg
30.6s C:\AdwCleaner\quarantine\registry\reg_ynbmxkopnhtqjzgznpomwmrufmosriea.reg
30.8s C:\AdwCleaner\quarantine\registry\reg_opquhjbhgnbnrzzqrfqjwzluwksgtghg.reg
31.0s C:\AdwCleaner\quarantine\registry\reg_fqjzfkakxadujbxahuachhajgjftjpms.reg
35.2s C:\AdwCleaner\quarantine\registry\reg_tcujcfmxnndsnftbdomfahhvpkrclfsg.reg
35.3s C:\AdwCleaner\quarantine\registry\reg_bmvrtjboexqwhowpacxfzglvgyslvjiq.reg
35.6s C:\AdwCleaner\quarantine\registry\reg_yrsdypdhaheyupjeifllbwhjjatgcjpo.reg
36.3s C:\AdwCleaner\quarantine\registry\reg_onqhxijahmpordjqbdfablpilhcxuppf.reg
36.7s C:\AdwCleaner\quarantine\registry\reg_hhyddookileqxnsvnalogjitfwxfkuqf.reg
36.9s C:\AdwCleaner\quarantine\registry\reg_kjvowlcksaqanamfyhzormuhlgheucou.reg
37.1s C:\AdwCleaner\quarantine\registry\reg_lvmrvtoxujbmqfryfhcmaaqzolgrtaiy.reg
37.4s C:\AdwCleaner\quarantine\registry\reg_qmopkfmghtanlaexuigfuptpqoyhocxw.reg
37.5s C:\AdwCleaner\quarantine\registry\reg_hakclexyqybvaltckjsglxvfozwjhnyt.reg
37.6s C:\AdwCleaner\quarantine\registry\reg_yulwxaxipehcjbwquvpujfdufeejckla.reg
38.2s C:\AdwCleaner\quarantine\registry\reg_dfntubvkriqzerggfelccusqetgcfras.reg
38.4s C:\AdwCleaner\quarantine\registry\reg_sabibiokqcebmebghomekhzlxuunofzq.reg
38.5s C:\AdwCleaner\quarantine\registry\reg_szylnxirtrcevhgciraqubmlhugrvakf.reg
38.6s C:\AdwCleaner\quarantine\registry\reg_zhjhojogymfrhcfzhpnzheofikonitje.reg
38.8s C:\AdwCleaner\quarantine\registry\reg_ywouofwdqsvrekpxrutyhysluxmctmal.reg
39.8s C:\AdwCleaner\quarantine\registry\reg_oaaqflbrtkxlixlcbmbzhwhezytanmvc.reg
40.0s C:\AdwCleaner\quarantine\registry\reg_hdhqqihbyhupqfdxgnbnoipbgrmkiqvj.reg
40.3s C:\AdwCleaner\quarantine\registry\reg_mxggwlhgtqtxomnwmqwfftrbnxgcwjwf.reg
40.5s C:\AdwCleaner\quarantine\registry\reg_bgzpmxsmvofgiwoglxnvnqngpojtfaxt.reg
40.6s C:\AdwCleaner\quarantine\registry\reg_vttoehudmrvynhjakjuxkrzcuehlksud.reg
40.8s C:\AdwCleaner\quarantine\registry\reg_fusvzanqvnxkijbyvkbphbcsqxufbzgv.reg
41.0s C:\AdwCleaner\quarantine\registry\reg_awapctldemkmmhtqprstthmdtiivsmbf.reg
41.2s C:\AdwCleaner\quarantine\registry\reg_nztdiakjqojgghsuadyxhhtbifndtyde.reg

C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Ronzap.exe -> Deleted
Size . . . . . . . : 629 760 bytes
Age . . . . . . . : 1.1 days (2017-01-07 23:17:07)
Entropy . . . . . : 7.9
SHA-256 . . . . . : DC28B6E881E9555D4E09A4F38B15F0C613BA7C94DBE4946C419A274E84F0F4A8
> Bitdefender . . . : Gen:Variant.Zusy.215015
> HitmanPro . . . . : Mal/Generic-S
Fuzzy . . . . . . : 116.0
Forensic Cluster
-0.8s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\RTOP\
-0.8s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\RTOP\activity.log
-0.8s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\RTOP\hosts_backup
-0.8s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\RTOP\uclogfile.bin
-0.8s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\
-0.7s C:\AdwCleaner\quarantine\files\mdqbvfkcgrqcfqvcvcmtccsnixnesoze\
-0.7s C:\AdwCleaner\quarantine\files\mdqbvfkcgrqcfqvcvcmtccsnixnesoze\coordinator.cfg
-0.7s C:\AdwCleaner\quarantine\files\mdqbvfkcgrqcfqvcvcmtccsnixnesoze\general.cfg
-0.7s C:\AdwCleaner\quarantine\files\mdqbvfkcgrqcfqvcvcmtccsnixnesoze\S-1-5-21-1607161227-1741431587-2329729702-1000.cfg
-0.5s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\
-0.5s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\log\
-0.5s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\log\wprotectmanager_2014-05-27[20-48-24-594].log
-0.4s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\log\wprotectmanager_2014-06-12[23-06-17-127].log
-0.4s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\update\
-0.2s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\
-0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Apdonlex.bin
-0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Blackzenla.bin
-0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\conf.config
-0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Config.xml
-0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Flex-Kix.dll
-0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Freshing.bin
-0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Holdlotfind.dat
-0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Hotcom.exe
-0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Hotcom.exe.config
-0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Jayron.exe
-0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Jayron.exe.config
-0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Lotstock.dat
-0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Mattom.bin
-0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\md.xml
0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Ope-Stock.reg
0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Rankotin.dat
0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\RonApsoft.dll
0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Ronzap.dat
0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Ronzap.exe
0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\SaltRonfind.exe
0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\SaltRonfind.exe.config
0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Tan-Strong.dat
0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\uninstall.dat
0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Voyalex.bin
0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Xxx-zuntam.bin
0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Zertop.bin
0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\ondemand\
0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\temp\
0.4s C:\AdwCleaner\quarantine\files\xbhaucfzkmehsjingyhelcgvklgewbnf\
0.4s C:\AdwCleaner\quarantine\files\xbhaucfzkmehsjingyhelcgvklgewbnf\ff.HP
0.4s C:\AdwCleaner\quarantine\files\xbhaucfzkmehsjingyhelcgvklgewbnf\ff.NT
0.5s C:\AdwCleaner\quarantine\files\xbhaucfzkmehsjingyhelcgvklgewbnf\snp.sc
0.6s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\
0.6s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\Config.json
0.6s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\set.exe
0.6s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\set.exe.config
0.6s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\System.Data.SQLite.dll
0.9s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\System.Data.SQLite.Linq.dll
0.9s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\System.Data.SQLite.xml
1.1s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\X64\
1.1s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\X64\SQLite.Interop.dll
1.5s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\X86\
1.5s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\X86\SQLite.Interop.dll
2.1s C:\AdwCleaner\quarantine\files\vgncqxonlsljnucxseehrhsrqclssozw\
2.1s C:\AdwCleaner\quarantine\files\vgncqxonlsljnucxseehrhsrqclssozw\Config.xml
2.1s C:\AdwCleaner\quarantine\files\vgncqxonlsljnucxseehrhsrqclssozw\Nettrans.exe
2.1s C:\AdwCleaner\quarantine\files\vgncqxonlsljnucxseehrhsrqclssozw\Nettrans.exe.config
2.8s C:\AdwCleaner\quarantine\files\lzjoohgimtjqxfbwnkwkwofqdjbkiipm\
2.8s C:\AdwCleaner\quarantine\files\lzjoohgimtjqxfbwnkwkwofqdjbkiipm\Traffic Exchange\
3.1s C:\AdwCleaner\quarantine\files\mehetuxeizxjadbiirqxnzixrhzgfpkx\
3.1s C:\AdwCleaner\quarantine\files\mehetuxeizxjadbiirqxnzixrhzgfpkx\ByteFence Anti-Malware.lnk
4.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\
4.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\aff.conf
4.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.51.x86.dll
4.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.52.x64.dll
4.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.52.x86.dll
4.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.60.x64.dll
4.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.60.x86.dll
4.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.Common.dll
5.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AWSSDK.dll
5.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\BackupStack.exe
5.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Configuration Updater.exe
5.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Crypto32.dll
5.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Crypto64.dll
5.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\de_DE.mo
5.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\diffstack.dll
5.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\es_ES.mo
5.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\fr_FR.mo
5.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\GetText.dll
5.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\it_IT.mo
5.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\LinqBridge.dll
5.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\LogicNP.EZShellExtensions.dll
5.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\MPCBClient.dll
5.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\MPCBContextMenu.dll
5.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\MPCBIconOverlays.dll
5.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\MyPC Backup.exe
6.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\mypcbackup.ico
6.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\ObjectListView.dll
6.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\pt_PT.mo
6.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\RegisterExtensionDotNet20_x64.exe
6.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\RegisterExtensionDotNet20_x86.exe
6.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\RestartExplorer.exe
6.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Service Start.exe
6.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Shared Stack.dll
6.2s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Signup Wizard.exe
6.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\syncicon.ico
6.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\syncing.ico
6.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\tick.ico
6.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\uninst.exe
6.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\UnRegisterExtensions.exe
6.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Updater.exe
6.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Config\
6.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Config\api.ts2
6.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\
6.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_backup_conf.db
6.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_file_cache.db
6.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_queues.db
6.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_settings.db
6.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_sig_cache.db
6.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_version_queue.db
6.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\
6.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\APPLICATION.log
6.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\AUTH.log
6.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\BACKOFF.log
6.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\CLIENT.log
6.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\GRID_RECOVERY.log
6.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\GRID_RECOVERY_INIT.log
6.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\LICENCE.log
6.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\NETWORK_SHARES.log
6.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\POPUPS.log
6.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\REMOTING.log
6.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\REQUEST.log
6.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\SERVICE.log
7.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\SERVICE_prev.log
7.2s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\SHELL.log
7.2s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\STACK_BASE.log
7.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\UPDATER.log
7.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\UTC_MIGRATION.log
7.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\WAIT_HANDLES.log
7.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Resources\
7.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Resources\cache\
7.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\x64\
7.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\x64\System.Data.SQLite.dll
7.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\x86\
7.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\x86\System.Data.SQLite.dll
7.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\~updates\
7.8s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\
7.8s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\
7.8s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\
7.8s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\
7.8s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\
7.9s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\node_modules\hawk\
7.9s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\node_modules\hawk\node_modules\
7.9s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\node_modules\
7.9s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\node_modules\hawk\node_modules\cryptiles\
8.0s C:\AdwCleaner\quarantine\files\cfclmgzmdyrfouldtogzejwngwtrlcgq\
8.0s C:\AdwCleaner\quarantine\files\cfclmgzmdyrfouldtogzejwngwtrlcgq\Traffic Exchange\
8.0s C:\AdwCleaner\quarantine\files\cfclmgzmdyrfouldtogzejwngwtrlcgq\Traffic Exchange\Online-Guardian-v2.exe
8.1s C:\AdwCleaner\quarantine\files\cfclmgzmdyrfouldtogzejwngwtrlcgq\Traffic Exchange\Online-Guardian.exe
8.6s C:\AdwCleaner\quarantine\files\ffhywyhzabwssuvjmxbwjcwhazgzhqyu\
8.8s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\
8.8s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\wyy7kuna.default\
8.8s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\wyy7kuna.default\prefs.js
8.8s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\
8.8s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\wyy7kuna.default\profiles.ini
8.8s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\wyy7kuna.default\search-metadata.json
9.0s C:\AdwCleaner\quarantine\files\ceyyrbqbwuqwvfvgexlgyzektqgpvmcx.back
9.1s C:\AdwCleaner\quarantine\files\kbmtuxxvrlhxutdkaockmibfumvnhmmj.back
9.5s C:\AdwCleaner\quarantine\files\sncdtfcdtanqulwrznbwrcvytpeztggs.back
9.6s C:\AdwCleaner\quarantine\files\mdbeimfmkqbljcopbafbbbfiywbsuvfi.back
9.7s C:\AdwCleaner\quarantine\files\yeswlvywmemkbycygmndofbincjxjbme.back
9.8s C:\AdwCleaner\quarantine\files\owzrdyjvksknzzhdzxtdzlnzcdiiiyir.back
10.0s C:\AdwCleaner\quarantine\files\gzwvidnxqebdjsbuipkomfozaejiinsc.back
10.3s C:\AdwCleaner\quarantine\files\iqdsbrwxecmqbxzaxeqyjtpqwahpvnpr.back
10.7s C:\AdwCleaner\quarantine\files\qlaqaqyhrmbgmobvutntfwlejmakihrd.back
10.9s C:\AdwCleaner\quarantine\files\ojnivfnjvvbvibsbddggquowxpnuqfaq.back
11.0s C:\AdwCleaner\quarantine\files\kuzoszblwjapbodrkrazjblzfivuxqpa.back
11.1s C:\AdwCleaner\quarantine\files\alormegxhvypgmemtszjrjglcguvigel.back
11.2s C:\AdwCleaner\quarantine\files\fyqgymrawnmakhmsfwyabmdygywtdrta.back
11.4s C:\AdwCleaner\quarantine\files\cvnilvahvhtfeqlkbxdbztpksqsybayr.back
11.6s C:\AdwCleaner\quarantine\files\axuviutefnzjzwcrbakzzolrabcuohmb.back
11.8s C:\AdwCleaner\quarantine\files\jmjmnegzusfkhopstgxzvkqtjyqvjnvs.back
11.9s C:\AdwCleaner\quarantine\files\ggcropimosivavatxkivsmkdxletjxdb.back
12.1s C:\AdwCleaner\quarantine\files\eatdlmaoyunigmhgslbwogdpzfovcslk.back
12.5s C:\AdwCleaner\quarantine\files\ugnkiryliftmwjeooeomoyowdojgcjfs.back
13.0s C:\AdwCleaner\quarantine\files\txpmcaaaxezexxxsqwxbaxrswztspbmm.back
13.4s C:\AdwCleaner\quarantine\files\tnljhvwxjjsfwwqdpscdyhtruwsjvfhi.back
13.6s C:\AdwCleaner\quarantine\files\ktzlilsvsazulpgcnniwzmqbhnizbicm.back
13.8s C:\AdwCleaner\quarantine\files\rnxegndxqczyflwxureljfymgjpqgqsz.back
14.6s C:\AdwCleaner\quarantine\registry\reg_hskfuxwnsjxrsytxxeomxanthwyhrcnx.reg
14.8s C:\AdwCleaner\quarantine\registry\reg_ccfjszvfoietkaxlqrjqzklfkvbilozf.reg
15.5s C:\AdwCleaner\quarantine\registry\reg_ygvpkafhkyjeaxmbahzczjjrhwdmgrrn.reg
15.8s C:\AdwCleaner\quarantine\registry\reg_lrjkoqjaxtmrljkcsohmqpyqtpgqcdtz.reg
16.1s C:\AdwCleaner\quarantine\registry\reg_rddacduwtuwidcvbknkkiphcbbvigeyi.reg
16.5s C:\AdwCleaner\quarantine\registry\reg_djpxocawazkrdxoesetosgncagcjrhxs.reg
16.8s C:\AdwCleaner\quarantine\registry\reg_khirbwixuwokxelfsjvljqsigbxvyepv.reg
17.0s C:\AdwCleaner\quarantine\registry\reg_teodgquvsvvlewjnyebsujpakyztntzr.reg
17.2s C:\AdwCleaner\quarantine\registry\reg_bbrbhtpqufijkrkklkvkfpkjlqijvtgc.reg
17.3s C:\AdwCleaner\quarantine\registry\reg_pdunnludimmiluccwtntviiselpubxwq.reg
17.5s C:\AdwCleaner\quarantine\registry\reg_natorijmwbxszovezxlczjqbnqmefsvy.reg
17.6s C:\AdwCleaner\quarantine\registry\reg_awgvfzewjvftybyzmusgmewztpnnfcqp.reg
17.8s C:\AdwCleaner\quarantine\registry\reg_mohjwcwgwerzxnrkwpsvpipphswuzcjs.reg
17.9s C:\AdwCleaner\quarantine\registry\reg_vojydhhqbkuocihxhtuxicueyxfrxmts.reg
18.1s C:\AdwCleaner\quarantine\registry\reg_jkoadtfflawlknfsqrdkengbqviawwrq.reg
18.7s C:\AdwCleaner\quarantine\registry\reg_khamaprbgxvthvacluijibqcdahiehmv.reg
19.0s C:\AdwCleaner\quarantine\registry\reg_rbzzfjzpumgqkjdwygcchpilfoadooyi.reg
19.4s C:\AdwCleaner\quarantine\registry\reg_rqbynmyrhpduaqxgbdivozlfhvketcgk.reg
19.6s C:\AdwCleaner\quarantine\registry\reg_vorhwknlvgktfjytfbqxybdhbovaywjn.reg
19.7s C:\AdwCleaner\quarantine\registry\reg_bwvxbvarupvbqrdxppcofdaqvmvesjdy.reg
20.0s C:\AdwCleaner\quarantine\registry\reg_afckiwoamlocwmehyrjxmsksexyfptkq.reg
20.1s C:\AdwCleaner\quarantine\registry\reg_ysfdercjwwjthkzrvnavhoubpmrtwuwv.reg
20.5s C:\AdwCleaner\quarantine\registry\reg_thgyxjdtrbynkciqwofbscmkofenmuha.reg
20.6s C:\AdwCleaner\quarantine\registry\reg_ojfnxvljbkhehtlkzqxewlfbzcxehgyb.reg
20.8s C:\AdwCleaner\quarantine\registry\reg_gckjajsdtbayaobmbhyshyccnknsvptv.reg
21.0s C:\AdwCleaner\quarantine\registry\reg_rhdgykridacnkwssfercrevupqkyiibn.reg
21.1s C:\AdwCleaner\quarantine\registry\reg_gkeucpyuatjhaseiumwnsqzpgadqyozm.reg
21.2s C:\AdwCleaner\quarantine\registry\reg_fpojeddgnftvgvdddfcwsuusqspqafhb.reg
21.4s C:\AdwCleaner\quarantine\registry\reg_vyegytpnsxjnprqscifapfntjzugezjx.reg
21.5s C:\AdwCleaner\quarantine\registry\reg_heanplkumesjyoknvgbsswzqxoajuftb.reg
21.7s C:\AdwCleaner\quarantine\registry\reg_thngaongkihgggcbegxrbvygvzivxvzb.reg
21.8s C:\AdwCleaner\quarantine\registry\reg_hqajokdzagiaqznwraekundpeqxmzphe.reg
22.0s C:\AdwCleaner\quarantine\registry\reg_jprofiypdozdddybqwfwbzwcysrludfr.reg
22.4s C:\AdwCleaner\quarantine\registry\reg_exqgcdmzwkgmtvjsuzjiuvrmqcyknppp.reg
22.6s C:\AdwCleaner\quarantine\registry\reg_omziaywjnqcfyymhltxwqkwqzfhsowvn.reg
22.8s C:\AdwCleaner\quarantine\registry\reg_lxyymlnqkdjnvhydcezryogkbvvbavfw.reg
22.9s C:\AdwCleaner\quarantine\registry\reg_dlqswglljrnukcqhogdemnusjesbgyat.reg
23.1s C:\AdwCleaner\quarantine\registry\reg_aufuttutimjlpjavqhyxvqqerrqvtlsx.reg
23.2s C:\AdwCleaner\quarantine\registry\reg_cycdlhgsbsavninrgsjqkzgtdthbwapf.reg
23.3s C:\AdwCleaner\quarantine\registry\reg_pkmxtaydidocoemizibomfvccmhhaifq.reg
23.5s C:\AdwCleaner\quarantine\registry\reg_qiuofkmjgodcdcrttbgczjlxpbncpofo.reg
27.9s C:\AdwCleaner\quarantine\registry\reg_qsgsdmjearwwieauepksxvwmvvkmybts.reg
28.1s C:\AdwCleaner\quarantine\registry\reg_bvlsspiuylcrequxbwapnyvcqwqtdxwy.reg
28.4s C:\AdwCleaner\quarantine\registry\reg_mlckxsjurlujclmysvcvkdlzybrulgmb.reg
28.5s C:\AdwCleaner\quarantine\registry\reg_pirkoajenajxxoynvgfezrlcccqmtmfo.reg
28.7s C:\AdwCleaner\quarantine\registry\reg_alclxwvnnfuqivuminvxdicuwjegopfn.reg
28.9s C:\AdwCleaner\quarantine\registry\reg_xmfybppuwbajwahwnmlgzpzonmscsxaf.reg
29.1s C:\AdwCleaner\quarantine\registry\reg_bgcmtlicjubxlugsxttfbtqhuccczbcq.reg
29.3s C:\AdwCleaner\quarantine\registry\reg_sjpxzxqweupjpdggopeyeohspibkgxan.reg
29.4s C:\AdwCleaner\quarantine\registry\reg_fpledizicashgefgldqbkgviggfngqxy.reg
29.9s C:\AdwCleaner\quarantine\registry\reg_pxvfxyipfkszzyodsbbfinayqqrtocva.reg
30.2s C:\AdwCleaner\quarantine\registry\reg_tjyaqfrmcayunfgmtdgyetzjmjbxtkgy.reg
30.5s C:\AdwCleaner\quarantine\registry\reg_iiyvtcxfatqqzfgkyvllmslrurnrnqom.reg
30.6s C:\AdwCleaner\quarantine\registry\reg_ynbmxkopnhtqjzgznpomwmrufmosriea.reg
30.8s C:\AdwCleaner\quarantine\registry\reg_opquhjbhgnbnrzzqrfqjwzluwksgtghg.reg
31.0s C:\AdwCleaner\quarantine\registry\reg_fqjzfkakxadujbxahuachhajgjftjpms.reg
35.2s C:\AdwCleaner\quarantine\registry\reg_tcujcfmxnndsnftbdomfahhvpkrclfsg.reg
35.3s C:\AdwCleaner\quarantine\registry\reg_bmvrtjboexqwhowpacxfzglvgyslvjiq.reg
35.6s C:\AdwCleaner\quarantine\registry\reg_yrsdypdhaheyupjeifllbwhjjatgcjpo.reg
36.3s C:\AdwCleaner\quarantine\registry\reg_onqhxijahmpordjqbdfablpilhcxuppf.reg
36.7s C:\AdwCleaner\quarantine\registry\reg_hhyddookileqxnsvnalogjitfwxfkuqf.reg
36.9s C:\AdwCleaner\quarantine\registry\reg_kjvowlcksaqanamfyhzormuhlgheucou.reg
37.1s C:\AdwCleaner\quarantine\registry\reg_lvmrvtoxujbmqfryfhcmaaqzolgrtaiy.reg
37.4s C:\AdwCleaner\quarantine\registry\reg_qmopkfmghtanlaexuigfuptpqoyhocxw.reg
37.5s C:\AdwCleaner\quarantine\registry\reg_hakclexyqybvaltckjsglxvfozwjhnyt.reg
37.6s C:\AdwCleaner\quarantine\registry\reg_yulwxaxipehcjbwquvpujfdufeejckla.reg
38.2s C:\AdwCleaner\quarantine\registry\reg_dfntubvkriqzerggfelccusqetgcfras.reg
38.4s C:\AdwCleaner\quarantine\registry\reg_sabibiokqcebmebghomekhzlxuunofzq.reg
38.5s C:\AdwCleaner\quarantine\registry\reg_szylnxirtrcevhgciraqubmlhugrvakf.reg
38.6s C:\AdwCleaner\quarantine\registry\reg_zhjhojogymfrhcfzhpnzheofikonitje.reg
38.8s C:\AdwCleaner\quarantine\registry\reg_ywouofwdqsvrekpxrutyhysluxmctmal.reg
39.8s C:\AdwCleaner\quarantine\registry\reg_oaaqflbrtkxlixlcbmbzhwhezytanmvc.reg
40.0s C:\AdwCleaner\quarantine\registry\reg_hdhqqihbyhupqfdxgnbnoipbgrmkiqvj.reg
40.3s C:\AdwCleaner\quarantine\registry\reg_mxggwlhgtqtxomnwmqwfftrbnxgcwjwf.reg
40.5s C:\AdwCleaner\quarantine\registry\reg_bgzpmxsmvofgiwoglxnvnqngpojtfaxt.reg
40.6s C:\AdwCleaner\quarantine\registry\reg_vttoehudmrvynhjakjuxkrzcuehlksud.reg
40.8s C:\AdwCleaner\quarantine\registry\reg_fusvzanqvnxkijbyvkbphbcsqxufbzgv.reg
41.0s C:\AdwCleaner\quarantine\registry\reg_awapctldemkmmhtqprstthmdtiivsmbf.reg
41.2s C:\AdwCleaner\quarantine\registry\reg_nztdiakjqojgghsuadyxhhtbifndtyde.reg

