Problem Windows 10 asennuksen jälkeen tuli kasa haittoja koneelle

Logfile of Trend Micro HijackThis v2.0.5
Scan saved at 20:04:11, on 19.10.2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10240.16412)


Boot mode: Normal

Running processes:
C:\WINDOWS\system32\sihost.exe
C:\WINDOWS\system32\taskhostw.exe
C:\WINDOWS\Explorer.EXE
C:\Windows\System32\RuntimeBroker.exe
C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
C:\Windows\PLFSetI.exe
C:\Program Files\Acer Bio Protection\PdtWzd.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\gmsd_fi_005010117\gmsd_fi_005010117.exe
C:\Program Files\Acer Bio Protection\PwdBank.exe
C:\Program Files\gmsd_fi_005010119\gmsd_fi_005010119.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ApplicationFrameHost.exe
C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Users\Kone\Downloads\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://feed.sonic-search.com/?p=mKO...34qsu13f1gB5NTk36t49wK838-Q,,&q={searchTerms}
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.google.com/?trackid=sp-006
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=sp-006&q={searchTerms}
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.google.com/?trackid=sp-006
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=sp-006&q={searchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://feed.sonic-search.com/?p=mKO...34qsu13f1gB5NTk36t49wK838-Q,,&q={searchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: B5T Shopping Assistant - {260669B1-FC2C-41C0-BAA2-6EF3BB188660} - C:\Users\Kone\AppData\Local\B5T\Plugin\B5TShoppingAssistant.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_60\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_60\bin\jp2ssv.dll
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [PLFSetI] C:\Windows\PLFSetI.exe
O4 - HKLM\..\Run: [VitaKeyPdtWzd] "C:\Program Files\Acer Bio Protection\PdtWzd.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [gmsd_fi_005010117] "C:\Program Files\gmsd_fi_005010117\gmsd_fi_005010117.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [gmsd_fi_005010119] "C:\Program Files\gmsd_fi_005010119\gmsd_fi_005010119.exe"
O4 - HKLM\..\RunOnce: [upgmsd_fi_005010117.exe] C:\Users\Kone\AppData\Local\gmsd_fi_005010117\upgmsd_fi_005010117.exe -runonce
O4 - HKLM\..\RunOnce: [upgmsd_fi_005010119.exe] C:\Users\Kone\AppData\Local\gmsd_fi_005010119\upgmsd_fi_005010119.exe -runonce
O4 - HKCU\..\Run: [Polar FlowSync] C:\Program Files\Polar\Polar FlowSync\FlowSync.exe
O4 - HKCU\..\Run: [Spotify Web Helper] "C:\Users\Kone\AppData\Roaming\Spotify\SpotifyWebHelper.exe"
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Kone\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR
O8 - Extra context menu item: Send image to &Bluetooth Device... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O10 - Unknown file in Winsock LSP: c:\windows\system32\acengine.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\acengine.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\acengine.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\acengine.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\acengine.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\System32\tbauth.dll
O20 - AppInit_DLLs: C:\ProgramData\ExtTag\Kanfax.dll
O23 - Service: acengine - Abengine - C:\Program Files\Fast-Search\acengine.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: ApplicationHosting - Unknown owner - C:\ProgramData\\ApplicationHosting\\ApplicationHosting.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bonjour-palvelu (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Task Advertisement (dijojyvi) - Unknown owner - C:\Program.exe (file missing)
O23 - Service: ExtTag - Unknown owner - C:\ProgramData\\ExtTag\\ExtTag.exe
O23 - Service: Google Päivitä-palvelu (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Päivitä-palvelu (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: EgisTec Service (IGBASVC) - Egis Technology Inc. - C:\Program Files\Acer Bio Protection\BASVC.exe
O23 - Service: ihpmServer - Unknown owner - C:\Program Files\RayDld\ihpmServer.exe
O23 - Service: iPod-palvelu (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Footnote Expansion Card (lojuzidi) - Unknown owner - C:\Program.exe (file missing)
O23 - Service: Right Button Cartridge (myqityze) - Unknown owner - C:\Program.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvvsvc.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: SSFK - TODO: <???> - C:\Program Files\SFK\SSFK.exe
O23 - Service: Validity Fingerprint Service (vfsFPService) - Validity Sensors, Inc. - C:\Windows\system32\vfsFPService.exe
O23 - Service: WdsManPro Service (WdsManPro) - DTools LIMITED - C:\ProgramData\rWdsManPror\WdsManPro.exe

--
End of file - 8097 bytes

 

hjt sanoi tuossa tehdessään jostain host-tiedostoista...

 

HJT ei toimi kunnolla 64 -bittisssä Windowsissa eikä sitä ole kehitetty enää aikoihin.
Voisitko vähän selventää mitä haittoja?

Lataa Junkware Removal tool alla olevasta linkistä työpöydälle.
http://www.bleepingcomputer.com/download/junkware-removal-tool/

Sulje muut ohjelmat ja aukaise JRT
Paina mitä tahansa näppäintä ja tarkistus alkaa, kun taristus on valmis, loki aukeaa liitä se tänne.



Lataa AdwCleaner alla olevasta linkistä työpöydälle.
https://toolslib.net/downloads/viewdownload/1-adwcleaner/

Sulje mut ohjelmat aukaise AdwCleaner
Klikkaa Scan, odota kunes tarkistus on ohi, sen jälkeen klikkaa Cleaning
Kun poisto on ohi Adwcleaner pyytää koneen uudelleen käynnistystä tee se, kun kone on käynnistynyt uudelleen, lokin pitäisi aueta, jos ei niin löydät lokin, C:\AdwCleaner\AdwCleaner



Lataa Eset online scan työpöydälle.
http://www.eset.com/us/online-scanner-popup/
Auksie eset, hyväksy käyttöehdot ja windowsin huomautukset.
Pistä valinta ruutuun Enable detection of potentially unwanted aplications klikkaa start, eset lataa tietokannan ja aloittaa tarkistuksen. Jos mitään ei löydy niin lokia ei tarvitse pistää mutta jos löytyy niin se sijaitsee
C:\Program Files (x86)\ESET\ESET Online Scanner\log

 

Selaimen mukana aukeilee niin paljon kaikkia haittaohjelmia, joten en tiedä miten onnistun noissa. Yritän. Koneen käyttö lähes toivotonta.

 

Pistän tähän suorat latauslinkit jos mainokset pup:it ym. estää niiden latauksen.

JRT
AdwCleaner
Eset online scan

 

JRT ei toimi tässä kympissä. AdwCleaner meni läpi ja eset tekee viimesiä...tähän mennessä 211 "uhkaa"...

Laitan nuo logit noista kahesta kun tuo lopettelee.

 

Ne haittaohjelmat on kyllä ollu siellä koneella jo aiemmin tai kyseessä on joku ware-versio, tai sitten koneella on tehty jotain hämärää heti asennuksen jälkeen. Aito ja puhas kymppi ei tuo tollasia ongelmia mukanaan..

 

# AdwCleaner v5.014 - Logfile created 19/10/2015 at 20:58:35
# Updated 18/10/2015 by Xplode
# Database : 2015-10-18.5 [Server]
# Operating system : Windows 10 Pro (x86)
# Username : Kone - KONE1
# Running from : C:\Users\Kone\Desktop\adwcleaner_5.014.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****

[-] Service Deleted : ExtTag
[-] Service Deleted : SSFK
[-] Service Deleted : acengine
[-] Service Deleted : cohci1394
[-] Service Deleted : WdsManPro
[-] Service Deleted : acwfp
[-] Service Deleted : ihpmServer
[-] Service Deleted : Concom
[-] Service Deleted : ApplicationHosting
[-] Service Deleted : dijojyvi
[-] Service Deleted : lojuzidi
[-] Service Deleted : myqityze

***** [ Folders ] *****

[-] Folder Deleted : C:\IQIYI Video
[-] Folder Deleted : C:\ppsfile
[-] Folder Deleted : C:\Program Files\globalUpdate
[-] Folder Deleted : C:\Program Files\predm
[-] Folder Deleted : C:\Program Files\GoHD
[-] Folder Deleted : C:\Program Files\SFK
[-] Folder Deleted : C:\Program Files\Controller
[-] Folder Deleted : C:\Program Files\RayDld
[-] Folder Deleted : C:\Program Files\Concom
[-] Folder Deleted : C:\Program Files\Fast-Search
[-] Folder Deleted : C:\Program Files\80D2EACC-1443862894-DD11-A70E-00A0D1A6BB92
[-] Folder Deleted : C:\Program Files\80D2EACC-1445158801-DD11-A70E-00A0D1A6BB92
[-] Folder Deleted : C:\Program Files\CinemaPlus-3.2cV18.10
[-] Folder Deleted : C:\Program Files\CinemaPlus-3.2cV19.10
[!] Folder Not Deleted : C:\Program Files\GoHD
[-] Folder Deleted : C:\Program Files\MyBrowser
[-] Folder Deleted : C:\Program Files\gmsd_fi_005010117
[-] Folder Deleted : C:\Program Files\gmsd_fi_005010119
[-] Folder Deleted : C:\ProgramData\IQIYI Video
[-] Folder Deleted : C:\ProgramData\ExtTags
[-] Folder Deleted : C:\ProgramData\ExtTag
[-] Folder Deleted : C:\ProgramData\B5TTmp
[-] Folder Deleted : C:\ProgramData\Spanpluss
[-] Folder Deleted : C:\ProgramData\ApplicationHosting
[-] Folder Deleted : C:\ProgramData\1WdsManPro1
[-] Folder Deleted : C:\ProgramData\nWdsManPron
[-] Folder Deleted : C:\ProgramData\QWdsManProQ
[-] Folder Deleted : C:\ProgramData\rWdsManPror
[-] Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GAMESDESKTOP
[-] Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyBrowser
[-] Folder Deleted : C:\Users\Kone\AppData\Local\globalUpdate
[-] Folder Deleted : C:\Users\Kone\AppData\Local\Systweak
[-] Folder Deleted : C:\Users\Kone\AppData\Local\SysassistByHotWheel
[-] Folder Deleted : C:\Users\Kone\AppData\Local\B5T
[-] Folder Deleted : C:\Users\Kone\AppData\Local\MyBrowser
[-] Folder Deleted : C:\Users\Kone\AppData\Local\gmsd_fi_005010117
[-] Folder Deleted : C:\Users\Kone\AppData\Local\gmsd_fi_005010119
[-] Folder Deleted : C:\Users\Kone\AppData\Local\80D2EACC-1445169660-DD11-A70E-00A0D1A6BB92
[-] Folder Deleted : C:\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp
[!] Folder Not Deleted : C:\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp
[-] Folder Deleted : C:\Users\Kone\AppData\LocalLow\B5T
[-] Folder Deleted : C:\Users\Kone\AppData\Roaming\istartsurf
[-] Folder Deleted : C:\Users\Kone\AppData\Roaming\Systweak
[-] Folder Deleted : C:\Users\Kone\AppData\Roaming\mystartsearch
[-] Folder Deleted : C:\Users\Kone\AppData\Roaming\IQIYI Video
[-] Folder Deleted : C:\WINDOWS\system32\config\systemprofile\AppData\Local\acengine

