This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Malware Removal Forums

Malware and Pop-Ups

194 min read

This thread's last reply is from June 2, 2015, 9:03 PM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

Gary R
May 30, 2015, 5:02 AM UTC
I don't see the e-set log that I asked for, if you haven't yet run an e-set scan please do so and post me the log.

If you've just forgotten to post it, then please post it.
maximusdowns
May 30, 2015, 6:12 AM UTC
And here is my eset.txt:

C:\AdwCleaner\Quarantine\C\Program Files\shopperz\Anneliese.exe.vir Win32/Toolbar.Perion.L potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files\shopperz\Brito.exe.vir a variant of Win32/Toolbar.Perion.N potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files\shopperz\csrcc.exe.vir a variant of Win32/Toolbar.Perion.R potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files\shopperz\Earlene32.dll.vir a variant of Win32/Toolbar.BitCocktail.C potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files\shopperz\Earlene64.dll.vir a variant of Win64/Toolbar.Perion.B potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files\shopperz\Isaacson.dll.vir a variant of Win32/Toolbar.Perion.Q potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files\shopperz\Ivonne64.dll.vir a variant of Win64/Toolbar.Perion.B potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files\shopperz\Sturgeon.dll.vir a variant of Win32/Toolbar.Perion.K potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files\shopperz\Sturgeon64.dll.vir a variant of Win32/Toolbar.Perion.K potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files\shopperz\Winfrey.dll.vir a variant of Win32/Toolbar.Perion.M potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files\shopperz\Firefox\chrome\content\main.js.vir Win32/Toolbar.Perion.K potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Edu App\EduAppbho.dll.vir a variant of Win32/BrowseFox.AE potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Edu App\EduAppUninstall.exe.vir a variant of Win32/BrowseFox.AY potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Edu App\updateEduApp.exe.vir a variant of MSIL/BrowseFox.G potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Edu App\bin\3f1219df4a4d40a39537.dll.vir a variant of Win32/BrowseFox.N potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Edu App\bin\3f1219df4a4d40a3953764.dll.vir a variant of Win64/BrowseFox.CI potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Edu App\bin\3f1219df4a4d40a39537f2a95f4016b3.dll.vir a variant of Win32/BrowseFox.M potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Edu App\bin\3f1219df4a4d40a39537f2a95f4016b364.dll.vir a variant of Win64/BrowseFox.CK potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Edu App\bin\6dd55e9a3d064d70b5e7.dll.vir a variant of Win32/BrowseFox.N potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Edu App\bin\6dd55e9a3d064d70b5e705fc3e0a3d66.dll.vir a variant of Win32/BrowseFox.M potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Edu App\bin\6dd55e9a3d064d70b5e705fc3e0a3d6664.dll.vir a variant of Win64/BrowseFox.CK potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Edu App\bin\6dd55e9a3d064d70b5e764.dll.vir a variant of Win64/BrowseFox.CI potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Edu App\bin\EduApp.BrowserAdapter.exe.vir Win32/BrowseFox.AX potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Edu App\bin\EduApp.BrowserAdapter64.exe.vir Win64/BrowseFox.CP potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Edu App\bin\EduApp.expext.exe.vir a variant of Win32/BrowseFox.AA potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Edu App\bin\EduApp.expextdll.dll.vir a variant of Win64/BrowseFox.CJ potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Edu App\bin\EduApp.PurBrowse64.exe.vir a variant of Win64/BrowseFox.A potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Edu App\bin\utilEduApp.exe.vir a variant of MSIL/BrowseFox.G potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Edu App\bin\plugins\EduApp.BrowserAdapter.dll.vir a variant of MSIL/BrowseFox.L potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Edu App\bin\plugins\EduApp.CompatibilityChecker.dll.vir a variant of MSIL/BrowseFox.N potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Edu App\bin\plugins\EduApp.ExpExt.dll.vir a variant of MSIL/BrowseFox.G potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Edu App\bin\plugins\EduApp.FFUpdate.dll.vir a variant of MSIL/BrowseFox.G potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Edu App\bin\plugins\EduApp.GCUpdate.dll.vir a variant of MSIL/BrowseFox.G potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Edu App\bin\plugins\EduApp.PurBrowse.dll.vir a variant of MSIL/BrowseFox.H potentially unwanted application
C:\AdwCleaner\Quarantine\C\WINDOWS\System32\drivers\cherimoya.sys.vir a variant of Win64/NetFilter.A potentially unsafe application
C:\AdwCleaner\Quarantine\C\WINDOWS\System32\drivers\{3f1219df-4a4d-40a3-9537-f2a95f4016b3}Gw64.sys.vir a variant of Win64/NetFilter.A potentially unsafe application
C:\AdwCleaner\Quarantine\C\WINDOWS\System32\drivers\{6dd55e9a-3d06-4d70-b5e7-05fc3e0a3d66}Gw64.sys.vir a variant of Win64/NetFilter.A potentially unsafe application
C:\AdwCleaner\Quarantine\C\WINDOWS\System32\drivers\{6dd55e9a-3d06-4d70-b5e7-05fc3e0a3d66}w64.sys.vir a variant of Win64/NetFilter.A potentially unsafe application