C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\SaltRonfind.exe -> Deleted
Size . . . . . . . : 27 136 bytes
Age . . . . . . . : 1.1 days (2017-01-07 23:17:07)
Entropy . . . . . : 5.9
SHA-256 . . . . . : EA7702197F353023091C654CE9D54CE8DB169B874D9C948A0D34CD9BF1FD2397
> Bitdefender . . . : Gen:Variant.MSILPerseus.34918
> Kaspersky . . . . : Trojan-Downloader.MSIL.Agent.alqa
> HitmanPro . . . . : Troj/MSIL-HOX
Fuzzy . . . . . . : 108.0
Forensic Cluster
-0.9s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\RTOP\
-0.9s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\RTOP\activity.log
-0.9s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\RTOP\hosts_backup
-0.9s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\RTOP\uclogfile.bin
-0.9s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\
-0.7s C:\AdwCleaner\quarantine\files\mdqbvfkcgrqcfqvcvcmtccsnixnesoze\
-0.7s C:\AdwCleaner\quarantine\files\mdqbvfkcgrqcfqvcvcmtccsnixnesoze\coordinator.cfg
-0.7s C:\AdwCleaner\quarantine\files\mdqbvfkcgrqcfqvcvcmtccsnixnesoze\general.cfg
-0.7s C:\AdwCleaner\quarantine\files\mdqbvfkcgrqcfqvcvcmtccsnixnesoze\S-1-5-21-1607161227-1741431587-2329729702-1000.cfg
-0.5s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\
-0.5s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\log\
-0.5s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\log\wprotectmanager_2014-05-27[20-48-24-594].log
-0.5s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\log\wprotectmanager_2014-06-12[23-06-17-127].log
-0.4s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\update\
-0.2s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\
-0.2s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Apdonlex.bin
-0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Blackzenla.bin
-0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\conf.config
-0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Config.xml
-0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Flex-Kix.dll
-0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Freshing.bin
-0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Holdlotfind.dat
-0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Hotcom.exe
-0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Hotcom.exe.config
-0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Jayron.exe
-0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Jayron.exe.config
-0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Lotstock.dat
-0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Mattom.bin
-0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\md.xml
-0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Ope-Stock.reg
-0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Rankotin.dat
-0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\RonApsoft.dll
-0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Ronzap.dat
-0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Ronzap.exe
0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\SaltRonfind.exe
0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\SaltRonfind.exe.config
0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Tan-Strong.dat
0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\uninstall.dat
0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Voyalex.bin
0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Xxx-zuntam.bin
0.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Zertop.bin
0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\ondemand\
0.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\temp\
0.4s C:\AdwCleaner\quarantine\files\xbhaucfzkmehsjingyhelcgvklgewbnf\
0.4s C:\AdwCleaner\quarantine\files\xbhaucfzkmehsjingyhelcgvklgewbnf\ff.HP
0.4s C:\AdwCleaner\quarantine\files\xbhaucfzkmehsjingyhelcgvklgewbnf\ff.NT
0.4s C:\AdwCleaner\quarantine\files\xbhaucfzkmehsjingyhelcgvklgewbnf\snp.sc
0.6s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\
0.6s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\Config.json
0.6s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\set.exe
0.6s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\set.exe.config
0.6s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\System.Data.SQLite.dll
0.9s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\System.Data.SQLite.Linq.dll
0.9s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\System.Data.SQLite.xml
1.1s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\X64\
1.1s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\X64\SQLite.Interop.dll
1.5s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\X86\
1.5s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\X86\SQLite.Interop.dll
2.1s C:\AdwCleaner\quarantine\files\vgncqxonlsljnucxseehrhsrqclssozw\
2.1s C:\AdwCleaner\quarantine\files\vgncqxonlsljnucxseehrhsrqclssozw\Config.xml
2.1s C:\AdwCleaner\quarantine\files\vgncqxonlsljnucxseehrhsrqclssozw\Nettrans.exe
2.1s C:\AdwCleaner\quarantine\files\vgncqxonlsljnucxseehrhsrqclssozw\Nettrans.exe.config
2.8s C:\AdwCleaner\quarantine\files\lzjoohgimtjqxfbwnkwkwofqdjbkiipm\
2.8s C:\AdwCleaner\quarantine\files\lzjoohgimtjqxfbwnkwkwofqdjbkiipm\Traffic Exchange\
3.1s C:\AdwCleaner\quarantine\files\mehetuxeizxjadbiirqxnzixrhzgfpkx\
3.1s C:\AdwCleaner\quarantine\files\mehetuxeizxjadbiirqxnzixrhzgfpkx\ByteFence Anti-Malware.lnk
4.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\
4.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\aff.conf
4.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.51.x86.dll
4.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.52.x64.dll
4.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.52.x86.dll
4.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.60.x64.dll
4.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.60.x86.dll
4.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.Common.dll
4.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AWSSDK.dll
5.2s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\BackupStack.exe
5.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Configuration Updater.exe
5.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Crypto32.dll
5.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Crypto64.dll
5.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\de_DE.mo
5.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\diffstack.dll
5.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\es_ES.mo
5.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\fr_FR.mo
5.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\GetText.dll
5.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\it_IT.mo
5.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\LinqBridge.dll
5.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\LogicNP.EZShellExtensions.dll
5.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\MPCBClient.dll
5.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\MPCBContextMenu.dll
5.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\MPCBIconOverlays.dll
5.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\MyPC Backup.exe
5.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\mypcbackup.ico
6.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\ObjectListView.dll
6.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\pt_PT.mo
6.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\RegisterExtensionDotNet20_x64.exe
6.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\RegisterExtensionDotNet20_x86.exe
6.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\RestartExplorer.exe
6.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Service Start.exe
6.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Shared Stack.dll
6.2s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Signup Wizard.exe
6.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\syncicon.ico
6.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\syncing.ico
6.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\tick.ico
6.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\uninst.exe
6.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\UnRegisterExtensions.exe
6.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Updater.exe
6.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Config\
6.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Config\api.ts2
6.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\
6.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_backup_conf.db
6.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_file_cache.db
6.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_queues.db
6.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_settings.db
6.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_sig_cache.db
6.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_version_queue.db
6.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\
6.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\APPLICATION.log
6.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\AUTH.log
6.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\BACKOFF.log
6.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\CLIENT.log
6.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\GRID_RECOVERY.log
6.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\GRID_RECOVERY_INIT.log
6.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\LICENCE.log
6.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\NETWORK_SHARES.log
6.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\POPUPS.log
6.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\REMOTING.log
6.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\REQUEST.log
6.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\SERVICE.log
7.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\SERVICE_prev.log
7.2s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\SHELL.log
7.2s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\STACK_BASE.log
7.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\UPDATER.log
7.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\UTC_MIGRATION.log
7.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\WAIT_HANDLES.log
7.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Resources\
7.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Resources\cache\
7.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\x64\
7.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\x64\System.Data.SQLite.dll
7.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\x86\
7.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\x86\System.Data.SQLite.dll
7.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\~updates\
7.8s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\
7.8s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\
7.8s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\
7.8s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\
7.8s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\
7.8s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\node_modules\hawk\
7.8s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\node_modules\hawk\node_modules\
7.8s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\node_modules\
7.8s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\node_modules\hawk\node_modules\cryptiles\
8.0s C:\AdwCleaner\quarantine\files\cfclmgzmdyrfouldtogzejwngwtrlcgq\
8.0s C:\AdwCleaner\quarantine\files\cfclmgzmdyrfouldtogzejwngwtrlcgq\Traffic Exchange\
8.0s C:\AdwCleaner\quarantine\files\cfclmgzmdyrfouldtogzejwngwtrlcgq\Traffic Exchange\Online-Guardian-v2.exe
8.1s C:\AdwCleaner\quarantine\files\cfclmgzmdyrfouldtogzejwngwtrlcgq\Traffic Exchange\Online-Guardian.exe
8.6s C:\AdwCleaner\quarantine\files\ffhywyhzabwssuvjmxbwjcwhazgzhqyu\
8.8s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\
8.8s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\wyy7kuna.default\
8.8s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\wyy7kuna.default\prefs.js
8.8s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\
8.8s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\wyy7kuna.default\profiles.ini
8.8s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\wyy7kuna.default\search-metadata.json
8.9s C:\AdwCleaner\quarantine\files\ceyyrbqbwuqwvfvgexlgyzektqgpvmcx.back
9.1s C:\AdwCleaner\quarantine\files\kbmtuxxvrlhxutdkaockmibfumvnhmmj.back
9.5s C:\AdwCleaner\quarantine\files\sncdtfcdtanqulwrznbwrcvytpeztggs.back
9.6s C:\AdwCleaner\quarantine\files\mdbeimfmkqbljcopbafbbbfiywbsuvfi.back
9.7s C:\AdwCleaner\quarantine\files\yeswlvywmemkbycygmndofbincjxjbme.back
9.8s C:\AdwCleaner\quarantine\files\owzrdyjvksknzzhdzxtdzlnzcdiiiyir.back
10.0s C:\AdwCleaner\quarantine\files\gzwvidnxqebdjsbuipkomfozaejiinsc.back
10.3s C:\AdwCleaner\quarantine\files\iqdsbrwxecmqbxzaxeqyjtpqwahpvnpr.back
10.7s C:\AdwCleaner\quarantine\files\qlaqaqyhrmbgmobvutntfwlejmakihrd.back
10.8s C:\AdwCleaner\quarantine\files\ojnivfnjvvbvibsbddggquowxpnuqfaq.back
11.0s C:\AdwCleaner\quarantine\files\kuzoszblwjapbodrkrazjblzfivuxqpa.back
11.1s C:\AdwCleaner\quarantine\files\alormegxhvypgmemtszjrjglcguvigel.back
11.2s C:\AdwCleaner\quarantine\files\fyqgymrawnmakhmsfwyabmdygywtdrta.back
11.4s C:\AdwCleaner\quarantine\files\cvnilvahvhtfeqlkbxdbztpksqsybayr.back
11.6s C:\AdwCleaner\quarantine\files\axuviutefnzjzwcrbakzzolrabcuohmb.back
11.8s C:\AdwCleaner\quarantine\files\jmjmnegzusfkhopstgxzvkqtjyqvjnvs.back
11.9s C:\AdwCleaner\quarantine\files\ggcropimosivavatxkivsmkdxletjxdb.back
12.0s C:\AdwCleaner\quarantine\files\eatdlmaoyunigmhgslbwogdpzfovcslk.back
12.4s C:\AdwCleaner\quarantine\files\ugnkiryliftmwjeooeomoyowdojgcjfs.back
13.0s C:\AdwCleaner\quarantine\files\txpmcaaaxezexxxsqwxbaxrswztspbmm.back
13.4s C:\AdwCleaner\quarantine\files\tnljhvwxjjsfwwqdpscdyhtruwsjvfhi.back
13.6s C:\AdwCleaner\quarantine\files\ktzlilsvsazulpgcnniwzmqbhnizbicm.back
13.8s C:\AdwCleaner\quarantine\files\rnxegndxqczyflwxureljfymgjpqgqsz.back
14.6s C:\AdwCleaner\quarantine\registry\reg_hskfuxwnsjxrsytxxeomxanthwyhrcnx.reg
14.8s C:\AdwCleaner\quarantine\registry\reg_ccfjszvfoietkaxlqrjqzklfkvbilozf.reg
15.4s C:\AdwCleaner\quarantine\registry\reg_ygvpkafhkyjeaxmbahzczjjrhwdmgrrn.reg
15.8s C:\AdwCleaner\quarantine\registry\reg_lrjkoqjaxtmrljkcsohmqpyqtpgqcdtz.reg
16.1s C:\AdwCleaner\quarantine\registry\reg_rddacduwtuwidcvbknkkiphcbbvigeyi.reg
16.5s C:\AdwCleaner\quarantine\registry\reg_djpxocawazkrdxoesetosgncagcjrhxs.reg
16.8s C:\AdwCleaner\quarantine\registry\reg_khirbwixuwokxelfsjvljqsigbxvyepv.reg
17.0s C:\AdwCleaner\quarantine\registry\reg_teodgquvsvvlewjnyebsujpakyztntzr.reg
17.1s C:\AdwCleaner\quarantine\registry\reg_bbrbhtpqufijkrkklkvkfpkjlqijvtgc.reg
17.3s C:\AdwCleaner\quarantine\registry\reg_pdunnludimmiluccwtntviiselpubxwq.reg
17.5s C:\AdwCleaner\quarantine\registry\reg_natorijmwbxszovezxlczjqbnqmefsvy.reg
17.6s C:\AdwCleaner\quarantine\registry\reg_awgvfzewjvftybyzmusgmewztpnnfcqp.reg
17.8s C:\AdwCleaner\quarantine\registry\reg_mohjwcwgwerzxnrkwpsvpipphswuzcjs.reg
17.9s C:\AdwCleaner\quarantine\registry\reg_vojydhhqbkuocihxhtuxicueyxfrxmts.reg
18.1s C:\AdwCleaner\quarantine\registry\reg_jkoadtfflawlknfsqrdkengbqviawwrq.reg
18.6s C:\AdwCleaner\quarantine\registry\reg_khamaprbgxvthvacluijibqcdahiehmv.reg
19.0s C:\AdwCleaner\quarantine\registry\reg_rbzzfjzpumgqkjdwygcchpilfoadooyi.reg
19.4s C:\AdwCleaner\quarantine\registry\reg_rqbynmyrhpduaqxgbdivozlfhvketcgk.reg
19.5s C:\AdwCleaner\quarantine\registry\reg_vorhwknlvgktfjytfbqxybdhbovaywjn.reg
19.7s C:\AdwCleaner\quarantine\registry\reg_bwvxbvarupvbqrdxppcofdaqvmvesjdy.reg
19.9s C:\AdwCleaner\quarantine\registry\reg_afckiwoamlocwmehyrjxmsksexyfptkq.reg
20.1s C:\AdwCleaner\quarantine\registry\reg_ysfdercjwwjthkzrvnavhoubpmrtwuwv.reg
20.4s C:\AdwCleaner\quarantine\registry\reg_thgyxjdtrbynkciqwofbscmkofenmuha.reg
20.6s C:\AdwCleaner\quarantine\registry\reg_ojfnxvljbkhehtlkzqxewlfbzcxehgyb.reg
20.8s C:\AdwCleaner\quarantine\registry\reg_gckjajsdtbayaobmbhyshyccnknsvptv.reg
20.9s C:\AdwCleaner\quarantine\registry\reg_rhdgykridacnkwssfercrevupqkyiibn.reg
21.1s C:\AdwCleaner\quarantine\registry\reg_gkeucpyuatjhaseiumwnsqzpgadqyozm.reg
21.2s C:\AdwCleaner\quarantine\registry\reg_fpojeddgnftvgvdddfcwsuusqspqafhb.reg
21.4s C:\AdwCleaner\quarantine\registry\reg_vyegytpnsxjnprqscifapfntjzugezjx.reg
21.5s C:\AdwCleaner\quarantine\registry\reg_heanplkumesjyoknvgbsswzqxoajuftb.reg
21.7s C:\AdwCleaner\quarantine\registry\reg_thngaongkihgggcbegxrbvygvzivxvzb.reg
21.8s C:\AdwCleaner\quarantine\registry\reg_hqajokdzagiaqznwraekundpeqxmzphe.reg
22.0s C:\AdwCleaner\quarantine\registry\reg_jprofiypdozdddybqwfwbzwcysrludfr.reg
22.4s C:\AdwCleaner\quarantine\registry\reg_exqgcdmzwkgmtvjsuzjiuvrmqcyknppp.reg
22.6s C:\AdwCleaner\quarantine\registry\reg_omziaywjnqcfyymhltxwqkwqzfhsowvn.reg
22.8s C:\AdwCleaner\quarantine\registry\reg_lxyymlnqkdjnvhydcezryogkbvvbavfw.reg
22.9s C:\AdwCleaner\quarantine\registry\reg_dlqswglljrnukcqhogdemnusjesbgyat.reg
23.1s C:\AdwCleaner\quarantine\registry\reg_aufuttutimjlpjavqhyxvqqerrqvtlsx.reg
23.2s C:\AdwCleaner\quarantine\registry\reg_cycdlhgsbsavninrgsjqkzgtdthbwapf.reg
23.3s C:\AdwCleaner\quarantine\registry\reg_pkmxtaydidocoemizibomfvccmhhaifq.reg
23.4s C:\AdwCleaner\quarantine\registry\reg_qiuofkmjgodcdcrttbgczjlxpbncpofo.reg
27.9s C:\AdwCleaner\quarantine\registry\reg_qsgsdmjearwwieauepksxvwmvvkmybts.reg
28.0s C:\AdwCleaner\quarantine\registry\reg_bvlsspiuylcrequxbwapnyvcqwqtdxwy.reg
28.4s C:\AdwCleaner\quarantine\registry\reg_mlckxsjurlujclmysvcvkdlzybrulgmb.reg
28.5s C:\AdwCleaner\quarantine\registry\reg_pirkoajenajxxoynvgfezrlcccqmtmfo.reg
28.7s C:\AdwCleaner\quarantine\registry\reg_alclxwvnnfuqivuminvxdicuwjegopfn.reg
28.9s C:\AdwCleaner\quarantine\registry\reg_xmfybppuwbajwahwnmlgzpzonmscsxaf.reg
29.1s C:\AdwCleaner\quarantine\registry\reg_bgcmtlicjubxlugsxttfbtqhuccczbcq.reg
29.2s C:\AdwCleaner\quarantine\registry\reg_sjpxzxqweupjpdggopeyeohspibkgxan.reg
29.4s C:\AdwCleaner\quarantine\registry\reg_fpledizicashgefgldqbkgviggfngqxy.reg
29.9s C:\AdwCleaner\quarantine\registry\reg_pxvfxyipfkszzyodsbbfinayqqrtocva.reg
30.2s C:\AdwCleaner\quarantine\registry\reg_tjyaqfrmcayunfgmtdgyetzjmjbxtkgy.reg
30.5s C:\AdwCleaner\quarantine\registry\reg_iiyvtcxfatqqzfgkyvllmslrurnrnqom.reg
30.6s C:\AdwCleaner\quarantine\registry\reg_ynbmxkopnhtqjzgznpomwmrufmosriea.reg
30.8s C:\AdwCleaner\quarantine\registry\reg_opquhjbhgnbnrzzqrfqjwzluwksgtghg.reg
31.0s C:\AdwCleaner\quarantine\registry\reg_fqjzfkakxadujbxahuachhajgjftjpms.reg
35.1s C:\AdwCleaner\quarantine\registry\reg_tcujcfmxnndsnftbdomfahhvpkrclfsg.reg
35.3s C:\AdwCleaner\quarantine\registry\reg_bmvrtjboexqwhowpacxfzglvgyslvjiq.reg
35.6s C:\AdwCleaner\quarantine\registry\reg_yrsdypdhaheyupjeifllbwhjjatgcjpo.reg
36.3s C:\AdwCleaner\quarantine\registry\reg_onqhxijahmpordjqbdfablpilhcxuppf.reg
36.7s C:\AdwCleaner\quarantine\registry\reg_hhyddookileqxnsvnalogjitfwxfkuqf.reg
36.9s C:\AdwCleaner\quarantine\registry\reg_kjvowlcksaqanamfyhzormuhlgheucou.reg
37.1s C:\AdwCleaner\quarantine\registry\reg_lvmrvtoxujbmqfryfhcmaaqzolgrtaiy.reg
37.3s C:\AdwCleaner\quarantine\registry\reg_qmopkfmghtanlaexuigfuptpqoyhocxw.reg
37.4s C:\AdwCleaner\quarantine\registry\reg_hakclexyqybvaltckjsglxvfozwjhnyt.reg
37.6s C:\AdwCleaner\quarantine\registry\reg_yulwxaxipehcjbwquvpujfdufeejckla.reg
38.1s C:\AdwCleaner\quarantine\registry\reg_dfntubvkriqzerggfelccusqetgcfras.reg
38.4s C:\AdwCleaner\quarantine\registry\reg_sabibiokqcebmebghomekhzlxuunofzq.reg
38.5s C:\AdwCleaner\quarantine\registry\reg_szylnxirtrcevhgciraqubmlhugrvakf.reg
38.6s C:\AdwCleaner\quarantine\registry\reg_zhjhojogymfrhcfzhpnzheofikonitje.reg
38.8s C:\AdwCleaner\quarantine\registry\reg_ywouofwdqsvrekpxrutyhysluxmctmal.reg
39.8s C:\AdwCleaner\quarantine\registry\reg_oaaqflbrtkxlixlcbmbzhwhezytanmvc.reg
40.0s C:\AdwCleaner\quarantine\registry\reg_hdhqqihbyhupqfdxgnbnoipbgrmkiqvj.reg
40.3s C:\AdwCleaner\quarantine\registry\reg_mxggwlhgtqtxomnwmqwfftrbnxgcwjwf.reg
40.5s C:\AdwCleaner\quarantine\registry\reg_bgzpmxsmvofgiwoglxnvnqngpojtfaxt.reg
40.6s C:\AdwCleaner\quarantine\registry\reg_vttoehudmrvynhjakjuxkrzcuehlksud.reg
40.8s C:\AdwCleaner\quarantine\registry\reg_fusvzanqvnxkijbyvkbphbcsqxufbzgv.reg
40.9s C:\AdwCleaner\quarantine\registry\reg_awapctldemkmmhtqprstthmdtiivsmbf.reg
41.2s C:\AdwCleaner\quarantine\registry\reg_nztdiakjqojgghsuadyxhhtbifndtyde.reg

