Avatar billede kafka23 Juniormester
23. marts 2015 - 10:55 Der er 9 kommentarer

Virus ændrer min startside i browser (istartsurf)

Kære alle.
Her er resultatet af malwareantibytes log:
Jeg fjernede det hele, men "istartsurf" bliver ved med at dukke op. Hvad gør jeg nu?


Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Dato: 18-03-2015
Scan Tid: 19:46:21
Logfil:
Administrator: Ja

Version: 2.00.4.1028
Malware Database: v2015.03.18.05
Rootkit Database: v2015.02.25.01
Licens: Gratis
Malware Protection: Handicappede
Ondsindet Hjemmeside Beskyttelse: Handicappede
Selvbeskyttelse: Handicappede

OS: Windows 7 Service Pack 1
CPU: x86
Fil system: NTFS
Bruger: bruger

Scan Type: Trussel Scanning
Resultater: Fuldført
Objekter Scannet: 369417
Forløbet Tid: 21 min, 38 sek

Hukommelse: Aktiveret
Startop: Aktiveret
Filsystem: Aktiveret
Arkiver: Aktiveret
Rootkits: Handicappede
Heuristics: Aktiveret
PUP: Advare
PUM: Aktiveret

Processer: 6
PUP.Optional.XTab.A, C:\Program Files\XTab\ProtectService.exe, 5928, , [4eafd96d2d5d6dc9004cd53aef137888]
PUP.Optional.ELEX, C:\Program Files\XTab\HPNotify.exe, 6248, , [689557ef96f4d0666ec06fc1cd356e92]
PUP.Optional.XTab.A, C:\Program Files\XTab\CmdShell.exe, 6088, , [e419b88ebbcf3ff7aee24b6f4ab9a25e]
PUP.Optional.WindowsMangerProtect.A, C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe, 7692, , [11ecba8c6525af87b78ef8c60af956aa]
PUP.Optional.WNetEnhance.A, C:\Program Files\WNetEnhance\WNetEnhance Internet Enhancer\InternetEnhancerService.exe, 2268, , [4db0f84edeac3006ad2643ffbc49d030]
PUP.Optional.WNetEnhance.A, C:\Program Files\WNetEnhance\WNetEnhance Internet Enhancer\InternetEnhancer.exe, 5076, , [f00d073fc0cac2743c70bbf015ee22de]

Moduler: 13
PUP.Optional.BrowserWatch, C:\Program Files\XTab\BrowerWatchFF.dll, , [31cc5fe7f29869cd58aa363850b00df3],
PUP.Optional.BrowserWatch, C:\Program Files\XTab\BrowerWatchCH.dll, , [56a715319eeca4924fb3422c669ab64a],
PUP.Optional.XTab.A, C:\Program Files\XTab\BrowserAction.dll, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\IeWatchDog.dll, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\msvcp110.dll, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\msvcp110.dll, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\msvcp110.dll, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\msvcr110.dll, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\msvcr110.dll, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\msvcr110.dll, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.WNetEnhance.A, C:\Program Files\WNetEnhance\WNetEnhance Internet Enhancer\ApiHandlr.dll, , [f00d073fc0cac2743c70bbf015ee22de],
PUP.Optional.WNetEnhance.A, C:\Program Files\WNetEnhance\WNetEnhance Internet Enhancer\FiddlerCore.dll, , [f00d073fc0cac2743c70bbf015ee22de],
PUP.Optional.WNetEnhance.A, C:\Program Files\WNetEnhance\WNetEnhance Internet Enhancer\Newtonsoft.Json.dll, , [f00d073fc0cac2743c70bbf015ee22de],

Nøgle Register: 39
PUP.Optional.XTab.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\IHProtect Service, , [4eafd96d2d5d6dc9004cd53aef137888],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\CLASSES\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, , [e617bc8a7119c96d706386af56aa0000],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}, , [e617bc8a7119c96d706386af56aa0000],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}, , [e617bc8a7119c96d706386af56aa0000],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, , [e617bc8a7119c96d706386af56aa0000],
PUP.Optional.SupTab.A, HKU\S-1-5-21-2453457267-1146046984-4139807658-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, , [e617bc8a7119c96d706386af56aa0000],
PUP.Optional.SupTab.A, HKU\S-1-5-21-2453457267-1146046984-4139807658-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, , [e617bc8a7119c96d706386af56aa0000],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\CLASSES\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}\INPROCSERVER32, , [e617bc8a7119c96d706386af56aa0000],
PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\mystartsearch uninstall, , [649993b3800af14515b82f90d92ac63a],
PUP.Optional.IHProtect.A, HKLM\SOFTWARE\IHProtect, , [47b676d0355562d4434cdedc4eb5ca36],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\Iminent, , [bb427acc0e7c1f174b8c609fee15de22],
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\istartsurfSoftware, , [807d0f37c8c280b654adab2709faa15f],
PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\mystartsearchSoftware, , [22dbb294d4b6181e66fcfcc6cf34748c],
PUP.Optional.Wajam.A, HKLM\SOFTWARE\WajIntEnhance, , [1ce1da6cfe8cae88f088c9edf50ee719],
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, , [06f71e283654092d0a44ab750df8f50b],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\IMBoosterARP, , [bd4026201f6b61d5fa42feb51de636ca],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\IminentToolbar, , [659857efadddae8848f3189b5aa9d030],
PUP.Optional.Vosteran, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Vosteran.com, , [4faee2642169f6405683b60cb54e8f71],
PUP.Optional.Wajam.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\WajIntEnhance, , [5ca152f47d0dc76f97a2347fa26160a0],
PUP.Optional.Booster.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{1146AC44-2F03-4431-B4FD-889BC837521F}{f93004be}, , [21dcbe8862281c1a3ff936a508fb20e0],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\SUPTAB, , [9c614600c7c3b87e45098f419073837d],
PUP.Optional.WindowsMangerProtect.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WindowsMangerProtect, , [11ecba8c6525af87b78ef8c60af956aa],
PUP.Optional.WNetEnhance.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WNetEnhance Service, , [4db0f84edeac3006ad2643ffbc49d030],
PUP.Optional.WindowsMangerProtect.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\APPLICATION\WindowsMangerProtect, , [a756a79fc9c1c67078114a7bed167e82],
PUP.Optional.HomeTab.A, HKU\S-1-5-21-2453457267-1146046984-4139807658-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\HomeTab, , [65982422a5e573c306eb8d55f112e61a],
PUP.Optional.SearchProtect.A, HKU\S-1-5-21-2453457267-1146046984-4139807658-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SearchProtectWS, , [b845ab9b4e3c75c155eae1d2030059a7],
PUP.Optional.TNT.A, HKU\S-1-5-21-2453457267-1146046984-4139807658-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\TNT2, , [b647291de0aa44f2e13f298cdd26eb15],
PUP.Optional.Wajam.A, HKU\S-1-5-21-2453457267-1146046984-4139807658-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\WajIEnhance, , [926beb5b7d0d7bbb80dc9e1e08fb2fd1],
PUP.Optional.Wajam.A, HKU\S-1-5-21-2453457267-1146046984-4139807658-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\WajIntEnhance, , [fffedf67068459dd1b5e05b116ed3ec2],
PUP.Optional.Qone8, HKU\S-1-5-21-2453457267-1146046984-4139807658-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, , [d726f84ef8924fe794b940e0de27936d],
PUP.Optional.Iminent.A, HKU\S-1-5-21-2453457267-1146046984-4139807658-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\IMBoosterARP, , [39c4b19512787db9aa7cf3bc0cf718e8],
PUP.Optional.Iminent.A, HKU\S-1-5-21-2453457267-1146046984-4139807658-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\IminentToolbar, , [9c61ab9b2d5d81b56abd5b540300b749],
PUP.Optional.Linkey.A, HKU\S-1-5-21-2453457267-1146046984-4139807658-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Linkey, , [2ad38bbbc3c7ad8949df5b54976c8b75],
PUP.Optional.Vosteran.A, HKU\S-1-5-21-2453457267-1146046984-4139807658-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Vosteran.com, , [906d2620c9c1ac8ad356eac526dd8a76],
PUP.Optional.Wajam.A, HKU\S-1-5-21-2453457267-1146046984-4139807658-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\WajIntEnhance, , [dc21b78f18724ee83febb5fa3bc82cd4],
PUP.Optional.IStart.A, HKU\S-1-5-21-2453457267-1146046984-4139807658-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MOZILLA\EXTENDS, , [33ca53f36d1de056953bdfd0719211ef],
PUP.Optional.Wajam.A, HKU\S-1-5-21-2453457267-1146046984-4139807658-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SIMPLYTECH\HomeTabWajIEnhance, , [f5084402c6c4ca6cdc5ee1d2ad566b95],
PUP.Optional.Wajam.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\WNetEnhance, , [ac516adc4e3cd6608cd196da19eafc04],
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\istartsurf uninstall, , [da231f2756342f078e94a1eea360f20e],