***** [ Files ] *****

[-] File Deleted : C:\END
[-] File Deleted : C:\task.vbs
[-] File Deleted : C:\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_papbadoldddalgcjcicnikcfenodpghp_0.localstorage
[-] File Deleted : C:\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_papbadoldddalgcjcicnikcfenodpghp_0
[-] File Deleted : C:\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\papbadoldddalgcjcicnikcfenodpghp
[-] File Deleted : C:\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_fijhlnmmmgflacagjecncpmpnhjieggk_0.localstorage
[-] File Deleted : C:\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_fijhlnmmmgflacagjecncpmpnhjieggk_0
[-] File Deleted : C:\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijhlnmmmgflacagjecncpmpnhjieggk
[-] File Deleted : C:\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_papbadoldddalgcjcicnikcfenodpghp_0.localstorage
[-] File Deleted : C:\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_papbadoldddalgcjcicnikcfenodpghp_0
[-] File Deleted : C:\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\papbadoldddalgcjcicnikcfenodpghp
[-] File Deleted : C:\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_cdncache-a.akamaihd.net_0.localstorage
[-] File Deleted : C:\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_cdncache-a.akamaihd.net_0.localstorage-journal
[-] File Deleted : C:\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_hdapp1008-a.akamaihd.net_0.localstorage
[-] File Deleted : C:\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_hdapp1008-a.akamaihd.net_0.localstorage-journal
[-] File Deleted : C:\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.mystartsearch.com_0.localstorage
[-] File Deleted : C:\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.mystartsearch.com_0.localstorage-journal
[-] File Deleted : C:\Users\Kone\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\MyBrowser.lnk
[-] File Deleted : C:\Users\Public\Desktop\MyBrowser.lnk
[-] File Deleted : C:\WINDOWS\system32\roboot.exe
[-] File Deleted : C:\WINDOWS\system32\acengineOff.ini
[-] File Deleted : C:\WINDOWS\system32\acengine.dll
[-] File Deleted : C:\WINDOWS\system32\findit.xml
[-] File Deleted : C:\WINDOWS\system32\drivers\acwfp.sys

***** [ DLLs ] *****


***** [ Shortcuts ] *****

[-] Shortcut Disinfected : C:\Users\Public\Desktop\Google Chrome.lnk
[-] Shortcut Disinfected : C:\Users\Kone\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[-] Shortcut Disinfected : C:\Users\Kone\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk

***** [ Scheduled tasks ] *****

[-] Task Deleted : ASP
[-] Task Deleted : globalUpdateUpdateTaskMachineCore
[-] Task Deleted : globalUpdateUpdateTaskMachineUA
[-] Task Deleted : amiupdaterExd
[-] Task Deleted : amiupdaterExi
[-] Task Deleted : snp
[-] Task Deleted : snf
[-] Task Deleted : MyBrowser
[-] Task Deleted : 9bd249f9-36b3-49ad-ad19-72faba9e3778-1-6
[-] Task Deleted : 9bd249f9-36b3-49ad-ad19-72faba9e3778-1-7
[-] Task Deleted : 9bd249f9-36b3-49ad-ad19-72faba9e3778-10_user
[-] Task Deleted : 9bd249f9-36b3-49ad-ad19-72faba9e3778-3
[-] Task Deleted : 9bd249f9-36b3-49ad-ad19-72faba9e3778-5
[-] Task Deleted : 9bd249f9-36b3-49ad-ad19-72faba9e3778-5_user
[-] Task Deleted : 9bd249f9-36b3-49ad-ad19-72faba9e3778-6
[-] Task Deleted : 9bd249f9-36b3-49ad-ad19-72faba9e3778-7
[-] Task Deleted : f5dab302-d0ab-484f-a29a-94b5beb8dd2b-1-6
[-] Task Deleted : f5dab302-d0ab-484f-a29a-94b5beb8dd2b-1-7
[-] Task Deleted : f5dab302-d0ab-484f-a29a-94b5beb8dd2b-10_user
[-] Task Deleted : f5dab302-d0ab-484f-a29a-94b5beb8dd2b-3
[-] Task Deleted : f5dab302-d0ab-484f-a29a-94b5beb8dd2b-5
[-] Task Deleted : f5dab302-d0ab-484f-a29a-94b5beb8dd2b-5_user
[-] Task Deleted : f5dab302-d0ab-484f-a29a-94b5beb8dd2b-6
[-] Task Deleted : f5dab302-d0ab-484f-a29a-94b5beb8dd2b-7
[-] Task Deleted : 9bd249f9-36b3-49ad-ad19-72faba9e3778-1-6
[-] Task Deleted : 9bd249f9-36b3-49ad-ad19-72faba9e3778-1-7
[-] Task Deleted : 9bd249f9-36b3-49ad-ad19-72faba9e3778-10_user
[-] Task Deleted : 9bd249f9-36b3-49ad-ad19-72faba9e3778-3
[-] Task Deleted : 9bd249f9-36b3-49ad-ad19-72faba9e3778-5
[-] Task Deleted : 9bd249f9-36b3-49ad-ad19-72faba9e3778-5_user
[-] Task Deleted : 9bd249f9-36b3-49ad-ad19-72faba9e3778-6
[-] Task Deleted : 9bd249f9-36b3-49ad-ad19-72faba9e3778-7
[-] Task Deleted : f5dab302-d0ab-484f-a29a-94b5beb8dd2b-1-6
[-] Task Deleted : f5dab302-d0ab-484f-a29a-94b5beb8dd2b-1-7
[-] Task Deleted : f5dab302-d0ab-484f-a29a-94b5beb8dd2b-10_user
[-] Task Deleted : f5dab302-d0ab-484f-a29a-94b5beb8dd2b-3
[-] Task Deleted : f5dab302-d0ab-484f-a29a-94b5beb8dd2b-5
[-] Task Deleted : f5dab302-d0ab-484f-a29a-94b5beb8dd2b-5_user
[-] Task Deleted : f5dab302-d0ab-484f-a29a-94b5beb8dd2b-6
[-] Task Deleted : f5dab302-d0ab-484f-a29a-94b5beb8dd2b-7
[-] Task Deleted : globalUpdateUpdateTaskMachineCore
[-] Task Deleted : globalUpdateUpdateTaskMachineUA