C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Configuration Updater.exe -> Quarantined
Size . . . . . . . : 16 480 bytes
Age . . . . . . . : 1.1 days (2017-01-07 23:17:12)
Entropy . . . . . : 6.1
SHA-256 . . . . . : 15B09EB6FF490D07CB3185BD3F123E78C093DA955D01009572F5FF9040EADE2B
Needs elevation . : Yes
Product . . . . . : Configuration Updater
RSA Key Size . . . : 2048
LanguageID . . . . : 0
Authenticode . . . : Valid
> Kaspersky . . . . : not-a-virus:RiskTool.Win32.BackupMyPC.a
Fuzzy . . . . . . : 101.0
Forensic Cluster
-6.2s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\RTOP\
-6.2s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\RTOP\activity.log
-6.2s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\RTOP\hosts_backup
-6.2s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\RTOP\uclogfile.bin
-6.2s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\
-6.1s C:\AdwCleaner\quarantine\files\mdqbvfkcgrqcfqvcvcmtccsnixnesoze\
-6.1s C:\AdwCleaner\quarantine\files\mdqbvfkcgrqcfqvcvcmtccsnixnesoze\coordinator.cfg
-6.1s C:\AdwCleaner\quarantine\files\mdqbvfkcgrqcfqvcvcmtccsnixnesoze\general.cfg
-6.1s C:\AdwCleaner\quarantine\files\mdqbvfkcgrqcfqvcvcmtccsnixnesoze\S-1-5-21-1607161227-1741431587-2329729702-1000.cfg
-5.9s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\
-5.9s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\log\
-5.9s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\log\wprotectmanager_2014-05-27[20-48-24-594].log
-5.8s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\log\wprotectmanager_2014-06-12[23-06-17-127].log
-5.8s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\update\
-5.6s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\
-5.5s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Apdonlex.bin
-5.5s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Blackzenla.bin
-5.5s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\conf.config
-5.5s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Config.xml
-5.5s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Flex-Kix.dll
-5.5s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Freshing.bin
-5.5s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Holdlotfind.dat
-5.5s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Hotcom.exe
-5.4s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Hotcom.exe.config
-5.4s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Jayron.exe
-5.4s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Jayron.exe.config
-5.4s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Lotstock.dat
-5.4s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Mattom.bin
-5.4s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\md.xml
-5.4s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Ope-Stock.reg
-5.4s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Rankotin.dat
-5.4s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\RonApsoft.dll
-5.4s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Ronzap.dat
-5.4s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Ronzap.exe
-5.4s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\SaltRonfind.exe
-5.4s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\SaltRonfind.exe.config
-5.4s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Tan-Strong.dat
-5.4s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\uninstall.dat
-5.4s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Voyalex.bin
-5.4s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Xxx-zuntam.bin
-5.4s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Zertop.bin
-5.3s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\ondemand\
-5.3s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\temp\
-5.0s C:\AdwCleaner\quarantine\files\xbhaucfzkmehsjingyhelcgvklgewbnf\
-5.0s C:\AdwCleaner\quarantine\files\xbhaucfzkmehsjingyhelcgvklgewbnf\ff.HP
-5.0s C:\AdwCleaner\quarantine\files\xbhaucfzkmehsjingyhelcgvklgewbnf\ff.NT
-4.9s C:\AdwCleaner\quarantine\files\xbhaucfzkmehsjingyhelcgvklgewbnf\snp.sc
-4.8s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\
-4.8s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\Config.json
-4.8s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\set.exe
-4.8s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\set.exe.config
-4.8s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\System.Data.SQLite.dll
-4.5s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\System.Data.SQLite.Linq.dll
-4.5s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\System.Data.SQLite.xml
-4.3s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\X64\
-4.3s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\X64\SQLite.Interop.dll
-3.9s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\X86\
-3.9s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\X86\SQLite.Interop.dll
-3.3s C:\AdwCleaner\quarantine\files\vgncqxonlsljnucxseehrhsrqclssozw\
-3.3s C:\AdwCleaner\quarantine\files\vgncqxonlsljnucxseehrhsrqclssozw\Config.xml
-3.3s C:\AdwCleaner\quarantine\files\vgncqxonlsljnucxseehrhsrqclssozw\Nettrans.exe
-3.3s C:\AdwCleaner\quarantine\files\vgncqxonlsljnucxseehrhsrqclssozw\Nettrans.exe.config
-2.6s C:\AdwCleaner\quarantine\files\lzjoohgimtjqxfbwnkwkwofqdjbkiipm\
-2.6s C:\AdwCleaner\quarantine\files\lzjoohgimtjqxfbwnkwkwofqdjbkiipm\Traffic Exchange\
-2.3s C:\AdwCleaner\quarantine\files\mehetuxeizxjadbiirqxnzixrhzgfpkx\
-2.3s C:\AdwCleaner\quarantine\files\mehetuxeizxjadbiirqxnzixrhzgfpkx\ByteFence Anti-Malware.lnk
-1.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\
-1.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\aff.conf
-1.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.51.x86.dll
-0.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.52.x64.dll
-0.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.52.x86.dll
-0.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.60.x64.dll
-0.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.60.x86.dll
-0.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.Common.dll
-0.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AWSSDK.dll
-0.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\BackupStack.exe
0.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Configuration Updater.exe
0.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Crypto32.dll
0.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Crypto64.dll
0.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\de_DE.mo
0.2s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\diffstack.dll
0.2s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\es_ES.mo
0.2s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\fr_FR.mo
0.2s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\GetText.dll
0.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\it_IT.mo
0.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\LinqBridge.dll
0.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\LogicNP.EZShellExtensions.dll
0.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\MPCBClient.dll
0.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\MPCBContextMenu.dll
0.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\MPCBIconOverlays.dll
0.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\MyPC Backup.exe
0.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\mypcbackup.ico
0.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\ObjectListView.dll
0.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\pt_PT.mo
0.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\RegisterExtensionDotNet20_x64.exe
0.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\RegisterExtensionDotNet20_x86.exe
0.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\RestartExplorer.exe
0.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Service Start.exe
0.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Shared Stack.dll
0.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Signup Wizard.exe
1.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\syncicon.ico
1.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\syncing.ico
1.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\tick.ico
1.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\uninst.exe
1.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\UnRegisterExtensions.exe
1.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Updater.exe
1.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Config\
1.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Config\api.ts2
1.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\
1.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_backup_conf.db
1.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_file_cache.db
1.2s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_queues.db
1.2s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_settings.db
1.2s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_sig_cache.db
1.2s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_version_queue.db
1.2s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\
1.2s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\APPLICATION.log
1.2s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\AUTH.log
1.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\BACKOFF.log
1.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\CLIENT.log
1.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\GRID_RECOVERY.log
1.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\GRID_RECOVERY_INIT.log
1.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\LICENCE.log
1.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\NETWORK_SHARES.log
1.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\POPUPS.log
1.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\REMOTING.log
1.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\REQUEST.log
1.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\SERVICE.log
1.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\SERVICE_prev.log
1.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\SHELL.log
1.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\STACK_BASE.log
1.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\UPDATER.log
2.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\UTC_MIGRATION.log
2.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\WAIT_HANDLES.log
2.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Resources\
2.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Resources\cache\
2.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\x64\
2.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\x64\System.Data.SQLite.dll
2.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\x86\
2.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\x86\System.Data.SQLite.dll
2.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\~updates\
2.4s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\
2.4s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\
2.4s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\
2.4s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\
2.4s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\
2.5s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\node_modules\hawk\
2.5s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\node_modules\hawk\node_modules\
2.5s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\node_modules\
2.5s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\node_modules\hawk\node_modules\cryptiles\
2.7s C:\AdwCleaner\quarantine\files\cfclmgzmdyrfouldtogzejwngwtrlcgq\
2.7s C:\AdwCleaner\quarantine\files\cfclmgzmdyrfouldtogzejwngwtrlcgq\Traffic Exchange\
2.7s C:\AdwCleaner\quarantine\files\cfclmgzmdyrfouldtogzejwngwtrlcgq\Traffic Exchange\Online-Guardian-v2.exe
2.7s C:\AdwCleaner\quarantine\files\cfclmgzmdyrfouldtogzejwngwtrlcgq\Traffic Exchange\Online-Guardian.exe
3.2s C:\AdwCleaner\quarantine\files\ffhywyhzabwssuvjmxbwjcwhazgzhqyu\
3.4s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\
3.4s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\wyy7kuna.default\
3.4s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\wyy7kuna.default\prefs.js
3.4s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\
3.4s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\wyy7kuna.default\profiles.ini
3.4s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\wyy7kuna.default\search-metadata.json
3.6s C:\AdwCleaner\quarantine\files\ceyyrbqbwuqwvfvgexlgyzektqgpvmcx.back
3.7s C:\AdwCleaner\quarantine\files\kbmtuxxvrlhxutdkaockmibfumvnhmmj.back
4.1s C:\AdwCleaner\quarantine\files\sncdtfcdtanqulwrznbwrcvytpeztggs.back
4.2s C:\AdwCleaner\quarantine\files\mdbeimfmkqbljcopbafbbbfiywbsuvfi.back
4.3s C:\AdwCleaner\quarantine\files\yeswlvywmemkbycygmndofbincjxjbme.back
4.4s C:\AdwCleaner\quarantine\files\owzrdyjvksknzzhdzxtdzlnzcdiiiyir.back
4.6s C:\AdwCleaner\quarantine\files\gzwvidnxqebdjsbuipkomfozaejiinsc.back
4.9s C:\AdwCleaner\quarantine\files\iqdsbrwxecmqbxzaxeqyjtpqwahpvnpr.back
5.3s C:\AdwCleaner\quarantine\files\qlaqaqyhrmbgmobvutntfwlejmakihrd.back
5.5s C:\AdwCleaner\quarantine\files\ojnivfnjvvbvibsbddggquowxpnuqfaq.back
5.6s C:\AdwCleaner\quarantine\files\kuzoszblwjapbodrkrazjblzfivuxqpa.back
5.7s C:\AdwCleaner\quarantine\files\alormegxhvypgmemtszjrjglcguvigel.back
5.8s C:\AdwCleaner\quarantine\files\fyqgymrawnmakhmsfwyabmdygywtdrta.back
6.0s C:\AdwCleaner\quarantine\files\cvnilvahvhtfeqlkbxdbztpksqsybayr.back
6.2s C:\AdwCleaner\quarantine\files\axuviutefnzjzwcrbakzzolrabcuohmb.back
6.4s C:\AdwCleaner\quarantine\files\jmjmnegzusfkhopstgxzvkqtjyqvjnvs.back
6.5s C:\AdwCleaner\quarantine\files\ggcropimosivavatxkivsmkdxletjxdb.back
6.7s C:\AdwCleaner\quarantine\files\eatdlmaoyunigmhgslbwogdpzfovcslk.back
7.1s C:\AdwCleaner\quarantine\files\ugnkiryliftmwjeooeomoyowdojgcjfs.back
7.6s C:\AdwCleaner\quarantine\files\txpmcaaaxezexxxsqwxbaxrswztspbmm.back
8.0s C:\AdwCleaner\quarantine\files\tnljhvwxjjsfwwqdpscdyhtruwsjvfhi.back
8.2s C:\AdwCleaner\quarantine\files\ktzlilsvsazulpgcnniwzmqbhnizbicm.back
8.4s C:\AdwCleaner\quarantine\files\rnxegndxqczyflwxureljfymgjpqgqsz.back
9.2s C:\AdwCleaner\quarantine\registry\reg_hskfuxwnsjxrsytxxeomxanthwyhrcnx.reg
9.4s C:\AdwCleaner\quarantine\registry\reg_ccfjszvfoietkaxlqrjqzklfkvbilozf.reg
10.1s C:\AdwCleaner\quarantine\registry\reg_ygvpkafhkyjeaxmbahzczjjrhwdmgrrn.reg
10.4s C:\AdwCleaner\quarantine\registry\reg_lrjkoqjaxtmrljkcsohmqpyqtpgqcdtz.reg
10.7s C:\AdwCleaner\quarantine\registry\reg_rddacduwtuwidcvbknkkiphcbbvigeyi.reg
11.1s C:\AdwCleaner\quarantine\registry\reg_djpxocawazkrdxoesetosgncagcjrhxs.reg
11.4s C:\AdwCleaner\quarantine\registry\reg_khirbwixuwokxelfsjvljqsigbxvyepv.reg
11.6s C:\AdwCleaner\quarantine\registry\reg_teodgquvsvvlewjnyebsujpakyztntzr.reg
11.8s C:\AdwCleaner\quarantine\registry\reg_bbrbhtpqufijkrkklkvkfpkjlqijvtgc.reg
11.9s C:\AdwCleaner\quarantine\registry\reg_pdunnludimmiluccwtntviiselpubxwq.reg
12.1s C:\AdwCleaner\quarantine\registry\reg_natorijmwbxszovezxlczjqbnqmefsvy.reg
12.2s C:\AdwCleaner\quarantine\registry\reg_awgvfzewjvftybyzmusgmewztpnnfcqp.reg
12.4s C:\AdwCleaner\quarantine\registry\reg_mohjwcwgwerzxnrkwpsvpipphswuzcjs.reg
12.5s C:\AdwCleaner\quarantine\registry\reg_vojydhhqbkuocihxhtuxicueyxfrxmts.reg
12.7s C:\AdwCleaner\quarantine\registry\reg_jkoadtfflawlknfsqrdkengbqviawwrq.reg
13.3s C:\AdwCleaner\quarantine\registry\reg_khamaprbgxvthvacluijibqcdahiehmv.reg
13.7s C:\AdwCleaner\quarantine\registry\reg_rbzzfjzpumgqkjdwygcchpilfoadooyi.reg
14.0s C:\AdwCleaner\quarantine\registry\reg_rqbynmyrhpduaqxgbdivozlfhvketcgk.reg
14.2s C:\AdwCleaner\quarantine\registry\reg_vorhwknlvgktfjytfbqxybdhbovaywjn.reg
14.3s C:\AdwCleaner\quarantine\registry\reg_bwvxbvarupvbqrdxppcofdaqvmvesjdy.reg
14.6s C:\AdwCleaner\quarantine\registry\reg_afckiwoamlocwmehyrjxmsksexyfptkq.reg
14.7s C:\AdwCleaner\quarantine\registry\reg_ysfdercjwwjthkzrvnavhoubpmrtwuwv.reg
15.1s C:\AdwCleaner\quarantine\registry\reg_thgyxjdtrbynkciqwofbscmkofenmuha.reg
15.2s C:\AdwCleaner\quarantine\registry\reg_ojfnxvljbkhehtlkzqxewlfbzcxehgyb.reg
15.4s C:\AdwCleaner\quarantine\registry\reg_gckjajsdtbayaobmbhyshyccnknsvptv.reg
15.6s C:\AdwCleaner\quarantine\registry\reg_rhdgykridacnkwssfercrevupqkyiibn.reg
15.7s C:\AdwCleaner\quarantine\registry\reg_gkeucpyuatjhaseiumwnsqzpgadqyozm.reg
15.8s C:\AdwCleaner\quarantine\registry\reg_fpojeddgnftvgvdddfcwsuusqspqafhb.reg
16.0s C:\AdwCleaner\quarantine\registry\reg_vyegytpnsxjnprqscifapfntjzugezjx.reg
16.1s C:\AdwCleaner\quarantine\registry\reg_heanplkumesjyoknvgbsswzqxoajuftb.reg
16.3s C:\AdwCleaner\quarantine\registry\reg_thngaongkihgggcbegxrbvygvzivxvzb.reg
16.4s C:\AdwCleaner\quarantine\registry\reg_hqajokdzagiaqznwraekundpeqxmzphe.reg
16.6s C:\AdwCleaner\quarantine\registry\reg_jprofiypdozdddybqwfwbzwcysrludfr.reg
17.0s C:\AdwCleaner\quarantine\registry\reg_exqgcdmzwkgmtvjsuzjiuvrmqcyknppp.reg
17.2s C:\AdwCleaner\quarantine\registry\reg_omziaywjnqcfyymhltxwqkwqzfhsowvn.reg
17.4s C:\AdwCleaner\quarantine\registry\reg_lxyymlnqkdjnvhydcezryogkbvvbavfw.reg
17.6s C:\AdwCleaner\quarantine\registry\reg_dlqswglljrnukcqhogdemnusjesbgyat.reg
17.7s C:\AdwCleaner\quarantine\registry\reg_aufuttutimjlpjavqhyxvqqerrqvtlsx.reg
17.8s C:\AdwCleaner\quarantine\registry\reg_cycdlhgsbsavninrgsjqkzgtdthbwapf.reg
17.9s C:\AdwCleaner\quarantine\registry\reg_pkmxtaydidocoemizibomfvccmhhaifq.reg
18.1s C:\AdwCleaner\quarantine\registry\reg_qiuofkmjgodcdcrttbgczjlxpbncpofo.reg
22.5s C:\AdwCleaner\quarantine\registry\reg_qsgsdmjearwwieauepksxvwmvvkmybts.reg
22.7s C:\AdwCleaner\quarantine\registry\reg_bvlsspiuylcrequxbwapnyvcqwqtdxwy.reg
23.0s C:\AdwCleaner\quarantine\registry\reg_mlckxsjurlujclmysvcvkdlzybrulgmb.reg
23.1s C:\AdwCleaner\quarantine\registry\reg_pirkoajenajxxoynvgfezrlcccqmtmfo.reg
23.3s C:\AdwCleaner\quarantine\registry\reg_alclxwvnnfuqivuminvxdicuwjegopfn.reg
23.5s C:\AdwCleaner\quarantine\registry\reg_xmfybppuwbajwahwnmlgzpzonmscsxaf.reg
23.7s C:\AdwCleaner\quarantine\registry\reg_bgcmtlicjubxlugsxttfbtqhuccczbcq.reg
23.9s C:\AdwCleaner\quarantine\registry\reg_sjpxzxqweupjpdggopeyeohspibkgxan.reg
24.0s C:\AdwCleaner\quarantine\registry\reg_fpledizicashgefgldqbkgviggfngqxy.reg
24.5s C:\AdwCleaner\quarantine\registry\reg_pxvfxyipfkszzyodsbbfinayqqrtocva.reg
24.8s C:\AdwCleaner\quarantine\registry\reg_tjyaqfrmcayunfgmtdgyetzjmjbxtkgy.reg
25.1s C:\AdwCleaner\quarantine\registry\reg_iiyvtcxfatqqzfgkyvllmslrurnrnqom.reg
25.2s C:\AdwCleaner\quarantine\registry\reg_ynbmxkopnhtqjzgznpomwmrufmosriea.reg
25.4s C:\AdwCleaner\quarantine\registry\reg_opquhjbhgnbnrzzqrfqjwzluwksgtghg.reg
25.6s C:\AdwCleaner\quarantine\registry\reg_fqjzfkakxadujbxahuachhajgjftjpms.reg
29.8s C:\AdwCleaner\quarantine\registry\reg_tcujcfmxnndsnftbdomfahhvpkrclfsg.reg
30.0s C:\AdwCleaner\quarantine\registry\reg_bmvrtjboexqwhowpacxfzglvgyslvjiq.reg
30.2s C:\AdwCleaner\quarantine\registry\reg_yrsdypdhaheyupjeifllbwhjjatgcjpo.reg
30.9s C:\AdwCleaner\quarantine\registry\reg_onqhxijahmpordjqbdfablpilhcxuppf.reg
31.3s C:\AdwCleaner\quarantine\registry\reg_hhyddookileqxnsvnalogjitfwxfkuqf.reg
31.5s C:\AdwCleaner\quarantine\registry\reg_kjvowlcksaqanamfyhzormuhlgheucou.reg
31.7s C:\AdwCleaner\quarantine\registry\reg_lvmrvtoxujbmqfryfhcmaaqzolgrtaiy.reg
32.0s C:\AdwCleaner\quarantine\registry\reg_qmopkfmghtanlaexuigfuptpqoyhocxw.reg
32.1s C:\AdwCleaner\quarantine\registry\reg_hakclexyqybvaltckjsglxvfozwjhnyt.reg
32.2s C:\AdwCleaner\quarantine\registry\reg_yulwxaxipehcjbwquvpujfdufeejckla.reg
32.8s C:\AdwCleaner\quarantine\registry\reg_dfntubvkriqzerggfelccusqetgcfras.reg
33.0s C:\AdwCleaner\quarantine\registry\reg_sabibiokqcebmebghomekhzlxuunofzq.reg
33.1s C:\AdwCleaner\quarantine\registry\reg_szylnxirtrcevhgciraqubmlhugrvakf.reg
33.2s C:\AdwCleaner\quarantine\registry\reg_zhjhojogymfrhcfzhpnzheofikonitje.reg
33.4s C:\AdwCleaner\quarantine\registry\reg_ywouofwdqsvrekpxrutyhysluxmctmal.reg
34.4s C:\AdwCleaner\quarantine\registry\reg_oaaqflbrtkxlixlcbmbzhwhezytanmvc.reg
34.6s C:\AdwCleaner\quarantine\registry\reg_hdhqqihbyhupqfdxgnbnoipbgrmkiqvj.reg
34.9s C:\AdwCleaner\quarantine\registry\reg_mxggwlhgtqtxomnwmqwfftrbnxgcwjwf.reg
35.1s C:\AdwCleaner\quarantine\registry\reg_bgzpmxsmvofgiwoglxnvnqngpojtfaxt.reg
35.2s C:\AdwCleaner\quarantine\registry\reg_vttoehudmrvynhjakjuxkrzcuehlksud.reg
35.4s C:\AdwCleaner\quarantine\registry\reg_fusvzanqvnxkijbyvkbphbcsqxufbzgv.reg
35.6s C:\AdwCleaner\quarantine\registry\reg_awapctldemkmmhtqprstthmdtiivsmbf.reg
35.8s C:\AdwCleaner\quarantine\registry\reg_nztdiakjqojgghsuadyxhhtbifndtyde.reg

