RogueKiller V12.1.2.0 (x64) [Apr 11 2016] (Free) by Adlice Software mail : http://www.adlice.com/contact/ Feedback : http://forum.adlice.com Website : http://www.adlice.com/software/roguekiller/ Blog : http://www.adlice.com Operating System : Windows 10 (10.0.10586) 64 bits version Started in : Normal mode User : WALID [Administrator] Started from : C:\Program Files\RogueKiller\RogueKiller64.exe Mode : Delete -- Date : 04/11/2016 15:51:07 ¤¤¤ Processes : 1 ¤¤¤ [VT.Unknown] SM?RTP.exe(8028) -- C:\Program Files (x86)\SMADAV\SM?RTP.exe[x] -> Found ¤¤¤ Registry : 6 ¤¤¤ [Suspicious.Path] (X64) HKEY_USERS\S-1-5-21-1463019865-2507068485-2249848927-1001\Software\Microsoft\Windows\CurrentVersion\Run | Chromium : "c:\users\walid\appdata\local\chromium\application\chrome.exe" --auto-launch-at-startup --profile-directory="Default" --restore-last-session [x][x][x][x] -> Not selected [Suspicious.Path] (X86) HKEY_USERS\S-1-5-21-1463019865-2507068485-2249848927-1001\Software\Microsoft\Windows\CurrentVersion\Run | Chromium : "c:\users\walid\appdata\local\chromium\application\chrome.exe" --auto-launch-at-startup --profile-directory="Default" --restore-last-session [x][x][x][x] -> Not selected [PUM.HomePage] (X64) HKEY_USERS\S-1-5-21-1463019865-2507068485-2249848927-1001\Software\Microsoft\Internet Explorer\Main | Default_Page_URL : http://services.eshield.com/general/newhometab.php?hometab=home&partner=11467&guid={B8A7741D-67B5-4E0E-AB39-3FEBD57C3C4C}&i= -> Not selected [PUM.HomePage] (X86) HKEY_USERS\S-1-5-21-1463019865-2507068485-2249848927-1001\Software\Microsoft\Internet Explorer\Main | Default_Page_URL : http://services.eshield.com/general/newhometab.php?hometab=home&partner=11467&guid={B8A7741D-67B5-4E0E-AB39-3FEBD57C3C4C}&i= -> Replaced (http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome) [PUP|VT.Skodna.SecurityTool.SU] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SppExtComObj.exe | Debugger : C:\WINDOWS\SECOH-QAD.exe [-] -> Deleted [PUP|VT.Skodna.SecurityTool.SU] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SppExtComObj.exe | Debugger : C:\WINDOWS\SECOH-QAD.exe [-] -> ERROR [2] ¤¤¤ Tasks : 0 ¤¤¤ ¤¤¤ Files : 4 ¤¤¤ [PUP][File] C:\Windows\SECOH-QAD.exe -> Deleted [PUP][File] C:\ProgramData\ab36fac3-93dd-4505-9add-ad6d38d4b914\plugins\12\Plugin.exe -> Deleted [PUP][File] C:\ProgramData\ab36fac3-93dd-4505-9add-ad6d38d4b914\plugins\8\Plugin.exe -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022} -> Deleted [PUP][File] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\FlashFXP5_Setup.dat -> Deleted [PUP][File] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\FlashFXP5_Setup.exe -> Deleted [PUP][File] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\FlashFXP5_Setup.lnk -> Deleted [PUP][File] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\FlashFXP5_Setup.par -> Deleted [PUP][File] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\FlashFXP5_Setup.res -> Deleted [PUP][File] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\instance.dat -> Deleted [PUP][File] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\mia.lib -> Deleted [PUP][File] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\27E1158D\2B1EE3D0\German.dlf -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\27E1158D\2B1EE3D0 -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\27E1158D -> Deleted [PUP][File] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\2C9CF222\2B1EE3D0\Turkish.dlf -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\2C9CF222\2B1EE3D0 -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\2C9CF222 -> Deleted [PUP][File] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\31843B92\2B1EE3D0\Swedish.dlf -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\31843B92\2B1EE3D0 -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\31843B92 -> Deleted [PUP][File] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\346C6DA3\2B1EE3D0\Armenian.dlf -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\346C6DA3\2B1EE3D0 -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\346C6DA3 -> Deleted [PUP][File] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\54205D3D\2B1EE3D0\Japanese.dlf -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\54205D3D\2B1EE3D0 -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\54205D3D -> Deleted [PUP][File] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\5CD50260\2B1EE3D0\Estonian.dlf -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\5CD50260\2B1EE3D0 -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\5CD50260 -> Deleted [PUP][File] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\623A7EE\2B1EE3D0\Chinese Simplified.dlf -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\623A7EE\2B1EE3D0 -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\623A7EE -> Deleted [PUP][File] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\6331F81F\2B1EE3D0\Korean.dlf -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\6331F81F\2B1EE3D0 -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\6331F81F -> Deleted [PUP][File] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\6AFFBC29\97487ACC\Sites.dat -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\6AFFBC29\97487ACC -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\6AFFBC29 -> Deleted [PUP][File] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\733554E3\2B1EE3D0\Slovak.dlf -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\733554E3\2B1EE3D0 -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\733554E3 -> Deleted [PUP][File] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\74A60B1C\2B1EE3D0\Finnish.dlf -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\74A60B1C\2B1EE3D0 -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\74A60B1C -> Deleted [PUP][File] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\793A924A\2B1EE3D0\French.dlf -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\793A924A\2B1EE3D0 -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\793A924A -> Deleted [PUP][File] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\7AC666F1\2B1EE3D0\Catalan.dlf -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\7AC666F1\2B1EE3D0 -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\7AC666F1 -> Deleted [PUP][File] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\7F8F76CF\2B1EE3D0\Norwegian.dlf -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\7F8F76CF\2B1EE3D0 -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\7F8F76CF -> Deleted [PUP][File] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\8871861F\2B1EE3D0\Spanish.dlf -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\8871861F\2B1EE3D0 -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\8871861F -> Deleted [PUP][File] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\90AC9E94\2B1EE3D0\Hungarian.dlf -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\90AC9E94\2B1EE3D0 -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\90AC9E94 -> Deleted [PUP][File] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\988DC17\97487ACC\ssleay32.dll -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\988DC17\97487ACC -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\988DC17 -> Deleted [PUP][File] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\9CC78894\2B1EE3D0\Polish.dlf -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\9CC78894\2B1EE3D0 -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\9CC78894 -> Deleted [PUP][File] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\A0AC877\97487ACC\IEFlash.dll -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\A0AC877\97487ACC -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\A0AC877 -> Deleted [PUP][File] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\A48530FF\2B1EE3D0\Danish.dlf -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\A48530FF\2B1EE3D0 -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\A48530FF -> Deleted [PUP][File] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\A9610504\2B1EE3D0\Chinese Traditional.dlf -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\A9610504\2B1EE3D0 -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\A9610504 -> Deleted [PUP][File] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\A98F6642\97487ACC\libeay32.dll -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\A98F6642\97487ACC -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\A98F6642 -> Deleted [PUP][File] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\AA5C2BD8\2B1EE3D0\Portuguese-European.dlf -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\AA5C2BD8\2B1EE3D0 -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\AA5C2BD8 -> Deleted [PUP][File] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\C8CE300E\97487ACC\FlashFXP.exe -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\C8CE300E\97487ACC -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\C8CE300E -> Deleted [PUP][File] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\CAB34620\2B1EE3D0\Portuguese-Brazil.dlf -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\CAB34620\2B1EE3D0 -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\CAB34620 -> Deleted [PUP][File] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\CE4C1E\2B1EE3D0\Italian.dlf -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\CE4C1E\2B1EE3D0 -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\CE4C1E -> Deleted [PUP][File] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\D23B88C2\2B1EE3D0\Bulgarian.dlf -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\D23B88C2\2B1EE3D0 -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\D23B88C2 -> Deleted [PUP][File] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\D24354E7\2B1EE3D0\Slovenian.dlf -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\D24354E7\2B1EE3D0 -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\D24354E7 -> Deleted [PUP][File] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\D249AE\97487ACC\flashfxp.chm -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\D249AE\97487ACC -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\D249AE -> Deleted [PUP][File] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\E0B435F4\2B1EE3D0\Dutch.dlf -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\E0B435F4\2B1EE3D0 -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\E0B435F4 -> Deleted [PUP][File] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\E2E3AD47\2B1EE3D0\Czech.dlf -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\E2E3AD47\2B1EE3D0 -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\E2E3AD47 -> Deleted [PUP][File] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\F1449B27\2B1EE3D0\Romanian.dlf -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\F1449B27\2B1EE3D0 -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\F1449B27 -> Deleted [PUP][File] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\F2C54A95\2B1EE3D0\Russian.dlf -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\F2C54A95\2B1EE3D0 -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\F2C54A95 -> Deleted [PUP][File] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\FFE19982\2B1EE3D0\Arabic.dlf -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\FFE19982\2B1EE3D0 -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\FFE19982 -> Deleted [PUP][File] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\mDown.dll\mDownExec.dll -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\mDown.dll -> Deleted [PUP][File] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\mIDEFunc.dll\mEXEFunc.dll -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\mIDEFunc.dll -> Deleted [PUP][File] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\ossAP_IDEPlug.dll\ossAP_EXEPlug.dll -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\ossAP_IDEPlug.dll -> Deleted [PUP][File] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE\{2A3D4E5F-5BF1-4668-AF7C-208A47599022} -> Deleted [PUP][Folder] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\OFFLINE -> Deleted [PUP][File] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\{EB98F616-CE6E-4631-8C94-F2673C7EBD5E} -> Deleted [PUP][File] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\{EB98F616-CE6E-4631-8C94-F2673C7EBD5E}.native.bitness.log -> Deleted [PUP][File] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\{EB98F616-CE6E-4631-8C94-F2673C7EBD5E}.native.data.log -> Deleted [PUP][File] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\{EB98F616-CE6E-4631-8C94-F2673C7EBD5E}.native.elements.log -> Deleted [PUP][File] C:\ProgramData\{2A3D4E5F-5BF1-4668-AF7C-208A47599022}\{EB98F616-CE6E-4631-8C94-F2673C7EBD5E}.native.weight.log -> Deleted ¤¤¤ Hosts File : 0 ¤¤¤ ¤¤¤ Antirootkit : 0 (Driver: Loaded) ¤¤¤ ¤¤¤ Web browsers : 1 ¤¤¤ [PUP][CHROME:Addon] Default : MozBar [eakacpaijcpapndcfffdgphdiccmpknp] -> Not selected ¤¤¤ MBR Check : ¤¤¤ +++++ PhysicalDrive0: ST31000424CS +++++ --- User --- [MBR] e9e69317b6a9fc87c6aba004910f90fa [BSP] 9af7dc7d229f4b9f0db66c3a50b7a5ba : Windows Vista/7/8 MBR Code Partition table: 0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 500 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader] 1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 1026048 | Size: 311234 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader] 2 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 638433280 | Size: 342133 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader] 3 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 1339121664 | Size: 300000 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader] User = LL1 ... OK User = LL2 ... OK