***** [ Registry ] *****

[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickCtrl.10
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.Update3WebControl.4
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
[-] Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
[-] Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
[-] Key Deleted : HKLM\SOFTWARE\Classes\CRSBRWSHTML
[-] Value Deleted : HKLM\SOFTWARE\Classes\.htm\OpenWithProgids [CRSBRWSHTML]
[-] Value Deleted : HKLM\SOFTWARE\Classes\.html\OpenWithProgids [CRSBRWSHTML]
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\globalupdate.exe
[-] Value Deleted : HKLM\SOFTWARE\Classes\.xht\OpenWithProgIDs [CRSBRWSHTML]
[-] Value Deleted : HKLM\SOFTWARE\Classes\.webp\OpenWithProgIDs [CRSBRWSHTML]
[-] Value Deleted : HKLM\SOFTWARE\Classes\.shtml\OpenWithProgIDs [CRSBRWSHTML]
[-] Key Deleted : HKCU\Software\MozillaPlugins\@iqiyi.com/npWebPlayer
[-] Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@iqiyi.com/npWebPlayer
[-] Key Deleted : HKLM\SOFTWARE\CLASSES\acengineLib.ReadOnlyManager.1
[-] Key Deleted : HKLM\SOFTWARE\CLASSES\acengineLib.ReadOnlyManager
[-] Key Deleted : HKLM\SOFTWARE\CLASSES\acengineLib.LSPLogic.1
[-] Key Deleted : HKLM\SOFTWARE\CLASSES\acengineLib.LSPLogic
[-] Key Deleted : HKLM\SOFTWARE\CLASSES\acengineLib.DataTableHolder.1
[-] Key Deleted : HKLM\SOFTWARE\CLASSES\acengineLib.DataTableHolder
[-] Key Deleted : HKLM\SOFTWARE\CLASSES\acengineLib.DataTableFields.1
[-] Key Deleted : HKLM\SOFTWARE\CLASSES\acengineLib.DataTableFields
[-] Key Deleted : HKLM\SOFTWARE\CLASSES\acengineLib.DataTable.1
[-] Key Deleted : HKLM\SOFTWARE\CLASSES\acengineLib.DataTable
[-] Key Deleted : HKLM\SOFTWARE\CLASSES\acengineLib.DataController.1
[-] Key Deleted : HKLM\SOFTWARE\CLASSES\acengineLib.DataController
[-] Key Deleted : HKLM\SOFTWARE\CLASSES\acengineLib.DataContainer.1
[-] Key Deleted : HKLM\SOFTWARE\CLASSES\acengineLib.DataContainer
[-] Key Deleted : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\acengine
[-] Key Deleted : HKLM\SOFTWARE\CLASSES\acengineLib.WFPController
[-] Key Deleted : HKLM\SOFTWARE\CLASSES\acengineLib.WFPController.1
[-] Key Deleted : HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\IELNKSRCH
[-] Value Deleted : HKLM\SOFTWARE\RegisteredApplications [MyBrowser]
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\mybrowser.exe
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\MediaPlayer\ShimInclusionList\mybrowser.exe
[-] Key Deleted : HKLM\SOFTWARE\Clients\StartMenuInternet\MyBrowser
[-] Key Deleted : HKLM\SOFTWARE\CLASSES\GEEPLAYER.DIR
[-] Key Deleted : HKLM\SOFTWARE\CLASSES\APPLICATIONS\GEEPLAYER.EXE
[-] Key Deleted : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\acwfp
[-] Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WdsManPro
[-] Key Deleted : HKLM\SOFTWARE\CLASSES\APPID\acengine.EXE
[-] Key Deleted : HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\GeePlayer.exe
[-] Key Deleted : HKCU\Software\MozillaPlugins\B5MSoft.com/Bang5TaoPlugin
[-] Key Deleted : HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\Stpro.exe
[!] Value Not Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures [MyBrowser.job]
[!] Value Not Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures [MyBrowser.job.fp]
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [gmsd_fi_005010117]
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [gmsd_fi_005010119]
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce [upgmsd_fi_005010117.exe]
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce [upgmsd_fi_005010119.exe]
[-] Key Deleted : HKLM\SOFTWARE\55aee291-b5b2-445c-8911-6d20a76303d5
[-] Key Deleted : HKLM\SOFTWARE\ca8d8c52-2f15-4e43-a074-2b3eb54b2974
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
[-] Key Deleted : HKCU\Software\Classes\CLSID\{58D47FFF-63EF-572E-843F-E5DD6AA0005D}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5EC7C511-CD0F-42E6-830C-1BD9882F3458}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D96C1D26-5CDF-4506-9244-57233C3984DF}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6EDBF8C0-C94C-4A13-956F-E393BCA5BA4B}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5CD76C57-6893-478A-B776-47E7C82504BE}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{2A563926-CF4B-4363-A760-F71E46205B7E}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{260669B1-FC2C-41C0-BAA2-6EF3BB188660}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D96C1D26-5CDF-4506-9244-57233C3984DF}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A8F7D0A5-7074-40B8-9BDC-1174BDD0A132}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D14D64BC-A0E4-42E3-BB72-FB41EA43C198}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{DD1F043F-ABC8-4643-8B95-D2C5B22BB019}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E3F3E8F9-F747-4DD6-BA6B-82A6CE1E0860}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{ED0B64D4-BF27-4521-AD27-190F49BF5EA7}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{023E9EC8-B147-40EB-B0B3-DF90618FB371}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0522D9A4-4D57-437D-978D-E5B3B6C9005D}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{07F41522-AF7D-4F26-B394-094F059FDB8A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0C40F472-7407-4467-8914-1DEA7C326972}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{212E6D43-6062-492A-B8CC-144669FF11ED}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{224FE662-1E6D-4BC0-AEBB-9E2FB4057BE9}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3A807417-B46D-4D37-8C9A-19AC6DE204F9}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3CC60715-D6C5-429D-830E-43FA3F86C61D}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4517D94C-19BA-46FA-BE66-2A30CEAC4A85}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{555D7146-94A8-4C94-AE76-C39CDC7F7705}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{59D188FA-757A-424E-8C93-F58FFD896BD7}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8120D9D6-785C-4413-9C0C-DF2028C56FAD}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{823AE2EB-E62C-4847-B192-C99B91B92416}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9B4F7CFE-987D-410E-A8E4-20182E0B3C24}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9B9A45F4-18FC-484A-BACA-076D78273D8E}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A6D54287-7939-466A-8579-92546D946C8C}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A78EDAFB-926F-4D93-AB13-8232D7378EB1}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{E6F928E4-B672-4F3A-8CA2-53C4259235DE}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{029AF757-A988-4BDD-A744-A4C7BCEBB011}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{260669B1-FC2C-41C0-BAA2-6EF3BB188660}
[-] Key Deleted : HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{260669B1-FC2C-41C0-BAA2-6EF3BB188660}
[-] Key Deleted : HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{260669B1-FC2C-41C0-BAA2-6EF3BB188660}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5E6A8DA1-5731-465B-B036-B9E16EF26CAC}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5EC7C511-CD0F-42E6-830C-1BD9882F3458}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{58D47FFF-63EF-572E-843F-E5DD6AA0005D}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{260669B1-FC2C-41C0-BAA2-6EF3BB188660}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{260669B1-FC2C-41C0-BAA2-6EF3BB188660}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5EC7C511-CD0F-42E6-830C-1BD9882F3458}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{58D47FFF-63EF-572E-843F-E5DD6AA0005D}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{5E6A8DA1-5731-465B-B036-B9E16EF26CAC}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{5EC7C511-CD0F-42E6-830C-1BD9882F3458}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5EC7C511-CD0F-42E6-830C-1BD9882F3458}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1E6A8DA1-1731-465B-B036-B9E16EF26CAC}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2E6A8DA1-2731-465B-B036-B9E16EF26CAC}
[-] Key Deleted : HKU\.DEFAULT\Software\B5MSoft
[-] Key Deleted : HKU\.DEFAULT\Software\CinemaPlus-3.2cV18.10-nv
[-] Key Deleted : HKU\.DEFAULT\Software\CinemaPlus-3.2cV18.10-nv-ie
[-] Key Deleted : HKU\.DEFAULT\Software\GoHD-nv
[-] Key Deleted : HKU\.DEFAULT\Software\GoHD-nv-ie
[-] Key Deleted : HKU\.DEFAULT\Software\AppDataLow\Software\_CrossriderRegNamePlaceHolder_
[-] Key Deleted : HKCU\Software\GlobalUpdate
[-] Key Deleted : HKCU\Software\InstalledBrowserExtensions
[-] Key Deleted : HKCU\Software\systweak
[-] Key Deleted : HKCU\Software\Tutorials
[-] Key Deleted : HKCU\Software\TutoTag
[-] Key Deleted : HKCU\Software\GoHD
[-] Key Deleted : HKCU\Software\GAMESDESKTOP
[-] Key Deleted : HKCU\Software\CrossBrowser
[-] Key Deleted : HKCU\Software\Crossbrowse
[-] Key Deleted : HKCU\Software\YorkNewCin
[-] Key Deleted : HKCU\Software\HighDefAction
[-] Key Deleted : HKCU\Software\ArenaHD
[-] Key Deleted : HKCU\Software\DAILYPCCLEAN
[-] Key Deleted : HKCU\Software\OB
[-] Key Deleted : HKCU\Software\Reg\Clean
[-] Key Deleted : HKCU\Software\B5MSoft
[-] Key Deleted : HKCU\Software\mtSpanplus
[-] Key Deleted : HKCU\Software\CinemaPlus-3.2cV18.10
[-] Key Deleted : HKCU\Software\CinemaPlus-3.2cV18.10-nv
[-] Key Deleted : HKCU\Software\CinemaPlus-3.2cV18.10-nv-ie
[!] Key Not Deleted : HKCU\Software\GoHD
[-] Key Deleted : HKCU\Software\GoHD-nv
[-] Key Deleted : HKCU\Software\GoHD-nv-ie
[-] Key Deleted : HKCU\Software\MyBrowser
[-] Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
[-] Key Deleted : HKLM\SOFTWARE\AppDataLow\SOFTWARE\Crossrider
[-] Key Deleted : HKLM\SOFTWARE\AppDataLow\SOFTWARE\_CrossriderRegNamePlaceHolder_
[-] Key Deleted : HKLM\SOFTWARE\GlobalUpdate
[-] Key Deleted : HKLM\SOFTWARE\InstalledBrowserExtensions
[-] Key Deleted : HKLM\SOFTWARE\systweak
[-] Key Deleted : HKLM\SOFTWARE\Tutorials
[-] Key Deleted : HKLM\SOFTWARE\GoHD
[-] Key Deleted : HKLM\SOFTWARE\mystartsearchSoftware
[-] Key Deleted : HKLM\SOFTWARE\GAMESDESKTOP
[-] Key Deleted : HKLM\SOFTWARE\Crossbrowse
[-] Key Deleted : HKLM\SOFTWARE\YorkNewCin
[-] Key Deleted : HKLM\SOFTWARE\HighDefAction
[-] Key Deleted : HKLM\SOFTWARE\oursurfingSoftware
[-] Key Deleted : HKLM\SOFTWARE\ArenaHD
[-] Key Deleted : HKLM\SOFTWARE\downchecker
[-] Key Deleted : HKLM\SOFTWARE\WdsManPro
[-] Key Deleted : HKLM\SOFTWARE\RayDld
[-] Key Deleted : HKLM\SOFTWARE\ihpmserver
[-] Key Deleted : HKLM\SOFTWARE\Fast-Search
[-] Key Deleted : HKLM\SOFTWARE\Reg\Clean
[-] Key Deleted : HKLM\SOFTWARE\B5TService
[-] Key Deleted : HKLM\SOFTWARE\CinemaPlus-3.2cV18.10
[-] Key Deleted : HKLM\SOFTWARE\CinemaPlus-3.2cV18.10-nv
[-] Key Deleted : HKLM\SOFTWARE\CinemaPlus-3.2cV18.10-nv-ie
[-] Key Deleted : HKLM\SOFTWARE\CinemaPlus-3.2cV19.10
[!] Key Not Deleted : HKLM\SOFTWARE\GoHD
[-] Key Deleted : HKLM\SOFTWARE\GoHD-nv
[-] Key Deleted : HKLM\SOFTWARE\GoHD-nv-ie
[-] Key Deleted : HKLM\SOFTWARE\MyBrowser
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VOPackage
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GoHD
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7ADF667E-E14D-4D2C-827C-B0108F0D93BC}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SU
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CinemaPlus-3.2cV18.10
[!] Key Not Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GoHD
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyBrowser
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\gmsd_fi_005010117_is1
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\gmsd_fi_005010119_is1
[!] Key Not Deleted : HKU\.DEFAULT\Software\AppDataLow\Software\_CrossriderRegNamePlaceHolder_
[!] Key Not Deleted : HKU\S-1-5-21-581187715-3397112992-1805871332-1000\Software\AppDataLow\Software\Crossrider
[!] Key Not Deleted : HKU\S-1-5-18\Software\AppDataLow\Software\_CrossriderRegNamePlaceHolder_
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\GLOBALUPDATE.EXE
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{015DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{ielnksrch}
[!] Key Not Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\ielnksrch
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
[!] Key Not Deleted : HKU\S-1-5-21-581187715-3397112992-1805871332-1000\Software\Microsoft\Internet Explorer\SearchScopes\{015DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
[!] Key Not Deleted : HKU\S-1-5-21-581187715-3397112992-1805871332-1000\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
[!] Key Not Deleted : HKU\S-1-5-21-581187715-3397112992-1805871332-1000\Software\Microsoft\Internet Explorer\SearchScopes\{ielnksrch}
[!] Key Not Deleted : HKU\S-1-5-21-581187715-3397112992-1805871332-1003\Software\Microsoft\Internet Explorer\SearchScopes\{ielnksrch}
[!] Data Not Restored : HKU\S-1-5-21-581187715-3397112992-1805871332-1003\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[-] Data Restored : HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command []
[-] Data Restored : HKLM\SOFTWARE\Clients\StartMenuInternet\Google Chrome\shell\open\command []
[-] Data Restored : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs]

***** [ Web browsers ] *****

[-] [C:\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : oursurfing
[-] [C:\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : trovi.search
[-] [C:\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : istartsurf
[-] [C:\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : mystartsearch.com
[-] [C:\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : mystartsearch_
[-] [C:\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : mystartsearch
[-] [C:\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Deleted : hxxp://www.mystartsearch.com/?type=hp&ts=1445269216&z=1e1acdbdb82387ef4f7db9cg7z2z6w5o6q3b8tdmbq&from=cmi&uid=WDCXWD3200BEVT-22ZCT0_WD-WXE308NV4121V4121
[-] [C:\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Default_Search_Provider] Deleted : hxxp://www.mystartsearch.com/webfavicon.ico
[-] [C:\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : papbadoldddalgcjcicnikcfenodpghp
[-] [C:\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : papbadoldddalgcjcicnikcfenodpghp