C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\MyPC Backup.exe -> Quarantined
Size . . . . . . . : 3 145 312 bytes
Age . . . . . . . : 1.1 days (2017-01-07 23:17:13)
Entropy . . . . . : 6.4
SHA-256 . . . . . : 9F06CE2B4B3D7E0579F7D4894E3D1A95204450DE5DBA40F8A6E4F2306DB28D34
Product . . . . . : MyPC Backup
Publisher . . . . : MyPCBackup.com
Description . . . : MyPC Backup
Version . . . . . : 1.0.0.0
RSA Key Size . . . : 2048
LanguageID . . . . : 0
Authenticode . . . : Valid
> Kaspersky . . . . : not-a-virus:RiskTool.Win32.BackupMyPC.a
Fuzzy . . . . . . : 95.0
Forensic Cluster
-6.8s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\RTOP\
-6.8s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\RTOP\activity.log
-6.8s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\RTOP\hosts_backup
-6.8s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\RTOP\uclogfile.bin
-6.8s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\
-6.6s C:\AdwCleaner\quarantine\files\mdqbvfkcgrqcfqvcvcmtccsnixnesoze\
-6.6s C:\AdwCleaner\quarantine\files\mdqbvfkcgrqcfqvcvcmtccsnixnesoze\coordinator.cfg
-6.6s C:\AdwCleaner\quarantine\files\mdqbvfkcgrqcfqvcvcmtccsnixnesoze\general.cfg
-6.6s C:\AdwCleaner\quarantine\files\mdqbvfkcgrqcfqvcvcmtccsnixnesoze\S-1-5-21-1607161227-1741431587-2329729702-1000.cfg
-6.4s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\
-6.4s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\log\
-6.4s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\log\wprotectmanager_2014-05-27[20-48-24-594].log
-6.3s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\log\wprotectmanager_2014-06-12[23-06-17-127].log
-6.3s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\update\
-6.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\
-6.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Apdonlex.bin
-6.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Blackzenla.bin
-6.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\conf.config
-6.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Config.xml
-6.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Flex-Kix.dll
-6.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Freshing.bin
-6.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Holdlotfind.dat
-6.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Hotcom.exe
-6.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Hotcom.exe.config
-6.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Jayron.exe
-5.9s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Jayron.exe.config
-5.9s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Lotstock.dat
-5.9s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Mattom.bin
-5.9s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\md.xml
-5.9s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Ope-Stock.reg
-5.9s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Rankotin.dat
-5.9s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\RonApsoft.dll
-5.9s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Ronzap.dat
-5.9s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Ronzap.exe
-5.9s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\SaltRonfind.exe
-5.9s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\SaltRonfind.exe.config
-5.9s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Tan-Strong.dat
-5.9s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\uninstall.dat
-5.9s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Voyalex.bin
-5.9s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Xxx-zuntam.bin
-5.9s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Zertop.bin
-5.8s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\ondemand\
-5.8s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\temp\
-5.5s C:\AdwCleaner\quarantine\files\xbhaucfzkmehsjingyhelcgvklgewbnf\
-5.5s C:\AdwCleaner\quarantine\files\xbhaucfzkmehsjingyhelcgvklgewbnf\ff.HP
-5.5s C:\AdwCleaner\quarantine\files\xbhaucfzkmehsjingyhelcgvklgewbnf\ff.NT
-5.5s C:\AdwCleaner\quarantine\files\xbhaucfzkmehsjingyhelcgvklgewbnf\snp.sc
-5.3s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\
-5.3s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\Config.json
-5.3s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\set.exe
-5.3s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\set.exe.config
-5.3s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\System.Data.SQLite.dll
-5.0s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\System.Data.SQLite.Linq.dll
-5.0s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\System.Data.SQLite.xml
-4.8s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\X64\
-4.8s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\X64\SQLite.Interop.dll
-4.4s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\X86\
-4.4s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\X86\SQLite.Interop.dll
-3.8s C:\AdwCleaner\quarantine\files\vgncqxonlsljnucxseehrhsrqclssozw\
-3.8s C:\AdwCleaner\quarantine\files\vgncqxonlsljnucxseehrhsrqclssozw\Config.xml
-3.8s C:\AdwCleaner\quarantine\files\vgncqxonlsljnucxseehrhsrqclssozw\Nettrans.exe
-3.8s C:\AdwCleaner\quarantine\files\vgncqxonlsljnucxseehrhsrqclssozw\Nettrans.exe.config
-3.1s C:\AdwCleaner\quarantine\files\lzjoohgimtjqxfbwnkwkwofqdjbkiipm\
-3.1s C:\AdwCleaner\quarantine\files\lzjoohgimtjqxfbwnkwkwofqdjbkiipm\Traffic Exchange\
-2.8s C:\AdwCleaner\quarantine\files\mehetuxeizxjadbiirqxnzixrhzgfpkx\
-2.8s C:\AdwCleaner\quarantine\files\mehetuxeizxjadbiirqxnzixrhzgfpkx\ByteFence Anti-Malware.lnk
-1.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\
-1.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\aff.conf
-1.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.51.x86.dll
-1.2s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.52.x64.dll
-1.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.52.x86.dll
-1.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.60.x64.dll
-1.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.60.x86.dll
-1.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.Common.dll
-1.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AWSSDK.dll
-0.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\BackupStack.exe
-0.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Configuration Updater.exe
-0.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Crypto32.dll
-0.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Crypto64.dll
-0.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\de_DE.mo
-0.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\diffstack.dll
-0.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\es_ES.mo
-0.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\fr_FR.mo
-0.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\GetText.dll
-0.2s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\it_IT.mo
-0.2s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\LinqBridge.dll
-0.2s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\LogicNP.EZShellExtensions.dll
-0.2s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\MPCBClient.dll
-0.2s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\MPCBContextMenu.dll
-0.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\MPCBIconOverlays.dll
0.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\MyPC Backup.exe
0.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\mypcbackup.ico
0.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\ObjectListView.dll
0.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\pt_PT.mo
0.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\RegisterExtensionDotNet20_x64.exe
0.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\RegisterExtensionDotNet20_x86.exe
0.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\RestartExplorer.exe
0.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Service Start.exe
0.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Shared Stack.dll
0.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Signup Wizard.exe
0.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\syncicon.ico
0.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\syncing.ico
0.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\tick.ico
0.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\uninst.exe
0.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\UnRegisterExtensions.exe
0.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Updater.exe
0.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Config\
0.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Config\api.ts2
0.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\
0.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_backup_conf.db
0.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_file_cache.db
0.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_queues.db
0.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_settings.db
0.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_sig_cache.db
0.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_version_queue.db
0.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\
0.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\APPLICATION.log
0.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\AUTH.log
0.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\BACKOFF.log
0.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\CLIENT.log
0.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\GRID_RECOVERY.log
0.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\GRID_RECOVERY_INIT.log
0.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\LICENCE.log
0.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\NETWORK_SHARES.log
0.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\POPUPS.log
0.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\REMOTING.log
0.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\REQUEST.log
1.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\SERVICE.log
1.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\SERVICE_prev.log
1.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\SHELL.log
1.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\STACK_BASE.log
1.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\UPDATER.log
1.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\UTC_MIGRATION.log
1.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\WAIT_HANDLES.log
1.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Resources\
1.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Resources\cache\
1.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\x64\
1.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\x64\System.Data.SQLite.dll
1.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\x86\
1.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\x86\System.Data.SQLite.dll
1.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\~updates\
1.9s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\
1.9s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\
1.9s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\
1.9s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\
1.9s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\
2.0s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\node_modules\hawk\
2.0s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\node_modules\hawk\node_modules\
2.0s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\node_modules\
2.0s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\node_modules\hawk\node_modules\cryptiles\
2.1s C:\AdwCleaner\quarantine\files\cfclmgzmdyrfouldtogzejwngwtrlcgq\
2.1s C:\AdwCleaner\quarantine\files\cfclmgzmdyrfouldtogzejwngwtrlcgq\Traffic Exchange\
2.1s C:\AdwCleaner\quarantine\files\cfclmgzmdyrfouldtogzejwngwtrlcgq\Traffic Exchange\Online-Guardian-v2.exe
2.2s C:\AdwCleaner\quarantine\files\cfclmgzmdyrfouldtogzejwngwtrlcgq\Traffic Exchange\Online-Guardian.exe
2.7s C:\AdwCleaner\quarantine\files\ffhywyhzabwssuvjmxbwjcwhazgzhqyu\
2.9s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\
2.9s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\wyy7kuna.default\
2.9s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\wyy7kuna.default\prefs.js
2.9s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\
2.9s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\wyy7kuna.default\profiles.ini
2.9s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\wyy7kuna.default\search-metadata.json
3.0s C:\AdwCleaner\quarantine\files\ceyyrbqbwuqwvfvgexlgyzektqgpvmcx.back
3.2s C:\AdwCleaner\quarantine\files\kbmtuxxvrlhxutdkaockmibfumvnhmmj.back
3.6s C:\AdwCleaner\quarantine\files\sncdtfcdtanqulwrznbwrcvytpeztggs.back
3.7s C:\AdwCleaner\quarantine\files\mdbeimfmkqbljcopbafbbbfiywbsuvfi.back
3.8s C:\AdwCleaner\quarantine\files\yeswlvywmemkbycygmndofbincjxjbme.back
3.9s C:\AdwCleaner\quarantine\files\owzrdyjvksknzzhdzxtdzlnzcdiiiyir.back
4.1s C:\AdwCleaner\quarantine\files\gzwvidnxqebdjsbuipkomfozaejiinsc.back
4.4s C:\AdwCleaner\quarantine\files\iqdsbrwxecmqbxzaxeqyjtpqwahpvnpr.back
4.8s C:\AdwCleaner\quarantine\files\qlaqaqyhrmbgmobvutntfwlejmakihrd.back
4.9s C:\AdwCleaner\quarantine\files\ojnivfnjvvbvibsbddggquowxpnuqfaq.back
5.1s C:\AdwCleaner\quarantine\files\kuzoszblwjapbodrkrazjblzfivuxqpa.back
5.2s C:\AdwCleaner\quarantine\files\alormegxhvypgmemtszjrjglcguvigel.back
5.3s C:\AdwCleaner\quarantine\files\fyqgymrawnmakhmsfwyabmdygywtdrta.back
5.5s C:\AdwCleaner\quarantine\files\cvnilvahvhtfeqlkbxdbztpksqsybayr.back
5.7s C:\AdwCleaner\quarantine\files\axuviutefnzjzwcrbakzzolrabcuohmb.back
5.9s C:\AdwCleaner\quarantine\files\jmjmnegzusfkhopstgxzvkqtjyqvjnvs.back
6.0s C:\AdwCleaner\quarantine\files\ggcropimosivavatxkivsmkdxletjxdb.back
6.1s C:\AdwCleaner\quarantine\files\eatdlmaoyunigmhgslbwogdpzfovcslk.back
6.6s C:\AdwCleaner\quarantine\files\ugnkiryliftmwjeooeomoyowdojgcjfs.back
7.1s C:\AdwCleaner\quarantine\files\txpmcaaaxezexxxsqwxbaxrswztspbmm.back
7.5s C:\AdwCleaner\quarantine\files\tnljhvwxjjsfwwqdpscdyhtruwsjvfhi.back
7.7s C:\AdwCleaner\quarantine\files\ktzlilsvsazulpgcnniwzmqbhnizbicm.back
7.9s C:\AdwCleaner\quarantine\files\rnxegndxqczyflwxureljfymgjpqgqsz.back
8.7s C:\AdwCleaner\quarantine\registry\reg_hskfuxwnsjxrsytxxeomxanthwyhrcnx.reg
8.9s C:\AdwCleaner\quarantine\registry\reg_ccfjszvfoietkaxlqrjqzklfkvbilozf.reg
9.5s C:\AdwCleaner\quarantine\registry\reg_ygvpkafhkyjeaxmbahzczjjrhwdmgrrn.reg
9.9s C:\AdwCleaner\quarantine\registry\reg_lrjkoqjaxtmrljkcsohmqpyqtpgqcdtz.reg
10.2s C:\AdwCleaner\quarantine\registry\reg_rddacduwtuwidcvbknkkiphcbbvigeyi.reg
10.6s C:\AdwCleaner\quarantine\registry\reg_djpxocawazkrdxoesetosgncagcjrhxs.reg
10.9s C:\AdwCleaner\quarantine\registry\reg_khirbwixuwokxelfsjvljqsigbxvyepv.reg
11.1s C:\AdwCleaner\quarantine\registry\reg_teodgquvsvvlewjnyebsujpakyztntzr.reg
11.2s C:\AdwCleaner\quarantine\registry\reg_bbrbhtpqufijkrkklkvkfpkjlqijvtgc.reg
11.4s C:\AdwCleaner\quarantine\registry\reg_pdunnludimmiluccwtntviiselpubxwq.reg
11.6s C:\AdwCleaner\quarantine\registry\reg_natorijmwbxszovezxlczjqbnqmefsvy.reg
11.7s C:\AdwCleaner\quarantine\registry\reg_awgvfzewjvftybyzmusgmewztpnnfcqp.reg
11.9s C:\AdwCleaner\quarantine\registry\reg_mohjwcwgwerzxnrkwpsvpipphswuzcjs.reg
12.0s C:\AdwCleaner\quarantine\registry\reg_vojydhhqbkuocihxhtuxicueyxfrxmts.reg
12.2s C:\AdwCleaner\quarantine\registry\reg_jkoadtfflawlknfsqrdkengbqviawwrq.reg
12.7s C:\AdwCleaner\quarantine\registry\reg_khamaprbgxvthvacluijibqcdahiehmv.reg
13.1s C:\AdwCleaner\quarantine\registry\reg_rbzzfjzpumgqkjdwygcchpilfoadooyi.reg
13.5s C:\AdwCleaner\quarantine\registry\reg_rqbynmyrhpduaqxgbdivozlfhvketcgk.reg
13.7s C:\AdwCleaner\quarantine\registry\reg_vorhwknlvgktfjytfbqxybdhbovaywjn.reg
13.8s C:\AdwCleaner\quarantine\registry\reg_bwvxbvarupvbqrdxppcofdaqvmvesjdy.reg
14.0s C:\AdwCleaner\quarantine\registry\reg_afckiwoamlocwmehyrjxmsksexyfptkq.reg
14.2s C:\AdwCleaner\quarantine\registry\reg_ysfdercjwwjthkzrvnavhoubpmrtwuwv.reg
14.5s C:\AdwCleaner\quarantine\registry\reg_thgyxjdtrbynkciqwofbscmkofenmuha.reg
14.7s C:\AdwCleaner\quarantine\registry\reg_ojfnxvljbkhehtlkzqxewlfbzcxehgyb.reg
14.9s C:\AdwCleaner\quarantine\registry\reg_gckjajsdtbayaobmbhyshyccnknsvptv.reg
15.0s C:\AdwCleaner\quarantine\registry\reg_rhdgykridacnkwssfercrevupqkyiibn.reg
15.2s C:\AdwCleaner\quarantine\registry\reg_gkeucpyuatjhaseiumwnsqzpgadqyozm.reg
15.3s C:\AdwCleaner\quarantine\registry\reg_fpojeddgnftvgvdddfcwsuusqspqafhb.reg
15.5s C:\AdwCleaner\quarantine\registry\reg_vyegytpnsxjnprqscifapfntjzugezjx.reg
15.6s C:\AdwCleaner\quarantine\registry\reg_heanplkumesjyoknvgbsswzqxoajuftb.reg
15.8s C:\AdwCleaner\quarantine\registry\reg_thngaongkihgggcbegxrbvygvzivxvzb.reg
15.9s C:\AdwCleaner\quarantine\registry\reg_hqajokdzagiaqznwraekundpeqxmzphe.reg
16.1s C:\AdwCleaner\quarantine\registry\reg_jprofiypdozdddybqwfwbzwcysrludfr.reg
16.5s C:\AdwCleaner\quarantine\registry\reg_exqgcdmzwkgmtvjsuzjiuvrmqcyknppp.reg
16.7s C:\AdwCleaner\quarantine\registry\reg_omziaywjnqcfyymhltxwqkwqzfhsowvn.reg
16.9s C:\AdwCleaner\quarantine\registry\reg_lxyymlnqkdjnvhydcezryogkbvvbavfw.reg
17.0s C:\AdwCleaner\quarantine\registry\reg_dlqswglljrnukcqhogdemnusjesbgyat.reg
17.2s C:\AdwCleaner\quarantine\registry\reg_aufuttutimjlpjavqhyxvqqerrqvtlsx.reg
17.3s C:\AdwCleaner\quarantine\registry\reg_cycdlhgsbsavninrgsjqkzgtdthbwapf.reg
17.4s C:\AdwCleaner\quarantine\registry\reg_pkmxtaydidocoemizibomfvccmhhaifq.reg
17.6s C:\AdwCleaner\quarantine\registry\reg_qiuofkmjgodcdcrttbgczjlxpbncpofo.reg
22.0s C:\AdwCleaner\quarantine\registry\reg_qsgsdmjearwwieauepksxvwmvvkmybts.reg
22.2s C:\AdwCleaner\quarantine\registry\reg_bvlsspiuylcrequxbwapnyvcqwqtdxwy.reg
22.5s C:\AdwCleaner\quarantine\registry\reg_mlckxsjurlujclmysvcvkdlzybrulgmb.reg
22.6s C:\AdwCleaner\quarantine\registry\reg_pirkoajenajxxoynvgfezrlcccqmtmfo.reg
22.8s C:\AdwCleaner\quarantine\registry\reg_alclxwvnnfuqivuminvxdicuwjegopfn.reg
23.0s C:\AdwCleaner\quarantine\registry\reg_xmfybppuwbajwahwnmlgzpzonmscsxaf.reg
23.2s C:\AdwCleaner\quarantine\registry\reg_bgcmtlicjubxlugsxttfbtqhuccczbcq.reg
23.3s C:\AdwCleaner\quarantine\registry\reg_sjpxzxqweupjpdggopeyeohspibkgxan.reg
23.5s C:\AdwCleaner\quarantine\registry\reg_fpledizicashgefgldqbkgviggfngqxy.reg
24.0s C:\AdwCleaner\quarantine\registry\reg_pxvfxyipfkszzyodsbbfinayqqrtocva.reg
24.3s C:\AdwCleaner\quarantine\registry\reg_tjyaqfrmcayunfgmtdgyetzjmjbxtkgy.reg
24.6s C:\AdwCleaner\quarantine\registry\reg_iiyvtcxfatqqzfgkyvllmslrurnrnqom.reg
24.7s C:\AdwCleaner\quarantine\registry\reg_ynbmxkopnhtqjzgznpomwmrufmosriea.reg
24.9s C:\AdwCleaner\quarantine\registry\reg_opquhjbhgnbnrzzqrfqjwzluwksgtghg.reg
25.1s C:\AdwCleaner\quarantine\registry\reg_fqjzfkakxadujbxahuachhajgjftjpms.reg
29.3s C:\AdwCleaner\quarantine\registry\reg_tcujcfmxnndsnftbdomfahhvpkrclfsg.reg
29.4s C:\AdwCleaner\quarantine\registry\reg_bmvrtjboexqwhowpacxfzglvgyslvjiq.reg
29.7s C:\AdwCleaner\quarantine\registry\reg_yrsdypdhaheyupjeifllbwhjjatgcjpo.reg
30.4s C:\AdwCleaner\quarantine\registry\reg_onqhxijahmpordjqbdfablpilhcxuppf.reg
30.8s C:\AdwCleaner\quarantine\registry\reg_hhyddookileqxnsvnalogjitfwxfkuqf.reg
31.0s C:\AdwCleaner\quarantine\registry\reg_kjvowlcksaqanamfyhzormuhlgheucou.reg
31.2s C:\AdwCleaner\quarantine\registry\reg_lvmrvtoxujbmqfryfhcmaaqzolgrtaiy.reg
31.4s C:\AdwCleaner\quarantine\registry\reg_qmopkfmghtanlaexuigfuptpqoyhocxw.reg
31.5s C:\AdwCleaner\quarantine\registry\reg_hakclexyqybvaltckjsglxvfozwjhnyt.reg
31.7s C:\AdwCleaner\quarantine\registry\reg_yulwxaxipehcjbwquvpujfdufeejckla.reg
32.2s C:\AdwCleaner\quarantine\registry\reg_dfntubvkriqzerggfelccusqetgcfras.reg
32.5s C:\AdwCleaner\quarantine\registry\reg_sabibiokqcebmebghomekhzlxuunofzq.reg
32.6s C:\AdwCleaner\quarantine\registry\reg_szylnxirtrcevhgciraqubmlhugrvakf.reg
32.7s C:\AdwCleaner\quarantine\registry\reg_zhjhojogymfrhcfzhpnzheofikonitje.reg
32.9s C:\AdwCleaner\quarantine\registry\reg_ywouofwdqsvrekpxrutyhysluxmctmal.reg
33.9s C:\AdwCleaner\quarantine\registry\reg_oaaqflbrtkxlixlcbmbzhwhezytanmvc.reg
34.1s C:\AdwCleaner\quarantine\registry\reg_hdhqqihbyhupqfdxgnbnoipbgrmkiqvj.reg
34.4s C:\AdwCleaner\quarantine\registry\reg_mxggwlhgtqtxomnwmqwfftrbnxgcwjwf.reg
34.6s C:\AdwCleaner\quarantine\registry\reg_bgzpmxsmvofgiwoglxnvnqngpojtfaxt.reg
34.7s C:\AdwCleaner\quarantine\registry\reg_vttoehudmrvynhjakjuxkrzcuehlksud.reg
34.9s C:\AdwCleaner\quarantine\registry\reg_fusvzanqvnxkijbyvkbphbcsqxufbzgv.reg
35.0s C:\AdwCleaner\quarantine\registry\reg_awapctldemkmmhtqprstthmdtiivsmbf.reg
35.3s C:\AdwCleaner\quarantine\registry\reg_nztdiakjqojgghsuadyxhhtbifndtyde.reg