C:\FRST\Quarantine\C\FRST\Quarantine\C\Program Files (x86)\RapidMediaConverter\RapidMediaConverterApp.exe.xBAD a variant of Win32/Verti.K potentially unwanted application
C:\FRST\Quarantine\C\Program Files (x86)\ShopperPro\manifest.json JS/ShopperPro.A potentially unwanted application
C:\FRST\Quarantine\C\Program Files (x86)\ShopperPro\ShopperPro.dll a variant of Win32/ShopperPro.A potentially unwanted application
C:\FRST\Quarantine\C\Program Files (x86)\ShopperPro\ShopperPro.exe a variant of Win32/ShopperPro.A potentially unwanted application
C:\FRST\Quarantine\C\Program Files (x86)\ShopperPro\ShopperPro64.dll a variant of Win64/ShopperPro.A potentially unwanted application
C:\FRST\Quarantine\C\Program Files (x86)\ShopperPro\SPRemove.exe Win32/SpeedBit.B.gen potentially unwanted application
C:\FRST\Quarantine\C\Program Files (x86)\ShopperPro\Updater.exe a variant of Win32/ShopperPro.A potentially unwanted application
C:\FRST\Quarantine\C\Program Files (x86)\ShopperPro\FireFox\content\overlay.js JS/ShopperPro.A potentially unwanted application
C:\FRST\Quarantine\C\Program Files (x86)\ShopperPro\JSDriver\jsdrv.exe a variant of Win32/ShopperPro.B potentially unwanted application
C:\FRST\Quarantine\C\Program Files (x86)\ShopperPro\JSDriver\1.42.1.1841\jsdrv.exe a variant of Win32/ShopperPro.B potentially unwanted application
C:\FRST\Quarantine\C\Program Files (x86)\Super Optimizer\SuperOptimizer.exe a variant of Win32/Adware.SpeedingUpMyPC.AG application
C:\FRST\Quarantine\C\Program Files (x86)\Super Optimizer\SupOptGuard.exe a variant of Win32/Adware.SpeedingUpMyPC.AD application
C:\FRST\Quarantine\C\Program Files (x86)\Super Optimizer\SupOptHelper.dll a variant of Win32/OptimizerPro.B potentially unwanted application
C:\FRST\Quarantine\C\Program Files (x86)\Super Optimizer\SupOptLauncher.exe a variant of Win32/Adware.SpeedingUpMyPC.AC application
C:\FRST\Quarantine\C\Program Files (x86)\Super Optimizer\SupOptReminder.exe a variant of Win32/Adware.SpeedingUpMyPC.AE application
C:\FRST\Quarantine\C\Program Files (x86)\Super Optimizer\SupOptSchedule.exe a variant of Win32/Adware.SpeedingUpMyPC.AL application
C:\FRST\Quarantine\C\Program Files (x86)\Super Optimizer\SupOptSmartScan.exe a variant of Win32/Adware.SpeedingUpMyPC.AG application
C:\FRST\Quarantine\C\Program Files (x86)\Super Optimizer\SupOptStart.exe a variant of Win32/Adware.SpeedingUpMyPC.AG application
C:\FRST\Quarantine\C\Program Files (x86)\Super Optimizer\SupOptStats.dll a variant of Win32/Adware.MultiPlug.IX application
C:\FRST\Quarantine\C\Program Files (x86)\Supporter\Supporter.dll a variant of Win32/SProtector.Q potentially unwanted application
C:\FRST\Quarantine\C\Program Files (x86)\SysFiles\HealthcareGovTool.exe a variant of Win32/Toolbar.Besttoolbars.I potentially unwanted application
C:\FRST\Quarantine\C\Program Files (x86)\SysFiles\WebWatcherCert.dll a variant of Win32/Packed.Komodia.A potentially unwanted application
C:\FRST\Quarantine\C\Program Files (x86)\SysFiles\WebWatcherLSP.dll a variant of Win32/Packed.Komodia.A potentially unwanted application
C:\FRST\Quarantine\C\Program Files (x86)\SysFiles\WebWatcherLSP.exe a variant of Win32/Packed.Komodia.A potentially unwanted application
C:\FRST\Quarantine\C\Program Files (x86)\SysFiles\WebWatcherProxy.exe a variant of Win32/Packed.Komodia.A potentially unwanted application
C:\FRST\Quarantine\C\Program Files (x86)\YTDownloader\BrowserHelper.exe a variant of Win32/SBWatchman.D potentially unwanted application
C:\FRST\Quarantine\C\Program Files (x86)\YTDownloader\BrowserHelperSrv.exe a variant of Win32/SBWatchman.D potentially unwanted application
C:\FRST\Quarantine\C\Program Files (x86)\YTDownloader\converter.exe a variant of Win32/SBWatchman.D potentially unwanted application
C:\FRST\Quarantine\C\Program Files (x86)\YTDownloader\DownloadAPI.dll a variant of Win32/SpeedBit.F potentially unwanted application
C:\FRST\Quarantine\C\Program Files (x86)\YTDownloader\DownloadHelper.exe a variant of Win32/SBWatchman.D potentially unwanted application
C:\FRST\Quarantine\C\Program Files (x86)\YTDownloader\sbmntr.sys a variant of Win32/SBWatchman.D potentially unwanted application
C:\FRST\Quarantine\C\Program Files (x86)\YTDownloader\Updater.exe a variant of Win32/ShopperPro.A potentially unwanted application
C:\FRST\Quarantine\C\Program Files (x86)\YTDownloader\YTDownloader.exe a variant of Win32/SBWatchman.G potentially unwanted application
C:\FRST\Quarantine\C\Program Files (x86)\YTDownloader\YTDUninstall.exe a variant of Win32/SBWatchman.D potentially unwanted application
C:\FRST\Quarantine\C\ProgramData\Browser\prompt.exe a variant of MSIL/Adware.PullUpdate.L.gen application
C:\FRST\Quarantine\C\ProgramData\c1c05f7061d940b085ed209085e4a787\c1c05f7061d940b085ed209085e4a787.exe a variant of Win32/Adware.PicColor.AB application
C:\FRST\Quarantine\C\ProgramData\DQZCqeZhJD\SwdrFREjyLh.exe.xBAD a variant of MSIL/Adware.PullUpdate.G.gen application
C:\FRST\Quarantine\C\ProgramData\DQZCqeZhJD\DQZCqeZhJD\dat\PKgqIwLNr.dll a variant of MSIL/Adware.PullUpdate.K.gen application
C:\FRST\Quarantine\C\ProgramData\DQZCqeZhJD\DQZCqeZhJD\dat\TgTQTt.exe a variant of MSIL/Adware.PullUpdate.G.gen application
C:\FRST\Quarantine\C\ProgramData\DQZCqeZhJD\DQZCqeZhJD\dat\TzpiDJ.dll a variant of MSIL/Adware.PullUpdate.K.gen application
C:\FRST\Quarantine\C\ProgramData\DQZCqeZhJD\DQZCqeZhJD\dat\XXOTpJO.exe a variant of MSIL/Adware.PullUpdate.G.gen application
