Malwarebytes Anti-Malware www.malwarebytes.org Scan Date: 7/23/2016 Scan Time: 4:48 PM Logfile: scan logs.txt Administrator: Yes Version: 2.2.1.1043 Malware Database: v2016.07.23.07 Rootkit Database: v2016.05.27.01 License: Free Malware Protection: Disabled Malicious Website Protection: Disabled Self-protection: Disabled OS: Windows 8.1 CPU: x64 File System: NTFS User: Connor Scan Type: Threat Scan Result: Completed Objects Scanned: 370011 Time Elapsed: 1 hr, 21 min, 10 sec Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Enabled Heuristics: Enabled PUP: Enabled PUM: Enabled Processes: 0 (No malicious items detected) Modules: 0 (No malicious items detected) Registry Keys: 104 PUP.Optional.Like, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{2159CB25-EF9A-54C1-B43C-E30D1A4A8277}, Quarantined, [b9ba38ef168455e112fd6335fb07dd23], PUP.Optional.Like, HKLM\SOFTWARE\CLASSES\Like.BHO, Quarantined, [b9ba38ef168455e112fd6335fb07dd23], PUP.Optional.Like, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Like.BHO, Quarantined, [b9ba38ef168455e112fd6335fb07dd23], PUP.Optional.Like, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Like.BHO, Quarantined, [b9ba38ef168455e112fd6335fb07dd23], PUP.Optional.Like, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{2159CB25-EF9A-54C1-B43C-E30D1A4A8277}, Quarantined, [b9ba38ef168455e112fd6335fb07dd23], PUP.Optional.Like, HKU\S-1-5-21-3806172483-3420292488-1355022846-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{2159CB25-EF9A-54C1-B43C-E30D1A4A8277}, Quarantined, [b9ba38ef168455e112fd6335fb07dd23], PUP.Optional.Like, HKU\S-1-5-21-3806172483-3420292488-1355022846-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{2159CB25-EF9A-54C1-B43C-E30D1A4A8277}, Quarantined, [b9ba38ef168455e112fd6335fb07dd23], PUP.Optional.Yontoo, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{F83D1872-D9FF-47F8-B5A0-49CC51E24EE8}, Quarantined, [274cb473d1c9fe3876e1dd94ce3444bc], PUP.Optional.Yontoo, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{F83D1872-D9FF-47F8-B5A0-49CC51E24EE8}, Quarantined, [274cb473d1c9fe3876e1dd94ce3444bc], PUP.Optional.OpenCandy, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{47A1DF02-BCE4-40C3-AE47-E3EA09A65E4A}, Quarantined, [4c276fb8e4b6ae887dddc694e81c24dc], PUP.Optional.OpenCandy, HKLM\SOFTWARE\CLASSES\INTERFACE\{47A1DF02-BCE4-40C3-AE47-E3EA09A65E4A}, Quarantined, [4c276fb8e4b6ae887dddc694e81c24dc], PUP.Optional.OpenCandy, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{47A1DF02-BCE4-40C3-AE47-E3EA09A65E4A}, Quarantined, [4c276fb8e4b6ae887dddc694e81c24dc], PUP.Optional.OpenCandy, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{47A1DF02-BCE4-40C3-AE47-E3EA09A65E4A}, Quarantined, [4c276fb8e4b6ae887dddc694e81c24dc], PUP.Optional.OpenCandy, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{47A1DF02-BCE4-40C3-AE47-E3EA09A65E4A}, Quarantined, [4c276fb8e4b6ae887dddc694e81c24dc], PUP.Optional.OpenCandy, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{B9D64D3B-BE75-4FA2-B94A-C4AE772A0146}, Quarantined, [4c276fb8e4b6ae887dddc694e81c24dc], PUP.Optional.OpenCandy, HKLM\SOFTWARE\CLASSES\TYPELIB\{1112F282-7099-4624-A439-DB29D6551552}, Quarantined, [4c276fb8e4b6ae887dddc694e81c24dc], PUP.Optional.OpenCandy, HKLM\SOFTWARE\CLASSES\INTERFACE\{FA7B2795-C0C8-4A58-8672-3F8D80CC0270}, Quarantined, [4c276fb8e4b6ae887dddc694e81c24dc], PUP.Optional.OpenCandy, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{FA7B2795-C0C8-4A58-8672-3F8D80CC0270}, Quarantined, [4c276fb8e4b6ae887dddc694e81c24dc], PUP.Optional.OpenCandy, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{FA7B2795-C0C8-4A58-8672-3F8D80CC0270}, Quarantined, [4c276fb8e4b6ae887dddc694e81c24dc], PUP.Optional.OpenCandy, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{1112F282-7099-4624-A439-DB29D6551552}, Quarantined, [4c276fb8e4b6ae887dddc694e81c24dc], PUP.Optional.OpenCandy, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{1112F282-7099-4624-A439-DB29D6551552}, Quarantined, [4c276fb8e4b6ae887dddc694e81c24dc], PUP.Optional.OpenCandy, HKLM\SOFTWARE\CLASSES\OCComSDK.ComSDK.1, Quarantined, [4c276fb8e4b6ae887dddc694e81c24dc], PUP.Optional.OpenCandy, HKLM\SOFTWARE\CLASSES\OCComSDK.ComSDK, Quarantined, [4c276fb8e4b6ae887dddc694e81c24dc], PUP.Optional.OpenCandy, HKLM\SOFTWARE\WOW6432NODE\CLASSES\OCComSDK.ComSDK, Quarantined, [4c276fb8e4b6ae887dddc694e81c24dc], PUP.Optional.OpenCandy, HKLM\SOFTWARE\CLASSES\WOW6432NODE\OCComSDK.ComSDK, Quarantined, [4c276fb8e4b6ae887dddc694e81c24dc], PUP.Optional.OpenCandy, HKLM\SOFTWARE\WOW6432NODE\CLASSES\OCComSDK.ComSDK.1, Quarantined, [4c276fb8e4b6ae887dddc694e81c24dc], PUP.Optional.OpenCandy, HKLM\SOFTWARE\CLASSES\WOW6432NODE\OCComSDK.ComSDK.1, Quarantined, [4c276fb8e4b6ae887dddc694e81c24dc], PUP.Optional.OpenCandy, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{B9D64D3B-BE75-4FA2-B94A-C4AE772A0146}, Quarantined, [4c276fb8e4b6ae887dddc694e81c24dc], PUP.Optional.Simple, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Simple, Quarantined, [11621b0c5644fc3a45b630ca35cee51b], PUP.Optional.SafeSearch.ShrtCln, HKLM\SOFTWARE\AVSOFTWARE\SafeSearch, Quarantined, [3340e047d2c85adc2829e4fae31fe11f], PUP.Optional.SafeSearch.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BA1BE292-1D15-488B-934D-008742212380}, Quarantined, [571c40e7aded6cca85a0d0c09b686d93], PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\WAJAMINTERNETENHANCER.EXE, Quarantined, [1a5972b52476f3431335f5b1c53e0df3], PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\WAJAMINTERNETENHANCERSERVICE.EXE, Quarantined, [4d26dc4b6931de5818303c6a8a796d93], PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\BITGUARD.EXE, Quarantined, [fe7574b37a20fe38113a1a8c788b857b], PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\BPROTECT.EXE, Quarantined, [660d27004f4b3cfab09c6145a65d12ee], PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\BPSVC.EXE, Quarantined, [ea89e443a5f50c2abb92a0067291aa56], PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\BROWSERDEFENDER.EXE, Quarantined, [017285a2f5a5a59197b84d59fc076898], PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\BROWSERPROTECT.EXE, Quarantined, [640fd7507723d165b0a1a9fd867d867a], PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\BROWSERSAFEGUARD.EXE, Quarantined, [7cf7ed3a2b6f48ee3f138f17739015eb], PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\CLTMNGSVC.EXE, Quarantined, [ed8641e65a40330324316e3846bdaf51], PUP.Optional.DataMngr.AppFlsh, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\DATAMNGRCOORDINATOR.EXE, Quarantined, [7ef50c1b78222511123624bac93af907], PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\DPROTECTSVC.EXE, Quarantined, [027194931d7d270f77e97333f80bb54b], PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\JUMPFLIP, Quarantined, [d49f87a05d3d23134833277fe023748c], PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\PROTECTEDSEARCH.EXE, Quarantined, [4a29b374a4f61a1cb0d08422a95aef11], PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\SEARCHINSTALLER.EXE, Quarantined, [bab916