<?xml version="1.0" encoding="UTF-16" ?>
<mbam-log>
<header>
<date>2016/11/17 17:09:55 +0100</date>
<logfile>mbam-log-2016-11-17 (17-09-50).xml</logfile>
<isadmin>yes</isadmin>
</header>
<engine>
<version>2.2.1.1043</version>
<malware-database>v2016.11.17.11</malware-database>
<rootkit-database>v2016.10.31.01</rootkit-database>
<license>trial</license>
<file-protection>enabled</file-protection>
<web-protection>enabled</web-protection>
<self-protection>disabled</self-protection>
</engine>
<system>
<hostname>ASMA_CHOUAF</hostname>
<ip>192.168.1.9</ip>
<osversion>Windows 10</osversion>
<arch>x64</arch>
<username>ASMA</username>
<filesys>NTFS</filesys>
</system>
<summary>
<type>hyper</type>
<result>completed</result>
<objects>366383</objects>
<time>947</time>
<processes>0</processes>
<modules>0</modules>
<keys>0</keys>
<values>0</values>
<datas>0</datas>
<folders>0</folders>
<files>6</files>
<sectors>0</sectors>
</summary>
<options>
<memory>enabled</memory>
<startup>enabled</startup>
<filesystem>disabled</filesystem>
<archives>enabled</archives>
<rootkits>disabled</rootkits>
<deeprootkit>disabled</deeprootkit>
<heuristics>enabled</heuristics>
<pup>enabled</pup>
<pum>enabled</pum>
</options>
<items>
<file><path>C:\Users\ASMA\AppData\Roaming\Profiles\Rervaward.default\prefs.js</path><vendor>PUP.Optional.Trotux</vendor><action></action><baddata>user_pref(&quot;browser.search.searchengine.sp&quot;, &quot;http://www.trotux.com/search/?from=isr&amp;q={searchTerms}&amp;type=sp&amp;uid=HitachiXHTS547575A9E384_110511J2790054H48SXGX&amp;z=89b6b52585d8e01cd62eeabgdz6mbb3m4ebebb3zcb&quot;);</baddata><gooddata></gooddata><hash>d18e91308d0dc076cf242666719212ee</hash></file>
<file><path>C:\Users\ASMA\AppData\Roaming\Profiles\Rervaward.default\prefs.js</path><vendor>PUP.Optional.Trotux</vendor><action></action><baddata>rt_size.first_run&quot;, false);
user_pref(&quot;browser.cache.disk.smart_size.use_old_max&quot;, false);
user_pref(&quot;browser.cachown&quot;, true);
user_pref(&quot;browser.download.save_converter_index&quot;, 0);
user_pref(&quot;browser.f</baddata><gooddata></gooddata><hash>da85f2cf009a9c9aca29345825def808</hash></file>
<file><path>C:\Users\ASMA\AppData\Roaming\Profiles\Rervaward.default\prefs.js</path><vendor>PUP.Optional.Trotux</vendor><action></action><baddata>00);
user_pref(&quot;browser.cache.disk.filesystem_report</baddata><gooddata></gooddata><hash>4d129a27009a8fa7cd260686e81bc937</hash></file>
<file><path>C:\Users\ASMA\AppData\Roaming\Profiles\Rervaward.default\prefs.js</path><vendor>PUP.Optional.Trotux</vendor><action></action><baddata>6ZA==\&quot;:1,\&quot;F0gpbpaqByU2Fm3SrvnsQg==\&quot;:1,\&quot;GYyjQKBDqIkPcJjeT+gFew==\&quot;:1,\&quot;9h2QgOdQVssUgG9zSpNCoA==\&quot;:1,\&quot;mXnTX6tSpqUoxmDcEZZ9vw==\&quot;:1,\&quot;E3+RxPwb+EbEZXE3XLlLMA==\&quot;:1,\&quot;MguIVuVGV</baddata><gooddata></gooddata><hash>421dd4ed039764d202f1404c28db6d93</hash></file>
<file><path>C:\Windows\System32\drivers\etc\hosts</path><vendor>Hijack.Host</vendor><action></action><baddata>107.178.255.88 google-analytics.com</baddata><gooddata></gooddata><hash>ef70bb06b6e4e452bb9177c71ee5e917</hash></file>
<file><path>C:\Windows\System32\drivers\etc\hosts</path><vendor>Hijack.Host</vendor><action></action><baddata>tics.com





107.178.255.88 </baddata><gooddata></gooddata><hash>b5aab01198022115d57760de18eb9a66</hash></file>
</items>
</mbam-log>