C:\FRST\Quarantine\C\ProgramData\e29c40da53af42a3895e10c22c3d76c2\e29c40da53af42a3895e10c22c3d76c2.exe a variant of Win32/Adware.PicColor.AE application
C:\FRST\Quarantine\C\ProgramData\NetEngine\bin\D10\netengine.exe.xBAD a variant of MSIL/Adware.PullUpdate.P application
C:\FRST\Quarantine\C\ProgramData\Radio\prompt.exe.xBAD a variant of MSIL/Adware.PullUpdate.L.gen application
C:\FRST\Quarantine\C\ProgramData\ShopperPro\ShopperPro.dll a variant of Win32/ShopperPro.A potentially unwanted application
C:\FRST\Quarantine\C\ProgramData\ShopperPro\ShopperPro64.dll a variant of Win64/ShopperPro.A potentially unwanted application
C:\FRST\Quarantine\C\ProgramData\{18c1d0f7-b873-4d6b-18c1-1d0f7b8743de}\hqghumeaylnlf.exe a variant of Win32/Adware.SpeedingUpMyPC.AA application
C:\FRST\Quarantine\C\ProgramData\{20563ee8-ab9c-4ef3-2056-63ee8ab9fba2}\hqghumeaylnlf.exe a variant of Win32/Adware.SpeedingUpMyPC.AA application
C:\FRST\Quarantine\C\ProgramData\{327cb5fd-4a9d-c1e5-327c-cb5fd4a9d7f5}\hqghumeaylnlf.exe a variant of Win32/Adware.SpeedingUpMyPC.AA application
C:\FRST\Quarantine\C\ProgramData\{3807D0C4-6885-0142-D903-71C00981A24E}\1.9.3.1\fiber.js Win32/DealPly.AP potentially unwanted application
C:\FRST\Quarantine\C\ProgramData\{3807D0C4-6885-0142-D903-71C00981A24E}\1.9.3.1\mite.dll a variant of Win32/DealPly.AP potentially unwanted application
C:\FRST\Quarantine\C\ProgramData\{9af26980-7f72-f498-9af2-269807f7a601}\pricelessinstaller.exe a variant of Win32/Adware.MultiPlug.KP application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\00000000-1430166663-0000-0000-6C626DB6DAC3\bnslFE2A.exe a variant of Win32/Adware.ConvertAd.KG application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\00000000-1431767532-0000-0000-6C626DB6DAC3\bnsyDEE9.exe a variant of Win32/Adware.ConvertAd.OU application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\30034\Updater.exe a variant of Win32/Amonetize.EP potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\avabvyxvdy\avabvyxvdy.exe a variant of Win32/Conduit.SearchProtect.Y potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\avabvyxvdy\pbqrmvbub a variant of Win32/ClientConnect.A potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\gmsd_us_585\upgmsd_us_585.exe a variant of Win32/Adware.EoRezo.AJ application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\gmsd_us_608\upgmsd_us_608.exe a variant of Win32/Adware.EoRezo.AJ application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\gmsd_us_608\Download\myoffergroup_us6.exe multiple threats
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Installer\Installgeforce_5348\DCytdkietut_tutdk_setup.exe a variant of Win32/SpeedBit.F potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Installer\Installgeforce_8865\DCytdkietut_tutdk_setup.exe a variant of Win32/SpeedBit.F potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Installer\Installshopperpro_5348\DCytdkietut_tutdk_setup.exe a variant of Win32/SpeedBit.F potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Installer\Installshopperpro_8865\DCytdkietut_tutdk_setup.exe a variant of Win32/SpeedBit.F potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Installer\Install_12280\DCytdkietut_tutdk_setup.exe a variant of Win32/SpeedBit.F potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Installer\Install_13204\DCytdkietut_tutdk_setup.exe a variant of Win32/SpeedBit.F potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Installer\Install_18077\DCytdkietut_tutdk_setup.exe a variant of Win32/SpeedBit.F potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Installer\Install_18256\DCytdkietut_tutdk_setup.exe a variant of Win32/SpeedBit.F potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Installer\Install_19783\DCytdkietut_tutdk_setup.exe a variant of Win32/SpeedBit.F potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Installer\Install_21149\DCytdkietut_tutdk_setup.exe a variant of Win32/SpeedBit.F potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Installer\Install_24936\DCytdkietut_tutdk_setup.exe a variant of Win32/SpeedBit.F potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Installer\Install_27195\DCytdkietut_tutdk_setup.exe a variant of Win32/SpeedBit.F potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Installer\Install_29589\DCytdkietut_tutdk_setup.exe a variant of Win32/SpeedBit.F potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Installer\Install_29735\DCytdkietut_tutdk_setup.exe a variant of Win32/SpeedBit.F potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Installer\Install_30843\DCytdkietut_tutdk_setup.exe a variant of Win32/SpeedBit.F potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Installer\Install_8310\DCytdkietut_tutdk_setup.exe a variant of Win32/SpeedBit.F potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Microsoft\Windows\INetCache\IE\CJEXS4BH\dl[1].htm a variant of Win32/Adware.ConvertAd.QH application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Microsoft\Windows\INetCache\IE\CJEXS4BH\OfferInstaller[1].exe a variant of MSIL/Adware.Imali.A application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Microsoft\Windows\INetCache\IE\CJEXS4BH\VOsrv[1].exe a variant of Win32/Adware.ConvertAd.OT application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Microsoft\Windows\INetCache\IE\CJEXS4BH\VuuPC_VO2_8907[1].exe a variant of Win32/InstallMonetizer.BC potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Microsoft\Windows\INetCache\IE\F9AFFZ6K\dl[1].htm a variant of Win32/Adware.ConvertAd.QH application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Microsoft\Windows\INetCache\IE\F9AFFZ6K\imali_bundle[1].exe a variant of Win32/Adware.Imali.A application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Microsoft\Windows\INetCache\IE\F9AFFZ6K\infonaut-setup-1.10.0.14[1].exe multiple threats