*************************

:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [28464 bytes] ##########

 

Juu varmasti ollu jotain häikkää jo entuudestaan ennen tuota päivitystä

 

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=f3ae79e6628c7e4abf865cfa3df1d159
# end=init
# utc_time=2015-10-19 06:02:24
# local_time=2015-10-19 09:02:24 (+0200, FLE Daylight Time)
# country="Finland"
# osver=6.2.9200 NT
Update Init
Update Download
Update Finalize
Updated modules version: 26309
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=f3ae79e6628c7e4abf865cfa3df1d159
# end=updated
# utc_time=2015-10-19 06:04:11
# local_time=2015-10-19 09:04:11 (+0200, FLE Daylight Time)
# country="Finland"
# osver=6.2.9200 NT
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=f3ae79e6628c7e4abf865cfa3df1d159
# engine=26309
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-10-19 07:14:27
# local_time=2015-10-19 10:14:27 (+0200, FLE Daylight Time)
# country="Finland"
# lang=1033
# osver=6.2.9200 NT
# compatibility_mode_1='avast! Antivirus'
# compatibility_mode=783 16777213 71 88 14738 2786507 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 23152 8765398 0 0
# scanned=265293
# found=211
# cleaned=211
# scan_time=4216
sh=0BFBEEEF80FC46A0D9647FDF797024CD16E8CD46 ft=0 fh=0000000000000000 vn="VBS/TrojanDownloader.Agent.NSW trojan (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\task.vbs.vir"
sh=5B3239A8EA5D4F0825639582D8EB59F56C34DF6A ft=1 fh=27a9f9ff7024bc99 vn="a variant of Win32/Toolbar.CrossRider.CG potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files\80D2EACC-1445158801-DD11-A70E-00A0D1A6BB92\5cd18bbb-7ec2-43f9-b6c8-a09b00829340.dll.vir"
sh=055A70A4E33B8B6C0C967D9F73BF0EE1EF1AF256 ft=1 fh=c71c0011a4bf602e vn="a variant of Win32/Adware.ConvertAd.LT application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files\80D2EACC-1445158801-DD11-A70E-00A0D1A6BB92\jnshAAA0.tmp.vir"
sh=D8A9AD57701BD6E7FA9B4AEF83F626AA071DF581 ft=1 fh=c71c001179affe5d vn="a variant of Win32/Adware.ConvertAd.AAS application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files\80D2EACC-1445158801-DD11-A70E-00A0D1A6BB92\knsuCC7D.tmp.vir"
sh=5B3239A8EA5D4F0825639582D8EB59F56C34DF6A ft=1 fh=27a9f9ff7024bc99 vn="a variant of Win32/Toolbar.CrossRider.CG potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files\CinemaPlus-3.2cV18.10\55aee291-b5b2-445c-8911-6d20a76303d5.dll.vir"
sh=EAB83C5FBC4AF1BC1AF5D889976AB3A4A333FB8E ft=1 fh=82ac58ff7afdb2fe vn="a variant of Win32/Toolbar.CrossRider.CD potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files\CinemaPlus-3.2cV18.10\f5dab302-d0ab-484f-a29a-94b5beb8dd2b-1-6.exe.vir"
sh=3EEA67BDA0469A013D6D67840B8F8B3E5FD8B982 ft=1 fh=c9956e09f46c2331 vn="a variant of Win32/Toolbar.CrossRider.CD potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files\CinemaPlus-3.2cV18.10\f5dab302-d0ab-484f-a29a-94b5beb8dd2b-1-7.exe.vir"
sh=21196EC9381507EBEEB61433F973D61D1BEF6461 ft=1 fh=1cd4245149b35451 vn="a variant of Win32/Toolbar.CrossRider.CD potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files\CinemaPlus-3.2cV18.10\f5dab302-d0ab-484f-a29a-94b5beb8dd2b-10.exe.vir"
sh=9C58648E800E655C457DBC72E9BF03BE0A557F2E ft=1 fh=f2e928c805af0e40 vn="a variant of Win32/Toolbar.CrossRider.CH potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files\CinemaPlus-3.2cV18.10\f5dab302-d0ab-484f-a29a-94b5beb8dd2b-3.exe.vir"
sh=42216CE8FD45211A5AA5AF40CBC28F1AC3EB9088 ft=1 fh=8e68154feaad858c vn="a variant of Win32/Toolbar.CrossRider.CC potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files\CinemaPlus-3.2cV18.10\f5dab302-d0ab-484f-a29a-94b5beb8dd2b-5.exe.vir"
sh=4D0BA127FEE60F7E563F40CDF5030DF639396F60 ft=1 fh=be5682a37fdfdc0a vn="a variant of Win32/Toolbar.CrossRider.CD potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files\CinemaPlus-3.2cV18.10\f5dab302-d0ab-484f-a29a-94b5beb8dd2b-6.exe.vir"
sh=3EEA67BDA0469A013D6D67840B8F8B3E5FD8B982 ft=1 fh=c9956e09f46c2331 vn="a variant of Win32/Toolbar.CrossRider.CD potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files\CinemaPlus-3.2cV18.10\f5dab302-d0ab-484f-a29a-94b5beb8dd2b-7.exe.vir"
sh=177BDEFFB931EB15B383D95D1E04CD2ED00CCBC4 ft=1 fh=fe3ac21c871c54f9 vn="a variant of Win32/Toolbar.CrossRider.CU potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files\CinemaPlus-3.2cV18.10\Uninstall.exe.vir"
sh=21196EC9381507EBEEB61433F973D61D1BEF6461 ft=1 fh=1cd4245149b35451 vn="a variant of Win32/Toolbar.CrossRider.CD potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files\CinemaPlus-3.2cV18.10\UninstallBrw.exe.vir"
sh=039E0B15FD8B030F7EC7935C6858C8E4707E9C62 ft=1 fh=82af7cc80d561d77 vn="a variant of Win32/Toolbar.CrossRider.CM potentially unwanted application (deleted - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files\CinemaPlus-3.2cV18.10\utils.exe.vir"
sh=20D218CF41B7FC4C15F25D6E4AAB440E95B18837 ft=1 fh=50bd7f9829532c18 vn="MSIL/Toolbar.Linkury.AF potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files\Concom\packages\325b40ed-0a84-4509-a626-5478054b078b\xtc.exe.vir"
sh=20D218CF41B7FC4C15F25D6E4AAB440E95B18837 ft=1 fh=50bd7f9829532c18 vn="MSIL/Toolbar.Linkury.AF potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files\Controller\bin\3ac86c32-a6c9-4345-af29-055914d32aca\xtc.exe.vir"
sh=A905FDC177534E61109C2AB0892D74DC5800D419 ft=1 fh=806415df9131bb3a vn="a variant of Win32/Packed.Komodia.D suspicious application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files\Fast-Search\ACDLL.dll.vir"
sh=18B63F17D98B178EACC70178AC35B9AB58DD4FB1 ft=1 fh=fdc83e90f48415a0 vn="a variant of Win32/Packed.Komodia.D suspicious application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files\Fast-Search\acengine.dll.vir"
sh=94CF121DDA51AFB988B160872808C2BEFD72948E ft=1 fh=5c195050ed51fa4b vn="a variant of Win32/Packed.Komodia.A suspicious application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files\Fast-Search\acengine.exe.vir"
sh=055B654F17F19BECCCE9A6DEA6ECB0A0A28A7171 ft=1 fh=93505638dd076da7 vn="a variant of Win32/Packed.Komodia.D suspicious application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files\Fast-Search\acenginecert.dll.vir"
sh=4EB87BF9645920A0C4BBD75981EC33E7FD06552A ft=1 fh=08763c3dacfd4342 vn="a variant of Win32/Packed.Komodia.D suspicious application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files\Fast-Search\lengine.exe.vir"
sh=CDB4ED617A77C9B8BBEDCE377F038BFF36178E71 ft=1 fh=c71c0011964e2642 vn="a variant of Win32/AdWare.EoRezo.AU application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files\gmsd_fi_005010117\gamesdesktop_widget.exe.vir"
sh=C05F7D10CC07BB03B0A0D4F7C7C46FC75DC2C6E6 ft=1 fh=061cea3eb311261d vn="a variant of Win32/AdWare.EoRezo.AU application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files\gmsd_fi_005010117\gmsd_fi_005010117.exe.vir"
sh=BCE176C53A7F89B35FAC00682DF81BA4744408EE ft=1 fh=c71c00112f128350 vn="a variant of Win32/AdWare.EoRezo.AU application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files\gmsd_fi_005010119\gamesdesktop_widget.exe.vir"
sh=7A29FEB801E179A1476DE7C76243ADFAB6CED85F ft=1 fh=28b4840330397ce1 vn="a variant of Win32/AdWare.EoRezo.AU application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files\gmsd_fi_005010119\gmsd_fi_005010119.exe.vir"
sh=2F73CE9CF6CB07736200EDFB8BF0CFB400AE2284 ft=1 fh=e87d453cd98323c9 vn="a variant of Win32/Toolbar.CrossRider.CD potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files\GoHD\9bd249f9-36b3-49ad-ad19-72faba9e3778-1-6.exe.vir"
sh=75F74887A822690E8A4D9F859D98DD6AA6145DB6 ft=1 fh=60a7ed8a858663cd vn="a variant of Win32/Toolbar.CrossRider.CD potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files\GoHD\9bd249f9-36b3-49ad-ad19-72faba9e3778-1-7.exe.vir"
sh=AA7AB3C75BE1E0588E37367EC7FD1548D0C8F1CA ft=1 fh=267e346e71def54c vn="a variant of Win32/Toolbar.CrossRider.CO potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files\GoHD\9bd249f9-36b3-49ad-ad19-72faba9e3778-10.exe.vir"
sh=60EDB1EB1A7BF5F812EEC23DFF22AEF4E5A0FABF ft=1 fh=18f1017f323f0bfc vn="a variant of Win32/Toolbar.CrossRider.BV potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files\GoHD\9bd249f9-36b3-49ad-ad19-72faba9e3778-3.exe.vir"
sh=70813DC105A77E0BD942B2CD0DEDF5705F8F6CE5 ft=1 fh=b3015e2b52b73b05 vn="a variant of Win32/Toolbar.CrossRider.CC potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files\GoHD\9bd249f9-36b3-49ad-ad19-72faba9e3778-5.exe.vir"
sh=D6B9279E8F3911D04487AB7EEC20CF771A5784CA ft=1 fh=307ef63f66a280cb vn="a variant of Win32/Toolbar.CrossRider.BZ potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files\GoHD\9bd249f9-36b3-49ad-ad19-72faba9e3778-6.exe.vir"
sh=75F74887A822690E8A4D9F859D98DD6AA6145DB6 ft=1 fh=60a7ed8a858663cd vn="a variant of Win32/Toolbar.CrossRider.CD potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files\GoHD\9bd249f9-36b3-49ad-ad19-72faba9e3778-7.exe.vir"
sh=D55BE241C9C61A0D8333A4893F400277C028518A ft=1 fh=3373e7a7173faa59 vn="a variant of Win32/Toolbar.CrossRider.CU potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files\GoHD\Uninstall.exe.vir"
sh=AA7AB3C75BE1E0588E37367EC7FD1548D0C8F1CA ft=1 fh=267e346e71def54c vn="a variant of Win32/Toolbar.CrossRider.CO potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files\GoHD\UninstallBrw.exe.vir"
sh=FEA0FCA2790DA448C1829D075479F6B8AB638C42 ft=1 fh=b63ba155c9a93989 vn="a variant of Win32/Toolbar.CrossRider.CM potentially unwanted application (deleted - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files\GoHD\utils.exe.vir"
sh=65D89325FB47236CCF77D582B768FA7F710727A4 ft=1 fh=d6f0b6c223b598c5 vn="a variant of Win32/AlteredSoftware.I potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files\MyBrowser\MyBrowser\Application\mybrowser.exe.vir"
sh=8BE484E5393AAB6B4FD4A08A2D99F0EB67545F01 ft=1 fh=b1ea5b3c4ea2dc22 vn="a variant of Win32/Toolbar.CrossRider.CZ potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files\MyBrowser\MyBrowser\Application\utility.exe.vir"
sh=FBE28E7FE577995BB3866F3B85BFC012EB7BF967 ft=1 fh=705a393d61581e8c vn="a variant of Win32/AlteredSoftware.K potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files\MyBrowser\MyBrowser\Application\39.5.2171.95\Installer\chrmstp.exe.vir"
sh=FBE28E7FE577995BB3866F3B85BFC012EB7BF967 ft=1 fh=705a393d61581e8c vn="a variant of Win32/AlteredSoftware.K potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files\MyBrowser\MyBrowser\Application\39.5.2171.95\Installer\setup.exe.vir"
sh=DC1F8254626662D09B11EAC38C33888E63097B52 ft=1 fh=98cea90aafd7b184 vn="a variant of Win32/ELEX.FO potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files\SFK\SSFK.exe.vir"
sh=BA4BE90379B2E832F865770AC544DC11986AAAF7 ft=1 fh=6fd2a0cd82f90cc9 vn="a variant of Win32/ELEX.FF potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\ProgramData\1WdsManPro1\WdsManPro.exe.vir"
sh=BA4BE90379B2E832F865770AC544DC11986AAAF7 ft=1 fh=6fd2a0cd82f90cc9 vn="a variant of Win32/ELEX.FF potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\ProgramData\nWdsManPron\WdsManPro.exe.vir"
sh=BA4BE90379B2E832F865770AC544DC11986AAAF7 ft=1 fh=6fd2a0cd82f90cc9 vn="a variant of Win32/ELEX.FF potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\ProgramData\QWdsManProQ\WdsManPro.exe.vir"