113d5d3bfb1b69ced8ac577d83], PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\SEARCHPROTECTION.EXE, Quarantined, [74ff4fd8cfcb7abc5233961045bea15f], PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\SEARCHPROTECTOR.EXE, Quarantined, [d3a066c1a6f4dd59d6b0a600c83bb24e], PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\SEARCHSETTINGS.EXE, Quarantined, [ff7456d1534794a20f78a006d82b23dd], PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\SEARCHSETTINGS64.EXE, Quarantined, [96dd091e6337c2745d2bb0f6778c827e], PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\SNAPDO.EXE, Quarantined, [0e6528ff6a30af879af1e2c4cb387f81], PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\STINST32.EXE, Quarantined, [7ef59c8b316933037b126a3c37cc7e82], PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\STINST64.EXE, Quarantined, [caa9d5524c4e6dc97d11f5b150b326da], PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\UMBRELLA.EXE, Quarantined, [41324fd8d1c9a88e237356507b88db25], PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\UTILJUMPFLIP.EXE, Quarantined, [4b28c3641d7df442b4e31294c83bd32d], PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\VOLARO, Quarantined, [b7bcb5726337072f3662f7af758e3ac6], PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\VONTEERA, Quarantined, [c9aaa483dac0d6604f4aa4020300d22e], PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\WEBSTEROIDS.EXE, Quarantined, [b1c2fa2d4258e254900a64424db6b947], PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\WEBSTEROIDSSERVICE.EXE, Quarantined, [5320af78207a32048318d4d215ee03fd], PUP.Optional.SafeSearch.ShrtCln, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{207DC9EF-AD2D-41BB-9B7C-9B6ADAB83857}, Delete-on-Reboot, [41325bccf7a3063094efcb2e0bf88878], PUP.Optional.ProPCCleaner, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{67DCDE21-4D7E-41CA-95C8-A5B48CAEC6B1}, Delete-on-Reboot, [df949a8d1e7c6fc79c9d70811ce725db], PUP.Optional.ProPCCleaner, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{7E4F4A33-41C9-4414-82CA-7EBCE2A57CC6}, Delete-on-Reboot, [a6cd34f38a100b2bab8e579ae61de61a], PUP.Optional.SafeSearch.ShrtCln, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Component System, Delete-on-Reboot, [afc466c17f1b89adbec600f934cf9c64], PUP.Optional.SafeSearch.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\AVSOFTWARE\SafeSearch, Quarantined, [d0a30e19287259ddda77766881812cd4], PUP.Optional.SpeedBrowser, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\ACTIVE SETUP\INSTALLED COMPONENTS\{7D2B3E1D-D096-4594-9D8F-A6667F12E0AC}, Quarantined, [6b08b0773f5bcf67d0189a40976c817f], PUP.Optional.SafeSear.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BA1BE292-1D15-488B-934D-008742212380}, Quarantined, [155e8d9a900a310561ff469433cff30d], PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\WAJAMINTERNETENHANCER.EXE, Quarantined, [8ee5be69b3e7112594b40e98b84b4bb5], PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\WAJAMINTERNETENHANCERSERVICE.EXE, Quarantined, [7af9ca5d702af046d57304a2ba49f10f], PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\BITGUARD.EXE, Quarantined, [bbb80a1d8c0e251179d2bee8c14207f9], PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\BPROTECT.EXE, Quarantined, [c1b2f82fa4f638fe37159511798a1fe1], PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\BPSVC.EXE, Quarantined, [ef84ab7c3e5c59dd222b5f4730d35da3], PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\BROWSERDEFENDER.EXE, Quarantined, [b5be2dfaf0aab38358f78a1c24dfdd23], PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\BROWSERPROTECT.EXE, Quarantined, [2c476cbba6f4fa3caba6fcaab15257a9], PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\BROWSERSAFEGUARD.EXE, Quarantined, [650e6cbb8d0dce68cc86fcaaa16229d7], PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\CLTMNGSVC.EXE, Quarantined, [0a6983a473270036ada83d6948bb58a8], PUP.Optional.DataMngr.AppFlsh, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\DATAMNGRCOORDINATOR.EXE, Quarantined, [0370d552059567cfe860a73747bc12ee], PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\DPROTECTSVC.EXE, Quarantined, [2b488f98ebafee48253ba8fecd3632ce], PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\JUMPFLIP, Quarantined, [0d66d651f7a3f0462f4ccbdb5da6fa06], PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\PROTECTEDSEARCH.EXE, Quarantined, [383b1d0a9604162083fd8a1c08fbb14f], PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\SEARCHINSTALLER.EXE, Quarantined, [abc8e542356561d5fd878c1afa097c84], PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\SEARCHPROTECTION.EXE, Quarantined, [205382a59307181e5530594df70c42be], PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\SEARCHPROTECTOR.EXE, Quarantined, [9ed539ee07932a0cb6d06d39659e9769], PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\SEARCHSETTINGS.EXE, Quarantined, [3142fe290694d561f09700a6e1228779], PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\SEARCHSETTINGS64.EXE, Quarantined, [235028ffd4c6b185c0c81a8c63a025db], PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\SNAPDO.EXE, Quarantined, [442f47e0445642f4612acfd77192d729], PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\STINST32.EXE, Quarantined, [41327aad52481026325bcfd752b1738d], PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\STINST64.EXE, Quarantined, [9dd6ec3bd5c556e0cac48c1aa360e818], PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\UMBRELLA.EXE, Quarantined, [d89bc95e1585e74fbcdab1f58d7640c0], PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\UTILJUMPFLIP.EXE, Quarantined, [1c57cf587426d85e5542ccda689bd729], PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\VOLARO, Quarantined, [096aea3dd8c20333fc9c386e659e9a66], PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\VONTEERA, Quarantined, [d2a19295cecc48ee36631d895aa939c7], PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\WEBSTEROIDS.EXE, Quarantined, [264d70b77e1c76c0cad0a9fd5ba843bd], PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\WEBSTEROIDSSERVICE.EXE, Quarantined, [601358cfafeb7db97e1dddc9897af30d], PUP.Optional.SafeSearch.ShrtCln, HKU\S-1-5-18\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BA1BE292-1D15-488B-934D-008742212380}, Quarantined, [9cd79790326814229391523e0df61be5], PUP.Optional.SafeSearch.ShrtCln, HKU\S-1-5-19\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}, Quarantined, [95dedf48ff9bb284d94b99f7fa096c94], PUP.Optional.SafeSearch.ShrtCln, HKU\S-1-5-19\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BA1BE292-1D15-488B-934D-008742212380}, Quarantined, [98db1e092b6f74c246de434dc142d927], PUP.Optional.SafeSearch.ShrtCln, HKU\S-1-5-20\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}, Quarantined, [74ff1710702aa69076ae840c60a346ba], PUP.Optional.SafeSearch.ShrtCln, HKU\S-1-5-20\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BA1BE292-1D15-488B-934D-008742212380}, Quarantined, [a5ced651bcde50e6998b504038cba957], PUP.Optional.Spigot, HKU\S-1-5-21-3806172483-3420292488-1355022846-