C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Service Start.exe -> Quarantined
Size . . . . . . . : 14 944 bytes
Age . . . . . . . : 1.1 days (2017-01-07 23:17:13)
Entropy . . . . . : 6.1
SHA-256 . . . . . : D396C71DF40A400E3EC42840F0E12B32635AB419C2A2CB483AC6344AE15BA42D
Needs elevation . : Yes
Product . . . . . : MyPC Backup Service
Publisher . . . . : MyPCBackup.com
Description . . . : MyPC Backup Service
Version . . . . . : 1.0.0.0
RSA Key Size . . . : 2048
LanguageID . . . . : 0
Authenticode . . . : Valid
> Kaspersky . . . . : not-a-virus:RiskTool.Win32.BackupMyPC.a
Fuzzy . . . . . . : 95.0
Forensic Cluster
-6.9s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\RTOP\
-6.9s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\RTOP\activity.log
-6.9s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\RTOP\hosts_backup
-6.9s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\RTOP\uclogfile.bin
-6.9s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\
-6.7s C:\AdwCleaner\quarantine\files\mdqbvfkcgrqcfqvcvcmtccsnixnesoze\
-6.7s C:\AdwCleaner\quarantine\files\mdqbvfkcgrqcfqvcvcmtccsnixnesoze\coordinator.cfg
-6.7s C:\AdwCleaner\quarantine\files\mdqbvfkcgrqcfqvcvcmtccsnixnesoze\general.cfg
-6.7s C:\AdwCleaner\quarantine\files\mdqbvfkcgrqcfqvcvcmtccsnixnesoze\S-1-5-21-1607161227-1741431587-2329729702-1000.cfg
-6.5s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\
-6.5s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\log\
-6.5s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\log\wprotectmanager_2014-05-27[20-48-24-594].log
-6.5s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\log\wprotectmanager_2014-06-12[23-06-17-127].log
-6.5s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\update\
-6.2s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\
-6.2s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Apdonlex.bin
-6.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Blackzenla.bin
-6.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\conf.config
-6.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Config.xml
-6.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Flex-Kix.dll
-6.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Freshing.bin
-6.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Holdlotfind.dat
-6.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Hotcom.exe
-6.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Hotcom.exe.config
-6.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Jayron.exe
-6.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Jayron.exe.config
-6.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Lotstock.dat
-6.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Mattom.bin
-6.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\md.xml
-6.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Ope-Stock.reg
-6.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Rankotin.dat
-6.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\RonApsoft.dll
-6.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Ronzap.dat
-6.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Ronzap.exe
-6.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\SaltRonfind.exe
-6.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\SaltRonfind.exe.config
-6.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Tan-Strong.dat
-6.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\uninstall.dat
-6.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Voyalex.bin
-6.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Xxx-zuntam.bin
-6.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Zertop.bin
-5.9s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\ondemand\
-5.9s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\temp\
-5.6s C:\AdwCleaner\quarantine\files\xbhaucfzkmehsjingyhelcgvklgewbnf\
-5.6s C:\AdwCleaner\quarantine\files\xbhaucfzkmehsjingyhelcgvklgewbnf\ff.HP
-5.6s C:\AdwCleaner\quarantine\files\xbhaucfzkmehsjingyhelcgvklgewbnf\ff.NT
-5.6s C:\AdwCleaner\quarantine\files\xbhaucfzkmehsjingyhelcgvklgewbnf\snp.sc
-5.4s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\
-5.4s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\Config.json
-5.4s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\set.exe
-5.4s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\set.exe.config
-5.4s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\System.Data.SQLite.dll
-5.1s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\System.Data.SQLite.Linq.dll
-5.1s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\System.Data.SQLite.xml
-5.0s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\X64\
-4.9s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\X64\SQLite.Interop.dll
-4.6s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\X86\
-4.5s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\X86\SQLite.Interop.dll
-4.0s C:\AdwCleaner\quarantine\files\vgncqxonlsljnucxseehrhsrqclssozw\
-3.9s C:\AdwCleaner\quarantine\files\vgncqxonlsljnucxseehrhsrqclssozw\Config.xml
-3.9s C:\AdwCleaner\quarantine\files\vgncqxonlsljnucxseehrhsrqclssozw\Nettrans.exe
-3.9s C:\AdwCleaner\quarantine\files\vgncqxonlsljnucxseehrhsrqclssozw\Nettrans.exe.config
-3.2s C:\AdwCleaner\quarantine\files\lzjoohgimtjqxfbwnkwkwofqdjbkiipm\
-3.2s C:\AdwCleaner\quarantine\files\lzjoohgimtjqxfbwnkwkwofqdjbkiipm\Traffic Exchange\
-2.9s C:\AdwCleaner\quarantine\files\mehetuxeizxjadbiirqxnzixrhzgfpkx\
-2.9s C:\AdwCleaner\quarantine\files\mehetuxeizxjadbiirqxnzixrhzgfpkx\ByteFence Anti-Malware.lnk
-1.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\
-1.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\aff.conf
-1.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.51.x86.dll
-1.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.52.x64.dll
-1.2s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.52.x86.dll
-1.2s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.60.x64.dll
-1.2s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.60.x86.dll
-1.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.Common.dll
-1.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AWSSDK.dll
-0.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\BackupStack.exe
-0.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Configuration Updater.exe
-0.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Crypto32.dll
-0.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Crypto64.dll
-0.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\de_DE.mo
-0.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\diffstack.dll
-0.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\es_ES.mo
-0.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\fr_FR.mo
-0.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\GetText.dll
-0.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\it_IT.mo
-0.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\LinqBridge.dll
-0.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\LogicNP.EZShellExtensions.dll
-0.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\MPCBClient.dll
-0.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\MPCBContextMenu.dll
-0.2s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\MPCBIconOverlays.dll
-0.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\MyPC Backup.exe
-0.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\mypcbackup.ico
-0.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\ObjectListView.dll
-0.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\pt_PT.mo
-0.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\RegisterExtensionDotNet20_x64.exe
-0.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\RegisterExtensionDotNet20_x86.exe
-0.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\RestartExplorer.exe
0.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Service Start.exe
0.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Shared Stack.dll
0.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Signup Wizard.exe
0.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\syncicon.ico
0.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\syncing.ico
0.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\tick.ico
0.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\uninst.exe
0.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\UnRegisterExtensions.exe
0.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Updater.exe
0.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Config\
0.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Config\api.ts2
0.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\
0.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_backup_conf.db
0.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_file_cache.db
0.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_queues.db
0.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_settings.db
0.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_sig_cache.db
0.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_version_queue.db
0.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\
0.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\APPLICATION.log
0.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\AUTH.log
0.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\BACKOFF.log
0.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\CLIENT.log
0.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\GRID_RECOVERY.log
0.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\GRID_RECOVERY_INIT.log
0.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\LICENCE.log
0.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\NETWORK_SHARES.log
0.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\POPUPS.log
0.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\REMOTING.log
0.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\REQUEST.log
0.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\SERVICE.log
1.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\SERVICE_prev.log
1.2s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\SHELL.log
1.2s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\STACK_BASE.log
1.2s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\UPDATER.log
1.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\UTC_MIGRATION.log
1.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\WAIT_HANDLES.log
1.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Resources\
1.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Resources\cache\
1.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\x64\
1.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\x64\System.Data.SQLite.dll
1.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\x86\
1.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\x86\System.Data.SQLite.dll
1.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\~updates\
1.8s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\
1.8s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\
1.8s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\
1.8s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\
1.8s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\
1.8s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\node_modules\hawk\
1.8s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\node_modules\hawk\node_modules\
1.8s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\node_modules\
1.8s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\node_modules\hawk\node_modules\cryptiles\
2.0s C:\AdwCleaner\quarantine\files\cfclmgzmdyrfouldtogzejwngwtrlcgq\
2.0s C:\AdwCleaner\quarantine\files\cfclmgzmdyrfouldtogzejwngwtrlcgq\Traffic Exchange\
2.0s C:\AdwCleaner\quarantine\files\cfclmgzmdyrfouldtogzejwngwtrlcgq\Traffic Exchange\Online-Guardian-v2.exe
2.1s C:\AdwCleaner\quarantine\files\cfclmgzmdyrfouldtogzejwngwtrlcgq\Traffic Exchange\Online-Guardian.exe
2.6s C:\AdwCleaner\quarantine\files\ffhywyhzabwssuvjmxbwjcwhazgzhqyu\
2.7s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\
2.8s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\wyy7kuna.default\
2.8s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\wyy7kuna.default\prefs.js
2.8s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\
2.8s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\wyy7kuna.default\profiles.ini
2.8s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\wyy7kuna.default\search-metadata.json
2.9s C:\AdwCleaner\quarantine\files\ceyyrbqbwuqwvfvgexlgyzektqgpvmcx.back
3.1s C:\AdwCleaner\quarantine\files\kbmtuxxvrlhxutdkaockmibfumvnhmmj.back
3.4s C:\AdwCleaner\quarantine\files\sncdtfcdtanqulwrznbwrcvytpeztggs.back
3.6s C:\AdwCleaner\quarantine\files\mdbeimfmkqbljcopbafbbbfiywbsuvfi.back
3.7s C:\AdwCleaner\quarantine\files\yeswlvywmemkbycygmndofbincjxjbme.back
3.8s C:\AdwCleaner\quarantine\files\owzrdyjvksknzzhdzxtdzlnzcdiiiyir.back
4.0s C:\AdwCleaner\quarantine\files\gzwvidnxqebdjsbuipkomfozaejiinsc.back
4.2s C:\AdwCleaner\quarantine\files\iqdsbrwxecmqbxzaxeqyjtpqwahpvnpr.back
4.7s C:\AdwCleaner\quarantine\files\qlaqaqyhrmbgmobvutntfwlejmakihrd.back
4.8s C:\AdwCleaner\quarantine\files\ojnivfnjvvbvibsbddggquowxpnuqfaq.back
4.9s C:\AdwCleaner\quarantine\files\kuzoszblwjapbodrkrazjblzfivuxqpa.back
5.1s C:\AdwCleaner\quarantine\files\alormegxhvypgmemtszjrjglcguvigel.back
5.2s C:\AdwCleaner\quarantine\files\fyqgymrawnmakhmsfwyabmdygywtdrta.back
5.4s C:\AdwCleaner\quarantine\files\cvnilvahvhtfeqlkbxdbztpksqsybayr.back
5.6s C:\AdwCleaner\quarantine\files\axuviutefnzjzwcrbakzzolrabcuohmb.back
5.8s C:\AdwCleaner\quarantine\files\jmjmnegzusfkhopstgxzvkqtjyqvjnvs.back
5.9s C:\AdwCleaner\quarantine\files\ggcropimosivavatxkivsmkdxletjxdb.back
6.0s C:\AdwCleaner\quarantine\files\eatdlmaoyunigmhgslbwogdpzfovcslk.back
6.4s C:\AdwCleaner\quarantine\files\ugnkiryliftmwjeooeomoyowdojgcjfs.back
7.0s C:\AdwCleaner\quarantine\files\txpmcaaaxezexxxsqwxbaxrswztspbmm.back
7.4s C:\AdwCleaner\quarantine\files\tnljhvwxjjsfwwqdpscdyhtruwsjvfhi.back
7.6s C:\AdwCleaner\quarantine\files\ktzlilsvsazulpgcnniwzmqbhnizbicm.back
7.7s C:\AdwCleaner\quarantine\files\rnxegndxqczyflwxureljfymgjpqgqsz.back
8.6s C:\AdwCleaner\quarantine\registry\reg_hskfuxwnsjxrsytxxeomxanthwyhrcnx.reg
8.8s C:\AdwCleaner\quarantine\registry\reg_ccfjszvfoietkaxlqrjqzklfkvbilozf.reg
9.4s C:\AdwCleaner\quarantine\registry\reg_ygvpkafhkyjeaxmbahzczjjrhwdmgrrn.reg
9.8s C:\AdwCleaner\quarantine\registry\reg_lrjkoqjaxtmrljkcsohmqpyqtpgqcdtz.reg
10.1s C:\AdwCleaner\quarantine\registry\reg_rddacduwtuwidcvbknkkiphcbbvigeyi.reg
10.5s C:\AdwCleaner\quarantine\registry\reg_djpxocawazkrdxoesetosgncagcjrhxs.reg
10.8s C:\AdwCleaner\quarantine\registry\reg_khirbwixuwokxelfsjvljqsigbxvyepv.reg
10.9s C:\AdwCleaner\quarantine\registry\reg_teodgquvsvvlewjnyebsujpakyztntzr.reg
11.1s C:\AdwCleaner\quarantine\registry\reg_bbrbhtpqufijkrkklkvkfpkjlqijvtgc.reg
11.3s C:\AdwCleaner\quarantine\registry\reg_pdunnludimmiluccwtntviiselpubxwq.reg
11.4s C:\AdwCleaner\quarantine\registry\reg_natorijmwbxszovezxlczjqbnqmefsvy.reg
11.6s C:\AdwCleaner\quarantine\registry\reg_awgvfzewjvftybyzmusgmewztpnnfcqp.reg
11.7s C:\AdwCleaner\quarantine\registry\reg_mohjwcwgwerzxnrkwpsvpipphswuzcjs.reg
11.9s C:\AdwCleaner\quarantine\registry\reg_vojydhhqbkuocihxhtuxicueyxfrxmts.reg
12.1s C:\AdwCleaner\quarantine\registry\reg_jkoadtfflawlknfsqrdkengbqviawwrq.reg
12.6s C:\AdwCleaner\quarantine\registry\reg_khamaprbgxvthvacluijibqcdahiehmv.reg
13.0s C:\AdwCleaner\quarantine\registry\reg_rbzzfjzpumgqkjdwygcchpilfoadooyi.reg
13.4s C:\AdwCleaner\quarantine\registry\reg_rqbynmyrhpduaqxgbdivozlfhvketcgk.reg
13.5s C:\AdwCleaner\quarantine\registry\reg_vorhwknlvgktfjytfbqxybdhbovaywjn.reg
13.7s C:\AdwCleaner\quarantine\registry\reg_bwvxbvarupvbqrdxppcofdaqvmvesjdy.reg
13.9s C:\AdwCleaner\quarantine\registry\reg_afckiwoamlocwmehyrjxmsksexyfptkq.reg
14.1s C:\AdwCleaner\quarantine\registry\reg_ysfdercjwwjthkzrvnavhoubpmrtwuwv.reg
14.4s C:\AdwCleaner\quarantine\registry\reg_thgyxjdtrbynkciqwofbscmkofenmuha.reg
14.6s C:\AdwCleaner\quarantine\registry\reg_ojfnxvljbkhehtlkzqxewlfbzcxehgyb.reg
14.8s C:\AdwCleaner\quarantine\registry\reg_gckjajsdtbayaobmbhyshyccnknsvptv.reg
14.9s C:\AdwCleaner\quarantine\registry\reg_rhdgykridacnkwssfercrevupqkyiibn.reg
15.1s C:\AdwCleaner\quarantine\registry\reg_gkeucpyuatjhaseiumwnsqzpgadqyozm.reg
15.2s C:\AdwCleaner\quarantine\registry\reg_fpojeddgnftvgvdddfcwsuusqspqafhb.reg
15.3s C:\AdwCleaner\quarantine\registry\reg_vyegytpnsxjnprqscifapfntjzugezjx.reg
15.5s C:\AdwCleaner\quarantine\registry\reg_heanplkumesjyoknvgbsswzqxoajuftb.reg
15.6s C:\AdwCleaner\quarantine\registry\reg_thngaongkihgggcbegxrbvygvzivxvzb.reg
15.8s C:\AdwCleaner\quarantine\registry\reg_hqajokdzagiaqznwraekundpeqxmzphe.reg
16.0s C:\AdwCleaner\quarantine\registry\reg_jprofiypdozdddybqwfwbzwcysrludfr.reg
16.3s C:\AdwCleaner\quarantine\registry\reg_exqgcdmzwkgmtvjsuzjiuvrmqcyknppp.reg
16.6s C:\AdwCleaner\quarantine\registry\reg_omziaywjnqcfyymhltxwqkwqzfhsowvn.reg
16.8s C:\AdwCleaner\quarantine\registry\reg_lxyymlnqkdjnvhydcezryogkbvvbavfw.reg
16.9s C:\AdwCleaner\quarantine\registry\reg_dlqswglljrnukcqhogdemnusjesbgyat.reg
17.0s C:\AdwCleaner\quarantine\registry\reg_aufuttutimjlpjavqhyxvqqerrqvtlsx.reg
17.1s C:\AdwCleaner\quarantine\registry\reg_cycdlhgsbsavninrgsjqkzgtdthbwapf.reg
17.3s C:\AdwCleaner\quarantine\registry\reg_pkmxtaydidocoemizibomfvccmhhaifq.reg
17.4s C:\AdwCleaner\quarantine\registry\reg_qiuofkmjgodcdcrttbgczjlxpbncpofo.reg
21.8s C:\AdwCleaner\quarantine\registry\reg_qsgsdmjearwwieauepksxvwmvvkmybts.reg
22.0s C:\AdwCleaner\quarantine\registry\reg_bvlsspiuylcrequxbwapnyvcqwqtdxwy.reg
22.3s C:\AdwCleaner\quarantine\registry\reg_mlckxsjurlujclmysvcvkdlzybrulgmb.reg
22.5s C:\AdwCleaner\quarantine\registry\reg_pirkoajenajxxoynvgfezrlcccqmtmfo.reg
22.7s C:\AdwCleaner\quarantine\registry\reg_alclxwvnnfuqivuminvxdicuwjegopfn.reg
22.9s C:\AdwCleaner\quarantine\registry\reg_xmfybppuwbajwahwnmlgzpzonmscsxaf.reg
23.1s C:\AdwCleaner\quarantine\registry\reg_bgcmtlicjubxlugsxttfbtqhuccczbcq.reg
23.2s C:\AdwCleaner\quarantine\registry\reg_sjpxzxqweupjpdggopeyeohspibkgxan.reg
23.4s C:\AdwCleaner\quarantine\registry\reg_fpledizicashgefgldqbkgviggfngqxy.reg
23.9s C:\AdwCleaner\quarantine\registry\reg_pxvfxyipfkszzyodsbbfinayqqrtocva.reg
24.2s C:\AdwCleaner\quarantine\registry\reg_tjyaqfrmcayunfgmtdgyetzjmjbxtkgy.reg
24.4s C:\AdwCleaner\quarantine\registry\reg_iiyvtcxfatqqzfgkyvllmslrurnrnqom.reg
24.6s C:\AdwCleaner\quarantine\registry\reg_ynbmxkopnhtqjzgznpomwmrufmosriea.reg
24.8s C:\AdwCleaner\quarantine\registry\reg_opquhjbhgnbnrzzqrfqjwzluwksgtghg.reg
25.0s C:\AdwCleaner\quarantine\registry\reg_fqjzfkakxadujbxahuachhajgjftjpms.reg
29.1s C:\AdwCleaner\quarantine\registry\reg_tcujcfmxnndsnftbdomfahhvpkrclfsg.reg
29.3s C:\AdwCleaner\quarantine\registry\reg_bmvrtjboexqwhowpacxfzglvgyslvjiq.reg
29.6s C:\AdwCleaner\quarantine\registry\reg_yrsdypdhaheyupjeifllbwhjjatgcjpo.reg
30.2s C:\AdwCleaner\quarantine\registry\reg_onqhxijahmpordjqbdfablpilhcxuppf.reg
30.7s C:\AdwCleaner\quarantine\registry\reg_hhyddookileqxnsvnalogjitfwxfkuqf.reg
30.9s C:\AdwCleaner\quarantine\registry\reg_kjvowlcksaqanamfyhzormuhlgheucou.reg
31.1s C:\AdwCleaner\quarantine\registry\reg_lvmrvtoxujbmqfryfhcmaaqzolgrtaiy.reg
31.3s C:\AdwCleaner\quarantine\registry\reg_qmopkfmghtanlaexuigfuptpqoyhocxw.reg
31.4s C:\AdwCleaner\quarantine\registry\reg_hakclexyqybvaltckjsglxvfozwjhnyt.reg
31.6s C:\AdwCleaner\quarantine\registry\reg_yulwxaxipehcjbwquvpujfdufeejckla.reg
32.1s C:\AdwCleaner\quarantine\registry\reg_dfntubvkriqzerggfelccusqetgcfras.reg
32.3s C:\AdwCleaner\quarantine\registry\reg_sabibiokqcebmebghomekhzlxuunofzq.reg
32.5s C:\AdwCleaner\quarantine\registry\reg_szylnxirtrcevhgciraqubmlhugrvakf.reg
32.6s C:\AdwCleaner\quarantine\registry\reg_zhjhojogymfrhcfzhpnzheofikonitje.reg
32.7s C:\AdwCleaner\quarantine\registry\reg_ywouofwdqsvrekpxrutyhysluxmctmal.reg
33.8s C:\AdwCleaner\quarantine\registry\reg_oaaqflbrtkxlixlcbmbzhwhezytanmvc.reg
34.0s C:\AdwCleaner\quarantine\registry\reg_hdhqqihbyhupqfdxgnbnoipbgrmkiqvj.reg
34.3s C:\AdwCleaner\quarantine\registry\reg_mxggwlhgtqtxomnwmqwfftrbnxgcwjwf.reg
34.4s C:\AdwCleaner\quarantine\registry\reg_bgzpmxsmvofgiwoglxnvnqngpojtfaxt.reg
34.6s C:\AdwCleaner\quarantine\registry\reg_vttoehudmrvynhjakjuxkrzcuehlksud.reg
34.8s C:\AdwCleaner\quarantine\registry\reg_fusvzanqvnxkijbyvkbphbcsqxufbzgv.reg
34.9s C:\AdwCleaner\quarantine\registry\reg_awapctldemkmmhtqprstthmdtiivsmbf.reg
35.1s C:\AdwCleaner\quarantine\registry\reg_nztdiakjqojgghsuadyxhhtbifndtyde.reg