Værdi Register: 5
PUP.Optional.SearchEngine.A, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS|searchengine@gmail.com, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\searchengine@gmail.com, , [a7568fb70f7bfe38f7274af7729351af]
PUP.Optional.IStart.A, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS|istart_ffnt@gmail.com, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com, , [1ce155f1454580b6df2837787093f808]
PUP.Optional.SupTab.A, HKLM\SOFTWARE\SUPTAB|ptid, smt, , [9c614600c7c3b87e45098f419073837d]
PUP.Optional.LiveSupport, HKU\S-1-5-21-2453457267-1146046984-4139807658-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|LiveSupport, "C:\Program Files\LiveSupport\LiveSupport.exe" /noshow /log, , [1be2a6a02961fa3c4fc5965cc3401ce4]
PUP.Optional.IStart.A, HKU\S-1-5-21-2453457267-1146046984-4139807658-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MOZILLA\EXTENDS|appid, istart_ffnt@gmail.com, , [33ca53f36d1de056953bdfd0719211ef]

Data Register: 9
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\FIREFOX.EXE\SHELL\OPEN\COMMAND, "C:\Program Files\Mozilla Firefox\firefox.exe" http://www.istartsurf.com/?type=sc&ts=1426703931&from=smt&uid=ST3250310AS_6RYH19Q6, Godt:)firefox.exe), Bad:)"C:\Program Files\Mozilla Firefox\firefox.exe" http://www.istartsurf.com/?type=sc&ts=1426703931&from=smt&uid=ST3250310AS_6RYH19Q6),,[16e7a4a28307c670d7cf02e080855da3]
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\GOOGLE CHROME\SHELL\OPEN\COMMAND, "C:\Program Files\Google\Chrome\Application\chrome.exe" http://www.istartsurf.com/?type=sc&ts=1426703931&from=smt&uid=ST3250310AS_6RYH19Q6, Godt:)Chrome.exe), Bad:)"C:\Program Files\Google\Chrome\Application\chrome.exe" http://www.istartsurf.com/?type=sc&ts=1426703931&from=smt&uid=ST3250310AS_6RYH19Q6),,[07f60b3b1278c86ed5d40fd391747090]
PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND, C:\Program Files\Internet Explorer\iexplore.exe http://www.mystartsearch.com/?type=sc&ts=1426703778&from=smt&uid=ST3250310AS_6RYH19Q6, Godt:)iexplore.exe), Bad:)C:\Program Files\Internet Explorer\iexplore.exe http://www.mystartsearch.com/?type=sc&ts=1426703778&from=smt&uid=ST3250310AS_6RYH19Q6),,[b14c81c5c2c8e4527c12b031f70e27d9]
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, http://www.istartsurf.com/web/?type=ds&ts=1426703931&from=smt&uid=ST3250310AS_6RYH19Q6&q={searchTerms}, Godt:)www.google.com), Bad:)http://www.istartsurf.com/web/?type=ds&ts=1426703931&from=smt&uid=ST3250310AS_6RYH19Q6&q={searchTerms}),,[bb42cb7b0a80fe3822e123bead588977]
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, http://www.istartsurf.com/?type=hp&ts=1426703931&from=smt&uid=ST3250310AS_6RYH19Q6, Godt:)www.google.com), Bad:)http://www.istartsurf.com/?type=hp&ts=1426703931&from=smt&uid=ST3250310AS_6RYH19Q6),,[c83560e6deac52e4ad566081b550a957]
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://www.istartsurf.com/?type=hp&ts=1426703931&from=smt&uid=ST3250310AS_6RYH19Q6, Godt:)www.google.com), Bad:)http://www.istartsurf.com/?type=hp&ts=1426703931&from=smt&uid=ST3250310AS_6RYH19Q6),,[dc21c284830789ad768dfbe607fe669a]
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, http://www.istartsurf.com/web/?type=ds&ts=1426703931&from=smt&uid=ST3250310AS_6RYH19Q6&q={searchTerms}, Godt:)www.google.com), Bad:)http://www.istartsurf.com/web/?type=ds&ts=1426703931&from=smt&uid=ST3250310AS_6RYH19Q6&q={searchTerms}),,[46b774d24b3f49edaa596081729358a8]
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Godt:){0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Bad:){33BB0A4E-99AF-4226-BDF6-49120163DE86}),,[01fc5fe7becc0b2b8bfb8a6363a2c040]
PUP.Optional.IStartSurf.A, HKU\S-1-5-21-2453457267-1146046984-4139807658-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, http://www.istartsurf.com/?type=hp&ts=1426703931&from=smt&uid=ST3250310AS_6RYH19Q6, Godt:)www.google.com), Bad:)http://www.istartsurf.com/?type=hp&ts=1426703931&from=smt&uid=ST3250310AS_6RYH19Q6),,[bf3ea3a30387270fe8191bc67194e719]