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{276B636A-DA96-4183-8AEF-F5E30F5B06D6}, Quarantined, [462dfd2a3565cc6a126e0da9bb485ba5], PUP.Optional.BDYahoo, HKU\S-1-5-21-3806172483-3420292488-1355022846-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B83A893A-DBAC-4185-8C0B-68EF9D22E51B}, Quarantined, [7af981a6f6a4053196c60a8e3cc7bb45], PUP.Optional.SafeSear.ShrtCln, HKU\S-1-5-21-3806172483-3420292488-1355022846-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BA1BE292-1D15-488B-934D-008742212380}, Quarantined, [7df681a6dbbf3105f9684f8be51d26da], PUP.Optional.SafeSearch.ShrtCln, HKU\S-1-5-21-3806172483-3420292488-1355022846-1001_Classes\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}, Quarantined, [b3c00621f3a7ba7c75ddfdcef80bef11], PUP.Optional.SafeSearch.ShrtCln, HKU\S-1-5-21-3806172483-3420292488-1355022846-1001_Classes\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BA1BE292-1D15-488B-934D-008742212380}, Quarantined, [a1d22cfb8911ac8a7dd5418a55ae5aa6], PUP.Optional.MultiPlug, HKU\S-1-5-21-3806172483-3420292488-1355022846-1001_Classes\TYPELIB\{157B1AA6-3E5C-404A-9118-C1D91F537040}, Quarantined, [2b4833f4801aea4c2fb5685c29da55ab], PUP.Optional.MultiPlug, HKU\S-1-5-21-3806172483-3420292488-1355022846-1001_Classes\INTERFACE\{3B3F3AAD-FB97-49FF-BFEE-D22869AC4326}, Quarantined, [2b4833f4801aea4c2fb5685c29da55ab], Registry Values: 92 PUP.Optional.Yontoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DoNotAskAgain, searchinterneat-a.akamaihd.net, Quarantined, [086b49dececce0564970e9d942c13cc4] PUP.Optional.SafeSearch.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BA1BE292-1D15-488B-934D-008742212380}|FaviconURL, https://www.safesearch.net/favicon.ico, Quarantined, [571c40e7aded6cca85a0d0c09b686d93] PUP.Optional.SafeSearch.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BA1BE292-1D15-488B-934D-008742212380}|URL, https://www.safesearch.net/search?q={searchTerms}&p=s&m=ie&c=na&s=na, Quarantined, [1360c6612773c17533f2d7b9d3302cd4] PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\WajamInternetEnhancer.exe|debugger, tasklist.exe, Quarantined, [1a5972b52476f3431335f5b1c53e0df3] PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\WajamInternetEnhancerService.exe|debugger, tasklist.exe, Quarantined, [4d26dc4b6931de5818303c6a8a796d93] PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\BITGUARD.EXE|debugger, tasklist.exe, Quarantined, [fe7574b37a20fe38113a1a8c788b857b] PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\BPROTECT.EXE|debugger, tasklist.exe, Quarantined, [660d27004f4b3cfab09c6145a65d12ee] PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\BPSVC.EXE|debugger, tasklist.exe, Quarantined, [ea89e443a5f50c2abb92a0067291aa56] PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\BROWSERDEFENDER.EXE|debugger, tasklist.exe, Quarantined, [017285a2f5a5a59197b84d59fc076898] PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\BROWSERPROTECT.EXE|debugger, tasklist.exe, Quarantined, [640fd7507723d165b0a1a9fd867d867a] PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\BROWSERSAFEGUARD.EXE|debugger, tasklist.exe, Quarantined, [7cf7ed3a2b6f48ee3f138f17739015eb] PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\CLTMNGSVC.EXE|debugger, tasklist.exe, Quarantined, [ed8641e65a40330324316e3846bdaf51] PUP.Optional.DataMngr.AppFlsh, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\DATAMNGRCOORDINATOR.EXE|debugger, tasklist.exe, Quarantined, [7ef50c1b78222511123624bac93af907] PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\DPROTECTSVC.EXE|debugger, tasklist.exe, Quarantined, [027194931d7d270f77e97333f80bb54b] PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\JUMPFLIP|debugger, tasklist.exe, Quarantined, [d49f87a05d3d23134833277fe023748c] PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\PROTECTEDSEARCH.EXE|debugger, tasklist.exe, Quarantined, [4a29b374a4f61a1cb0d08422a95aef11] PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\SEARCHINSTALLER.EXE|debugger, tasklist.exe, Quarantined, [bab916113d5d3bfb1b69ced8ac577d83] PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\SEARCHPROTECTION.EXE|debugger, tasklist.exe, Quarantined, [74ff4fd8cfcb7abc5233961045bea15f] PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\SEARCHPROTECTOR.EXE|debugger, tasklist.exe, Quarantined, [d3a066c1a6f4dd59d6b0a600c83bb24e] PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\SEARCHSETTINGS.EXE|debugger, tasklist.exe, Quarantined, [ff7456d1534794a20f78a006d82b23dd] PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\SEARCHSETTINGS64.EXE|debugger, tasklist.exe, Quarantined, [96dd091e6337c2745d2bb0f6778c827e] PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\SNAPDO.EXE|debugger, tasklist.exe, Quarantined, [0e6528ff6a30af879af1e2c4cb387f81] PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\STINST32.EXE|debugger, tasklist.exe, Quarantined, [7ef59c8b316933037b126a3c37cc7e82] PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\STINST64.EXE|debugger, tasklist.exe, Quarantined, [caa9d5524c4e6dc97d11f5b150b326da] PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\UMBRELLA.EXE|debugger, tasklist.exe, Quarantined, [41324fd8d1c9a88e237356507b88db25] PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\UTILJUMPFLIP.EXE|debugger, tasklist.exe, Quarantined, [4b28c3641d7df442b4e31294c83bd32d] PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\VOLARO|debugger, tasklist.exe, Quarantined, [b7bcb5726337072f3662f7af758e3ac6] PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\VONTEERA|debugger, tasklist.exe, Quarantined, [c9aaa483dac0d6604f4aa4020300d22e] PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\WEBSTEROIDS.EXE|debugger, tasklist.exe, Quarantined, [b1c2fa2d4258e254900a64424db6b947] PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\WEBSTEROIDSSERVICE.EXE|debugger, tasklist.exe, Quarantined, [5320af78207a32048318d4d215ee03fd] PUP.Optional.SafeSearch.ShrtCln, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{207DC9EF-AD2D-41BB-9B7C-9B6ADAB83857}|Path, \Component System\Component, Delete-on-Reboot, [41325bccf7a3063094efcb2e0bf88878] PUP.Optional.ProPCCleaner, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{67DCDE21-4D7E-41CA-95C8-A5B48CAEC6B1}|Path, \ProPCCleaner_Start, Delete-on-Reboot, [df949a8d1e7c6fc79c9d70811ce725db] PUP.Optional.ProPCCleaner, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{7E4F4A33-41C9-4414-82CA-7EBCE2A57CC6}|Path, \ProPCCleaner_Popup, Delete-on-Reboot, [a6cd34f38a100b2bab8e579ae61de61a] PUP.Optional.SpeedBrowser, HKLM\SOFTWARE\REGISTEREDAPPLICATIONS|speed browser, Software\Clients\StartMenuInternet\speed browser\Capabilities, Quarantined, [88ebc6614654c47240aa4d8d956ee21e] PUP.Optional.SpeedBrowser, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\ACTIVE SETUP\INSTALLED COMPONENTS\{7D2B3E1D-D096-4594-9D8F-A6667F12E0AC}|StubPath, "C:\Program Files (x86)\speed browser\Application\40.0.2214.45\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level, Quarantined, [6b08b0773f5bcf67d0189a40976c817f] PUP.Optional.SafeSear.