C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\set.exe -> Deleted
Size . . . . . . . : 3 786 752 bytes
Age . . . . . . . : 1.1 days (2017-01-07 23:17:08)
Entropy . . . . . : 6.6
SHA-256 . . . . . : 8677D2DEA85707F0BD4489A302D64E01E32F8BE897584A82EDD0EFBF39DD92C7
Product . . . . . : ExtManager
LanguageID . . . . : 0
> Bitdefender . . . : Gen:Variant.Zusy.213626
> Kaspersky . . . . : not-a-virus:WebToolbar.MSIL.Agent.bkqa
Fuzzy . . . . . . : 108.0
Forensic Cluster
-1.5s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\RTOP\
-1.5s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\RTOP\activity.log
-1.5s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\RTOP\hosts_backup
-1.5s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\RTOP\uclogfile.bin
-1.5s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\
-1.3s C:\AdwCleaner\quarantine\files\mdqbvfkcgrqcfqvcvcmtccsnixnesoze\
-1.3s C:\AdwCleaner\quarantine\files\mdqbvfkcgrqcfqvcvcmtccsnixnesoze\coordinator.cfg
-1.3s C:\AdwCleaner\quarantine\files\mdqbvfkcgrqcfqvcvcmtccsnixnesoze\general.cfg
-1.3s C:\AdwCleaner\quarantine\files\mdqbvfkcgrqcfqvcvcmtccsnixnesoze\S-1-5-21-1607161227-1741431587-2329729702-1000.cfg
-1.1s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\
-1.1s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\log\
-1.1s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\log\wprotectmanager_2014-05-27[20-48-24-594].log
-1.1s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\log\wprotectmanager_2014-06-12[23-06-17-127].log
-1.0s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\update\
-0.8s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\
-0.8s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Apdonlex.bin
-0.7s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Blackzenla.bin
-0.7s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\conf.config
-0.7s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Config.xml
-0.7s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Flex-Kix.dll
-0.7s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Freshing.bin
-0.7s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Holdlotfind.dat
-0.7s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Hotcom.exe
-0.7s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Hotcom.exe.config
-0.7s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Jayron.exe
-0.7s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Jayron.exe.config
-0.7s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Lotstock.dat
-0.6s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Mattom.bin
-0.6s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\md.xml
-0.6s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Ope-Stock.reg
-0.6s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Rankotin.dat
-0.6s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\RonApsoft.dll
-0.6s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Ronzap.dat
-0.6s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Ronzap.exe
-0.6s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\SaltRonfind.exe
-0.6s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\SaltRonfind.exe.config
-0.6s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Tan-Strong.dat
-0.6s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\uninstall.dat
-0.6s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Voyalex.bin
-0.6s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Xxx-zuntam.bin
-0.6s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Zertop.bin
-0.5s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\ondemand\
-0.5s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\temp\
-0.2s C:\AdwCleaner\quarantine\files\xbhaucfzkmehsjingyhelcgvklgewbnf\
-0.2s C:\AdwCleaner\quarantine\files\xbhaucfzkmehsjingyhelcgvklgewbnf\ff.HP
-0.2s C:\AdwCleaner\quarantine\files\xbhaucfzkmehsjingyhelcgvklgewbnf\ff.NT
-0.2s C:\AdwCleaner\quarantine\files\xbhaucfzkmehsjingyhelcgvklgewbnf\snp.sc
0.0s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\
0.0s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\Config.json
0.0s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\set.exe
0.0s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\set.exe.config
0.0s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\System.Data.SQLite.dll
0.3s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\System.Data.SQLite.Linq.dll
0.3s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\System.Data.SQLite.xml
0.5s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\X64\
0.5s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\X64\SQLite.Interop.dll
0.9s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\X86\
0.9s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\X86\SQLite.Interop.dll
1.5s C:\AdwCleaner\quarantine\files\vgncqxonlsljnucxseehrhsrqclssozw\
1.5s C:\AdwCleaner\quarantine\files\vgncqxonlsljnucxseehrhsrqclssozw\Config.xml
1.5s C:\AdwCleaner\quarantine\files\vgncqxonlsljnucxseehrhsrqclssozw\Nettrans.exe
1.5s C:\AdwCleaner\quarantine\files\vgncqxonlsljnucxseehrhsrqclssozw\Nettrans.exe.config
2.2s C:\AdwCleaner\quarantine\files\lzjoohgimtjqxfbwnkwkwofqdjbkiipm\
2.2s C:\AdwCleaner\quarantine\files\lzjoohgimtjqxfbwnkwkwofqdjbkiipm\Traffic Exchange\
2.5s C:\AdwCleaner\quarantine\files\mehetuxeizxjadbiirqxnzixrhzgfpkx\
2.5s C:\AdwCleaner\quarantine\files\mehetuxeizxjadbiirqxnzixrhzgfpkx\ByteFence Anti-Malware.lnk
3.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\
3.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\aff.conf
3.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.51.x86.dll
4.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.52.x64.dll
4.2s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.52.x86.dll
4.2s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.60.x64.dll
4.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.60.x86.dll
4.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.Common.dll
4.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AWSSDK.dll
4.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\BackupStack.exe
4.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Configuration Updater.exe
4.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Crypto32.dll
4.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Crypto64.dll
4.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\de_DE.mo
4.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\diffstack.dll
5.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\es_ES.mo
5.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\fr_FR.mo
5.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\GetText.dll
5.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\it_IT.mo
5.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\LinqBridge.dll
5.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\LogicNP.EZShellExtensions.dll
5.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\MPCBClient.dll
5.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\MPCBContextMenu.dll
5.2s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\MPCBIconOverlays.dll
5.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\MyPC Backup.exe
5.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\mypcbackup.ico
5.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\ObjectListView.dll
5.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\pt_PT.mo
5.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\RegisterExtensionDotNet20_x64.exe
5.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\RegisterExtensionDotNet20_x86.exe
5.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\RestartExplorer.exe
5.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Service Start.exe
5.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Shared Stack.dll
5.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Signup Wizard.exe
5.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\syncicon.ico
5.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\syncing.ico
5.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\tick.ico
5.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\uninst.exe
5.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\UnRegisterExtensions.exe
5.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Updater.exe
5.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Config\
5.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Config\api.ts2
5.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\
5.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_backup_conf.db
5.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_file_cache.db
5.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_queues.db
5.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_settings.db
5.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_sig_cache.db
6.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_version_queue.db
6.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\
6.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\APPLICATION.log
6.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\AUTH.log
6.0s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\BACKOFF.log
6.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\CLIENT.log
6.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\GRID_RECOVERY.log
6.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\GRID_RECOVERY_INIT.log
6.2s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\LICENCE.log
6.2s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\NETWORK_SHARES.log
6.2s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\POPUPS.log
6.2s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\REMOTING.log
6.2s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\REQUEST.log
6.2s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\SERVICE.log
6.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\SERVICE_prev.log
6.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\SHELL.log
6.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\STACK_BASE.log
6.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\UPDATER.log
6.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\UTC_MIGRATION.log
6.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\WAIT_HANDLES.log
6.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Resources\
6.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Resources\cache\
6.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\x64\
6.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\x64\System.Data.SQLite.dll
6.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\x86\
6.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\x86\System.Data.SQLite.dll
6.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\~updates\
7.2s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\
7.2s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\
7.2s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\
7.2s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\
7.2s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\
7.2s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\node_modules\hawk\
7.2s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\node_modules\hawk\node_modules\
7.2s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\node_modules\
7.2s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\node_modules\hawk\node_modules\cryptiles\
7.4s C:\AdwCleaner\quarantine\files\cfclmgzmdyrfouldtogzejwngwtrlcgq\
7.4s C:\AdwCleaner\quarantine\files\cfclmgzmdyrfouldtogzejwngwtrlcgq\Traffic Exchange\
7.4s C:\AdwCleaner\quarantine\files\cfclmgzmdyrfouldtogzejwngwtrlcgq\Traffic Exchange\Online-Guardian-v2.exe
7.5s C:\AdwCleaner\quarantine\files\cfclmgzmdyrfouldtogzejwngwtrlcgq\Traffic Exchange\Online-Guardian.exe
8.0s C:\AdwCleaner\quarantine\files\ffhywyhzabwssuvjmxbwjcwhazgzhqyu\
8.2s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\
8.2s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\wyy7kuna.default\
8.2s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\wyy7kuna.default\prefs.js
8.2s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\
8.2s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\wyy7kuna.default\profiles.ini
8.2s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\wyy7kuna.default\search-metadata.json
8.3s C:\AdwCleaner\quarantine\files\ceyyrbqbwuqwvfvgexlgyzektqgpvmcx.back
8.5s C:\AdwCleaner\quarantine\files\kbmtuxxvrlhxutdkaockmibfumvnhmmj.back
8.9s C:\AdwCleaner\quarantine\files\sncdtfcdtanqulwrznbwrcvytpeztggs.back
9.0s C:\AdwCleaner\quarantine\files\mdbeimfmkqbljcopbafbbbfiywbsuvfi.back
9.1s C:\AdwCleaner\quarantine\files\yeswlvywmemkbycygmndofbincjxjbme.back
9.2s C:\AdwCleaner\quarantine\files\owzrdyjvksknzzhdzxtdzlnzcdiiiyir.back
9.4s C:\AdwCleaner\quarantine\files\gzwvidnxqebdjsbuipkomfozaejiinsc.back
9.7s C:\AdwCleaner\quarantine\files\iqdsbrwxecmqbxzaxeqyjtpqwahpvnpr.back
10.1s C:\AdwCleaner\quarantine\files\qlaqaqyhrmbgmobvutntfwlejmakihrd.back
10.2s C:\AdwCleaner\quarantine\files\ojnivfnjvvbvibsbddggquowxpnuqfaq.back
10.4s C:\AdwCleaner\quarantine\files\kuzoszblwjapbodrkrazjblzfivuxqpa.back
10.5s C:\AdwCleaner\quarantine\files\alormegxhvypgmemtszjrjglcguvigel.back
10.6s C:\AdwCleaner\quarantine\files\fyqgymrawnmakhmsfwyabmdygywtdrta.back
10.8s C:\AdwCleaner\quarantine\files\cvnilvahvhtfeqlkbxdbztpksqsybayr.back
11.0s C:\AdwCleaner\quarantine\files\axuviutefnzjzwcrbakzzolrabcuohmb.back
11.2s C:\AdwCleaner\quarantine\files\jmjmnegzusfkhopstgxzvkqtjyqvjnvs.back
11.3s C:\AdwCleaner\quarantine\files\ggcropimosivavatxkivsmkdxletjxdb.back
11.4s C:\AdwCleaner\quarantine\files\eatdlmaoyunigmhgslbwogdpzfovcslk.back
11.8s C:\AdwCleaner\quarantine\files\ugnkiryliftmwjeooeomoyowdojgcjfs.back
12.4s C:\AdwCleaner\quarantine\files\txpmcaaaxezexxxsqwxbaxrswztspbmm.back
12.8s C:\AdwCleaner\quarantine\files\tnljhvwxjjsfwwqdpscdyhtruwsjvfhi.back
13.0s C:\AdwCleaner\quarantine\files\ktzlilsvsazulpgcnniwzmqbhnizbicm.back
13.2s C:\AdwCleaner\quarantine\files\rnxegndxqczyflwxureljfymgjpqgqsz.back
14.0s C:\AdwCleaner\quarantine\registry\reg_hskfuxwnsjxrsytxxeomxanthwyhrcnx.reg
14.2s C:\AdwCleaner\quarantine\registry\reg_ccfjszvfoietkaxlqrjqzklfkvbilozf.reg
14.8s C:\AdwCleaner\quarantine\registry\reg_ygvpkafhkyjeaxmbahzczjjrhwdmgrrn.reg
15.2s C:\AdwCleaner\quarantine\registry\reg_lrjkoqjaxtmrljkcsohmqpyqtpgqcdtz.reg
15.5s C:\AdwCleaner\quarantine\registry\reg_rddacduwtuwidcvbknkkiphcbbvigeyi.reg
15.9s C:\AdwCleaner\quarantine\registry\reg_djpxocawazkrdxoesetosgncagcjrhxs.reg
16.2s C:\AdwCleaner\quarantine\registry\reg_khirbwixuwokxelfsjvljqsigbxvyepv.reg
16.3s C:\AdwCleaner\quarantine\registry\reg_teodgquvsvvlewjnyebsujpakyztntzr.reg
16.5s C:\AdwCleaner\quarantine\registry\reg_bbrbhtpqufijkrkklkvkfpkjlqijvtgc.reg
16.7s C:\AdwCleaner\quarantine\registry\reg_pdunnludimmiluccwtntviiselpubxwq.reg
16.8s C:\AdwCleaner\quarantine\registry\reg_natorijmwbxszovezxlczjqbnqmefsvy.reg
17.0s C:\AdwCleaner\quarantine\registry\reg_awgvfzewjvftybyzmusgmewztpnnfcqp.reg
17.1s C:\AdwCleaner\quarantine\registry\reg_mohjwcwgwerzxnrkwpsvpipphswuzcjs.reg
17.3s C:\AdwCleaner\quarantine\registry\reg_vojydhhqbkuocihxhtuxicueyxfrxmts.reg
17.5s C:\AdwCleaner\quarantine\registry\reg_jkoadtfflawlknfsqrdkengbqviawwrq.reg
18.0s C:\AdwCleaner\quarantine\registry\reg_khamaprbgxvthvacluijibqcdahiehmv.reg
18.4s C:\AdwCleaner\quarantine\registry\reg_rbzzfjzpumgqkjdwygcchpilfoadooyi.reg
18.8s C:\AdwCleaner\quarantine\registry\reg_rqbynmyrhpduaqxgbdivozlfhvketcgk.reg
18.9s C:\AdwCleaner\quarantine\registry\reg_vorhwknlvgktfjytfbqxybdhbovaywjn.reg
19.1s C:\AdwCleaner\quarantine\registry\reg_bwvxbvarupvbqrdxppcofdaqvmvesjdy.reg
19.3s C:\AdwCleaner\quarantine\registry\reg_afckiwoamlocwmehyrjxmsksexyfptkq.reg
19.5s C:\AdwCleaner\quarantine\registry\reg_ysfdercjwwjthkzrvnavhoubpmrtwuwv.reg
19.8s C:\AdwCleaner\quarantine\registry\reg_thgyxjdtrbynkciqwofbscmkofenmuha.reg
20.0s C:\AdwCleaner\quarantine\registry\reg_ojfnxvljbkhehtlkzqxewlfbzcxehgyb.reg
20.2s C:\AdwCleaner\quarantine\registry\reg_gckjajsdtbayaobmbhyshyccnknsvptv.reg
20.3s C:\AdwCleaner\quarantine\registry\reg_rhdgykridacnkwssfercrevupqkyiibn.reg
20.5s C:\AdwCleaner\quarantine\registry\reg_gkeucpyuatjhaseiumwnsqzpgadqyozm.reg
20.6s C:\AdwCleaner\quarantine\registry\reg_fpojeddgnftvgvdddfcwsuusqspqafhb.reg
20.7s C:\AdwCleaner\quarantine\registry\reg_vyegytpnsxjnprqscifapfntjzugezjx.reg
20.9s C:\AdwCleaner\quarantine\registry\reg_heanplkumesjyoknvgbsswzqxoajuftb.reg
21.0s C:\AdwCleaner\quarantine\registry\reg_thngaongkihgggcbegxrbvygvzivxvzb.reg
21.2s C:\AdwCleaner\quarantine\registry\reg_hqajokdzagiaqznwraekundpeqxmzphe.reg
21.4s C:\AdwCleaner\quarantine\registry\reg_jprofiypdozdddybqwfwbzwcysrludfr.reg
21.7s C:\AdwCleaner\quarantine\registry\reg_exqgcdmzwkgmtvjsuzjiuvrmqcyknppp.reg
22.0s C:\AdwCleaner\quarantine\registry\reg_omziaywjnqcfyymhltxwqkwqzfhsowvn.reg
22.2s C:\AdwCleaner\quarantine\registry\reg_lxyymlnqkdjnvhydcezryogkbvvbavfw.reg
22.3s C:\AdwCleaner\quarantine\registry\reg_dlqswglljrnukcqhogdemnusjesbgyat.reg
22.4s C:\AdwCleaner\quarantine\registry\reg_aufuttutimjlpjavqhyxvqqerrqvtlsx.reg
22.6s C:\AdwCleaner\quarantine\registry\reg_cycdlhgsbsavninrgsjqkzgtdthbwapf.reg
22.7s C:\AdwCleaner\quarantine\registry\reg_pkmxtaydidocoemizibomfvccmhhaifq.reg
22.8s C:\AdwCleaner\quarantine\registry\reg_qiuofkmjgodcdcrttbgczjlxpbncpofo.reg
27.3s C:\AdwCleaner\quarantine\registry\reg_qsgsdmjearwwieauepksxvwmvvkmybts.reg
27.4s C:\AdwCleaner\quarantine\registry\reg_bvlsspiuylcrequxbwapnyvcqwqtdxwy.reg
27.8s C:\AdwCleaner\quarantine\registry\reg_mlckxsjurlujclmysvcvkdlzybrulgmb.reg
27.9s C:\AdwCleaner\quarantine\registry\reg_pirkoajenajxxoynvgfezrlcccqmtmfo.reg
28.1s C:\AdwCleaner\quarantine\registry\reg_alclxwvnnfuqivuminvxdicuwjegopfn.reg
28.3s C:\AdwCleaner\quarantine\registry\reg_xmfybppuwbajwahwnmlgzpzonmscsxaf.reg
28.5s C:\AdwCleaner\quarantine\registry\reg_bgcmtlicjubxlugsxttfbtqhuccczbcq.reg
28.6s C:\AdwCleaner\quarantine\registry\reg_sjpxzxqweupjpdggopeyeohspibkgxan.reg
28.8s C:\AdwCleaner\quarantine\registry\reg_fpledizicashgefgldqbkgviggfngqxy.reg
29.3s C:\AdwCleaner\quarantine\registry\reg_pxvfxyipfkszzyodsbbfinayqqrtocva.reg
29.6s C:\AdwCleaner\quarantine\registry\reg_tjyaqfrmcayunfgmtdgyetzjmjbxtkgy.reg
29.8s C:\AdwCleaner\quarantine\registry\reg_iiyvtcxfatqqzfgkyvllmslrurnrnqom.reg
30.0s C:\AdwCleaner\quarantine\registry\reg_ynbmxkopnhtqjzgznpomwmrufmosriea.reg
30.2s C:\AdwCleaner\quarantine\registry\reg_opquhjbhgnbnrzzqrfqjwzluwksgtghg.reg
30.4s C:\AdwCleaner\quarantine\registry\reg_fqjzfkakxadujbxahuachhajgjftjpms.reg
34.5s C:\AdwCleaner\quarantine\registry\reg_tcujcfmxnndsnftbdomfahhvpkrclfsg.reg
34.7s C:\AdwCleaner\quarantine\registry\reg_bmvrtjboexqwhowpacxfzglvgyslvjiq.reg
35.0s C:\AdwCleaner\quarantine\registry\reg_yrsdypdhaheyupjeifllbwhjjatgcjpo.reg
35.6s C:\AdwCleaner\quarantine\registry\reg_onqhxijahmpordjqbdfablpilhcxuppf.reg
36.1s C:\AdwCleaner\quarantine\registry\reg_hhyddookileqxnsvnalogjitfwxfkuqf.reg
36.3s C:\AdwCleaner\quarantine\registry\reg_kjvowlcksaqanamfyhzormuhlgheucou.reg
36.5s C:\AdwCleaner\quarantine\registry\reg_lvmrvtoxujbmqfryfhcmaaqzolgrtaiy.reg
36.7s C:\AdwCleaner\quarantine\registry\reg_qmopkfmghtanlaexuigfuptpqoyhocxw.reg
36.8s C:\AdwCleaner\quarantine\registry\reg_hakclexyqybvaltckjsglxvfozwjhnyt.reg
37.0s C:\AdwCleaner\quarantine\registry\reg_yulwxaxipehcjbwquvpujfdufeejckla.reg
37.5s C:\AdwCleaner\quarantine\registry\reg_dfntubvkriqzerggfelccusqetgcfras.reg
37.8s C:\AdwCleaner\quarantine\registry\reg_sabibiokqcebmebghomekhzlxuunofzq.reg
37.9s C:\AdwCleaner\quarantine\registry\reg_szylnxirtrcevhgciraqubmlhugrvakf.reg
38.0s C:\AdwCleaner\quarantine\registry\reg_zhjhojogymfrhcfzhpnzheofikonitje.reg
38.2s C:\AdwCleaner\quarantine\registry\reg_ywouofwdqsvrekpxrutyhysluxmctmal.reg
39.2s C:\AdwCleaner\quarantine\registry\reg_oaaqflbrtkxlixlcbmbzhwhezytanmvc.reg
39.4s C:\AdwCleaner\quarantine\registry\reg_hdhqqihbyhupqfdxgnbnoipbgrmkiqvj.reg
39.7s C:\AdwCleaner\quarantine\registry\reg_mxggwlhgtqtxomnwmqwfftrbnxgcwjwf.reg
39.9s C:\AdwCleaner\quarantine\registry\reg_bgzpmxsmvofgiwoglxnvnqngpojtfaxt.reg
40.0s C:\AdwCleaner\quarantine\registry\reg_vttoehudmrvynhjakjuxkrzcuehlksud.reg
40.2s C:\AdwCleaner\quarantine\registry\reg_fusvzanqvnxkijbyvkbphbcsqxufbzgv.reg
40.3s C:\AdwCleaner\quarantine\registry\reg_awapctldemkmmhtqprstthmdtiivsmbf.reg
40.5s C:\AdwCleaner\quarantine\registry\reg_nztdiakjqojgghsuadyxhhtbifndtyde.reg