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Microsoft\Windows\INetCache\IE\F9AFFZ6K\mediaplayer[1].exe a variant of Win32/DownloadAssistant.A potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Microsoft\Windows\INetCache\IE\F9AFFZ6K\rvwr[1].exe a variant of Win32/Adware.ConvertAd.QH application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Microsoft\Windows\INetCache\IE\F9AFFZ6K\Setup[1].exe a variant of Win32/InstallCore.PK potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Microsoft\Windows\INetCache\IE\F9AFFZ6K\SmartWebInstaller[1].exe multiple threats
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Microsoft\Windows\INetCache\IE\F9AFFZ6K\F9AFFZ6K\sprz[1].exe Win32/Toolbar.Perion.L potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Microsoft\Windows\INetCache\IE\K4O0T7E9\policyname[1].exe a variant of Win32/Adware.ConvertAd.QH application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Microsoft\Windows\INetCache\IE\K4O0T7E9\Setup[2].exe multiple threats
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Microsoft\Windows\INetCache\IE\K4O0T7E9\K4O0T7E9\9521f896-c8cf-4b5f-aeb4-0e60616ff5fb[1].exe a variant of Win32/Toolbar.Iminent.E potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Microsoft\Windows\INetCache\IE\K4O0T7E9\K4O0T7E9\Iminent[1].exe a variant of Win32/Toolbar.Iminent.K potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Microsoft\Windows\INetCache\IE\K4O0T7E9\K4O0T7E9\rvwr[1].exe a variant of Win32/Adware.ConvertAd.QH application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Microsoft\Windows\INetCache\IE\K4O0T7E9\K4O0T7E9\SearchUpdater[1].exe a variant of Win32/Adware.ConvertAd.QH application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Microsoft\Windows\INetCache\IE\K4O0T7E9\K4O0T7E9\Setup[1].exe a variant of Win32/InstallCore.PK potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Microsoft\Windows\INetCache\IE\K4O0T7E9\K4O0T7E9\setup_gmsd_us[1].exe a variant of Win32/Adware.EoRezo.AZ application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Microsoft\Windows\INetCache\IE\OMP2X8E9\rvwr[1].exe a variant of Win32/Adware.ConvertAd.QH application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Microsoft\Windows\INetCache\IE\OMP2X8E9\SearchUpdater[1].exe a variant of Win32/Adware.ConvertAd.QH application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Microsoft\Windows\INetCache\IE\OMP2X8E9\setup[1].exe a variant of Win32/Toolbar.CrossRider.CN potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Microsoft\Windows\INetCache\IE\OMP2X8E9\setup[2].exe a variant of Win32/Packed.ScrambleWrapper.O potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Microsoft\Windows\INetCache\IE\OMP2X8E9\setup_gmsd_us[1].exe multiple threats
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Microsoft\Windows\INetCache\IE\OMP2X8E9\OMP2X8E9\mediaplayer[1].exe a variant of Win32/DownloadAssistant.A potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Microsoft\Windows\INetCache\IE\OMP2X8E9\OMP2X8E9\SmartWebInstaller[1].exe multiple threats
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Mozilla\Firefox\Profiles\174u8fal.default\cache2\entries\3389952AAE22DA2ED67443DF8D4C99E6AFA71E4B.xBAD JS/Kryptik.I trojan
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Mozilla\Firefox\Profiles\174u8fal.default\cache2\entries\9BE5209DB4BBBD550FD08C6300BE104EF0A4ACDD.xBAD JS/Kryptik.I trojan
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Mozilla\Firefox\Profiles\174u8fal.default\cache2\entries\C25179E407B636BD1E8670AA50916F244E050F71.xBAD JS/Kryptik.I trojan
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Mozilla\Firefox\Profiles\174u8fal.default\cache2\entries\F2A4316C607672AA82926923CEC3971907E0F2A5.xBAD JS/Toolbar.Crossrider.B potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Mozilla\Firefox\Profiles\174u8fal.default\cache2\entries\F2A4F3F4EBABF7E1BC2E01189A26269B9B520122.xBAD JS/Kryptik.I trojan
C:\FRST\Quarantine\C\Users\Max\AppData\Local\ospd_us_1014\upospd_us_1014.exe.xBAD a variant of Win32/Adware.EoRezo.AJ application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\ospd_us_1014\Download\majmp_gentleeeuu.exe.xBAD multiple threats
C:\FRST\Quarantine\C\Users\Max\AppData\Local\SmartWeb\SmartWebApp.exe a variant of Win32/PriceGong.C potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\SmartWeb\SmartWebHelper.exe Win32/Adware.ConvertAd.RC application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\SmartWeb\swhk.dll a variant of Win32/PriceGong.C potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\SmartWeb\__u.exe a variant of Win32/PriceGong.C potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\SmartWeb\SmartWeb\SmartWebApp.exe a variant of Win32/PriceGong.C potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\SmartWeb\SmartWeb\SmartWebHelper.exe Win32/Adware.ConvertAd.RC application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\SmartWeb\SmartWeb\swhk.dll a variant of Win32/PriceGong.C potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\SmartWeb\SmartWeb\__u.exe