sh=BA4BE90379B2E832F865770AC544DC11986AAAF7 ft=1 fh=6fd2a0cd82f90cc9 vn="a variant of Win32/ELEX.FF potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\ProgramData\rWdsManPror\WdsManPro.exe.vir"
sh=E929CEB17A76DFAB7EE5EBDFE83D0229E9B695DC ft=1 fh=c71c00111d5a0b96 vn="a variant of Win32/Adware.ConvertAd.PZ application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\80D2EACC-1445169660-DD11-A70E-00A0D1A6BB92\onsw65B8.tmp.vir"
sh=F875546DB95EB0B937880C3C23DDAB82E1CF5A1A ft=1 fh=a69ed07de8936c52 vn="a variant of Win32/Adware.ConvertAd.ABG application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\80D2EACC-1445169660-DD11-A70E-00A0D1A6BB92\rnsw65B7.exe.vir"
sh=A490F85399FFEAF0AA63C37B93FC78953EEA0EB5 ft=1 fh=4b14d0af9e8996a1 vn="a variant of Win32/Bang5mai.C potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\B5T\B5TMain.exe.vir"
sh=F9E16E3553B25EF1C748D47AE877BE728B2AD25E ft=1 fh=b35c4bbc75ae7308 vn="a variant of Win32/Bang5mai.C potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\B5T\6.0.5.2\B5TAssist.exe.vir"
sh=FB1891FAB9C5B8B5D68659E5C1D84A02F8EAB11E ft=1 fh=9841c4dee16e1acd vn="a variant of Win32/Bang5mai.C potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\B5T\6.0.5.2\B5TChecker.exe.vir"
sh=B938471F7F4814C16CD3645F30362E5AEB178BB4 ft=1 fh=437a4e66a03852d1 vn="a variant of Win32/Bang5mai.C potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\B5T\6.0.5.2\B5TClient.exe.vir"
sh=5F7941EE098645A7EC60042D4EBE3A0E80C11A10 ft=1 fh=484aecaa2463715a vn="a variant of Win32/Bang5mai.C potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\B5T\6.0.5.2\B5TPopup.exe.vir"
sh=08227C70A531D487175D8C4AB2F73213A7C4F2BA ft=1 fh=03ea252775ba6df4 vn="a variant of Win32/Bang5mai.B potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\B5T\6.0.5.2\B5TService.exe.vir"
sh=91624B5BC72623FD383DE83B7CAE6F0FF53571EB ft=1 fh=0682d3ea0f63d335 vn="a variant of Win32/Bang5mai.C potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\B5T\6.0.5.2\B5TShoppingAssistant.dll.vir"
sh=7205119AEA2BA05761DF207C75B2598EB535DD7B ft=1 fh=ffecb8f64e28b3c0 vn="a variant of Win32/Bang5mai.C potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\B5T\6.0.5.2\B5TUninstall.exe.vir"
sh=C36D9A434A0B5D46AFEBF5D2C83007791063CC46 ft=1 fh=5f588fcea2d57515 vn="a variant of Win32/Bang5mai.C potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\B5T\6.0.5.2\B5TUpdate.exe.vir"
sh=A66A45E58094D694764B028A9FBCEB264F0B8B55 ft=1 fh=cbb3e6faef648c6f vn="a variant of Win32/Bang5mai.C potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\B5T\6.0.5.2\npB5TPlugin.dll.vir"
sh=6292AEA19629220B6623C21DBCEE9B40211B3719 ft=1 fh=306cdead96be1c8d vn="a variant of Win32/Bang5mai.C potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\B5T\6.0.5.2\NaMsgHost\B5TAdaptorChrm.exe.vir"
sh=73ECCDE1F6DC9CF9D16E8B13D4404320D8A0CDFB ft=1 fh=6632e94b6fb71e6e vn="a variant of Win32/Bang5mai.C potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\B5T\6.0.5.2\NaMsgHost\B5TAdaptorFx.dll.vir"
sh=91624B5BC72623FD383DE83B7CAE6F0FF53571EB ft=1 fh=0682d3ea0f63d335 vn="a variant of Win32/Bang5mai.C potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\B5T\Plugin\B5TShoppingAssistant.dll.vir"
sh=A66A45E58094D694764B028A9FBCEB264F0B8B55 ft=1 fh=cbb3e6faef648c6f vn="a variant of Win32/Bang5mai.C potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\B5T\Plugin\npB5TPlugin.dll.vir"
sh=6292AEA19629220B6623C21DBCEE9B40211B3719 ft=1 fh=306cdead96be1c8d vn="a variant of Win32/Bang5mai.C potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\B5T\Plugin\NaMsgHost\B5TAdaptorChrm.exe.vir"
sh=73ECCDE1F6DC9CF9D16E8B13D4404320D8A0CDFB ft=1 fh=6632e94b6fb71e6e vn="a variant of Win32/Bang5mai.C potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\B5T\Plugin\NaMsgHost\B5TAdaptorFx.dll.vir"
sh=08227C70A531D487175D8C4AB2F73213A7C4F2BA ft=1 fh=03ea252775ba6df4 vn="a variant of Win32/Bang5mai.B potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\B5T\Share\B5TService.exe.vir"
sh=FFD52E78E4EDB06497B33F2BFCBE9186DC7C0D51 ft=1 fh=d4ab7545cc246c27 vn="a variant of Win32/Adware.EoRezo.AJ application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\gmsd_fi_005010117\upgmsd_fi_005010117.exe.vir"
sh=801A6B6FE34F9214FDCEFDA5444F3E7504C06908 ft=1 fh=0fa5fe2369c9213f vn="multiple threats (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\gmsd_fi_005010117\Download\majmp_gentleeu.exe.vir"
sh=FFEC8646F89E6D05F0261ACA235812021EDE537D ft=1 fh=a634635d14141a2f vn="a variant of Win32/Adware.EoRezo.AJ application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\gmsd_fi_005010119\upgmsd_fi_005010119.exe.vir"
sh=FA14CDEDC3BCBCB1C8B8487D47BE1E628A930503 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.115_0\extensionData\plugins\102.js.vir"
sh=5870A2008A4D2AA3E9D79945311CD6F59D37CD45 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.115_0\extensionData\plugins\119.js.vir"
sh=F4868E75E21D37FCBC9A5871B6B120EB3E4600DF ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.O potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.115_0\extensionData\plugins\14.js.vir"
sh=C10E64DC01896B43B0C89F53376D4164453BC74E ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.115_0\extensionData\plugins\178.js.vir"
sh=9CB942D538CEA821683BC9D832014E8EC5FDE2EC ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.115_0\extensionData\plugins\179.js.vir"
sh=80C90D030EA66EA5346FBF5214670595E3375CAD ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.115_0\extensionData\plugins\180.js.vir"
sh=0987FB3F0C956A9578B1C3D050189BB99A017FC2 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.115_0\extensionData\plugins\184.js.vir"
sh=32FE8D811A0CD3B7424FD03880F6FE6C32781264 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.G potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.115_0\extensionData\plugins\19.js.vir"
sh=73BB348077DE54C373977A1CCE42FD9735E85D29 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.115_0\extensionData\plugins\195.js.vir"
sh=4BCC541E7A14BF89B1633A1BC794E6848B831E80 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.115_0\extensionData\plugins\200.js.vir"
sh=81093FDBF2F59E6D00BA4DACA51E6D37F185678F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.115_0\extensionData\plugins\220.js.vir"
sh=4A456E8397DFF5CBB4FF25D8B9710C41A42AFCC3 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.115_0\extensionData\plugins\223.js.vir"
sh=877349BAD187BE3A07174EA0A6F16A375474C639 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.115_0\extensionData\plugins\231.js.vir"
sh=776290247C80F20D24E4BA8F99F13F2D5578ECC8 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.115_0\extensionData\plugins\232.js.vir"
sh=F3C19FB08E08EEDA6008DFA8175DEDEA51DE1BFA ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.115_0\extensionData\plugins\234.js.vir"
sh=69F3441DAAA26144ABB42DB33386C549E9F2231D ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.115_0\extensionData\plugins\242.js.vir"
sh=2DE5AADF0BB2BF572B147C4E8F62CAAF44C60A75 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.115_0\extensionData\plugins\252.js.vir"
sh=3CA5653E6B858F15992AC689F06C8456A94B0CC7 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.115_0\extensionData\plugins\253.js.vir"
sh=C7CDE1253534F30E65119C426D5345ED57905D37 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.115_0\extensionData\plugins\262.js.vir"
sh=F07F02D132DE7A3F89F9CEE7284820DB1DD63331 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.115_0\extensionData\plugins\263.js.vir"
sh=C7574CAC8611C5FBBE4AE2127C4CA0E2FB58DB69 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.115_0\extensionData\plugins\273.js.vir"
sh=5443843013D026E8A114EDEC837671DAC84F4AEA ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.115_0\extensionData\plugins\281.js.vir"
sh=397EC598B400D3A2111C9C0EEA7D85464774BBD7 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.115_0\extensionData\plugins\288.js.vir"
sh=7A0B43CC3BD069AE9B149EB8F4BEEB6F097837DB ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.115_0\extensionData\plugins\300.js.vir"
sh=35E8D6275113D6714473490A116CF414F6AA6368 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.115_0\extensionData\plugins\311.js.vir"
sh=F830C45582EA30AA81037DD511D6657BAC6D3470 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.115_0\extensionData\plugins\335.js.vir"
sh=DAFE26CC2D17C59CC7CA0B0563A50C6215781167 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.115_0\extensionData\plugins\339.js.vir"
sh=C00E9E37985FB8EEA7FAC9D9DBB4EACC33326771 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.115_0\extensionData\plugins\356.js.vir"
sh=40C8C98FF8B403FE50791CF29F02FBA28068FD89 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.L potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.115_0\extensionData\plugins\376.js.vir"
sh=81A6DC2B3E4EB2A7B58E592A3E86C0C858936E87 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.115_0\extensionData\plugins\380.js.vir"
sh=46785AF9F3FDFD7BA7E68C918CA9B2BFD5FE81CE ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.115_0\extensionData\plugins\385.js.vir"
sh=8C03AF269B9B3748482016ABD7F8FDF2BE562177 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.115_0\extensionData\plugins\390.js.vir"
sh=B11A64AE212C15C25C435BCE4C67235DDECCE883 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.115_0\extensionData\plugins\391.js.vir"
sh=E2C88897AD00452927EC05929A1505DACAEEFB1E ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.115_0\extensionData\plugins\419.js.vir"
sh=08A2BB08725C99F79A889C6C7CB9C7DD6306E0B6 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.115_0\extensionData\plugins\424.js.vir"
sh=E09BDEE66594192511CE81A0841BB11D294BFCBD ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.M potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.115_0\extensionData\plugins\47.js.vir"
sh=BDCFA8379825B1BC17A13BDF73B7384DE46E7C3B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.P potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.115_0\extensionData\plugins\64.js.vir"
sh=F1D6322DE9C5334712BD47A95ABDD774D361AE9C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.115_0\extensionData\plugins\91.js.vir"
sh=778B8C980A33D3679264BE3920E6F15D75731E06 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.N potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.115_0\extensionData\plugins\97.js.vir"
sh=908310927982C1DFD45B8CBBF669A940C0CE7CC6 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.E potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.115_0\js\883a2bf4037bf1f2a205658f1a7b0e05.js.vir"
sh=AF15C2CD390979ACF65E9210C6DB0E85252F6052 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.G potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.115_0\js\api\77e231ed5be0e1b33dd6178ba840528d.js.vir"
sh=832ADA6E9B2673CA1DE314A566FF76316F0A2997 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.G potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.115_0\js\api\99361fd2954ca376c1c6cecd76e524b2.js.vir"
sh=F4FE303A5886572113DF4DA3579956CEBB907F56 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.G potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.115_0\js\api\c53e2402b7b6de45ff0bf3dd65ac7337.js.vir"
sh=D88F73897D0415B880A52D98AACBCBA8372956B2 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.G potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.115_0\js\lib\12f035fec11bb37d3ecd18f20ea8e068.js.vir"