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BA1BE292-1D15-488B-934D-008742212380}|TopResultURLFallback, http://www.safesear.ch/web/?type=20160515-za-sshome-ie-df&q={searchTerms}, Quarantined, [155e8d9a900a310561ff469433cff30d] PUP.Optional.SafeSear.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BA1BE292-1D15-488B-934D-008742212380}|URL, http://www.safesear.ch/web/?type=20160515-za-sshome-ie-df&q={searchTerms}, Quarantined, [b8bb29fe267457dfff61f0ea23df58a8] PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\WajamInternetEnhancer.exe|debugger, tasklist.exe, Quarantined, [8ee5be69b3e7112594b40e98b84b4bb5] PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\WajamInternetEnhancerService.exe|debugger, tasklist.exe, Quarantined, [7af9ca5d702af046d57304a2ba49f10f] PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\BITGUARD.EXE|debugger, tasklist.exe, Quarantined, [bbb80a1d8c0e251179d2bee8c14207f9] PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\BPROTECT.EXE|debugger, tasklist.exe, Quarantined, [c1b2f82fa4f638fe37159511798a1fe1] PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\BPSVC.EXE|debugger, tasklist.exe, Quarantined, [ef84ab7c3e5c59dd222b5f4730d35da3] PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\BROWSERDEFENDER.EXE|debugger, tasklist.exe, Quarantined, [b5be2dfaf0aab38358f78a1c24dfdd23] PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\BROWSERPROTECT.EXE|debugger, tasklist.exe, Quarantined, [2c476cbba6f4fa3caba6fcaab15257a9] PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\BROWSERSAFEGUARD.EXE|debugger, tasklist.exe, Quarantined, [650e6cbb8d0dce68cc86fcaaa16229d7] PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\CLTMNGSVC.EXE|debugger, tasklist.exe, Quarantined, [0a6983a473270036ada83d6948bb58a8] PUP.Optional.DataMngr.AppFlsh, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\DATAMNGRCOORDINATOR.EXE|debugger, tasklist.exe, Quarantined, [0370d552059567cfe860a73747bc12ee] PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\DPROTECTSVC.EXE|debugger, tasklist.exe, Quarantined, [2b488f98ebafee48253ba8fecd3632ce] PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\JUMPFLIP|debugger, tasklist.exe, Quarantined, [0d66d651f7a3f0462f4ccbdb5da6fa06] PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\PROTECTEDSEARCH.EXE|debugger, tasklist.exe, Quarantined, [383b1d0a9604162083fd8a1c08fbb14f] PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\SEARCHINSTALLER.EXE|debugger, tasklist.exe, Quarantined, [abc8e542356561d5fd878c1afa097c84] PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\SEARCHPROTECTION.EXE|debugger, tasklist.exe, Quarantined, [205382a59307181e5530594df70c42be] PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\SEARCHPROTECTOR.EXE|debugger, tasklist.exe, Quarantined, [9ed539ee07932a0cb6d06d39659e9769] PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\SEARCHSETTINGS.EXE|debugger, tasklist.exe, Quarantined, [3142fe290694d561f09700a6e1228779] PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\SEARCHSETTINGS64.EXE|debugger, tasklist.exe, Quarantined, [235028ffd4c6b185c0c81a8c63a025db] PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\SNAPDO.EXE|debugger, tasklist.exe, Quarantined, [442f47e0445642f4612acfd77192d729] PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\STINST32.EXE|debugger, tasklist.exe, Quarantined, [41327aad52481026325bcfd752b1738d] PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\STINST64.EXE|debugger, tasklist.exe, Quarantined, [9dd6ec3bd5c556e0cac48c1aa360e818] PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\UMBRELLA.EXE|debugger, tasklist.exe, Quarantined, [d89bc95e1585e74fbcdab1f58d7640c0] PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\UTILJUMPFLIP.EXE|debugger, tasklist.exe, Quarantined, [1c57cf587426d85e5542ccda689bd729] PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\VOLARO|debugger, tasklist.exe, Quarantined, [096aea3dd8c20333fc9c386e659e9a66] PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\VONTEERA|debugger, tasklist.exe, Quarantined, [d2a19295cecc48ee36631d895aa939c7] PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\WEBSTEROIDS.EXE|debugger, tasklist.exe, Quarantined, [264d70b77e1c76c0cad0a9fd5ba843bd] PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\WEBSTEROIDSSERVICE.EXE|debugger, tasklist.exe, Quarantined, [601358cfafeb7db97e1dddc9897af30d] PUP.Optional.Conduit, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SVCHOST|ORBTR, Orbiter^^, Quarantined, [1d56091ee5b5ca6c95e26073a062d62a] PUP.Optional.Simple, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\SIMPLE|Publisher, Simple, Quarantined, [b7bc35f2306a88ae9b6133c7a3608977] PUP.Optional.SpeedBrowser, HKLM\SOFTWARE\WOW6432NODE\REGISTEREDAPPLICATIONS|speed browser, Software\Clients\StartMenuInternet\speed browser\Capabilities, Quarantined, [8ee56bbc4a5089ad6f7bd109c63dc33d] PUP.Optional.SafeSearch.ShrtCln, HKU\S-1-5-18\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BA1BE292-1D15-488B-934D-008742212380}|FaviconUrl, https://www.safesearch.net/favicon.ico, Quarantined, [9cd79790326814229391523e0df61be5] PUP.Optional.SafeSearch.ShrtCln, HKU\S-1-5-18\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BA1BE292-1D15-488B-934D-008742212380}|URL, https://www.safesearch.net/search?q={searchTerms}&p=s&m=ie&c=na&s=na, Quarantined, [373c0a1db7e3fb3b5fc56e22e71cac54] PUP.Optional.SafeSearch.ShrtCln, HKU\S-1-5-19\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|FaviconPath, https://www.safesearch.net/favicon.ico, Quarantined, [95dedf48ff9bb284d94b99f7fa096c94] PUP.Optional.SafeSearch.ShrtCln, HKU\S-1-5-19\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|FaviconURLFallback, https://www.safesearch.net/favicon.ico, Quarantined, [680b31f6663484b233f169277f84a65a] PUP.Optional.SafeSearch.ShrtCln, HKU\S-1-5-19\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|TopResultURLFallback, https://www.safesearch.net/search?q={searchTerms}&p=s&m=ie&c=na&s=na, Quarantined, [86edd453d0ca74c20e161c74a2617888] PUP.Optional.SafeSearch.ShrtCln, HKU\S-1-5-19\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|URL, https://www.safesearch.net/search?q={searchTerms}&p=sm=ie&c=na&s=na, Quarantined, [cca7b86f504ae2549193632d13f0c739] PUP.Optional.SafeSearch.ShrtCln, HKU\S-1-5-19\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BA1BE292-1D15-488B-934D-008742212380}|FaviconUrl, https://www.safesearch.net/favicon.ico, Quarantined, [98db1e092b6f74c246de434dc142d927] PUP.Optional.SafeSearch.ShrtCln, HKU\S-1-5-19\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BA1BE292-1D15-488B-934D-008742212380}|URL, https://www.safesearch.net/search?q={searchTerms}&p=s&m=ie&c=na&s=na, Quarantined, [9bd83becb1e970c6e83cd8b80af92fd1] PUP.Optional.SafeSearch.ShrtCln, HKU\S-1-5-20\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|FaviconPath, https://www.safesearch.net/favicon.ico, Quarantined, [74ff1710702aa69076ae840c60a346ba] PUP.Optional.SafeSearch.ShrtCln, HKU\S-1-5-20\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