Mapper: 78
PUP.Optional.XTab.A, C:\Program Files\XTab, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\skin, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\skin\image, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\img, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\js, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\_locales, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\_locales\en-US, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\_locales\es-419, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\_locales\es-ES, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\_locales\fr-BE, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\_locales\fr-CA, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\_locales\fr-CH, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\_locales\fr-FR, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\_locales\fr-LU, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\_locales\it-CH, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\_locales\it-IT, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\_locales\pl, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\_locales\pt, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\_locales\pt-BR, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\_locales\ru, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\_locales\ru-MO, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\_locales\tr-TR, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\_locales\vi-VI, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\_locales\zh-CN, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\_locales\zh-TW, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.MyStartSearch.A, C:\Users\bruger\AppData\Roaming\mystartsearch, , [649993b3800af14515b82f90d92ac63a],
PUP.Optional.MyStartSearch.A, C:\Users\bruger\AppData\Roaming\mystartsearch\images, , [649993b3800af14515b82f90d92ac63a],
PUP.Optional.MyStartSearch.A, C:\Users\bruger\AppData\Roaming\mystartsearch\images\code, , [649993b3800af14515b82f90d92ac63a],
PUP.Optional.Wajam.A, C:\Program Files\Wajam, , [ac516adc4e3cd6608cd196da19eafc04],
PUP.Optional.WPM.A, C:\ProgramData\WindowsMangerProtect, , [bf3e96b0cebc7cba33757710bf446d93],
PUP.Optional.WPM.A, C:\ProgramData\WindowsMangerProtect\update, , [bf3e96b0cebc7cba33757710bf446d93],
PUP.Optional.IStartSurf.A, C:\Users\bruger\AppData\Roaming\istartsurf, , [da231f2756342f078e94a1eea360f20e],
PUP.Optional.IStartSurf.A, C:\Users\bruger\AppData\Roaming\istartsurf\images, , [da231f2756342f078e94a1eea360f20e],
PUP.Optional.IStartSurf.A, C:\Users\bruger\AppData\Roaming\istartsurf\images\code, , [da231f2756342f078e94a1eea360f20e],
PUP.Optional.CoupScanner.A, C:\ProgramData\CoupScanner, , [2bd259edd6b42313a9d433664ab9f60a],
PUP.Optional.IHProtectUpDate.A, C:\ProgramData\IHProtectUpDate, , [e51863e31f6b2016b08e564e7d864bb5],
PUP.Optional.IHProtectUpDate.A, C:\ProgramData\IHProtectUpDate\update, , [e51863e31f6b2016b08e564e7d864bb5],
PUP.Optional.SearchEngine.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\searchengine@gmail.com, , [0bf211355f2b3105ddca41679370e51b],
PUP.Optional.SearchEngine.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\searchengine@gmail.com\chrome, , [0bf211355f2b3105ddca41679370e51b],
PUP.Optional.SearchEngine.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\searchengine@gmail.com\chrome\content, , [0bf211355f2b3105ddca41679370e51b],
PUP.Optional.SearchEngine.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\searchengine@gmail.com\chrome\skin, , [0bf211355f2b3105ddca41679370e51b],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\content, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\content\include, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\content\include\tools, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\content\js, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\content\js\lib, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\content\js\module, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\content\js\pack, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\locale, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\locale\en, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\locale\en-US, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\locale\es, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\locale\es-419, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\locale\fr, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\locale\fr-BE, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\locale\fr-CA, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\locale\fr-CH, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\locale\fr-LU, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\locale\it, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\locale\it-CH, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\locale\pl, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\locale\pt-BR, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\locale\ru, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\locale\ru-MO, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\locale\tr, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\locale\vi, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\locale\zh-CN, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\locale\zh-TW, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\skin, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\defaults, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\defaults\preferences, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\modules, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.WNetEnhance.A, C:\Program Files\WNetEnhance, , [f00d073fc0cac2743c70bbf015ee22de],
PUP.Optional.WNetEnhance.A, C:\Program Files\WNetEnhance\Logos, , [f00d073fc0cac2743c70bbf015ee22de],
PUP.Optional.WNetEnhance.A, C:\Program Files\WNetEnhance\WNetEnhance Internet Enhancer, , [f00d073fc0cac2743c70bbf015ee22de],