 

sh=EDB82EF0A2AC160256F1A5C49F0778E3A42AC559 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.G potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.115_0\js\lib\1ad4ca4b48dce81abab22c73d5123f81.js.vir"
sh=B3ABD3CAA6ADACF7A87576C3F949A2C023F51456 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.G potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.115_0\js\lib\550d31a875e4ed2192be0189f939103f.js.vir"
sh=902E327ADBC89F0A47999D10E7F6F6554CFCC0F4 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.G potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.115_0\js\lib\c54fcf41552a93fc208297ae8cfe1ec5.js.vir"
sh=6B8D57805A81A0C2A68E87C410FF89D15BB71CC9 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.H potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.115_0\js\lib\c74baa8f5127c093f9191f91c5abac5c.js.vir"
sh=F7B2040B9EB935D0FFB1571CC0184FED6B7D7583 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.G potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.115_0\js\lib\c9b0b1a54bcd663d984d1caf8ea16836.js.vir"
sh=3E6E49061DC4C0339624D1BD4C5972D2D6988DA4 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.G potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Kone\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.115_0\js\lib\f996301403375ff5c745e024af546ca5.js.vir"
sh=18B63F17D98B178EACC70178AC35B9AB58DD4FB1 ft=1 fh=fdc83e90f48415a0 vn="a variant of Win32/Packed.Komodia.D suspicious application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\WINDOWS\system32\acengine.dll.vir"
sh=8DF480AB2DA51687E73FA0BF9B9AC19308E02A5F ft=1 fh=7ebfdbf32f9698fa vn="a variant of Win32/Systweak.A potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\WINDOWS\system32\roboot.exe.vir"
sh=5B3239A8EA5D4F0825639582D8EB59F56C34DF6A ft=1 fh=27a9f9ff7024bc99 vn="a variant of Win32/Toolbar.CrossRider.CG potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Program Files\b39e57ef-506b-4f49-97ba-638caaa8f7c4\9c58a4ad-db2a-4c7d-a63b-1bad6973a0b0.dll"
sh=47506ECE2FFD104EDB6266941D19D0168FEAB229 ft=1 fh=d0c78e8695afa231 vn="a variant of Win32/ELEX.FG potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Users\Kone\AppData\Local\Microsoft\Windows\INetCache\IE\HWUVIJ8D\cmi_mystartsearch[1].exe"
sh=8D4EA924B44E793A9C68859533C1902A92DEF4EC ft=1 fh=38a2fe1446f58e00 vn="a variant of Win32/OutBrowse.BY potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Users\Kone\AppData\Local\Microsoft\Windows\INetCache\IE\HWUVIJ8D\Reimage[1].exe"
sh=9FAA8CD7DDC0DBC7887ACC144B7541DDA1CCC040 ft=1 fh=a185f3e8392d3660 vn="a variant of Win32/OutBrowse.BY potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Users\Kone\AppData\Local\Microsoft\Windows\INetCache\IE\HWUVIJ8D\Reimage[2].exe"
sh=191F55962076B2CD9768D21D8BFAD864ED2A3721 ft=1 fh=8482c7b1d3b2ee31 vn="a variant of Win32/OutBrowse.BY potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Users\Kone\AppData\Local\Microsoft\Windows\INetCache\IE\HWUVIJ8D\Reimage[3].exe"
sh=8BE484E5393AAB6B4FD4A08A2D99F0EB67545F01 ft=1 fh=b1ea5b3c4ea2dc22 vn="a variant of Win32/Toolbar.CrossRider.CZ potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Users\Kone\AppData\Local\Microsoft\Windows\INetCache\IE\HWUVIJ8D\setup[1].exe"
sh=BBB14DD17E9CBDE4358A2A74CA15BF7348B33BAA ft=1 fh=b8768b1f7962d40b vn="a variant of Win32/Packed.ScrambleWrapper.O potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Users\Kone\AppData\Local\Microsoft\Windows\INetCache\IE\HWUVIJ8D\setup[2].exe"
sh=E5A8FA6169C7195369F39DC49676AAC100D24807 ft=1 fh=6a4bfd5fd08dd2fa vn="a variant of Win32/Adware.Imali.E application (cleaned by deleting - quarantined)" ac=C fn="C:\Users\Kone\AppData\Local\Microsoft\Windows\INetCache\IE\IWQEELXF\setup_362[1].exe"
sh=9807BF8BA33A36EF7BCC21199B40EF8BC09E2DE1 ft=1 fh=65a40237e8191f94 vn="a variant of Win32/OutBrowse.BY potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Users\Kone\AppData\Local\Microsoft\Windows\INetCache\IE\NKW6TJL5\Reimage[1].exe"
sh=DA5A2EF373B47564DE1FAED9C44186FA24CF22CB ft=1 fh=970252ba29e234ab vn="a variant of Win32/OutBrowse.BY potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Users\Kone\AppData\Local\Microsoft\Windows\INetCache\IE\NKW6TJL5\Reimage[2].exe"
sh=AA7AB3C75BE1E0588E37367EC7FD1548D0C8F1CA ft=1 fh=267e346e71def54c vn="a variant of Win32/Toolbar.CrossRider.CO potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Users\Kone\AppData\Local\Temp\4429.exe"
sh=AA7AB3C75BE1E0588E37367EC7FD1548D0C8F1CA ft=1 fh=267e346e71def54c vn="a variant of Win32/Toolbar.CrossRider.CO potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Users\Kone\AppData\Local\Temp\4521.exe"
sh=AA7AB3C75BE1E0588E37367EC7FD1548D0C8F1CA ft=1 fh=267e346e71def54c vn="a variant of Win32/Toolbar.CrossRider.CO potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Users\Kone\AppData\Local\Temp\4690.exe"
sh=AA7AB3C75BE1E0588E37367EC7FD1548D0C8F1CA ft=1 fh=267e346e71def54c vn="a variant of Win32/Toolbar.CrossRider.CO potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Users\Kone\AppData\Local\Temp\4844.exe"
sh=AA7AB3C75BE1E0588E37367EC7FD1548D0C8F1CA ft=1 fh=267e346e71def54c vn="a variant of Win32/Toolbar.CrossRider.CO potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Users\Kone\AppData\Local\Temp\5308.exe"
sh=AA7AB3C75BE1E0588E37367EC7FD1548D0C8F1CA ft=1 fh=267e346e71def54c vn="a variant of Win32/Toolbar.CrossRider.CO potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Users\Kone\AppData\Local\Temp\5357.exe"
sh=8BE484E5393AAB6B4FD4A08A2D99F0EB67545F01 ft=1 fh=b1ea5b3c4ea2dc22 vn="a variant of Win32/Toolbar.CrossRider.CZ potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Users\Kone\AppData\Local\Temp\9187.exe"
sh=BBB14DD17E9CBDE4358A2A74CA15BF7348B33BAA ft=1 fh=b8768b1f7962d40b vn="a variant of Win32/Packed.ScrambleWrapper.O potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Users\Kone\AppData\Local\Temp\9765.exe"
sh=5F7941EE098645A7EC60042D4EBE3A0E80C11A10 ft=1 fh=484aecaa2463715a vn="a variant of Win32/Bang5mai.C potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Users\Kone\AppData\Local\Temp\B5TBubble.exe"
sh=6292DF113E6C12D761507446B104A93ED1D34440 ft=1 fh=a93c6210fd73621d vn="a variant of MSIL/Adware.Imali.C application (cleaned by deleting - quarantined)" ac=C fn="C:\Users\Kone\AppData\Local\Temp\fufE1A6.exe"
sh=47506ECE2FFD104EDB6266941D19D0168FEAB229 ft=1 fh=d0c78e8695afa231 vn="a variant of Win32/ELEX.FG potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Users\Kone\AppData\Local\Temp\nsb78B1.tmp"
sh=47506ECE2FFD104EDB6266941D19D0168FEAB229 ft=1 fh=d0c78e8695afa231 vn="a variant of Win32/ELEX.FG potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Users\Kone\AppData\Local\Temp\nsf425F.tmp"
sh=722CF32ADF64CE694A0E8DA0F433A1BCF9A6A5EE ft=1 fh=ac95aac3cf96b947 vn="a variant of Win32/Adware.EoRezo.AY application (cleaned by deleting - quarantined)" ac=C fn="C:\Users\Kone\AppData\Local\Temp\is-6PG76.tmp\569.exe"
sh=2E77E2C025CC38BC1D9B0B205B5C048A67743172 ft=1 fh=d0b65883c20c54db vn="multiple threats (cleaned by deleting - quarantined)" ac=C fn="C:\Users\Kone\AppData\Local\Temp\is-T8V0M.tmp\gentlemjmp_ieu.exe"
sh=C2CDF8F5CF8F8E7082898326B1937499DEFA5C63 ft=1 fh=4dce2de995a2d99e vn="Win32/Toolbar.CrossRider.CB potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Users\Kone\AppData\Roaming\AMactYm9UQcw.exe"
sh=C2CDF8F5CF8F8E7082898326B1937499DEFA5C63 ft=1 fh=4dce2de995a2d99e vn="Win32/Toolbar.CrossRider.CB potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Users\Kone\AppData\Roaming\hJ2J4TsO5aeWojexrLfKuOpIx.exe"
sh=C2CDF8F5CF8F8E7082898326B1937499DEFA5C63 ft=1 fh=4dce2de995a2d99e vn="Win32/Toolbar.CrossRider.CB potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Users\Kone\AppData\Roaming\rmOXL6BwNXMPYGeu5g4Zi.exe"
sh=5F7941EE098645A7EC60042D4EBE3A0E80C11A10 ft=1 fh=484aecaa2463715a vn="a variant of Win32/Bang5mai.C potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Users\SYSTEM\AppData\Local\Temp\B5TBubble.exe"
sh=5F7941EE098645A7EC60042D4EBE3A0E80C11A10 ft=1 fh=484aecaa2463715a vn="a variant of Win32/Bang5mai.C potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Users\SYSTEM\AppData\Local\Temp\B5TMini.exe"
sh=18B63F17D98B178EACC70178AC35B9AB58DD4FB1 ft=1 fh=fdc83e90f48415a0 vn="a variant of Win32/Packed.Komodia.D suspicious application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows\System32\acengine.dll.rlwrgkr"
sh=370D77E4744A3B62BF0DF6143688DD18715277EF ft=1 fh=40954e87a5657297 vn="a variant of Win32/Adware.ConvertAd.ABF application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows\Temp\3205.tmp.exe"
sh=4BB1EB267D7C91F04D14D7245792D2F4E8C3207A ft=1 fh=e6e063462984cc64 vn="multiple threats (cleaned by deleting - quarantined)" ac=C fn="C:\Windows\Temp\5943.tmp.exe"
sh=72071F24FEF4B0861BA8C1C2E6C2039A9BD05F01 ft=1 fh=95df4a9ca01baac8 vn="a variant of Win32/Adware.ConvertAd.ABF application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows\Temp\62C9.tmp.exe"
sh=78EDAA2D326F21AC2D2EBB51B8D55689B8B0978F ft=1 fh=83ee5402b1ff4e33 vn="a variant of MSIL/Amonetize.AB potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows\Temp\_avast_\unp88329386.tmp"
sh=055A70A4E33B8B6C0C967D9F73BF0EE1EF1AF256 ft=1 fh=c71c0011a4bf602e vn="a variant of Win32/Adware.ConvertAd.LT application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8RD2F4NT\JOSrv[1].exe"
sh=7E31B18767BD00E85631B87880001F6459D9AB2F ft=1 fh=4f92ce7b3306ec54 vn="a variant of Win32/Somoto.K potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GL0AA33X\BiTool[1].dll"
sh=F875546DB95EB0B937880C3C23DDAB82E1CF5A1A ft=1 fh=a69ed07de8936c52 vn="a variant of Win32/Adware.ConvertAd.ABG application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GL0AA33X\runasu[2].exe"
sh=551DA6E60D14967E46A5B35026AFB1E0572CCE2C ft=1 fh=196d7561c00dba3f vn="a variant of Win32/ClientConnect.A potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GL0AA33X\Setup[1].exe"
sh=E929CEB17A76DFAB7EE5EBDFE83D0229E9B695DC ft=1 fh=c71c00111d5a0b96 vn="a variant of Win32/Adware.ConvertAd.PZ application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GL0AA33X\Update_Notifier[1].exe"