C:\AdwCleaner\quarantine\files\vgncqxonlsljnucxseehrhsrqclssozw\Nettrans.exe -> Deleted
Size . . . . . . . : 43 520 bytes
Age . . . . . . . : 1.1 days (2017-01-07 23:17:09)
Entropy . . . . . : 5.5
SHA-256 . . . . . : 57412C3A6AC8A2E1E7A92C1FD6E5614D2F1BBAA12916BBC0E05E29038428F846
Product . . . . . : Network Packet Monitor
LanguageID . . . . : 0
> Bitdefender . . . : Gen:Variant.MSILPerseus.61244
Fuzzy . . . . . . : 108.0
Forensic Cluster
-2.9s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\RTOP\
-2.9s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\RTOP\activity.log
-2.9s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\RTOP\hosts_backup
-2.9s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\RTOP\uclogfile.bin
-2.9s C:\AdwCleaner\quarantine\files\ivquawpxipqiztpbpocwerrxgdtfpyqg\
-2.8s C:\AdwCleaner\quarantine\files\mdqbvfkcgrqcfqvcvcmtccsnixnesoze\
-2.8s C:\AdwCleaner\quarantine\files\mdqbvfkcgrqcfqvcvcmtccsnixnesoze\coordinator.cfg
-2.8s C:\AdwCleaner\quarantine\files\mdqbvfkcgrqcfqvcvcmtccsnixnesoze\general.cfg
-2.7s C:\AdwCleaner\quarantine\files\mdqbvfkcgrqcfqvcvcmtccsnixnesoze\S-1-5-21-1607161227-1741431587-2329729702-1000.cfg
-2.5s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\
-2.5s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\log\
-2.5s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\log\wprotectmanager_2014-05-27[20-48-24-594].log
-2.5s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\log\wprotectmanager_2014-06-12[23-06-17-127].log
-2.5s C:\AdwCleaner\quarantine\files\tiwccjekhxwuaredjkyyxnnzcekfoiib\update\
-2.2s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\
-2.2s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Apdonlex.bin
-2.2s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Blackzenla.bin
-2.2s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\conf.config
-2.2s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Config.xml
-2.2s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Flex-Kix.dll
-2.2s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Freshing.bin
-2.2s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Holdlotfind.dat
-2.2s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Hotcom.exe
-2.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Hotcom.exe.config
-2.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Jayron.exe
-2.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Jayron.exe.config
-2.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Lotstock.dat
-2.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Mattom.bin
-2.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\md.xml
-2.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Ope-Stock.reg
-2.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Rankotin.dat
-2.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\RonApsoft.dll
-2.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Ronzap.dat
-2.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Ronzap.exe
-2.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\SaltRonfind.exe
-2.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\SaltRonfind.exe.config
-2.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Tan-Strong.dat
-2.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\uninstall.dat
-2.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Voyalex.bin
-2.1s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Xxx-zuntam.bin
-2.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\Zertop.bin
-2.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\ondemand\
-2.0s C:\AdwCleaner\quarantine\files\eqsunhabpursxxfoqworbtykxbigihvy\temp\
-1.7s C:\AdwCleaner\quarantine\files\xbhaucfzkmehsjingyhelcgvklgewbnf\
-1.7s C:\AdwCleaner\quarantine\files\xbhaucfzkmehsjingyhelcgvklgewbnf\ff.HP
-1.7s C:\AdwCleaner\quarantine\files\xbhaucfzkmehsjingyhelcgvklgewbnf\ff.NT
-1.6s C:\AdwCleaner\quarantine\files\xbhaucfzkmehsjingyhelcgvklgewbnf\snp.sc
-1.5s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\
-1.5s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\Config.json
-1.5s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\set.exe
-1.5s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\set.exe.config
-1.5s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\System.Data.SQLite.dll
-1.2s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\System.Data.SQLite.Linq.dll
-1.2s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\System.Data.SQLite.xml
-1.0s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\X64\
-1.0s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\X64\SQLite.Interop.dll
-0.6s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\X86\
-0.6s C:\AdwCleaner\quarantine\files\mzgsmawitnvsxnqjlsiklutqaprlcnbc\X86\SQLite.Interop.dll
-0.0s C:\AdwCleaner\quarantine\files\vgncqxonlsljnucxseehrhsrqclssozw\
0.0s C:\AdwCleaner\quarantine\files\vgncqxonlsljnucxseehrhsrqclssozw\Config.xml
0.0s C:\AdwCleaner\quarantine\files\vgncqxonlsljnucxseehrhsrqclssozw\Nettrans.exe
0.0s C:\AdwCleaner\quarantine\files\vgncqxonlsljnucxseehrhsrqclssozw\Nettrans.exe.config
0.7s C:\AdwCleaner\quarantine\files\lzjoohgimtjqxfbwnkwkwofqdjbkiipm\
0.7s C:\AdwCleaner\quarantine\files\lzjoohgimtjqxfbwnkwkwofqdjbkiipm\Traffic Exchange\
1.0s C:\AdwCleaner\quarantine\files\mehetuxeizxjadbiirqxnzixrhzgfpkx\
1.0s C:\AdwCleaner\quarantine\files\mehetuxeizxjadbiirqxnzixrhzgfpkx\ByteFence Anti-Malware.lnk
2.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\
2.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\aff.conf
2.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.51.x86.dll
2.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.52.x64.dll
2.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.52.x86.dll
2.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.60.x64.dll
2.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.60.x86.dll
2.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AlphaVSS.Common.dll
2.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\AWSSDK.dll
3.2s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\BackupStack.exe
3.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Configuration Updater.exe
3.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Crypto32.dll
3.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Crypto64.dll
3.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\de_DE.mo
3.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\diffstack.dll
3.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\es_ES.mo
3.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\fr_FR.mo
3.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\GetText.dll
3.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\it_IT.mo
3.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\LinqBridge.dll
3.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\LogicNP.EZShellExtensions.dll
3.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\MPCBClient.dll
3.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\MPCBContextMenu.dll
3.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\MPCBIconOverlays.dll
3.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\MyPC Backup.exe
3.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\mypcbackup.ico
3.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\ObjectListView.dll
3.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\pt_PT.mo
3.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\RegisterExtensionDotNet20_x64.exe
3.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\RegisterExtensionDotNet20_x86.exe
3.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\RestartExplorer.exe
3.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Service Start.exe
3.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Shared Stack.dll
4.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Signup Wizard.exe
4.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\syncicon.ico
4.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\syncing.ico
4.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\tick.ico
4.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\uninst.exe
4.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\UnRegisterExtensions.exe
4.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Updater.exe
4.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Config\
4.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Config\api.ts2
4.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\
4.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_backup_conf.db
4.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_file_cache.db
4.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_queues.db
4.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_settings.db
4.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_sig_cache.db
4.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Database\mpcb_version_queue.db
4.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\
4.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\APPLICATION.log
4.5s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\AUTH.log
4.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\BACKOFF.log
4.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\CLIENT.log
4.6s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\GRID_RECOVERY.log
4.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\GRID_RECOVERY_INIT.log
4.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\LICENCE.log
4.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\NETWORK_SHARES.log
4.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\POPUPS.log
4.7s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\REMOTING.log
4.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\REQUEST.log
4.8s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\SERVICE.log
4.9s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\SERVICE_prev.log
5.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\SHELL.log
5.1s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\STACK_BASE.log
5.2s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\UPDATER.log
5.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\UTC_MIGRATION.log
5.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\log\WAIT_HANDLES.log
5.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Resources\
5.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\Resources\cache\
5.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\x64\
5.3s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\x64\System.Data.SQLite.dll
5.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\x86\
5.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\x86\System.Data.SQLite.dll
5.4s C:\AdwCleaner\quarantine\files\kvpjmcvrujteynyiurqnzshbwogxxwkg\~updates\
5.8s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\
5.8s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\
5.8s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\
5.8s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\
5.8s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\
5.8s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\node_modules\hawk\
5.8s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\node_modules\hawk\node_modules\
5.8s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\node_modules\
5.8s C:\AdwCleaner\quarantine\files\lksyvdddugkjuknoimogltztoljkcyvl\app\app\node_modules\request\node_modules\hawk\node_modules\cryptiles\
6.0s C:\AdwCleaner\quarantine\files\cfclmgzmdyrfouldtogzejwngwtrlcgq\
6.0s C:\AdwCleaner\quarantine\files\cfclmgzmdyrfouldtogzejwngwtrlcgq\Traffic Exchange\
6.0s C:\AdwCleaner\quarantine\files\cfclmgzmdyrfouldtogzejwngwtrlcgq\Traffic Exchange\Online-Guardian-v2.exe
6.0s C:\AdwCleaner\quarantine\files\cfclmgzmdyrfouldtogzejwngwtrlcgq\Traffic Exchange\Online-Guardian.exe
6.5s C:\AdwCleaner\quarantine\files\ffhywyhzabwssuvjmxbwjcwhazgzhqyu\
6.7s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\
6.7s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\wyy7kuna.default\
6.7s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\wyy7kuna.default\prefs.js
6.7s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\
6.7s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\wyy7kuna.default\profiles.ini
6.7s C:\AdwCleaner\quarantine\files\oktzdwzmdsymhjwzseamqesnutanquwf\Profiles\wyy7kuna.default\search-metadata.json
6.9s C:\AdwCleaner\quarantine\files\ceyyrbqbwuqwvfvgexlgyzektqgpvmcx.back
7.0s C:\AdwCleaner\quarantine\files\kbmtuxxvrlhxutdkaockmibfumvnhmmj.back
7.4s C:\AdwCleaner\quarantine\files\sncdtfcdtanqulwrznbwrcvytpeztggs.back
7.5s C:\AdwCleaner\quarantine\files\mdbeimfmkqbljcopbafbbbfiywbsuvfi.back
7.6s C:\AdwCleaner\quarantine\files\yeswlvywmemkbycygmndofbincjxjbme.back
7.8s C:\AdwCleaner\quarantine\files\owzrdyjvksknzzhdzxtdzlnzcdiiiyir.back
7.9s C:\AdwCleaner\quarantine\files\gzwvidnxqebdjsbuipkomfozaejiinsc.back
8.2s C:\AdwCleaner\quarantine\files\iqdsbrwxecmqbxzaxeqyjtpqwahpvnpr.back
8.6s C:\AdwCleaner\quarantine\files\qlaqaqyhrmbgmobvutntfwlejmakihrd.back
8.8s C:\AdwCleaner\quarantine\files\ojnivfnjvvbvibsbddggquowxpnuqfaq.back
8.9s C:\AdwCleaner\quarantine\files\kuzoszblwjapbodrkrazjblzfivuxqpa.back
9.0s C:\AdwCleaner\quarantine\files\alormegxhvypgmemtszjrjglcguvigel.back
9.1s C:\AdwCleaner\quarantine\files\fyqgymrawnmakhmsfwyabmdygywtdrta.back
9.3s C:\AdwCleaner\quarantine\files\cvnilvahvhtfeqlkbxdbztpksqsybayr.back
9.5s C:\AdwCleaner\quarantine\files\axuviutefnzjzwcrbakzzolrabcuohmb.back
9.7s C:\AdwCleaner\quarantine\files\jmjmnegzusfkhopstgxzvkqtjyqvjnvs.back
9.8s C:\AdwCleaner\quarantine\files\ggcropimosivavatxkivsmkdxletjxdb.back
10.0s C:\AdwCleaner\quarantine\files\eatdlmaoyunigmhgslbwogdpzfovcslk.back
10.4s C:\AdwCleaner\quarantine\files\ugnkiryliftmwjeooeomoyowdojgcjfs.back
11.0s C:\AdwCleaner\quarantine\files\txpmcaaaxezexxxsqwxbaxrswztspbmm.back
11.3s C:\AdwCleaner\quarantine\files\tnljhvwxjjsfwwqdpscdyhtruwsjvfhi.back
11.5s C:\AdwCleaner\quarantine\files\ktzlilsvsazulpgcnniwzmqbhnizbicm.back
11.7s C:\AdwCleaner\quarantine\files\rnxegndxqczyflwxureljfymgjpqgqsz.back
12.5s C:\AdwCleaner\quarantine\registry\reg_hskfuxwnsjxrsytxxeomxanthwyhrcnx.reg
12.7s C:\AdwCleaner\quarantine\registry\reg_ccfjszvfoietkaxlqrjqzklfkvbilozf.reg
13.4s C:\AdwCleaner\quarantine\registry\reg_ygvpkafhkyjeaxmbahzczjjrhwdmgrrn.reg
13.7s C:\AdwCleaner\quarantine\registry\reg_lrjkoqjaxtmrljkcsohmqpyqtpgqcdtz.reg
14.0s C:\AdwCleaner\quarantine\registry\reg_rddacduwtuwidcvbknkkiphcbbvigeyi.reg
14.4s C:\AdwCleaner\quarantine\registry\reg_djpxocawazkrdxoesetosgncagcjrhxs.reg
14.7s C:\AdwCleaner\quarantine\registry\reg_khirbwixuwokxelfsjvljqsigbxvyepv.reg
14.9s C:\AdwCleaner\quarantine\registry\reg_teodgquvsvvlewjnyebsujpakyztntzr.reg
15.1s C:\AdwCleaner\quarantine\registry\reg_bbrbhtpqufijkrkklkvkfpkjlqijvtgc.reg
15.2s C:\AdwCleaner\quarantine\registry\reg_pdunnludimmiluccwtntviiselpubxwq.reg
15.4s C:\AdwCleaner\quarantine\registry\reg_natorijmwbxszovezxlczjqbnqmefsvy.reg
15.5s C:\AdwCleaner\quarantine\registry\reg_awgvfzewjvftybyzmusgmewztpnnfcqp.reg
15.7s C:\AdwCleaner\quarantine\registry\reg_mohjwcwgwerzxnrkwpsvpipphswuzcjs.reg
15.8s C:\AdwCleaner\quarantine\registry\reg_vojydhhqbkuocihxhtuxicueyxfrxmts.reg
16.0s C:\AdwCleaner\quarantine\registry\reg_jkoadtfflawlknfsqrdkengbqviawwrq.reg
16.6s C:\AdwCleaner\quarantine\registry\reg_khamaprbgxvthvacluijibqcdahiehmv.reg
17.0s C:\AdwCleaner\quarantine\registry\reg_rbzzfjzpumgqkjdwygcchpilfoadooyi.reg
17.3s C:\AdwCleaner\quarantine\registry\reg_rqbynmyrhpduaqxgbdivozlfhvketcgk.reg
17.5s C:\AdwCleaner\quarantine\registry\reg_vorhwknlvgktfjytfbqxybdhbovaywjn.reg
17.6s C:\AdwCleaner\quarantine\registry\reg_bwvxbvarupvbqrdxppcofdaqvmvesjdy.reg
17.9s C:\AdwCleaner\quarantine\registry\reg_afckiwoamlocwmehyrjxmsksexyfptkq.reg
18.0s C:\AdwCleaner\quarantine\registry\reg_ysfdercjwwjthkzrvnavhoubpmrtwuwv.reg
18.4s C:\AdwCleaner\quarantine\registry\reg_thgyxjdtrbynkciqwofbscmkofenmuha.reg
18.5s C:\AdwCleaner\quarantine\registry\reg_ojfnxvljbkhehtlkzqxewlfbzcxehgyb.reg
18.7s C:\AdwCleaner\quarantine\registry\reg_gckjajsdtbayaobmbhyshyccnknsvptv.reg
18.9s C:\AdwCleaner\quarantine\registry\reg_rhdgykridacnkwssfercrevupqkyiibn.reg
19.0s C:\AdwCleaner\quarantine\registry\reg_gkeucpyuatjhaseiumwnsqzpgadqyozm.reg
19.1s C:\AdwCleaner\quarantine\registry\reg_fpojeddgnftvgvdddfcwsuusqspqafhb.reg
19.3s C:\AdwCleaner\quarantine\registry\reg_vyegytpnsxjnprqscifapfntjzugezjx.reg
19.4s C:\AdwCleaner\quarantine\registry\reg_heanplkumesjyoknvgbsswzqxoajuftb.reg
19.6s C:\AdwCleaner\quarantine\registry\reg_thngaongkihgggcbegxrbvygvzivxvzb.reg
19.7s C:\AdwCleaner\quarantine\registry\reg_hqajokdzagiaqznwraekundpeqxmzphe.reg
19.9s C:\AdwCleaner\quarantine\registry\reg_jprofiypdozdddybqwfwbzwcysrludfr.reg
20.3s C:\AdwCleaner\quarantine\registry\reg_exqgcdmzwkgmtvjsuzjiuvrmqcyknppp.reg
20.5s C:\AdwCleaner\quarantine\registry\reg_omziaywjnqcfyymhltxwqkwqzfhsowvn.reg
20.7s C:\AdwCleaner\quarantine\registry\reg_lxyymlnqkdjnvhydcezryogkbvvbavfw.reg
20.9s C:\AdwCleaner\quarantine\registry\reg_dlqswglljrnukcqhogdemnusjesbgyat.reg
21.0s C:\AdwCleaner\quarantine\registry\reg_aufuttutimjlpjavqhyxvqqerrqvtlsx.reg
21.1s C:\AdwCleaner\quarantine\registry\reg_cycdlhgsbsavninrgsjqkzgtdthbwapf.reg
21.2s C:\AdwCleaner\quarantine\registry\reg_pkmxtaydidocoemizibomfvccmhhaifq.reg
21.4s C:\AdwCleaner\quarantine\registry\reg_qiuofkmjgodcdcrttbgczjlxpbncpofo.reg
25.8s C:\AdwCleaner\quarantine\registry\reg_qsgsdmjearwwieauepksxvwmvvkmybts.reg
26.0s C:\AdwCleaner\quarantine\registry\reg_bvlsspiuylcrequxbwapnyvcqwqtdxwy.reg
26.3s C:\AdwCleaner\quarantine\registry\reg_mlckxsjurlujclmysvcvkdlzybrulgmb.reg
26.4s C:\AdwCleaner\quarantine\registry\reg_pirkoajenajxxoynvgfezrlcccqmtmfo.reg
26.6s C:\AdwCleaner\quarantine\registry\reg_alclxwvnnfuqivuminvxdicuwjegopfn.reg
26.8s C:\AdwCleaner\quarantine\registry\reg_xmfybppuwbajwahwnmlgzpzonmscsxaf.reg
27.0s C:\AdwCleaner\quarantine\registry\reg_bgcmtlicjubxlugsxttfbtqhuccczbcq.reg
27.2s C:\AdwCleaner\quarantine\registry\reg_sjpxzxqweupjpdggopeyeohspibkgxan.reg
27.3s C:\AdwCleaner\quarantine\registry\reg_fpledizicashgefgldqbkgviggfngqxy.reg
27.8s C:\AdwCleaner\quarantine\registry\reg_pxvfxyipfkszzyodsbbfinayqqrtocva.reg
28.1s C:\AdwCleaner\quarantine\registry\reg_tjyaqfrmcayunfgmtdgyetzjmjbxtkgy.reg
28.4s C:\AdwCleaner\quarantine\registry\reg_iiyvtcxfatqqzfgkyvllmslrurnrnqom.reg
28.5s C:\AdwCleaner\quarantine\registry\reg_ynbmxkopnhtqjzgznpomwmrufmosriea.reg
28.7s C:\AdwCleaner\quarantine\registry\reg_opquhjbhgnbnrzzqrfqjwzluwksgtghg.reg
28.9s C:\AdwCleaner\quarantine\registry\reg_fqjzfkakxadujbxahuachhajgjftjpms.reg
33.1s C:\AdwCleaner\quarantine\registry\reg_tcujcfmxnndsnftbdomfahhvpkrclfsg.reg
33.3s C:\AdwCleaner\quarantine\registry\reg_bmvrtjboexqwhowpacxfzglvgyslvjiq.reg
33.5s C:\AdwCleaner\quarantine\registry\reg_yrsdypdhaheyupjeifllbwhjjatgcjpo.reg
34.2s C:\AdwCleaner\quarantine\registry\reg_onqhxijahmpordjqbdfablpilhcxuppf.reg
34.6s C:\AdwCleaner\quarantine\registry\reg_hhyddookileqxnsvnalogjitfwxfkuqf.reg
34.9s C:\AdwCleaner\quarantine\registry\reg_kjvowlcksaqanamfyhzormuhlgheucou.reg
35.0s C:\AdwCleaner\quarantine\registry\reg_lvmrvtoxujbmqfryfhcmaaqzolgrtaiy.reg
35.3s C:\AdwCleaner\quarantine\registry\reg_qmopkfmghtanlaexuigfuptpqoyhocxw.reg
35.4s C:\AdwCleaner\quarantine\registry\reg_hakclexyqybvaltckjsglxvfozwjhnyt.reg
35.5s C:\AdwCleaner\quarantine\registry\reg_yulwxaxipehcjbwquvpujfdufeejckla.reg
36.1s C:\AdwCleaner\quarantine\registry\reg_dfntubvkriqzerggfelccusqetgcfras.reg
36.3s C:\AdwCleaner\quarantine\registry\reg_sabibiokqcebmebghomekhzlxuunofzq.reg
36.4s C:\AdwCleaner\quarantine\registry\reg_szylnxirtrcevhgciraqubmlhugrvakf.reg
36.5s C:\AdwCleaner\quarantine\registry\reg_zhjhojogymfrhcfzhpnzheofikonitje.reg
36.7s C:\AdwCleaner\quarantine\registry\reg_ywouofwdqsvrekpxrutyhysluxmctmal.reg
37.8s C:\AdwCleaner\quarantine\registry\reg_oaaqflbrtkxlixlcbmbzhwhezytanmvc.reg
37.9s C:\AdwCleaner\quarantine\registry\reg_hdhqqihbyhupqfdxgnbnoipbgrmkiqvj.reg
38.3s C:\AdwCleaner\quarantine\registry\reg_mxggwlhgtqtxomnwmqwfftrbnxgcwjwf.reg
38.4s C:\AdwCleaner\quarantine\registry\reg_bgzpmxsmvofgiwoglxnvnqngpojtfaxt.reg
38.5s C:\AdwCleaner\quarantine\registry\reg_vttoehudmrvynhjakjuxkrzcuehlksud.reg
38.7s C:\AdwCleaner\quarantine\registry\reg_fusvzanqvnxkijbyvkbphbcsqxufbzgv.reg
38.9s C:\AdwCleaner\quarantine\registry\reg_awapctldemkmmhtqprstthmdtiivsmbf.reg
39.1s C:\AdwCleaner\quarantine\registry\reg_nztdiakjqojgghsuadyxhhtbifndtyde.reg