a variant of Win32/PriceGong.C potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Temp\7460.exe.xBAD a variant of Win32/Toolbar.CrossRider.CN potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Temp\9067.exe.xBAD a variant of Win32/Packed.ScrambleWrapper.O potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Temp\bes7A25.exe.xBAD a variant of MSIL/Adware.Imali.A application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Temp\ICReinstall_nss6A1F.tmp.xBAD a variant of Win32/InstallCore.PK potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Temp\ICReinstall_nsx95B2.tmp.xBAD a variant of Win32/InstallCore.PK potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Temp\nsd8879.tmp.xBAD Win32/BrowseFox.AV potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Temp\nsgDF40.tmp.xBAD a variant of Win32/Toolbar.Iminent.K potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Temp\nsi3E52.tmp.xBAD Win32/BrowseFox.AV potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Temp\nsp160B.exe.xBAD a variant of Win32/ClientConnect.A potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Temp\nss6A1F.tmp.xBAD a variant of Win32/InstallCore.PK potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Temp\nss7D93.tmp.xBAD a variant of Win32/InstallMonetizer.BC potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Temp\nsx95B2.tmp.xBAD a variant of Win32/InstallCore.PK potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Temp\f9626892-7a78-3199-abd2-97bbce96297b\adv_70.exe Win32/BrowseFox.AV potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Temp\is-C7SHE.tmp\11.exe a variant of Win32/Adware.EoRezo.AZ application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Temp\is-C7SHE.tmp\150.exe multiple threats
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Temp\is-C7SHE.tmp\380.exe a variant of Win32/Adware.EoRezo.AZ application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Temp\is-C7SHE.tmp\385.exe a variant of Win32/Adware.EoRezo.AZ application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Temp\is-C7SHE.tmp\392.exe multiple threats
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Temp\is-C7SHE.tmp\399.exe a variant of Win32/Adware.EoRezo.AZ application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Temp\is-C7SHE.tmp\420.exe multiple threats
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Temp\is-C7SHE.tmp\436.exe multiple threats
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Temp\is-C7SHE.tmp\package_airwebbar_installer_multilang.exe multiple threats
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Temp\is-C7SHE.tmp\package_AmNuvision_installer_multilang.exe multiple threats
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Temp\is-C7SHE.tmp\package_boost_installer_multilang.exe multiple threats
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Temp\is-C7SHE.tmp\package_bubbledock_installer_multilang.exe multiple threats
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Temp\is-C7SHE.tmp\package_BubbleSound_installer_multilang.exe multiple threats
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Temp\is-C7SHE.tmp\package_CubepileShopperz_installer_multilang.exe multiple threats
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Temp\is-C7SHE.tmp\package_infonaut_installer_multilang.exe multiple threats
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Temp\is-C7SHE.tmp\package_linkey_pariente_installer_multilang.exe multiple threats
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Temp\is-C7SHE.tmp\package_navright_imali_installer_multilang.exe multiple threats
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Temp\is-C7SHE.tmp\package_optimizerpro_installer_multilang.exe multiple threats
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Temp\is-C7SHE.tmp\package_pcrossbrowser_installer_multilang.exe multiple threats
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Temp\is-C7SHE.tmp\package_pmediaconverter_installer_multilang.exe multiple threats
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Temp\is-C7SHE.tmp\package_priceless_installer_multilang.exe multiple threats
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Temp\is-C7SHE.tmp\package_priceless_p_installer_multilang.exe multiple threats
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Temp\is-C7SHE.tmp\package_pwebbar_installer_multilang.exe multiple threats
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Temp\is-C7SHE.tmp\package_SByoutube_installer_multilang.exe multiple threats
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Temp\is-C7SHE.tmp\package_sb_driverupdater_installer_multilang.exe multiple threats
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Temp\is-C7SHE.tmp\package_secureprotect_installer_multilang.exe multiple threats
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Temp\is-C7SHE.tmp\package_StormWatch_Boost_Verti_installer_multilang.exe multiple threats
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Temp\is-C7SHE.tmp\package_superpct_installer_multilang.exe multiple threats
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Temp\is-C7SHE.tmp\package_superpc_installer_multilang.exe multiple threats
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Temp\is-RJEP8.tmp\gentlemjmp_ieeuu.exe.xBAD multiple threats
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Temp\is-V2FKJ.tmp\gentlemjmp_ieeuu.exe multiple threats