Filer: 249
PUP.Optional.XTab.A, C:\Program Files\XTab\ProtectService.exe, , [4eafd96d2d5d6dc9004cd53aef137888],
PUP.Optional.ELEX, C:\Program Files\XTab\HPNotify.exe, , [689557ef96f4d0666ec06fc1cd356e92],
PUP.Optional.BrowserWatch, C:\Program Files\XTab\BrowerWatchFF.dll, , [31cc5fe7f29869cd58aa363850b00df3],
PUP.Optional.BrowserWatch, C:\Program Files\XTab\BrowerWatchCH.dll, , [56a715319eeca4924fb3422c669ab64a],
PUP.Optional.SupTab.A, C:\Program Files\XTab\SupTab.dll, , [e617bc8a7119c96d706386af56aa0000],
PUP.Optional.LiveSupport, C:\Users\bruger\AppData\Local\Temp\LiveSupport_setup.exe, , [d429a79f5f2bd4624e54e8f1f40d18e8],
PUP.Optional.MyStartSearch.A, C:\Users\bruger\AppData\Local\Temp\smt_mystartsearch.exe, , [d62751f5f7930b2b1b3551d5d23429d7],
PUP.Optional.BrowserWatch, C:\Users\bruger\AppData\Local\Temp\B934D573F69tmp\tmp\XTab_Setup1998.exe, , [5e9f1d29ccbe46f0f70bb4bafa0613ed],
PUP.Optional.Somoto, C:\Users\bruger\AppData\Local\Temp\nscDAD6.tmp\setup27704.exe, , [c33a2f177a10da5cb82e9c25a16448b8],
PUP.Optional.XTab.A, C:\Program Files\XTab\uninstall.exe, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\BrowserAction.dll, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\CmdShell.exe, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\conf, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\ffsearch_toolbar!1.0.0.1025.xpi, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\IeWatchDog.dll, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\install.data, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\msvcp110.dll, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\msvcr110.dll, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\searchProvider.xml, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\skin\about.png, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\skin\about_bk.png, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\skin\btn.png, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\skin\btn_apply.png, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\skin\close.png, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\skin\conf.xml, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\skin\conf_back.png, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\skin\input_bk.png, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\skin\logo.png, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\skin\main.xml, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\skin\radio_1.png, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\skin\radio_2.png, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\skin\rigth_arrow.png, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\skin\settings.png, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\data.html, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\indexIE.html, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\indexIE8.html, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\main.css, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\ver.txt, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\img\google_trends.png, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\img\icon128.png, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\img\icon16.png, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\img\icon48.png, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\img\loading.gif, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\img\logo32.ico, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\js\common.js, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\js\ga.js, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\js\jquery-1.11.0.min.js, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\js\jquery.autocomplete.js, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\js\js.js, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\js\library.js, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\js\xagainit-ie8.js, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\js\xagainit2.0.js, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\_locales\en-US\messages.json, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\_locales\es-419\messages.json, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\_locales\es-ES\messages.json, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\_locales\fr-BE\messages.json, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\_locales\fr-CA\messages.json, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\_locales\fr-CH\messages.json, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\_locales\fr-FR\messages.json, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\_locales\fr-LU\messages.json, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\_locales\it-CH\messages.json, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\_locales\it-IT\messages.json, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\_locales\pl\messages.json, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\_locales\pt\messages.json, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\_locales\pt-BR\messages.json, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\_locales\ru\messages.json, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\_locales\ru-MO\messages.json, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\_locales\tr-TR\messages.json, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\_locales\vi-VI\messages.json, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\_locales\zh-CN\messages.json, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.XTab.A, C:\Program Files\XTab\web\_locales\zh-TW\messages.json, , [e419b88ebbcf3ff7aee24b6f4ab9a25e],
PUP.Optional.MyStartSearch.A, C:\Users\bruger\AppData\Roaming\mystartsearch\MessageBox.xml, , [649993b3800af14515b82f90d92ac63a],
PUP.Optional.MyStartSearch.A, C:\Users\bruger\AppData\Roaming\mystartsearch\422.json, , [649993b3800af14515b82f90d92ac63a],
PUP.Optional.MyStartSearch.A, C:\Users\bruger\AppData\Roaming\mystartsearch\uninstallDlg2.xml, , [649993b3800af14515b82f90d92ac63a],
PUP.Optional.MyStartSearch.A, C:\Users\bruger\AppData\Roaming\mystartsearch\UninstallManager.exe, , [649993b3800af14515b82f90d92ac63a],
PUP.Optional.MyStartSearch.A, C:\Users\bruger\AppData\Roaming\mystartsearch\images\bg.png, , [649993b3800af14515b82f90d92ac63a],
PUP.Optional.MyStartSearch.A, C:\Users\bruger\AppData\Roaming\mystartsearch\images\bg1.png, , [649993b3800af14515b82f90d92ac63a],
PUP.Optional.MyStartSearch.A, C:\Users\bruger\AppData\Roaming\mystartsearch\images\bk_shadow.png, , [649993b3800af14515b82f90d92ac63a],