|FaviconURLFallback, https://www.safesearch.net/favicon.ico, Quarantined, [f281f92ebae0f73f5bc9cbc5b54eb947] PUP.Optional.SafeSearch.ShrtCln, HKU\S-1-5-20\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|TopResultURLFallback, https://www.safesearch.net/search?q={searchTerms}&p=s&m=ie&c=na&s=na, Quarantined, [3b38d84f9ffbb0862afac1cf06fd28d8] PUP.Optional.SafeSearch.ShrtCln, HKU\S-1-5-20\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|URL, https://www.safesearch.net/search?q={searchTerms}&p=sm=ie&c=na&s=na, Quarantined, [d2a1899e0c8ee84e4fd5f8989271fa06] PUP.Optional.SafeSearch.ShrtCln, HKU\S-1-5-20\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BA1BE292-1D15-488B-934D-008742212380}|FaviconUrl, https://www.safesearch.net/favicon.ico, Quarantined, [a5ced651bcde50e6998b504038cba957] PUP.Optional.SafeSearch.ShrtCln, HKU\S-1-5-20\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BA1BE292-1D15-488B-934D-008742212380}|URL, https://www.safesearch.net/search?q={searchTerms}&p=s&m=ie&c=na&s=na, Quarantined, [de956abd7921b08671b32769a75ce21e] PUP.Optional.Yontoo, HKU\S-1-5-21-3806172483-3420292488-1355022846-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DoNotAskAgain, searchinterneat-a.akamaihd.net, Quarantined, [dd9685a22179b284f90bf2d0a55e47b9] PUP.Optional.Spigot, HKU\S-1-5-21-3806172483-3420292488-1355022846-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{276B636A-DA96-4183-8AEF-F5E30F5B06D6}|URL, https://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=435371&p={searchTerms}, Quarantined, [462dfd2a3565cc6a126e0da9bb485ba5] PUP.Optional.BDYahoo, HKU\S-1-5-21-3806172483-3420292488-1355022846-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B83A893A-DBAC-4185-8C0B-68EF9D22E51B}|URL, http://search.yahoo.com/yhs/search?hspart=ddc&hsimp=yhs-ddc_bd&type=bl-bir-dd__alt__ddc_dss_bd_com&p={searchTerms}, Quarantined, [7af981a6f6a4053196c60a8e3cc7bb45] PUP.Optional.SafeSear.ShrtCln, HKU\S-1-5-21-3806172483-3420292488-1355022846-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BA1BE292-1D15-488B-934D-008742212380}|URL, http://www.safesear.ch/web/?type=20160515-za-sshome-ie-df&q={searchTerms}, Quarantined, [7df681a6dbbf3105f9684f8be51d26da] PUP.Optional.SafeSear.ShrtCln, HKU\S-1-5-21-3806172483-3420292488-1355022846-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BA1BE292-1D15-488B-934D-008742212380}|TopResultURLFallback, http://www.safesear.ch/web/?type=20160515-za-sshome-ie-df&q={searchTerms}, Quarantined, [83f04fd8c0dafb3b3c25f4e647bb9d63] PUP.Optional.SafeSearch.ShrtCln, HKU\S-1-5-21-3806172483-3420292488-1355022846-1001_Classes\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|FaviconPath, https://www.safesearch.net/favicon.ico, Quarantined, [b3c00621f3a7ba7c75ddfdcef80bef11] PUP.Optional.SafeSearch.ShrtCln, HKU\S-1-5-21-3806172483-3420292488-1355022846-1001_Classes\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|FaviconURLFallback, https://www.safesearch.net/favicon.ico, Quarantined, [a8cb081febaf7db93b176269d330fa06] PUP.Optional.SafeSearch.ShrtCln, HKU\S-1-5-21-3806172483-3420292488-1355022846-1001_Classes\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|TopResultURLFallback, https://www.safesearch.net/search?q={searchTerms}&p=s&m=ie&c=na&s=na, Quarantined, [a2d1ca5dafebe5518fc38c3fcc37de22] PUP.Optional.SafeSearch.ShrtCln, HKU\S-1-5-21-3806172483-3420292488-1355022846-1001_Classes\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|URL, https://www.safesearch.net/search?q={searchTerms}&p=sm=ie&c=na&s=na, Quarantined, [9fd40c1bc8d2af878cc65c6f0cf7b050] PUP.Optional.SafeSearch.ShrtCln, HKU\S-1-5-21-3806172483-3420292488-1355022846-1001_Classes\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BA1BE292-1D15-488B-934D-008742212380}|FaviconUrl, https://www.safesearch.net/favicon.ico, Quarantined, [a1d22cfb8911ac8a7dd5418a55ae5aa6] PUP.Optional.SafeSearch.ShrtCln, HKU\S-1-5-21-3806172483-3420292488-1355022846-1001_Classes\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BA1BE292-1D15-488B-934D-008742212380}|URL, https://www.safesearch.net/search?q={searchTerms}&p=s&m=ie&c=na&s=na, Quarantined, [185bab7c0694b680252d9338669da25e] Registry Data: 17 PUP.Optional.SafeSear.ShrtCln, HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\FIREFOX.EXE\SHELL\OPEN\COMMAND, "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" http://www.safesear.ch/?type=20160515-za-ff-sm, Good: (firefox.exe), Bad: ("C:\Program Files (x86)\Mozilla Firefox\firefox.exe" http://www.safesear.ch/?type=20160515-za-ff-sm),Replaced,[3d36f136059532046a44680f996b0ef2] PUP.Optional.SafeSear.ChrPRST, HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND, "C:\Program Files (x86)\Internet Explorer\iexplore.exe" http://www.safesear.ch/?type=20160515-za-ie-sm, Good: (iexplore.exe), Bad: ("C:\Program Files (x86)\Internet Explorer\iexplore.exe" http://www.safesear.ch/?type=20160515-za-ie-sm),Replaced,[f57e0e198f0b7abc901f5423c04403fd] PUP.Optional.SafeSearch.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, https://www.safesearch.net/?p=h&m=ie&c=na&s=na, Good: (www.google.com), Bad: (https://www.safesearch.net/?p=h&m=ie&c=na&s=na),Replaced,[a6cdff2807933303e0732a4d867e936d] PUP.Optional.SafeSearch.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, https://www.safesearch.net/?p=h&m=ie&c=na&s=na, Good: (www.google.com), Bad: (https://www.safesearch.net/?p=h&m=ie&c=na&s=na),Replaced,[d2a1a483069484b2dc7778ff15ef9769] PUP.Optional.SafeSear.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\CLIENTS\STARTMENUINTERNET\FIREFOX.EXE\SHELL\OPEN\COMMAND, "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" http://www.safesear.ch/?type=20160515-za-ff-sm, Good: (firefox.exe), Bad: ("C:\Program Files (x86)\Mozilla Firefox\firefox.exe" http://www.safesear.ch/?type=20160515-za-ff-sm),Replaced,[da99d5524b4f0c2a87276f08cf359b65] PUP.Optional.SafeSear.ChrPRST, HKLM\SOFTWARE\WOW6432NODE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND, "C:\Program Files (x86)\Internet Explorer\iexplore.exe" http://www.safesear.ch/?type=20160515-za-ie-sm, Good: (iexplore.exe), Bad: ("C:\Program Files (x86)\Internet Explorer\iexplore.exe" http://www.safesear.ch/?type=20160515-za-ie-sm),Replaced,[d1a2b374d0ca5cda26897403f90b649c] PUP.Optional.SafeSear.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, http://www.safesear.ch/?type=20160515-za-ie, Good: (www.google.com), Bad: (http://www.safesear.ch/?type=20160515-za-ie),Replaced,[f87b66c1851578be2586b2c5a26260a0] PUP.Optional.SafeSear.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://www.safesear.ch/?type=20160515-za-ie, Good: (www.google.com), Bad: (http://www.safesear.ch/?type=20160515-za-ie),Replaced,[1a59fb2c2e6ceb4b7c2fadca659f7987] PUP.Optional.SafeSear.