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Temp\is45637729\1308283_stp\icc.dll.xBAD a variant of Win32/InstallCore.YX potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Temp\nskAA97.tmp\HTMLTester2.exe Win32/InstallMonetizer.BB potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Local\Temp\nskAA97.tmp\nsPage_LoadOffer.dll a variant of Win32/InstallMonetizer.BC potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Roaming\LKVYT.exe.xBAD a variant of Win32/Toolbar.CrossRider.CH potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Roaming\P5FrFNBceXRT1W20d5av.exe.xBAD a variant of Win32/Toolbar.CrossRider.CB potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Roaming\PcMb9sgy4Hax8V4w.exe.xBAD a variant of Win32/Toolbar.CrossRider.CB potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Roaming\XBNK.exe.xBAD a variant of Win32/Toolbar.CrossRider.CH potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Roaming\00000000-1429243423-0000-0000-6C626DB6DAC3\jnsiF0DB.tmp.xBAD Win32/Adware.ConvertAd.GJ application
C:\FRST\Quarantine\C\Users\Max\AppData\Roaming\00000000-1429243423-0000-0000-6C626DB6DAC3\nsaB737.tmpfs.xBAD Win32/Adware.ConvertAd.GU application
C:\FRST\Quarantine\C\Users\Max\AppData\Roaming\00000000-1429243423-0000-0000-6C626DB6DAC3\00000000-1429243423-0000-0000-6C626DB6DAC3\rnseE713.exe Win32/Adware.ConvertAd.HW application
C:\FRST\Quarantine\C\Users\Max\AppData\Roaming\00000000-1429243423-0000-0000-6C626DB6DAC3\00000000-1429243423-0000-0000-6C626DB6DAC3\vnss962E.tmp a variant of Win32/Adware.ConvertAd.KZ.gen application
C:\FRST\Quarantine\C\Users\Max\AppData\Roaming\00000000-1430191811-0000-0000-6C626DB6DAC3\jnsp89F0.tmp.xBAD a variant of Win32/Adware.ConvertAd.KF application
C:\FRST\Quarantine\C\Users\Max\AppData\Roaming\00000000-1430191811-0000-0000-6C626DB6DAC3\nsr4204.tmpfs.xBAD a variant of Win32/Adware.ConvertAd.KD application
C:\FRST\Quarantine\C\Users\Max\AppData\Roaming\00000000-1430191811-0000-0000-6C626DB6DAC3\00000000-1430191811-0000-0000-6C626DB6DAC3\rnsj6D0E.exe a variant of Win32/Adware.ConvertAd.KJ application
C:\FRST\Quarantine\C\Users\Max\AppData\Roaming\00000000-1430191811-0000-0000-6C626DB6DAC3\00000000-1430191811-0000-0000-6C626DB6DAC3\vnsh1D9F.tmp a variant of Win32/Adware.ConvertAd.KZ.gen application
C:\FRST\Quarantine\C\Users\Max\AppData\Roaming\00000000-1430191812-0000-0000-6C626DB6DAC3\vnsd1F57.tmp a variant of Win32/Adware.ConvertAd.KZ.gen application
C:\FRST\Quarantine\C\Users\Max\AppData\Roaming\00000000-1431792690-0000-0000-6C626DB6DAC3\hnse94BF.tmp.xBAD a variant of Win32/Adware.ConvertAd.PA application
C:\FRST\Quarantine\C\Users\Max\AppData\Roaming\00000000-1431792690-0000-0000-6C626DB6DAC3\jnse7CDF.tmp.xBAD a variant of Win32/Adware.ConvertAd.OO application
C:\FRST\Quarantine\C\Users\Max\AppData\Roaming\00000000-1431792690-0000-0000-6C626DB6DAC3\nss4EDB.tmp.xBAD a variant of Win32/Adware.ConvertAd.OT application
C:\FRST\Quarantine\C\Users\Max\AppData\Roaming\00000000-1431792690-0000-0000-6C626DB6DAC3\00000000-1431792690-0000-0000-6C626DB6DAC3\vnss3941.tmp a variant of Win32/Adware.ConvertAd.QJ application
C:\FRST\Quarantine\C\Users\Max\AppData\Roaming\Mozilla\Firefox\Profiles\174u8fal.default\Extensions\[removed]\extensionData\plugins\91.js JS/Toolbar.Crossrider.B potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Roaming\Mozilla\Firefox\Profiles\174u8fal.default\Extensions\[removed]\extensionData\plugins\91.js JS/Toolbar.Crossrider.B potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Roaming\Mozilla\Firefox\Profiles\174u8fal.default\Extensions\[removed]\chrome\content\main.js JS/Kryptik.I trojan
C:\FRST\Quarantine\C\Users\Max\AppData\Roaming\Mozilla\Firefox\Profiles\174u8fal.default\Extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\overlay.js JS/ShopperPro.A potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Roaming\Mozilla\Firefox\Profiles\174u8fal.default\Extensions\{DF617E43-5240-3D21-C902-79D00DCEE789}\components\DatamngrHlpFF10.dll a variant of Win32/Toolbar.SearchSuite.Q potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Roaming\Mozilla\Firefox\Profiles\174u8fal.default\Extensions\{DF617E43-5240-3D21-C902-79D00DCEE789}\components\DatamngrHlpFF11.dll a variant of Win32/Toolbar.SearchSuite.Q potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Roaming\Mozilla\Firefox\Profiles\174u8fal.default\Extensions\{DF617E43-5240-3D21-C902-79D00DCEE789}\components\DatamngrHlpFF12.dll a variant of Win32/Toolbar.SearchSuite.Q potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Roaming\Mozilla\Firefox\Profiles\174u8fal.default\Extensions\{DF617E43-5240-3D21-C902-79D00DCEE789}\components\DatamngrHlpFF13.dll a variant of Win32/Toolbar.SearchSuite.Q potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Roaming\Mozilla\Firefox\Profiles\174u8fal.default\Extensions\{DF617E43-5240-3D21-C902-79D00DCEE789}\components\DatamngrHlpFF14.dll a variant of Win32/Toolbar.SearchSuite.Q potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Roaming\Mozilla\Firefox\Profiles\174u8fal.default\Extensions\{DF617E43-5240-3D21-C902-79D00DCEE789}\components\DatamngrHlpFF15.dll a variant of Win32/Toolbar.SearchSuite.Q potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Roaming\Mozilla\Firefox\Profiles\174u8fal.default\Extensions\{DF617E43-5240-3D21-C902-79D00DCEE789}\components\DatamngrHlpFF16.dll a variant of Win32/Toolbar.SearchSuite.Q potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Roaming\Mozilla\Firefox\Profiles\174u8fal.default\Extensions\{DF617E43-5240-3D21-C902-79D00DCEE789}\components\DatamngrHlpFF17.dll a variant of Win32/Toolbar.SearchSuite.Q potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Roaming\Mozilla\Firefox\Profiles\174u8fal.default\Extensions\{DF617E43-5240-3D21-C902-79D00DCEE789}\components\DatamngrHlpFF18.dll a variant of Win32/Toolbar.SearchSuite.Q potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Roaming\Mozilla\Firefox\Profiles\174u8fal.default\Extensions\{DF617E43-5240-3D21-C902-79D00DCEE789}\components\DatamngrHlpFF19.dll a variant of Win32/Toolbar.SearchSuite.Q potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Roaming\Mozilla\Firefox\Profiles\174u8fal.default\Extensions\{DF617E43-5240-3D21-C902-79D00DCEE789}\components\DatamngrHlpFF2.dll a variant of Win32/Toolbar.SearchSuite.Q potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Roaming\Mozilla\Firefox\Profiles\174u8fal.default\Extensions\{DF617E43-5240-3D21-C902-79D00DCEE789}\components\DatamngrHlpFF20.dll a variant of Win32/Toolbar.SearchSuite.Q potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Roaming\Mozilla\Firefox\Profiles\174u8fal.default\Extensions\{DF617E43-5240-3D21-C902-79D00DCEE789}\components\DatamngrHlpFF21.dll a variant of Win32/Toolbar.SearchSuite.Q potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Roaming\Mozilla\Firefox\Profiles\174u8fal.default\Extensions\{DF617E43-5240-3D21-C902-79D00DCEE789}\components\DatamngrHlpFF22.dll a variant of Win32/Toolbar.SearchSuite.Q potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Roaming\Mozilla\Firefox\Profiles\174u8fal.default\Extensions\{DF617E43-5240-3D21-C902-79D00DCEE789}\components\DatamngrHlpFF23.dll a variant of Win32/Toolbar.SearchSuite.Q potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Roaming\Mozilla\Firefox\Profiles\174u8fal.default\Extensions\{DF617E43-5240-3D21-C902-79D00DCEE789}\components\DatamngrHlpFF24.dll a variant of Win32/Toolbar.SearchSuite.Q potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Roaming\Mozilla\Firefox\Profiles\174u8fal.default\Extensions\{DF617E43-5240-3D21-C902-79D00DCEE789}\components\DatamngrHlpFF25.dll a variant of Win32/Toolbar.SearchSuite.Q potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Roaming\Mozilla\Firefox\Profiles\174u8fal.default\Extensions\{DF617E43-5240-3D21-C902-79D00DCEE789}\components\DatamngrHlpFF26.dll a variant of Win32/Toolbar.SearchSuite.Q potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Roaming\Mozilla\Firefox\Profiles\174u8fal.default\Extensions\{DF617E43-5240-3D21-C902-79D00DCEE789}\components\DatamngrHlpFF27.dll a variant of Win32/Toolbar.SearchSuite.Q potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Roaming\Mozilla\Firefox\Profiles\174u8fal.default\Extensions\{DF617E43-5240-3D21-C902-79D00DCEE789}\components\DatamngrHlpFF28.dll a variant of Win32/Toolbar.SearchSuite.Q potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Roaming\Mozilla\Firefox\Profiles\174u8fal.default\Extensions\{DF617E43-5240-3D21-C902-79D00DCEE789}\components\DatamngrHlpFF4.dll a variant of Win32/Toolbar.SearchSuite.Q potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Roaming\Mozilla\Firefox\Profiles\174u8fal.default\Extensions\{DF617E43-5240-3D21-C902-79D00DCEE789}\components\DatamngrHlpFF5.dll a variant of Win32/Toolbar.SearchSuite.Q potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Roaming\Mozilla\Firefox\Profiles\174u8fal.default\Extensions\{DF617E43-5240-3D21-C902-79D00DCEE789}\components\DatamngrHlpFF6.dll a variant of Win32/Toolbar.SearchSuite.Q potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Roaming\Mozilla\Firefox\Profiles\174u8fal.default\Extensions\{DF617E43-5240-3D21-C902-79D00DCEE789}\components\DatamngrHlpFF7.dll a variant of Win32/Toolbar.SearchSuite.Q potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Roaming\Mozilla\Firefox\Profiles\174u8fal.default\Extensions\{DF617E43-5240-3D21-C902-79D00DCEE789}\components\DatamngrHlpFF8.dll a variant of Win32/Toolbar.SearchSuite.Q potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\AppData\Roaming\Mozilla\Firefox\Profiles\174u8fal.default\Extensions\{DF617E43-5240-3D21-C902-79D00DCEE789}\components\DatamngrHlpFF9.dll a variant of Win32/Toolbar.SearchSuite.Q potentially unwanted application
C:\FRST\Quarantine\C\Users\Max\Downloads\iain.banks.the.wasp.factory_10924_i53165781_il345.exe.xBAD a variant of Win32/Amonetize.DW potentially unwanted application
C:\FRST\Quarantine\C\Windows\lah.exe.xBAD a variant of Win32/TrojanDownloader.Adcurl.A trojan
C:\FRST\Quarantine\C\Windows\apppatch\apppatch64\VCLdr64.dll_1432269666548.xBAD a variant of Win32/ClientConnect.A potentially unwanted application
C:\FRST\Quarantine\C\Windows\SysFilesController\SysFiles_backup.exe.xBAD a variant of Win32/Packed.Komodia.A potentially unwanted application
C:\FRST\Quarantine\C\Windows\SysHealthController\SysFiles_backup.exe.xBAD a variant of Win32/Packed.Komodia.A potentially unwanted application
C:\FRST\Quarantine\C\Windows\TEMP\1863f8ql.exe.xBAD multiple threats
maximusdowns
May 30, 2015, 6:13 AM UTC
Sorry about that, the eset scan was running when you responded.
Gary R
May 30, 2015, 3:54 PM UTC
OK nothing in your e-set scan that wasn't quarantined by either ADWCleaner or FRST, so it looks like we've got everything. Since you say you're not experiencing any problems, then I assume we've got your computer clean.