PUP.Optional.MyStartSearch.A, C:\Users\bruger\AppData\Roaming\mystartsearch\images\button.png, , [649993b3800af14515b82f90d92ac63a],
PUP.Optional.MyStartSearch.A, C:\Users\bruger\AppData\Roaming\mystartsearch\images\button1.png, , [649993b3800af14515b82f90d92ac63a],
PUP.Optional.MyStartSearch.A, C:\Users\bruger\AppData\Roaming\mystartsearch\images\checkbox.png, , [649993b3800af14515b82f90d92ac63a],
PUP.Optional.MyStartSearch.A, C:\Users\bruger\AppData\Roaming\mystartsearch\images\checkbox_select.png, , [649993b3800af14515b82f90d92ac63a],
PUP.Optional.MyStartSearch.A, C:\Users\bruger\AppData\Roaming\mystartsearch\images\checked.png, , [649993b3800af14515b82f90d92ac63a],
PUP.Optional.MyStartSearch.A, C:\Users\bruger\AppData\Roaming\mystartsearch\images\close.png, , [649993b3800af14515b82f90d92ac63a],
PUP.Optional.MyStartSearch.A, C:\Users\bruger\AppData\Roaming\mystartsearch\images\loading_bg.png, , [649993b3800af14515b82f90d92ac63a],
PUP.Optional.MyStartSearch.A, C:\Users\bruger\AppData\Roaming\mystartsearch\images\loading_light.png, , [649993b3800af14515b82f90d92ac63a],
PUP.Optional.MyStartSearch.A, C:\Users\bruger\AppData\Roaming\mystartsearch\images\min.png, , [649993b3800af14515b82f90d92ac63a],
PUP.Optional.MyStartSearch.A, C:\Users\bruger\AppData\Roaming\mystartsearch\images\scrollbar.bmp, , [649993b3800af14515b82f90d92ac63a],
PUP.Optional.MyStartSearch.A, C:\Users\bruger\AppData\Roaming\mystartsearch\images\Thumbs.db, , [649993b3800af14515b82f90d92ac63a],
PUP.Optional.MyStartSearch.A, C:\Users\bruger\AppData\Roaming\mystartsearch\images\unchecked.png, , [649993b3800af14515b82f90d92ac63a],
PUP.Optional.MyStartSearch.A, C:\Users\bruger\AppData\Roaming\mystartsearch\images\code\code1.jpg, , [649993b3800af14515b82f90d92ac63a],
PUP.Optional.MyStartSearch.A, C:\Users\bruger\AppData\Roaming\mystartsearch\images\code\code2.jpg, , [649993b3800af14515b82f90d92ac63a],
PUP.Optional.MyStartSearch.A, C:\Users\bruger\AppData\Roaming\mystartsearch\images\code\code3.jpg, , [649993b3800af14515b82f90d92ac63a],
PUP.Optional.MyStartSearch.A, C:\Users\bruger\AppData\Roaming\mystartsearch\images\code\code4.jpg, , [649993b3800af14515b82f90d92ac63a],
PUP.Optional.MyStartSearch.A, C:\Users\bruger\AppData\Roaming\mystartsearch\images\code\code5.jpg, , [649993b3800af14515b82f90d92ac63a],
PUP.Optional.MyStartSearch.A, C:\Users\bruger\AppData\Roaming\mystartsearch\images\code\code6.jpg, , [649993b3800af14515b82f90d92ac63a],
PUP.Optional.MyStartSearch.A, C:\Users\bruger\AppData\Roaming\mystartsearch\images\code\Thumbs.db, , [649993b3800af14515b82f90d92ac63a],
PUP.Optional.MyStartSearch.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\searchplugins\mystartsearch.xml, , [a35a10364644c27464fd853d07fc748c],
PUP.Optional.IStartSurf.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\searchplugins\istartsurf.xml, , [df1e1135e5a5a591c569a52e867db050],
PUP.Optional.WindowsMangerProtect.A, C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe, , [11ecba8c6525af87b78ef8c60af956aa],
PUP.Optional.WNetEnhance.A, C:\Program Files\WNetEnhance\WNetEnhance Internet Enhancer\InternetEnhancerService.exe, , [4db0f84edeac3006ad2643ffbc49d030],
PUP.Optional.Wajam.A, C:\Program Files\Wajam\uninstall.exe, , [ac516adc4e3cd6608cd196da19eafc04],
PUP.Optional.WPM.A, C:\ProgramData\WindowsMangerProtect\update\conf, , [bf3e96b0cebc7cba33757710bf446d93],
PUP.Optional.IStartSurf.A, C:\Users\bruger\AppData\Roaming\istartsurf\474.json, , [da231f2756342f078e94a1eea360f20e],
PUP.Optional.IStartSurf.A, C:\Users\bruger\AppData\Roaming\istartsurf\MessageBox.xml, , [da231f2756342f078e94a1eea360f20e],
PUP.Optional.IStartSurf.A, C:\Users\bruger\AppData\Roaming\istartsurf\uninstallDlg2.xml, , [da231f2756342f078e94a1eea360f20e],
PUP.Optional.IStartSurf.A, C:\Users\bruger\AppData\Roaming\istartsurf\UninstallManager.exe, , [da231f2756342f078e94a1eea360f20e],
PUP.Optional.IStartSurf.A, C:\Users\bruger\AppData\Roaming\istartsurf\images\bg.png, , [da231f2756342f078e94a1eea360f20e],
PUP.Optional.IStartSurf.A, C:\Users\bruger\AppData\Roaming\istartsurf\images\bg1.png, , [da231f2756342f078e94a1eea360f20e],
PUP.Optional.IStartSurf.A, C:\Users\bruger\AppData\Roaming\istartsurf\images\bk_shadow.png, , [da231f2756342f078e94a1eea360f20e],
PUP.Optional.IStartSurf.A, C:\Users\bruger\AppData\Roaming\istartsurf\images\button.png, , [da231f2756342f078e94a1eea360f20e],
PUP.Optional.IStartSurf.A, C:\Users\bruger\AppData\Roaming\istartsurf\images\button1.png, , [da231f2756342f078e94a1eea360f20e],
PUP.Optional.IStartSurf.A, C:\Users\bruger\AppData\Roaming\istartsurf\images\checkbox.png, , [da231f2756342f078e94a1eea360f20e],
PUP.Optional.IStartSurf.A, C:\Users\bruger\AppData\Roaming\istartsurf\images\checkbox_select.png, , [da231f2756342f078e94a1eea360f20e],
PUP.Optional.IStartSurf.A, C:\Users\bruger\AppData\Roaming\istartsurf\images\checked.png, , [da231f2756342f078e94a1eea360f20e],
PUP.Optional.IStartSurf.A, C:\Users\bruger\AppData\Roaming\istartsurf\images\close.png, , [da231f2756342f078e94a1eea360f20e],
PUP.Optional.IStartSurf.A, C:\Users\bruger\AppData\Roaming\istartsurf\images\loading_bg.png, , [da231f2756342f078e94a1eea360f20e],
PUP.Optional.IStartSurf.A, C:\Users\bruger\AppData\Roaming\istartsurf\images\loading_light.png, , [da231f2756342f078e94a1eea360f20e],
PUP.Optional.IStartSurf.A, C:\Users\bruger\AppData\Roaming\istartsurf\images\min.png, , [da231f2756342f078e94a1eea360f20e],
PUP.Optional.IStartSurf.A, C:\Users\bruger\AppData\Roaming\istartsurf\images\scrollbar.bmp, , [da231f2756342f078e94a1eea360f20e],
PUP.Optional.IStartSurf.A, C:\Users\bruger\AppData\Roaming\istartsurf\images\Thumbs.db, , [da231f2756342f078e94a1eea360f20e],
PUP.Optional.IStartSurf.A, C:\Users\bruger\AppData\Roaming\istartsurf\images\unchecked.png, , [da231f2756342f078e94a1eea360f20e],
PUP.Optional.IStartSurf.A, C:\Users\bruger\AppData\Roaming\istartsurf\images\code\code1.jpg, , [da231f2756342f078e94a1eea360f20e],
PUP.Optional.IStartSurf.A, C:\Users\bruger\AppData\Roaming\istartsurf\images\code\code2.jpg, , [da231f2756342f078e94a1eea360f20e],
PUP.Optional.IStartSurf.A, C:\Users\bruger\AppData\Roaming\istartsurf\images\code\code3.jpg, , [da231f2756342f078e94a1eea360f20e],
PUP.Optional.IStartSurf.A, C:\Users\bruger\AppData\Roaming\istartsurf\images\code\code4.jpg, , [da231f2756342f078e94a1eea360f20e],
PUP.Optional.IStartSurf.A, C:\Users\bruger\AppData\Roaming\istartsurf\images\code\code5.jpg, , [da231f2756342f078e94a1eea360f20e],
PUP.Optional.IStartSurf.A, C:\Users\bruger\AppData\Roaming\istartsurf\images\code\code6.jpg, , [da231f2756342f078e94a1eea360f20e],
PUP.Optional.IStartSurf.A, C:\Users\bruger\AppData\Roaming\istartsurf\images\code\Thumbs.db, , [da231f2756342f078e94a1eea360f20e],