sh=FF8C7F677C86AB32C9E54323C58DB71B3B2D249A ft=1 fh=ff985f4fd0a69859 vn="a variant of Win32/ELEX.FK potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\S1CNNCK1\2sq_oursurfing[1].exe"
sh=BECCD54683B51CABB81C4F086498C56CDA1D8C62 ft=1 fh=24554c6e1b5e7ab8 vn="a variant of Win32/ELEX.EY potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\S1CNNCK1\face_istartsurf[1].exe"
sh=759484CBFC6E8E38188DA7011EF459A80CAE288F ft=1 fh=308223e91acfbeee vn="a variant of Win32/OutBrowse.BY potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\S1CNNCK1\Reimage[1].exe"
sh=765C5D4324D62B00EEB35CAFCE4A5F017542EBDA ft=1 fh=f42dc3895fab2815 vn="Win32/Somoto.G potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\S1CNNCK1\setup[1].exe"
sh=574BDC64C4C790A31E010AABB2D6789E690B8E7D ft=1 fh=be1af8505cbed5bf vn="a variant of Win32/Adware.ConvertAd.XD.gen application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USO76HF6\check[1].exe"
sh=4C7D2E08A00FF15F53353DB9818183360C0E1844 ft=1 fh=eb32edbbd6b71e85 vn="a variant of MSIL/Amonetize.AC.gen potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USO76HF6\install[1].exe"
sh=045021845EE2ACE202B123B82E74D33C70A33201 ft=1 fh=15133b67f4b53881 vn="a variant of Win32/Speedchecker.C potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USO76HF6\pcspeedup[1].exe"
sh=6EDCAE839459A6270D7CDB2700A7FE9EDDD0FDB5 ft=1 fh=f4177a46569182a9 vn="multiple threats (cleaned by deleting - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USO76HF6\setupfa_7198[1].exe"
sh=BD80DED2CE2F16DDD516A9A6A1BBC757947ABB61 ft=1 fh=37612fc9b022c77e vn="a variant of Win32/Packed.ScrambleWrapper.O potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USO76HF6\setup[1].exe"
sh=8BE484E5393AAB6B4FD4A08A2D99F0EB67545F01 ft=1 fh=b1ea5b3c4ea2dc22 vn="a variant of Win32/Toolbar.CrossRider.CZ potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USO76HF6\setup[2].exe"
sh=82B31E9FA659B11FDD9767281DEE81190D8AEFFC ft=1 fh=04d33ab15a529ab1 vn="a variant of Win32/Packed.ScrambleWrapper.O potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USO76HF6\setup[3].exe"
sh=A1889BF8FE6D8CA7CDE02AC512931E1FF9D98932 ft=1 fh=9ac083f18deba41f vn="Win32/WebDevAZ.C potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USO76HF6\smt[1].exe"
sh=ED3463A7DB95D4B0A40B18FF7D4C3A198AFE9C87 ft=1 fh=b73262d5706d13f5 vn="a variant of Win32/ClientConnect.A potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USO76HF6\Stub[1].exe"
sh=8BE484E5393AAB6B4FD4A08A2D99F0EB67545F01 ft=1 fh=b1ea5b3c4ea2dc22 vn="a variant of Win32/Toolbar.CrossRider.CZ potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Temp\2461.exe"
sh=82B31E9FA659B11FDD9767281DEE81190D8AEFFC ft=1 fh=04d33ab15a529ab1 vn="a variant of Win32/Packed.ScrambleWrapper.O potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Temp\7969.exe"
sh=574C4A41D9AB8F84FE5CD735FE29E79FFA7F3A77 ft=1 fh=705a393d0c9efd26 vn="a variant of Win32/AlteredSoftware.K potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Temp\AF15.tmp"
sh=5F7941EE098645A7EC60042D4EBE3A0E80C11A10 ft=1 fh=484aecaa2463715a vn="a variant of Win32/Bang5mai.C potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Temp\B5TBubble.exe"
sh=5F7941EE098645A7EC60042D4EBE3A0E80C11A10 ft=1 fh=484aecaa2463715a vn="a variant of Win32/Bang5mai.C potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Temp\B5TMini.exe"
sh=1D102AA5E48160526E562392CD41C23A4B607677 ft=1 fh=f6ce227f44b27d03 vn="a variant of Win32/Bang5mai.C potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Temp\b5t_cl15237.exe"
sh=7E31B18767BD00E85631B87880001F6459D9AB2F ft=1 fh=4f92ce7b3306ec54 vn="a variant of Win32/Somoto.K potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Temp\bitool.dll"
sh=BECCD54683B51CABB81C4F086498C56CDA1D8C62 ft=1 fh=24554c6e1b5e7ab8 vn="a variant of Win32/ELEX.EY potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Temp\nsaB98.tmp"
sh=6EDCAE839459A6270D7CDB2700A7FE9EDDD0FDB5 ft=1 fh=f4177a46569182a9 vn="multiple threats (cleaned by deleting - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Temp\nsf7658.tmp"
sh=765C5D4324D62B00EEB35CAFCE4A5F017542EBDA ft=1 fh=f42dc3895fab2815 vn="Win32/Somoto.G potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Temp\nsl57A4.tmp"
sh=574BDC64C4C790A31E010AABB2D6789E690B8E7D ft=1 fh=be1af8505cbed5bf vn="a variant of Win32/Adware.ConvertAd.XD.gen application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Temp\nsr2159.tmp"
sh=44AA57531C84368EDC79DE9A0E0233C78E96177A ft=1 fh=4797d57c107e73af vn="a variant of Win32/Tencent.A potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Temp\qqpcmgr_v10.7.16065.215_71645_Silence.exe"
sh=41B9F57125A131B45573FE077979B7624EFB8CDC ft=1 fh=6ab729edfcd39236 vn="a variant of Win32/OutBrowse.BZ potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Temp\serial.exe"
sh=C0382B2D614E5473575334093EA88934FFF60AE3 ft=1 fh=5db928a7a98ab98b vn="a variant of Win32/HideBaid.L potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Temp\setup3.exe"
sh=F9E16E3553B25EF1C748D47AE877BE728B2AD25E ft=1 fh=b35c4bbc75ae7308 vn="a variant of Win32/Bang5mai.C potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Temp\12004e\B5TAssist.exe"
sh=DD4605E26B48B7C231DBEBA5E8FAA91F33D21B2B ft=1 fh=bb1ffd2794ad6ec5 vn="Win32/AlteredSoftware.F potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Temp\comh.261001\globalupdate.exe"
sh=08976B0143D7A77694D2B3014053542C42F4774E ft=1 fh=67450ef68c8fc670 vn="Win32/AlteredSoftware.H potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Temp\comh.261001\globalupdateBroker.exe"
sh=DD4605E26B48B7C231DBEBA5E8FAA91F33D21B2B ft=1 fh=bb1ffd2794ad6ec5 vn="Win32/AlteredSoftware.F potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Temp\comh.261001\globalupdateCrashHandler.exe"
sh=FE3BD67B77BB38A3110091D17DE69012FAAD4FA6 ft=1 fh=67450ef6f68fd149 vn="Win32/AlteredSoftware.H potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Temp\comh.261001\globalupdateOnDemand.exe"
sh=3ABD9B4FE80E679C1B78B7DEE4F8DC089E3B4512 ft=1 fh=c71c001178de99b1 vn="a variant of Win32/AlteredSoftware.A potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Temp\comh.261001\goopdate.dll"
sh=66D1B11524AC80B200414637018A4D5C01C11A7D ft=1 fh=e858233d4598588e vn="a variant of Win32/AlteredSoftware.J potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Temp\comh.261001\goopdateres_en.dll"
sh=0A525ACB9B0F110BC07086176A5E2AF67599EE91 ft=1 fh=c71c00119a74eb7c vn="a variant of Win32/AlteredSoftware.E potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Temp\comh.261001\npglobalupdateUpdate4.dll"
sh=BD08E733D803A193E4FA4118A6D52BCD0FC98F81 ft=1 fh=c71c0011371aa7ff vn="a variant of Win32/AlteredSoftware.G potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Temp\comh.261001\psmachine.dll"
sh=9AE1636DE7E3CB630B3A2C11E41C76BF0B716CCD ft=1 fh=c71c0011864645d3 vn="a variant of Win32/AlteredSoftware.G potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Temp\comh.261001\psuser.dll"
sh=DD4605E26B48B7C231DBEBA5E8FAA91F33D21B2B ft=1 fh=bb1ffd2794ad6ec5 vn="Win32/AlteredSoftware.F potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Temp\comh.69371\globalupdate.exe"
sh=08976B0143D7A77694D2B3014053542C42F4774E ft=1 fh=67450ef68c8fc670 vn="Win32/AlteredSoftware.H potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Temp\comh.69371\globalupdateBroker.exe"
sh=DD4605E26B48B7C231DBEBA5E8FAA91F33D21B2B ft=1 fh=bb1ffd2794ad6ec5 vn="Win32/AlteredSoftware.F potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Temp\comh.69371\globalupdateCrashHandler.exe"
sh=FE3BD67B77BB38A3110091D17DE69012FAAD4FA6 ft=1 fh=67450ef6f68fd149 vn="Win32/AlteredSoftware.H potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Temp\comh.69371\globalupdateOnDemand.exe"
sh=3ABD9B4FE80E679C1B78B7DEE4F8DC089E3B4512 ft=1 fh=c71c001178de99b1 vn="a variant of Win32/AlteredSoftware.A potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Temp\comh.69371\goopdate.dll"
sh=66D1B11524AC80B200414637018A4D5C01C11A7D ft=1 fh=e858233d4598588e vn="a variant of Win32/AlteredSoftware.J potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Temp\comh.69371\goopdateres_en.dll"
sh=0A525ACB9B0F110BC07086176A5E2AF67599EE91 ft=1 fh=c71c00119a74eb7c vn="a variant of Win32/AlteredSoftware.E potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Temp\comh.69371\npglobalupdateUpdate4.dll"
sh=BD08E733D803A193E4FA4118A6D52BCD0FC98F81 ft=1 fh=c71c0011371aa7ff vn="a variant of Win32/AlteredSoftware.G potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Temp\comh.69371\psmachine.dll"
sh=9AE1636DE7E3CB630B3A2C11E41C76BF0B716CCD ft=1 fh=c71c0011864645d3 vn="a variant of Win32/AlteredSoftware.G potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Temp\comh.69371\psuser.dll"
sh=B75E0F84C78E46BCD2B13C87CD224EAB5B158A22 ft=1 fh=1357f058976b60c1 vn="a variant of Win32/Adware.EoRezo.AY application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Temp\is-971A5.tmp\569.exe"
sh=B75E0F84C78E46BCD2B13C87CD224EAB5B158A22 ft=1 fh=1357f058976b60c1 vn="a variant of Win32/Adware.EoRezo.AY application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Temp\is-A9RN7.tmp\569.exe"
sh=D80B0AC5285466E8ABE27ADA2BDDB1181C8A2BEF ft=1 fh=c71c0011e479decb vn="a variant of Win32/Adware.Imali.E application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Temp\is-COARN.tmp\qiabrowser_soft_partner.exe"
sh=D80B0AC5285466E8ABE27ADA2BDDB1181C8A2BEF ft=1 fh=c71c0011e479decb vn="a variant of Win32/Adware.Imali.E application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Temp\is-DOOAL.tmp\qiabrowser_soft_partner.exe"
sh=873505176B2B5D223D7248F1D131613159D036FA ft=1 fh=ae1d79f3b326ed10 vn="multiple threats (cleaned by deleting - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Temp\is-JHK70.tmp\gentlemjmp_ieu.exe"
sh=B75E0F84C78E46BCD2B13C87CD224EAB5B158A22 ft=1 fh=1357f058976b60c1 vn="a variant of Win32/Adware.EoRezo.AY application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Temp\is-Q83K6.tmp\569.exe"
sh=2653052BAE32944D9004A59456C4AD26F18CF4A9 ft=1 fh=803df9d1c1585d5e vn="a variant of Win32/Conduit.SearchProtect.Y potentially unwanted application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows.old\Users\Kone\AppData\Local\Temp\nsvD857.tmp\SPTool.dll"