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, http://www.safesear.ch/web/?type=20160515-za-sshome-ie-df&q={searchTerms}, Good: (www.google.com), Bad: (http://www.safesear.ch/web/?type=20160515-za-sshome-ie-df&q={searchTerms}),Replaced,[dd9641e64e4c81b58e1da6d18084c43c] PUP.Optional.SafeSearch.ShrtCln, HKU\S-1-5-18\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, https://www.safesearch.net/?p=h&m=ie&c=na&s=na, Good: (www.google.com), Bad: (https://www.safesearch.net/?p=h&m=ie&c=na&s=na),Replaced,[53202afde2b8e353d37f80f78b7922de] PUP.Optional.SafeSearch.ShrtCln, HKU\S-1-5-18\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, https://www.safesearch.net/?p=h&m=ie&c=na&s=na, Good: (www.google.com), Bad: (https://www.safesearch.net/?p=h&m=ie&c=na&s=na),Replaced,[b3c028ff37630d2984ceb1c6c34140c0] PUP.Optional.SafeSear.ShrtCln, HKU\S-1-5-21-3806172483-3420292488-1355022846-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, http://www.safesear.ch/web/?type=20160515-za-sshome-ie-df&q={searchTerms}, Good: (www.google.com), Bad: (http://www.safesear.ch/web/?type=20160515-za-sshome-ie-df&q={searchTerms}),Replaced,[145f37f04456221406a6c6b1b450db25] PUP.Optional.SafeSear.ShrtCln, HKU\S-1-5-21-3806172483-3420292488-1355022846-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Bar, http://www.safesear.ch/web/?type=20160515-za-sshome-ie-df&q={searchTerms}, Good: (www.google.com), Bad: (http://www.safesear.ch/web/?type=20160515-za-sshome-ie-df&q={searchTerms}),Replaced,[551e2304bae0350137755e19c341c23e] PUP.Optional.SafeSear.ShrtCln, HKU\S-1-5-21-3806172483-3420292488-1355022846-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://www.safesear.ch/?type=20160515-za-ie, Good: (www.google.com), Bad: (http://www.safesear.ch/?type=20160515-za-ie),Replaced,[7df6b96ee0bacf67d3d9473010f4ad53] PUP.Optional.SafeSear.ShrtCln, HKU\S-1-5-21-3806172483-3420292488-1355022846-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, http://www.safesear.ch/?type=20160515-za-ie, Good: (www.google.com), Bad: (http://www.safesear.ch/?type=20160515-za-ie),Replaced,[8ae9b86ffaa05bdbf7b52750b05405fb] PUP.Optional.SafeSear.ShrtCln, HKU\S-1-5-21-3806172483-3420292488-1355022846-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Default_Search_URL, http://www.safesear.ch/web/?type=20160515-za-sshome-ie-df&q={searchTerms}, Good: (www.google.com), Bad: (http://www.safesear.ch/web/?type=20160515-za-sshome-ie-df&q={searchTerms}),Replaced,[393af433bbdf72c47a33581f53b109f7] PUP.Optional.SafeSear.ShrtCln, HKU\S-1-5-21-3806172483-3420292488-1355022846-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|SearchAssistant, http://www.safesear.ch/web/?type=20160515-za-sshome-ie-df&q={searchTerms}, Good: (www.google.com), Bad: (http://www.safesear.ch/web/?type=20160515-za-sshome-ie-df&q={searchTerms}),Replaced,[7cf7ee39dbbfe15515987ef9ca3af40c] Folders: 31 PUP.Optional.Amonetize, C:\Users\Connor\AppData\Local\29978, Quarantined, [f47fd2557a20c175fafc1bbd729043bd], PUP.Optional.VBates, C:\Users\Connor\AppData\LocalLow\Company\Product\1.0, Quarantined, [cca729fe9505270f9701d4f0a95ae51b], PUP.Optional.VBates, C:\Users\Connor\AppData\LocalLow\Company\Product, Quarantined, [cca729fe9505270f9701d4f0a95ae51b], PUP.Optional.SafeSearch.ShrtCln, C:\Windows\System32\Tasks\Component System, Quarantined, [254eb275c2d8320423d485757e850af6], PUP.Optional.Simple, C:\Program Files (x86)\Simple, Quarantined, [11621b0c5644fc3a45b630ca35cee51b], PUP.Optional.Simple, C:\Program Files (x86)\Simple\.Npackd, Quarantined, [11621b0c5644fc3a45b630ca35cee51b], PUP.Optional.CrossRider, C:\Users\Connor\AppData\Roaming\Opera Software\Opera Stable\Extensions\papbadoldddalgcjcicnikcfenodpghp, Quarantined, [f57ef3341a80f24453aaba097a88f010], PUP.Optional.CrossRider, C:\Users\Connor\AppData\Roaming\Opera Software\Opera Stable\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.88_0, Quarantined, [f57ef3341a80f24453aaba097a88f010], PUP.Optional.CrossRider, C:\Users\Connor\AppData\Roaming\Opera Software\Opera Stable\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.88_0\extensionData, Quarantined, [f57ef3341a80f24453aaba097a88f010], PUP.Optional.CrossRider, C:\Users\Connor\AppData\Roaming\Opera Software\Opera Stable\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.88_0\icons, Quarantined, [f57ef3341a80f24453aaba097a88f010], PUP.Optional.CrossRider, C:\Users\Connor\AppData\Roaming\Opera Software\Opera Stable\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.88_0\icons\actions, Quarantined, [f57ef3341a80f24453aaba097a88f010], PUP.Optional.CrossRider, C:\Users\Connor\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan, Quarantined, [b6bdc166702aca6ccc46279d06fcd52b], PUP.Optional.CrossRider, C:\Users\Connor\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.282_0, Quarantined, [b6bdc166702aca6ccc46279d06fcd52b], PUP.Optional.CrossRider, C:\Users\Connor\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.282_0\extensionData, Quarantined, [b6bdc166702aca6ccc46279d06fcd52b], PUP.Optional.CrossRider, C:\Users\Connor\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.282_0\icons, Quarantined, [b6bdc166702aca6ccc46279d06fcd52b], PUP.Optional.CrossRider, C:\Users\Connor\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.282_0\icons\actions, Quarantined, [b6bdc166702aca6ccc46279d06fcd52b], PUP.Optional.SafeSearch.ShrtCln, C:\Users\Connor\AppData\Local\Fast Browser, Quarantined, [df945dca56441323cb9020a4e9190af6], PUP.Optional.SafeSearch.ShrtCln, C:\Users\Connor\AppData\Local\Fast Browser\Application, Quarantined, [df945dca56441323cb9020a4e9190af6], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\SearchProtect, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\SearchProtect\rep, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\Consent, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\libs, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\protection, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\protectionDS, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\settings, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\rep, Quarantined, [1e55ca5df3a78babebccb51258aacb35], Files: 130 PUP.Optional.Yontoo, C:\Users\Connor\AppData\Roaming\RHEng\A1AE31DDD4F24FEB91A0D8694E5823EF\setup.exe, Quarantined, [6c0700274e4c58dee29a7fe0e51c52ae], CrackTool.KMSPico, C:\Program Files\KMSpico\KMSELDI.exe, Quarantined, [72019295edad8fa7ccd44b604db4ae52], PUP.Optional.Yontoo, C:\ods.exe, Quarantined, [ea89ae798b0f082eb8c4095640c10cf4], PUP.Optional.Spigot, C:\Users\Connor\AppData\Local\Temp\offer-DC9B4958-F268-460C-AB04-CC404B8745C4.exe, Quarantined, [4b2805224159bd79ddcdc3d34eb6639d], PUP.Optional.OpenCandy, C:\Users\Connor\AppData\Local\Temp\HYD9C1D.tmp.1447630210\HTA\install.1447630210.zip, Quarantined, [80f3210641599e98a6b4ff5b33d1f010], PUP.Optional.OpenCandy, C:\Users\Connor\AppData\Local\Temp\HYD9C1D.tmp.1447630210\HTA\3rdparty\OCComSDK.dll, Quarantined, [4c276fb8e4b6ae887dddc694e81c24dc], PUP.Optional.Spigot, C:\Users\Connor\AppData\Local\Temp\nsfD46F.tmp\SM.dll, Quarantined, [2c470a1d613923137337276fc1430ff1], PUP.Optional.Magicbit, C:\Users\Connor\Downloads\UmmyVD-Web-Loader-[113-yt-9dpmNaVUXxc].exe, Quarantined, [9ad9c06786140531b52c2f6c9f62b54b], PUP.Optional.OpenCandy, C:\Users\Connor\Downloads\CheatEngine64.exe, Quarantined, [5b18f53269312511907cddb034cd06fa], HackTool.Hoylecann, C:\Users\Connor\Downloads\Hoic.rar, Quarantined, [5d1675b2019938fe1e45730717e9af51], PUP.Optional.InstallCore, C:\Users\Connor\Downloads\LoveROMs_Pokemon - Emerald Version (U).exe, Quarantined, [215239eeacee93a36519a09b7091837d], HackTool.Hoylecann, C:\Users\Connor\Downloads\rebuilt.Hoic.rar, Quarantined, [0073c067c6d4c86eb1b225551ce426da], PUP.Optional.SearchSuite, C:\Users\Connor\Downloads\TorchSetup-r28-n-bc.exe, Quarantined, [9dd62304b0ea3ff7e31e60d5ac5547b9], PUP.Optional.Amonetize, C:\Users\Connor\AppData\Local\29978\Updater.xml, Quarantined, [f47fd2557a20c175fafc1bbd729043bd], PUP.Optional.Like, C:\Users\Connor\AppData\Roaming\Mozilla\Firefox\Profiles\j72074fr.default-1459466698315\extensions\jid1-vS7biDmom8YxhA@jetpack.xpi, Quarantined, [e68d3dea99015dd99d1484241ae96f91], PUP.Optional.VBates, C:\Users\Connor\AppData\LocalLow\Company\Product\1.0\localStorageIE.txt, Quarantined, [cca729fe9505270f9701d4f0a95ae51b], PUP.Optional.VBates, C:\Users\Connor\AppData\LocalLow\Company\Product\1.0\localStorageIE_backup.txt, Quarantined, [cca729fe9505270f9701d4f0a95ae51b], PUP.Optional.BestPriceNinja, C:\Users\Connor\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_pstatic.bestpriceninja.com_0.localstorage, Quarantined, [0c676fb88f0bb08688c215cd788b8f71], PUP.Optional.BestPriceNinja, C:\Users\Connor\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_pstatic.bestpriceninja.com_0.localstorage-journal, Quarantined, [4c2779ae5f3b989e7dcd8c56b84ba45c], PUP.Optional.Yontoo, C:\ods.exe.config, Quarantined, [274c1512aaf0280eb6c431b2877ca15f], PUP.Optional.CrossRider, C:\Users\Connor\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage, Quarantined, [a2d149ded8c25fd73ecbe208a85bbc44], PUP.Optional.CrossRider, C:\Users\Connor\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal, Quarantined, [5e1525023c5e49edd930c02a659e07f9], PUP.Optional.SafeSearch.ShrtCln, C:\Windows\System32\Tasks\Component System\Component, Quarantined, [254eb275c2d8320423d485757e850af6], PUP.Optional.Simple, C:\Program Files (x86)\Simple\Simple.dll, Quarantined, [11621b0c5644fc3a45b630ca35cee51b], PUP.Optional.Simple, C:\Program Files (x86)\Simple\uninst.exe, Quarantined, [11621b0c5644fc3a45b630ca35cee51b], PUP.Optional.Simple, C:\Program Files (x86)\Simple\.Npackd\Uninstall.bat, Quarantined, [11621b0c5644fc3a45b630ca35cee51b], PUP.Optional.CrossRider, C:\Users\Connor\AppData\Roaming\Opera Software\Opera Stable\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.88_0\background.html, Quarantined, [f57ef3341a80f24453aaba097a88f010], PUP.Optional.CrossRider, C:\Users\Connor\AppData\Roaming\Opera Software\Opera Stable\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.88_0\chromeCoreFilesIndex.txt, Quarantined, [f57ef3341a80f24453aaba097a88f010], PUP.Optional.CrossRider, C:\Users\Connor\AppData\Roaming\Opera Software\Opera Stable\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.88_0\manifest.json, Quarantined, [f57ef3341a80f24453aaba097a88f010], PUP.Optional.CrossRider, C:\Users\Connor\AppData\Roaming\Opera Software\Opera Stable\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.88_0\popup.html, Quarantined, [f57ef3341a80f24453aaba097a88f010], PUP.Optional.CrossRider, C:\Users\Connor\AppData\Roaming\Opera Software\Opera Stable\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.88_0\Settings.json, Quarantined, [f57ef3341a80f24453aaba097a88f010], PUP.Optional.CrossRider, C:\Users\Connor\AppData\Roaming\Opera Software\Opera Stable\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.88_0\extensionData\manifest.xml, Quarantined, [f57ef3341a80f24453aaba097a88f010], PUP.Optional.CrossRider, C:\Users\Connor\AppData\Roaming\Opera Software\Opera Stable\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.88_0\extensionData\plugins.json, Quarantined, [f57ef3341a80f24453aaba097a88f010], PUP.Optional.CrossRider, C:\Users\Connor\AppData\Roaming\Opera Software\Opera Stable\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.88_0\icons\icon128.png, Quarantined, [f57ef3341a80f24453aaba097a88f010], PUP.Optional.CrossRider, C:\Users\Connor\AppData\Roaming\Opera Software\Opera Stable\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.88_0\icons\icon16.png, Quarantined, [f57ef3341a80f24453aaba097a88f010], PUP.Optional.CrossRider, C:\Users\Connor\AppData\Roaming\Opera Software\Opera Stable\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.88_0\icons\icon48.png, Quarantined, [f57ef3341a80f24453aaba097a88f010], PUP.Optional.CrossRider, C:\Users\Connor\AppData\Roaming\Opera Software\Opera Stable\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.88_0\icons\actions\1.png, Quarantined, [f57ef3341a80f24453aaba097a88f010], PUP.Optional.CrossRider, C:\Users\Connor\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.282_0\background.html, Quarantined, [b6bdc166702aca6ccc46279d06fcd52b], PUP.Optional.CrossRider, C:\Users\Connor\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.282_0\chromeCoreFilesIndex.txt, Quarantined, [b6bdc166702aca6ccc46279d06fcd52b], PUP.Optional.CrossRider, C:\Users\Connor\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.282_0\manifest.json, Quarantined, [b6bdc166702aca6ccc46279d06fcd52b], PUP.Optional.CrossRider, C:\Users\Connor\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.282_0\popup.html, Quarantined, [b6bdc166702aca6ccc46279d06fcd52b], PUP.Optional.CrossRider, C:\Users\Connor\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.282_0\Settings.json, Quarantined, [b6bdc166702aca6ccc46279d06fcd52b], PUP.Optional.CrossRider, C:\Users\Connor\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.282_0\extensionData\manifest.xml, Quarantined, [b6bdc166702aca6ccc46279d06fcd52b], PUP.Optional.CrossRider, C:\Users\Connor\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.282_0\extensionData\plugins.json, Quarantined, [b6bdc166702aca6ccc46279d06fcd52b], PUP.Optional.CrossRider, C:\Users\Connor\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.282_0\icons\icon128.png, Quarantined, [b6bdc166702aca6ccc46279d06fcd52b], PUP.Optional.CrossRider, C:\Users\Connor\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.282_0\icons\icon16.png, Quarantined, [b6bdc166702aca6ccc46279d06fcd52b], PUP.Optional.CrossRider, C:\Users\Connor\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.282_0\icons\icon48.png, Quarantined, [b6bdc166702aca6ccc46279d06fcd52b], PUP.Optional.CrossRider, C:\Users\Connor\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.282_0\icons\actions\1.png, Quarantined, [b6bdc166702aca6ccc46279d06fcd52b], PUP.Optional.SafeSearch.ShrtCln, C:\Users\Connor\AppData\Local\Fast Browser\Application\am.ico, Quarantined, [df945dca56441323cb9020a4e9190af6], PUP.Optional.SafeSearch.ShrtCln, C:\Users\Connor\AppData\Local\Fast Browser\Application\ch.ico, Quarantined, [df945dca56441323cb9020a4e9190af6], PUP.Optional.SafeSearch.ShrtCln, C:\Users\Connor\AppData\Local\Fast Browser\Application\cl.ico, Quarantined, [df945dca56441323cb9020a4e9190af6], PUP.Optional.SafeSearch.ShrtCln, C:\Users\Connor\AppData\Local\Fast