PUP.Optional.CoupScanner.A, C:\ProgramData\CoupScanner\y.dat, , [2bd259edd6b42313a9d433664ab9f60a],
PUP.Optional.CoupScanner.A, C:\ProgramData\CoupScanner\y.tlb, , [2bd259edd6b42313a9d433664ab9f60a],
PUP.Optional.IHProtectUpDate.A, C:\ProgramData\IHProtectUpDate\update\conf, , [e51863e31f6b2016b08e564e7d864bb5],
PUP.Optional.SearchEngine.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\searchengine@gmail.com\chrome.manifest, , [0bf211355f2b3105ddca41679370e51b],
PUP.Optional.SearchEngine.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\searchengine@gmail.com\install.rdf, , [0bf211355f2b3105ddca41679370e51b],
PUP.Optional.SearchEngine.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\searchengine@gmail.com\chrome\content\toolbar.js, , [0bf211355f2b3105ddca41679370e51b],
PUP.Optional.SearchEngine.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\searchengine@gmail.com\chrome\content\toolbar.xul, , [0bf211355f2b3105ddca41679370e51b],
PUP.Optional.SearchEngine.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\searchengine@gmail.com\chrome\skin\icon.png, , [0bf211355f2b3105ddca41679370e51b],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome.manifest, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\install.rdf, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\content\index.html, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\content\quick_start.js, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\content\quick_start.xul, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\content\include\speed_dial.js, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\content\include\tools\about_blank_hook.js, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\content\include\tools\misc.js, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\content\include\tools\popup_image_helper.js, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\content\include\tools\urlrequestor.js, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\content\js\js.js, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\content\js\lib\doT.min.js, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\content\js\lib\jquery-2.1.0.min.js, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\content\js\lib\jquery.autocomplete.js, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\content\js\module\hotSearch.js, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\content\js\module\mostgrid.js, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\content\js\module\search.js, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\content\js\module\stat.js, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\content\js\pack\common.js, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\content\js\pack\ga.js, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\content\js\pack\xagainit.js, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\locale\en\locale.properties, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\locale\en-US\locale.properties, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\locale\es\locale.properties, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\locale\es-419\locale.properties, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\locale\fr\locale.properties, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\locale\fr-BE\locale.properties, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\locale\fr-CA\locale.properties, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\locale\fr-CH\locale.properties, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\locale\fr-LU\locale.properties, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\locale\it\locale.properties, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\locale\it-CH\locale.properties, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\locale\pl\locale.properties, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\locale\pt-BR\locale.properties, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\locale\ru\locale.properties, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\locale\ru-MO\locale.properties, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\locale\tr\locale.properties, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\locale\vi\locale.properties, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\locale\zh-CN\locale.properties, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\locale\zh-TW\locale.properties, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\skin\default_logo.png, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\skin\googlelogo.png, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\skin\google_trends.png, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\skin\icon.png, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\skin\loading.gif, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\skin\logo.png, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\skin\newtab.ico, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\skin\simple.css, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\chrome\skin\style.css, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\defaults\preferences\fvd.js, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\defaults\preferences\preferences.js, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\modules\addonmanager.js, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\modules\aes.js, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\modules\config.js, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\modules\dialogs.js, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\modules\last_tab.js, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\modules\misc.js, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\modules\properties.js, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\modules\remoterequest.js, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\modules\restoreprefs.js, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.IStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\extensions\istart_ffnt@gmail.com\modules\settings.js, , [a45941057a1082b49a8dedbd33d025db],
PUP.Optional.WNetEnhance.A, C:\Program Files\WNetEnhance\uninstall.exe, , [f00d073fc0cac2743c70bbf015ee22de],
PUP.Optional.WNetEnhance.A, C:\Program Files\WNetEnhance\Logos\amazon.ico, , [f00d073fc0cac2743c70bbf015ee22de],
PUP.Optional.WNetEnhance.A, C:\Program Files\WNetEnhance\Logos\argos.ico, , [f00d073fc0cac2743c70bbf015ee22de],
PUP.Optional.WNetEnhance.A, C:\Program Files\WNetEnhance\Logos\ask.ico, , [f00d073fc0cac2743c70bbf015ee22de],