 

No huhuh löytyhän sieltä muutama.
Ota avast hetkeksi pois päältä ja aja sitten JRT niin pitäisi toimia.

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 7.6.4 (09.28.2015:1)
OS: Windows 10 Pro x86
Ran by Kone on ti 20.10.2015 at 13:43:05,10
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Tasks



~~~ Registry Values

Successfully deleted: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\GoogleChromeAutoLaunch_36C81CB138640434473AF92D45D2EBA6
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\\Default_Search_URL



~~~ Registry Keys



~~~ Files

Successfully deleted: [File] C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat



~~~ Folders

Successfully deleted: [Folder] C:\Users\Public\qiyi



~~~ Chrome


[C:\Users\Kone\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - default search provider reset

[C:\Users\Kone\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:

[C:\Users\Kone\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset

[C:\Users\Kone\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:
[]





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on ti 20.10.2015 at 13:45:51,80
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

Anteeksi kun on kestänyt vastata on ollut sen verran muuta ettei ole ehtinyt tänne.
Jos olet vielä kuulolla niin kuinka kone toimii nyt?

 

Hyvin on kone nyt toiminut noitten jälkeen. Aikamoinen sotku lyhyessä ajassa. Asensin win7 noin pari viikkoa sitten ja kone on ollut hyvin vähällä käytöllä. Asensin sitten tuon kympin ja viimeistään sen jälkeen kasautui noita haittaohjelmia. Mutta tosiaan koneessa käyttötunteja ehkä se noin kymmenen täydellisen formatoinnin jälkeen. Silti meni solmuun. Oli toki tuon ajan ilman virusturvaa. Ei kyllä sitä ilman pärjää hetkeäkään. logeissa ei näkyny enää vissiin sitten ihmeitä?

 

Joo ei mun silmään osunut varsinaisia haittaohjelmia enemmän PUP:ja ja muita vähemmän haitallisia vaikkakin ärsyttäviä.ohjelmia.
Jos kaikki pelittää niin ei liene tarvitse jatkaa, toki jos tuntuu että jotain olisi vielä nin aina voidaan katsoa lisäää.

 

Juu nyt tosiaan toimii ja se riittää. Palailen taas asiaan jos tai siis kun tuo menee taas solmuun. Kiitos vaan avustuksesta.