Browser\Application\eb.ico, Quarantined, [df945dca56441323cb9020a4e9190af6], PUP.Optional.SafeSearch.ShrtCln, C:\Users\Connor\AppData\Local\Fast Browser\Application\es.ico, Quarantined, [df945dca56441323cb9020a4e9190af6], PUP.Optional.SafeSearch.ShrtCln, C:\Users\Connor\AppData\Local\Fast Browser\Application\fb.ico, Quarantined, [df945dca56441323cb9020a4e9190af6], PUP.Optional.SafeSearch.ShrtCln, C:\Users\Connor\AppData\Local\Fast Browser\Application\ff.ico, Quarantined, [df945dca56441323cb9020a4e9190af6], PUP.Optional.SafeSearch.ShrtCln, C:\Users\Connor\AppData\Local\Fast Browser\Application\gm.ico, Quarantined, [df945dca56441323cb9020a4e9190af6], PUP.Optional.SafeSearch.ShrtCln, C:\Users\Connor\AppData\Local\Fast Browser\Application\ie.ico, Quarantined, [df945dca56441323cb9020a4e9190af6], PUP.Optional.SafeSearch.ShrtCln, C:\Users\Connor\AppData\Local\Fast Browser\Application\nf.ico, Quarantined, [df945dca56441323cb9020a4e9190af6], PUP.Optional.SafeSearch.ShrtCln, C:\Users\Connor\AppData\Local\Fast Browser\Application\search.ico, Quarantined, [df945dca56441323cb9020a4e9190af6], PUP.Optional.SafeSearch.ShrtCln, C:\Users\Connor\AppData\Local\Fast Browser\Application\yt.ico, Quarantined, [df945dca56441323cb9020a4e9190af6], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\settings.html, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\style.css, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\Consent\consent.css, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\Consent\consent.html, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\Consent\consent.js, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\Consent\defaults.js, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bgUninstall.png, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\hez-def-grey.png, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\Apply-default.png, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\Apply-onclick.png, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\Apply-Rollover.png, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bg-dia.png, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bg-uninstall.png, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bg-with-logo.png, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bg.png, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bgNotif.png, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bgSettings.png, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bgSettingsDS.png, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\btnBlue.png, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\btnClose.png, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\btnSilver.png, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\button-bg.png, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\checkbox.png, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\checkbox_checked.png, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\checkbox_def.png, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\close-win-def.png, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\close-win-over-click.png, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\gray-bg.png, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\hez-def.png, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\hez-selected.png, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\hez.png, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\icon-win.png, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\info-icon.png, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\menu-rollover.png, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\menu-selected.png, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\radio-button-def.png, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\radio-button-selected.png, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\radio-button.png, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\radio-button2.png, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\Settings-icon.png, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\SP_DialogBG.png, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\text-field.png, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\v.png, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\x.png, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\defaults.js, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\DialogAPI.js, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\dialogUtils.js, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\jquery.1.7.1.min.js, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\json2.min.js, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\main.js, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\protection\defaults.js, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\protection\protection.css, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\protection\protection.html, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\protection\protection.js, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\protectionDS\defaults.js, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\protectionDS\protectionDS.css, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\protectionDS\protectionDS.html, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\protectionDS\protectionDS.js, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\settings\defaults.js, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\settings\settings.css, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\settings\settings.html, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\settings\settings.js, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall\defaults.js, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall\uninstall.css, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall\uninstall.html, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.SearchProtect.AppFlsh, C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall\uninstall.js, Quarantined, [1e55ca5df3a78babebccb51258aacb35], PUP.Optional.Conduit, C:\prefs.js, Quarantined, [b6bd74b3e0ba66d039f2bede719352ae], PUP.Optional.SafeSear.ShrtCln, C:\Users\Connor\AppData\Roaming\Mozilla\Firefox\Profiles\j72074fr.default-1459466698315\prefs.js, Good: (), Bad: (user_pref("browser.newtab.url", "http://www.safesear.ch/?type=20160515-za-ff-nt");), Replaced,[e19261c6dfbb221452b5cbcef014659b] PUP.Optional.SafeSear.ShrtCln, C:\Users\Connor\AppData\Roaming\Mozilla\Firefox\Profiles\j72074fr.default-1459466698315\prefs.js, Good: (user_pref("browser.startup.homepage", "https://www.malwarebytes.org/restorebrowser/), Bad: (user_pref("browser.startup.homepage", "http://www.safesear.ch), Replaced,[4f24c95e27733bfbe5c8fba4e91b45bb] PUP.Optional.SafeSearch.ShrtCln, C:\Users\Connor\AppData\Roaming\Mozilla\Firefox\Profiles\j72074fr.default-1459466698315\searchplugins\safesearch.xml, Quarantined, [4e25ec3bacee241233d3cecf1aea58a8], Physical Sectors: 0 (No malicious items detected) (end)