PUP.Optional.WNetEnhance.A, C:\Program Files\WNetEnhance\Logos\bestbuy.ico, , [f00d073fc0cac2743c70bbf015ee22de],
PUP.Optional.WNetEnhance.A, C:\Program Files\WNetEnhance\Logos\ebay.ico, , [f00d073fc0cac2743c70bbf015ee22de],
PUP.Optional.WNetEnhance.A, C:\Program Files\WNetEnhance\Logos\etsy.ico, , [f00d073fc0cac2743c70bbf015ee22de],
PUP.Optional.WNetEnhance.A, C:\Program Files\WNetEnhance\Logos\facebook.ico, , [f00d073fc0cac2743c70bbf015ee22de],
PUP.Optional.WNetEnhance.A, C:\Program Files\WNetEnhance\Logos\favicon.ico, , [f00d073fc0cac2743c70bbf015ee22de],
PUP.Optional.WNetEnhance.A, C:\Program Files\WNetEnhance\Logos\google.ico, , [f00d073fc0cac2743c70bbf015ee22de],
PUP.Optional.WNetEnhance.A, C:\Program Files\WNetEnhance\Logos\homedepot.ico, , [f00d073fc0cac2743c70bbf015ee22de],
PUP.Optional.WNetEnhance.A, C:\Program Files\WNetEnhance\Logos\ikea.ico, , [f00d073fc0cac2743c70bbf015ee22de],
PUP.Optional.WNetEnhance.A, C:\Program Files\WNetEnhance\Logos\imdb.ico, , [f00d073fc0cac2743c70bbf015ee22de],
PUP.Optional.WNetEnhance.A, C:\Program Files\WNetEnhance\Logos\lowes.ico, , [f00d073fc0cac2743c70bbf015ee22de],
PUP.Optional.WNetEnhance.A, C:\Program Files\WNetEnhance\Logos\mercado.ico, , [f00d073fc0cac2743c70bbf015ee22de],
PUP.Optional.WNetEnhance.A, C:\Program Files\WNetEnhance\Logos\mysearchweb.ico, , [f00d073fc0cac2743c70bbf015ee22de],
PUP.Optional.WNetEnhance.A, C:\Program Files\WNetEnhance\Logos\myshopping.ico, , [f00d073fc0cac2743c70bbf015ee22de],
PUP.Optional.WNetEnhance.A, C:\Program Files\WNetEnhance\Logos\searchresult.ico, , [f00d073fc0cac2743c70bbf015ee22de],
PUP.Optional.WNetEnhance.A, C:\Program Files\WNetEnhance\Logos\sears.ico, , [f00d073fc0cac2743c70bbf015ee22de],
PUP.Optional.WNetEnhance.A, C:\Program Files\WNetEnhance\Logos\setting.ico, , [f00d073fc0cac2743c70bbf015ee22de],
PUP.Optional.WNetEnhance.A, C:\Program Files\WNetEnhance\Logos\settings.ico, , [f00d073fc0cac2743c70bbf015ee22de],
PUP.Optional.WNetEnhance.A, C:\Program Files\WNetEnhance\Logos\shopping.ico, , [f00d073fc0cac2743c70bbf015ee22de],
PUP.Optional.WNetEnhance.A, C:\Program Files\WNetEnhance\Logos\target.ico, , [f00d073fc0cac2743c70bbf015ee22de],
PUP.Optional.WNetEnhance.A, C:\Program Files\WNetEnhance\Logos\tesco.ico, , [f00d073fc0cac2743c70bbf015ee22de],
PUP.Optional.WNetEnhance.A, C:\Program Files\WNetEnhance\Logos\tripadvisor.ico, , [f00d073fc0cac2743c70bbf015ee22de],
PUP.Optional.WNetEnhance.A, C:\Program Files\WNetEnhance\Logos\twitter.ico, , [f00d073fc0cac2743c70bbf015ee22de],
PUP.Optional.WNetEnhance.A, C:\Program Files\WNetEnhance\Logos\wajam.ico, , [f00d073fc0cac2743c70bbf015ee22de],
PUP.Optional.WNetEnhance.A, C:\Program Files\WNetEnhance\Logos\walmart.ico, , [f00d073fc0cac2743c70bbf015ee22de],
PUP.Optional.WNetEnhance.A, C:\Program Files\WNetEnhance\Logos\wiki.ico, , [f00d073fc0cac2743c70bbf015ee22de],
PUP.Optional.WNetEnhance.A, C:\Program Files\WNetEnhance\Logos\yahoo.ico, , [f00d073fc0cac2743c70bbf015ee22de],
PUP.Optional.WNetEnhance.A, C:\Program Files\WNetEnhance\Logos\zalando.ico, , [f00d073fc0cac2743c70bbf015ee22de],
PUP.Optional.WNetEnhance.A, C:\Program Files\WNetEnhance\WNetEnhance Internet Enhancer\0bbe0f7fca7a091f277f63e2ef308126, , [f00d073fc0cac2743c70bbf015ee22de],
PUP.Optional.WNetEnhance.A, C:\Program Files\WNetEnhance\WNetEnhance Internet Enhancer\6d5633efb63014a1ef75984d40362a07, , [f00d073fc0cac2743c70bbf015ee22de],
PUP.Optional.WNetEnhance.A, C:\Program Files\WNetEnhance\WNetEnhance Internet Enhancer\ApiHandlr.dll, , [f00d073fc0cac2743c70bbf015ee22de],
PUP.Optional.WNetEnhance.A, C:\Program Files\WNetEnhance\WNetEnhance Internet Enhancer\e36168f0f3afc2188c97ad3aab364282, , [f00d073fc0cac2743c70bbf015ee22de],
PUP.Optional.WNetEnhance.A, C:\Program Files\WNetEnhance\WNetEnhance Internet Enhancer\f85dad7eb09037f10d56e6a34a7e1534, , [f00d073fc0cac2743c70bbf015ee22de],
PUP.Optional.WNetEnhance.A, C:\Program Files\WNetEnhance\WNetEnhance Internet Enhancer\FiddlerCore.dll, , [f00d073fc0cac2743c70bbf015ee22de],
PUP.Optional.WNetEnhance.A, C:\Program Files\WNetEnhance\WNetEnhance Internet Enhancer\HtmlAgilityPack.dll, , [f00d073fc0cac2743c70bbf015ee22de],
PUP.Optional.WNetEnhance.A, C:\Program Files\WNetEnhance\WNetEnhance Internet Enhancer\InternetEnhancer.exe, , [f00d073fc0cac2743c70bbf015ee22de],
PUP.Optional.WNetEnhance.A, C:\Program Files\WNetEnhance\WNetEnhance Internet Enhancer\lan-proxy-settings.dat, , [f00d073fc0cac2743c70bbf015ee22de],
PUP.Optional.WNetEnhance.A, C:\Program Files\WNetEnhance\WNetEnhance Internet Enhancer\makecert.exe, , [f00d073fc0cac2743c70bbf015ee22de],
PUP.Optional.WNetEnhance.A, C:\Program Files\WNetEnhance\WNetEnhance Internet Enhancer\Newtonsoft.Json.dll, , [f00d073fc0cac2743c70bbf015ee22de],
PUP.Optional.WNetEnhance.A, C:\Program Files\WNetEnhance\WNetEnhance Internet Enhancer\WHttpServer.exe, , [f00d073fc0cac2743c70bbf015ee22de],
PUP.Optional.WNetEnhance.A, C:\Program Files\WNetEnhance\WNetEnhance Internet Enhancer\wie, , [f00d073fc0cac2743c70bbf015ee22de],
PUP.Optional.WNetEnhance.A, C:\Program Files\WNetEnhance\WNetEnhance Internet Enhancer\WJManifest, , [f00d073fc0cac2743c70bbf015ee22de],
PUP.Optional.IStartSurf.A, C:\Users\bruger\AppData\Local\Google\Chrome\User Data\Default\Preferences, Godt:)), Bad:)  "homepage": "http://www.istartsurf.com/?type=hp&ts=1426703931&from=smt&uid=ST3250310AS_6RYH19Q6",), ,[10edea5c2f5b8caa73e1b8729e6828d8]
PUP.Optional.IStartSurf.A, C:\Users\bruger\AppData\Local\Google\Chrome\User Data\Default\Preferences, Godt:)), Bad:)      "startup_urls": [ "http://www.istartsurf.com/?type=hp&ts=1426703931&from=smt&uid=ST3250310AS_6RYH19Q6" ],), ,[12eb47ff83077abc4c07c16930d6bf41]
PUP.Optional.IStartSurf.A, C:\Users\bruger\AppData\Local\Google\Chrome\User Data\Default\Preferences, Godt:)), Bad:)      "search_url": "http://www.istartsurf.com/web/?type=ds&ts=1426703931&from=smt&uid=ST3250310AS_6RYH19Q6&q={searchTerms}",), ,[df1ef0565634b581f362ab7f0cfa2cd4]
PUP.Optional.QuickStart.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\prefs.js, Godt:)), Bad:)user_pref("browser.newtab.url", "chrome://quick_start/content/index.html");), ,[22db6ed837538caa45eedb4ff2149070]
PUP.Optional.IStartSurf.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\prefs.js, Godt:)), Bad:)user_pref("browser.startup.homepage", "http://www.istartsurf.com/?type=hp&ts=1426703931&from=smt&uid=ST3250310AS_6RYH19Q6");), ,[6994e4629febcb6bd27ecb5f59ade51b]
PUP.Optional.MyStartSearch.A, C:\Users\bruger\AppData\Roaming\Mozilla\Firefox\Profiles\cc4j7efr.default\search.json, Godt:)), Bad:)), ,[c83584c2543674c2e004d7506e985ca4]