C:\Program Files (x86)\Doghtcerqesh\Plhcr.dll -> PendingDelete
Size . . . . . . . : 178 176 bytes
Age . . . . . . . : 1.1 days (2017-01-07 21:55:20)
Entropy . . . . . : 6.6
SHA-256 . . . . . : 88CC121C6AC669163E1DB9FA89F7C235E0DAE573BD207D5B83B395FBA01E6DF4
Service . . . . . : Anertipyplutery
> Bitdefender . . . : Gen:Variant.Mikey.57463
Fuzzy . . . . . . : 107.0
Startup
HKLM\SYSTEM\CurrentControlSet\Services\Anertipyplutery\

C:\Server.exe -> Deleted
Size . . . . . . . : 24 064 bytes
Age . . . . . . . : 62.1 days (2016-11-07 23:08:27)
Entropy . . . . . : 5.5
SHA-256 . . . . . : B5B71E22ED9079AA4A3926BED69503263AFD053947218E7AA33C7FA8AE39EC95
> Bitdefender . . . : Generic.MSIL.Bladabindi.AE99FA60
> Kaspersky . . . . : Trojan.MSIL.Disfa.bop
> HitmanPro . . . . : Troj/DotNet-P
Fuzzy . . . . . . : 106.0

C:\Users\yassine\AppData\Local\Temp\server.exe -> Deleted
Size . . . . . . . : 24 064 bytes
Age . . . . . . . : 0.4 days (2017-01-08 15:11:02)
Entropy . . . . . : 5.5
SHA-256 . . . . . : B5B71E22ED9079AA4A3926BED69503263AFD053947218E7AA33C7FA8AE39EC95
Parent Name . . . : C:\Windows\Explorer.EXE
Running processes : 3116
> Bitdefender . . . : Generic.MSIL.Bladabindi.AE99FA60
> Kaspersky . . . . : Trojan.MSIL.Disfa.bop
> HitmanPro . . . . : Win32/Backdoor.Behavior
> HitmanPro . . . . : Troj/DotNet-P
Fuzzy . . . . . . : 142.0
Startup
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\68d194b5db1a31d61c2552bfaf739bb7
HKU\S-1-5-21-1607161227-1741431587-2329729702-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\68d194b5db1a31d61c2552bfaf739bb7
References
HKU\S-1-5-21-1607161227-1741431587-2329729702-1000\SOFTWARE\68d194b5db1a31d61c2552bfaf739bb7\
Forensic Cluster
0.0s C:\Users\yassine\AppData\Local\Temp\server.exe
0.5s C:\Users\yassine\AppData\Local\Temp\FXSAPIDebugLogFile.txt
2.4s C:\Users\yassine\AppData\LocalLow\uTorrent\uTorrent_4568_02AB5928_1509645669
2.6s C:\Users\yassine\AppData\LocalLow\uTorrent\uTorrent_4568_02AB4E78_1778923291

C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\68d194b5db1a31d61c2552bfaf739bb7.exe -> PendingDelete
Size . . . . . . . : 24 064 bytes
Age . . . . . . . : 62.1 days (2016-11-07 23:09:26)
Entropy . . . . . : 5.5
SHA-256 . . . . . : B5B71E22ED9079AA4A3926BED69503263AFD053947218E7AA33C7FA8AE39EC95
> Bitdefender . . . : Generic.MSIL.Bladabindi.AE99FA60
> Kaspersky . . . . : Trojan.MSIL.Disfa.bop
> HitmanPro . . . . : Troj/DotNet-P
Fuzzy . . . . . . : 104.0
Startup
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\68d194b5db1a31d61c2552bfaf739bb7.exe

C:\Users\yassine\AppData\Roaming\ZHP\Quarantine\Homebam.exe -> Deleted
Size . . . . . . . : 629 760 bytes
Age . . . . . . . : 8.2 days (2016-12-31 20:49:41)
Entropy . . . . . : 7.9
SHA-256 . . . . . : DC28B6E881E9555D4E09A4F38B15F0C613BA7C94DBE4946C419A274E84F0F4A8
> Bitdefender . . . : Gen:Variant.Zusy.215015
> HitmanPro . . . . : Mal/Generic-S
Fuzzy . . . . . . : 107.0
Forensic Cluster
-22.2s C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\TWMZO1FN.txt
-21.2s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_000042
-19.2s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_000043
-18.6s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_000044
-18.2s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_000045
-14.6s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Local Storage\https_support.skype.com_0.localstorage
-14.5s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Local Storage\https_support.skype.com_0.localstorage-journal
-11.2s C:\Users\yassine\AppData\Roaming\Vaiatom.bin
-7.6s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_000046
0.0s C:\Users\yassine\AppData\Roaming\ZHP\Quarantine\Homebam.exe
3.2s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_000047
8.2s C:\Users\yassine\AppData\Roaming\Homebam.tst
8.6s C:\Users\yassine\AppData\Roaming\agent.dat
9.4s C:\Users\yassine\AppData\Roaming\Config.xml
9.5s C:\Users\yassine\AppData\Roaming\Main.dat
9.5s C:\Users\yassine\AppData\Roaming\md.xml
9.5s C:\Users\yassine\AppData\Roaming\noah.dat
9.5s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_000048
10.7s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Retailer
41.0s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_000049
41.4s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_00004a
42.3s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_00004b
42.7s C:\Users\yassine\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Local Storage\http_www.navsmart.info_0.localstorage
42.7s C:\Users\yassine\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Local Storage\http_www.navsmart.info_0.localstorage-journal
43.0s C:\Users\yassine\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\1060B7ADDE0FF6DE85637BF89FC4CEBC_31ACE09A82FD1943A2004771C519F1E9
43.0s C:\Users\yassine\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\1060B7ADDE0FF6DE85637BF89FC4CEBC_31ACE09A82FD1943A2004771C519F1E9
46.3s C:\Users\yassine\AppData\Roaming\Singlestock.bin
47.3s C:\Windows\Temp\tmp7474.tmp
49.1s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_00004c
49.6s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_00004d
54.3s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_00004f
55.9s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_000050
57.3s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_000051
57.5s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_000052
57.7s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_000053
58.0s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_000054
59.4s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_000055
59.6s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_000056
59.8s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_000057
60.8s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_000059
61.1s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_00005a
61.1s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_00005b
61.9s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_00005c
62.4s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_00005d
63.1s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_00005e
64.0s C:\Windows\Temp\tmpB5A9.tmp
69.4s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_00005f
71.5s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_000060
71.5s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_000061
72.1s C:\Windows\Temp\Smartbar\
72.1s C:\Windows\Temp\Smartbar\Sanplus.ico
74.8s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_000062
75.1s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_000063
76.1s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_000064
76.9s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_000065
76.9s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_000066
77.3s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_000067
78.5s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_000068
78.7s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_000069
78.9s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_00006a
81.9s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_00006b
83.1s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_00006c
83.6s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_00006d
83.8s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_00006e
85.0s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_00006f
85.0s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_000070
85.4s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_000071
85.6s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_000072
86.2s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_000073
86.5s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\IndexedDB\
86.5s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\IndexedDB\http_inte.sogou.com_0.indexeddb.leveldb\
86.5s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\IndexedDB\http_inte.sogou.com_0.indexeddb.leveldb\LOG
86.5s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\IndexedDB\http_inte.sogou.com_0.indexeddb.leveldb\LOG.old
86.5s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\IndexedDB\http_inte.sogou.com_0.indexeddb.leveldb\LOCK
86.5s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\IndexedDB\http_inte.sogou.com_0.indexeddb.leveldb\MANIFEST-000001
86.5s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\IndexedDB\http_inte.sogou.com_0.indexeddb.leveldb\CURRENT
86.6s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_000074
86.6s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_000075
86.7s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\IndexedDB\http_inte.sogou.com_0.indexeddb.leveldb\000003.log
86.8s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_000076
86.8s C:\Users\yassine\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Cache\f_003311
87.6s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_000077
87.7s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_000078
87.9s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_000079
93.0s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_00007a
94.5s C:\Users\yassine\AppData\Roaming\Opetax.bin
94.8s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_00007b
101.4s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_00007c
101.6s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_00007d
102.8s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_00007e
103.4s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_00007f
105.9s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Cache\f_000080
109.9s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Local Storage\http_6pm6.cn_0.localstorage
109.9s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Local Storage\http_6pm6.cn_0.localstorage-journal
112.6s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Local Storage\http_inte.sogou.com_0.localstorage
112.6s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Local Storage\http_inte.sogou.com_0.localstorage-journal
115.9s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Local Storage\https_www.uc123.com_0.localstorage
115.9s C:\Users\yassine\AppData\Local\UCBrowser\User Data\Default\Local Storage\https_www.uc123.com_0.localstorage-journal

C:\Users\yassine\AppData\Roaming\ZHP\Quarantine\svchost\svchost.exe -> Deleted
Size . . . . . . . : 2 246 656 bytes
Age . . . . . . . : 8.2 days (2016-12-31 20:43:29)
Entropy . . . . . : 6.7
SHA-256 . . . . . : 2F9170D3FE3D63965073D0991674D6B3614A794577D079E2F4B0ABC9C3038795
> Bitdefender . . . : Application.Generic.1666449
> Kaspersky . . . . : not-a-virus:HEUR:AdWare.Win32.Sokuxuan.gen
Fuzzy . . . . . . : 119.0
Forensic Cluster
-3.0s C:\Windows\Installer\SourceHash{804C6085-8AFA-452E-8567-55FE1BF21FBF}
0.0s C:\Users\yassine\AppData\Roaming\ZHP\Quarantine\svchost\
0.0s C:\Users\yassine\AppData\Roaming\ZHP\Quarantine\svchost\svchost.exe
13.1s C:\Windows\Installer\{804C6085-8AFA-452E-8567-55FE1BF21FBF}\
13.1s C:\Windows\Installer\{804C6085-8AFA-452E-8567-55FE1BF21FBF}\online.exe
13.2s C:\Windows\Installer\301aae.msi


Suspicious files ____________________________________________________________

C:\Users\yassine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\mso8133.tmp
Size . . . . . . . : 98 304 bytes
Age . . . . . . . : 606.2 days (2015-05-13 19:48:47)
Entropy . . . . . : 6.1
SHA-256 . . . . . : 4FE03BA43F7366FBE9F0910014D552AC43129CB59FFD710688F1DBCC21749C6B
Product . . . . . : HUAWEI USB Smart Card Driver
Publisher . . . . : Huawei Tech. Co., Ltd.
Description . . . : HUAWEI USB Smart Card Driver
Version . . . . . : 1.0.0.2
Copyright . . . . : Copyright (C), 1988-2010, Huawei Tech. Co., Ltd.
LanguageID . . . . : 1033
Fuzzy . . . . . . : 44.0
The file is hidden from Windows API. This is typical for malware.
The file is completely hidden from view and most antivirus products. It may belong to a rootkit.
The file name extension of this program is not common.
The file is a device driver. Device drivers run as trusted (highly privileged) code.


Potential Unwanted Programs _________________________________________________

HKLM\SYSTEM\ControlSet001\Enum\Root\LEGACY_F06DEFF2-5B9C-490D-910F-35D3A9119622\ (Linkey) -> Deleted
HKLM\SYSTEM\ControlSet002\Enum\Root\LEGACY_F06DEFF2-5B9C-490D-910F-35D3A9119622\ (Linkey) -> Deleted
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_F06DEFF2-5B9C-490D-910F-35D3A9119622\ (Linkey) -> PendingDelete
HKU\S-1-5-21-1607161227-1741431587-2329729702-1000\Software\Microsoft\Internet Explorer\Approved Extensions\{54739D49-AC03-4C57-9264-C5195596B3A1} (Linkey) -> Deleted
HKU\S-1-5-21-1607161227-1741431587-2329729702-1000\Software\Microsoft\Internet Explorer\Approved Extensions\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115} (iLivid) -> Deleted

Cookies _____________________________________________________________________

C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\5U4JKJG5.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\020C5BRC.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\0DRGTNDL.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\0S9UINCK.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\1EV5XY5Q.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\2767XC16.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\2I4GKA3H.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\2QMNT73Y.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\2UIIXQ0Y.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\33R1QD3F.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\3IHT2KVV.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\43ZZH6O5.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\4O2E1Z1Y.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\5DNPMQMY.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\69FJAJVF.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\6FQDUJ8R.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\6LUZTQGZ.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\70ACGB1Z.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\84YE6AHG.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\859XWAJI.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\8ER854MN.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\8UK6WUNT.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\8WE901G4.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\8XHBXX6Y.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\8ZPMPZYE.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\9SORVCLY.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\BCH4EEG6.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\BDFH70TU.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\BEC34C1H.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\BLKTCG37.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\BQR6PRML.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\BVN8YZL4.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\CV1CL6J3.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\D7PR3445.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\DA461AD8.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\DFKMJ9YB.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\E8IOH22G.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\E9XIL81A.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\F1GHY1AI.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\F91RNX60.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\FJ7SIN6H.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\FKJS54YQ.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\G1ZQ8OVW.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\G27995CR.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\G53UVXY2.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\GEC8N43M.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\GKPSSO72.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\GLVBQTL1.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\GPQGXTB2.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\GSM9SI09.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\HZOFX9JT.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\I3YBU9C8.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\I9791ZI1.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\IAWG9YK0.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\IDXU4R6T.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\IQ2R52EF.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\J55MRIE4.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\JISO5R0A.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\JP5D92D4.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\JPUJJOS4.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\JZ17LAC5.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\KBA7S2CL.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\KQXFDWWV.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\KWTYFI56.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\L24PEHFD.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\LIR9FOPT.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\N2F6M67O.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\NFM9CQ31.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\NLGFBJOR.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\O5T0VCSS.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\ORFRF5SA.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\PV1FHKXA.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\QTSDMHUX.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\R16FB2TS.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\RUJ1LAGV.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\RZOILGX6.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\S3DJSFWD.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\S5KDAA6O.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\SVQLNJZC.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\T5PV4123.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\TNG68HU8.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\TSSUZ9QN.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\TZVVX1KD.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\U2EKIEMU.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\U946OT2X.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\V1BKEOB8.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\V41HOM7G.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\VID113CD.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\VXX91OBW.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\VXXAO6NQ.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\WGJEE23R.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\XRITIDH0.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\yassine@acxiom-online[2].txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\yassine@addthis[2].txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\yassine@adnxs[1].txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\yassine@ads.pubmatic[2].txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\yassine@atdmt[2].txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\yassine@atdmt[3].txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\yassine@bluekai[1].txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\yassine@crwdcntrl[1].txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\yassine@effectivemeasure[1].txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\yassine@mookie1[1].txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\yassine@pubmatic[2].txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\yassine@rlcdn[2].txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\yassine@scorecardresearch[2].txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\YC6UJACQ.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\YW2E67J6.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\ZEMRSIXQ.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\Low\ZOPIKG3S.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\yassine@CANTS7HS.txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\yassine@doubleclick[1].txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\yassine@effectivemeasure[10].txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\yassine@effectivemeasure[11].txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\yassine@effectivemeasure[1].txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\yassine@effectivemeasure[2].txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\yassine@effectivemeasure[4].txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\yassine@effectivemeasure[5].txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\yassine@effectivemeasure[6].txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\yassine@effectivemeasure[7].txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\yassine@effectivemeasure[8].txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\yassine@effectivemeasure[9].txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\yassine@scorecardresearch[1].txt
C:\Users\yassine\AppData\Roaming\Microsoft\Windows\Cookies\yassine@smartadserver[2].txt
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:1005361621.log.optimizely.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:130131868.log.optimizely.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:246059135.log.optimizely.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:2o7.net
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:33008797.log.optimizely.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:349480243.log.optimizely.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:7431252.log.optimizely.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:925711263.log.optimizely.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:abmr.net
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:acuityplatform.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:acxiom-online.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:ad.360yield.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:ad.auditude.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:ad.propellerads.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:adadvisor.net
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:addthis.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:adgrx.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:adnxs.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:ads.ad4game.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:ads.adk2.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:ads.cpallmedia.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:ads.creative-serving.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:ads.displayincloud.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:ads.p161.net
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:ads.pubmatic.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:ads.showmeflix.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:ads.showsplash.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:ads.themovienation.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:ads.yahoo.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:adsby.bidtheatre.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:adscale.de
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:adscience.nl
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:adserver.play.tv
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:adserver.playtv.fr
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:adsrvr.org
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:adsymptotic.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:adtech.de
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:adtechus.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:advertising.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:agkn.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:amgdgt.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:at.atwola.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:atdmt.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:atemda.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:audienceiq.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:bidswitch.net
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:bluekai.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:burstnet.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:casalemedia.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:cbs.112.2o7.net
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:cdn.turn.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:chango.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:collective-media.net
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:connexity.net
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:contextweb.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:crwdcntrl.net
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:d.adroll.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:demdex.net
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:dmtracker.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:dotomi.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:doubleclick.net
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:dpm.demdex.net
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:effectivemeasure.net
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:everesttech.net
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:eyereturn.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:ezakus.net
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:fr.sitestat.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:go.sonobi.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:googleadservices.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:gwallet.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:ib.mookie1.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:ih.adscale.de
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:imrworldwide.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:in.getclicky.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:kau.li
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:krxd.net
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:legolas-media.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:lijit.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:liverail.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:m6r.eu
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:mathtag.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:mediaplex.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:metrigo.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:mmstat.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:mookie1.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:msft.demdex.net
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:mswmwpapolloprod.122.2o7.net
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:mxptint.net
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:newjobs.d1.sc.omtrdc.net
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:nexac.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:nhl.112.2o7.net
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:openx.net
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:outbrain.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:owneriq.net
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:ox-d.answers.servedbyopenx.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:pixel.rubiconproject.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:po.st
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:pswec.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:pubmatic.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:questionmarket.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:relestar.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:revsci.net
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:rfihub.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:rlcdn.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:rs.gwallet.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:rtbidder.net
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:ru4.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:rubiconproject.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:scorecardresearch.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:server.cpmstar.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:servesharp.net
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:serving-sys.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:simpli.fi
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:sitescout.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:skimresources.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:smartadserver.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:statcounter.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:stats.webleads-tracker.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:taboola.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:tap.rubiconproject.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:tap2-cdn.rubiconproject.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:tapad.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:tidaltv.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:track.binaryoptionsassets.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:track.jbtrax.net
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:tradedoubler.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:trc.taboola.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:tribalfusion.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:triggit.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:tubemogul.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:turn.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:usatoday1.112.2o7.net
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:vindicosuite.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:visualdna.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:w55c.net
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:wtp101.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:www.googleadservices.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:xiti.com
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:yadro.ru
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:yieldlab.net
C:\Users\yassine\AppData\Roaming\Mozilla\Firefox\Profiles\wyy7kuna.default\cookies.sqlite:zedo.com


[/code]

Publicité


Signaler le contenu de ce document

Publicité