So, what we need to do now is clear out the programs we've been using to clean your computer, and that will remove all the quarantined malware items.

Please run Delfix ...

  • Right-click on delfix.exe and select " Run as administrator " to run it.
  • Check the following boxes ...
    • Activate UAC
    • Remove disinfection tools
    • Create registry backup
    • Purge system restore

    ... then click on Run.
  • Once it has finished, a notepad file named DelFix.txt will open. Post the contents of this notepad in your next reply.
  • The log can also be located at the root of the system drive, C:\DelFix.txt.



As far as I can see, your computer looks clear of infection now.

Are you still noticing any problems ?
  • If you are let me know about them.
  • If not it's time to make your computer more secure.


Please read the article below which will give you a few suggestions for how to minimise your chances of getting another infection. Please pay particular attention to the section on browsing habits, because from what I've seen in your logs, it's most probably your browsing habits that are responsible for your machine being infected, and changing them is going to be the most effective thing you can do to keep clean in future.

maximusdowns
June 2, 2015, 5:26 PM UTC
Gary,

Sorry for the delay, work has been crazy. Here is my DelFix.txt:

# DelFix v1.010 - Logfile created 02/06/2015 at 10:19:57
# Updated 26/04/2015 by Xplode
# Username : Max - LEVIATHAN
# Operating System : Windows 8.1 Pro (64 bits)

~ Activating UAC ... OK

~ Removing disinfection tools ...

Deleted : C:\FRST
Deleted : C:\AdwCleaner
Deleted : C:\RegBackup
Deleted : C:\Users\Max\Desktop\Addition.txt
Deleted : C:\Users\Max\Desktop\adwcleaner_4.205.exe
Deleted : C:\Users\Max\Desktop\Fixlog.txt
Deleted : C:\Users\Max\Desktop\FRST.txt
Deleted : C:\Users\Max\Desktop\FRST64(1).exe
Deleted : C:\Users\Max\Desktop\JRT(1).exe
Deleted : C:\Users\Max\Desktop\JRT.txt
Deleted : C:\Users\Max\Desktop\Search.txt
Deleted : HKLM\SOFTWARE\AdwCleaner

~ Creating registry backup ... OK

~ Cleaning system restore ...

Deleted : RP #28 [Windows Update | 05/15/2015 02:21:49]
Deleted : RP #29 [Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 | 05/16/2015 17:15:36]
Deleted : RP #31 [Windows Modules Installer | 05/23/2015 01:39:47]
Deleted : RP #32 [Removed Consumer Input Update Helper | 05/30/2015 04:34:44]

New restore point created !

########## - EOF - ##########


From what I can see, my computer is completely free of problems. I cannot thank you enough for your time and energy in cleaning my system. I know it was difficult, and I appreciate you being willing to stick it out with me. I promise to clean up my web browsing habits. Also, I have recently been accepted into a grad program for computer science. That will keep my busy for the foreseeable future, but once I am done, I will be applying to Malware University. You folks have helped me several times over the years and I feel I should give back. Thank you again for your help, I really appreciate it.

Respectfully,
Max
Gary R
June 2, 2015, 9:03 PM UTC
You're welcome Max, glad we got there in the end. Good luck with your computer science course.

Keep safe.

Gary

As your problems appear to have been resolved,