Fysiske sektorer: 0
(Ingen skadelige varer fundet)


(end)
Avatar billede claes57 Ekspert
23. marts 2015 - 11:41 #1
Avatar billede Slettet bruger
23. marts 2015 - 12:28 #2
Malwaretips
http://malwaretips.com/blogs/remove-istartsurf-virus/

Hvis det lykkes at fjerne iStartSurf så nulstil din browser.
Malwarebytes har fjernet det i følge den log du har indsat.  Se billed.
http://i.imgur.com/8cCj87h.png

Nulstil browser se trin 2.
https://support.google.com/websearch/answer/8091?hl=da
Avatar billede 220661 Ekspert
23. marts 2015 - 16:03 #3
Så vidt jeg kan se har Malwarebytes da ikke sat noget som helst i karantæne, eller er jeg blind?

Enig i brug af adwcleaner,som guide fra Malwaretips også henviser til, samt en tur med CCleaner.

Guide til AdwCleaner:
Start programmet, og når det er startet trykker du på [Scan]
Pc scannes, og ved endt scanning skal du trykke på [Clean].
Og derefter (automatisk) genstart...
Tilbage fra genstart kommer en log, som du gerne må kopiere herind.
Mht.: Vista og Windows 7/8 - Højreklik på filen - Kør som Administrator.

Hent og installer CCleaner free  https://www.piriform.com/ccleaner
http://www.spywarefri.dk/manualer/manual-for-installation-og-brug-af-ccleaner/
Lad programmet foretage en oprydning...
24. marts 2015 - 05:15 #4
Enig med #3 !!

Husk loggen her i tråden ...
Avatar billede Slettet bruger
24. marts 2015 - 08:45 #5
Den ser lidt mærkelig ud den log fra malwarebytes.
Avatar billede 220661 Ekspert
24. marts 2015 - 15:36 #6
#5 Ja det er som jeg ser det kun en rapport hvad der er fundet uden det er slettet. Normalt skriver programmet jo at det har sat i karantæne eller slettet objekterne. Det er ikke sket her.
Avatar billede kafka23 Juniormester
02. april 2015 - 17:23 #7
Jeg havde sat alt i karantæne. Nu er der dukket en trojaner op:
Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Dato: 02-04-2015
Scan Tid: 15:30:21
Logfil:
Administrator: Ja

Version: 2.00.4.1028
Malware Database: v2015.04.02.04
Rootkit Database: v2015.03.31.01
Licens: Gratis
Malware Protection: Handicappede
Ondsindet Hjemmeside Beskyttelse: Handicappede
Selvbeskyttelse: Handicappede

OS: Windows 7 Service Pack 1
CPU: x86
Fil system: NTFS
Bruger: bruger

Scan Type: Trussel Scanning
Resultater: Fuldført
Objekter Scannet: 365565
Forløbet Tid: 22 min, 20 sek

Hukommelse: Aktiveret
Startop: Aktiveret
Filsystem: Aktiveret
Arkiver: Aktiveret
Rootkits: Handicappede
Heuristics: Aktiveret
PUP: Advare
PUM: Aktiveret

Processer: 0
(Ingen skadelige varer fundet)

Moduler: 0
(Ingen skadelige varer fundet)

Nøgle Register: 0
(Ingen skadelige varer fundet)

Værdi Register: 0
(Ingen skadelige varer fundet)

Data Register: 0
(Ingen skadelige varer fundet)

Mapper: 0
(Ingen skadelige varer fundet)

Filer: 1
Trojan.Upatre, C:\Users\bruger\AppData\Local\Temp\optsetup.exe, Karantæne, [bc10283fa6e4eb4bba6c5bf1d53015eb],

Fysiske sektorer: 0
(Ingen skadelige varer fundet)


(end)
Avatar billede kafka23 Juniormester
02. april 2015 - 17:23 #8
Nogle tanker om, hvad man kan gøre for at få den fjernet?
Vh
Avatar billede 220661 Ekspert
02. april 2015 - 18:25 #9
Den skriver "karantæne" i loggen, så den er vel væk?
Kører computeren godt nok så kan du slette det der ligger i karantæne
AdwCleaner kørsel og log??
Avatar billede Ny bruger Nybegynder

Din løsning...

Tilladte BB-code-tags: [b]fed[/b] [i]kursiv[/i] [u]understreget[/u] Web- og emailadresser omdannes automatisk til links. Der sættes "nofollow" på alle links.

Loading billede Opret Preview

Log ind eller opret profil

Hov!

For at kunne deltage på Computerworld Eksperten skal du være logget ind.

Det er heldigvis nemt at oprette en bruger: Det tager to minutter og du kan vælge at bruge enten e-mail, Facebook eller Google som login.

Du kan også logge ind via nedenstående tjenester