![]() |
|
Plagegeister aller Art und deren Bekämpfung: Adware/VirusWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() | #1 |
![]() | ![]() Adware/Virus Hi Ich habe eine Frage. Vor einigen Tagen schlug Avira aus. Es wurde ADWARE/Adware.Gen gefunden. Daraufhin habe ich einen Systemscan mit Malwarebytes ausgeführt. Es wurden Funde in die Quarantäne verschoben. Die meisten davon heißen: PUP.Optional.Quickstart.A aber es sind auch Registrierungsschlüssel dabei. Hier alle meine Logfiles von Malwarebytes Scan vom 30.07.14 Code:
ATTFilter <?xml version="1.0" encoding="UTF-16" ?> <mbam-log> <header> <date>2014/07/30 11:11:57 +0200</date> <logfile>mbam-log-2014-07-30 (11-11-54).xml</logfile> <isadmin>yes</isadmin> </header> <engine> <version>2.00.2.1012</version> <malware-database>v2014.07.30.03</malware-database> <rootkit-database>v2014.07.17.01</rootkit-database> <license>trial</license> <file-protection>enabled</file-protection> <web-protection>enabled</web-protection> <self-protection>disabled</self-protection> </engine> <system> <osversion>Windows 7 Service Pack 1</osversion> <arch>x64</arch> <username>MAXGAME</username> <filesys>NTFS</filesys> </system> <summary> <type>threat</type> <result>completed</result> <objects>276839</objects> <time>640</time> <processes>1</processes> <modules>0</modules> <keys>7</keys> <values>0</values> <datas>4</datas> <folders>75</folders> <files>138</files> <sectors>0</sectors> </summary> <options> <memory>enabled</memory> <startup>enabled</startup> <filesystem>enabled</filesystem> <archives>enabled</archives> <rootkits>disabled</rootkits> <deeprootkit>disabled</deeprootkit> <heuristics>enabled</heuristics> <pup>enabled</pup> <pum>enabled</pum> </options> <items> <process><path>C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe</path><vendor>PUP.Optional.WPM.A</vendor><action>delete-on-reboot</action><pid>1440</pid><hash>7d2e2085b9c23ff74f2deda5e918f50b</hash></process> <key><path>HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WindowsMangerProtect</path><vendor>PUP.Optional.WPM.A</vendor><action>success</action><hash>7d2e2085b9c23ff74f2deda5e918f50b</hash></key> <key><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\WindowsMangerProtect</path><vendor>PUP.Optional.WPM.A</vendor><action>success</action><hash>7d2e2085b9c23ff74f2deda5e918f50b</hash></key> <key><path>HKU\S-1-5-21-3655537212-2632354052-3119508721-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>a308634291eade58ca9379e92cd6936d</hash></key> <key><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>a308634291eade58ca9379e92cd6936d</hash></key> <key><path>HKU\S-1-5-21-3655537212-2632354052-3119508721-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>a308634291eade58ca9379e92cd6936d</hash></key> <key><path>HKLM\SOFTWARE\WOW6432NODE\supWindowsMangerProtect</path><vendor>PUP.Optional.WPM.A</vendor><action>success</action><hash>3378acf95f1cc96d92d534f9a16305fb</hash></key> <key><path>HKU\S-1-5-21-3655537212-2632354052-3119508721-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}</path><vendor>PUP.Optional.Qone8</vendor><action>success</action><hash>367553527cff0a2c2fb634e4e81cc63a</hash></key> <data><path>HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES</path><valuename>DefaultScope</valuename><vendor>PUP.Optional.Qone8</vendor><action>replaced</action><valuedata>{33BB0A4E-99AF-4226-BDF6-49120163DE86}</valuedata><baddata>{33BB0A4E-99AF-4226-BDF6-49120163DE86}</baddata><gooddata>{0633EE93-D776-472f-A0FF-E1416B8B2E3A}</gooddata><hash>119afaab8eedf046c065ebce1fe5c13f</hash></data> <data><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES</path><valuename>DefaultScope</valuename><vendor>PUP.Optional.Qone8</vendor><action>replaced</action><valuedata>{33BB0A4E-99AF-4226-BDF6-49120163DE86}</valuedata><baddata>{33BB0A4E-99AF-4226-BDF6-49120163DE86}</baddata><gooddata>{0633EE93-D776-472f-A0FF-E1416B8B2E3A}</gooddata><hash>e4c76e370972be7858cd695012f257a9</hash></data> <data><path>HKU\S-1-5-21-3655537212-2632354052-3119508721-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN</path><valuename>Start Page</valuename><vendor>PUP.Optional.SweetPage.A</vendor><action>replaced</action><valuedata>hxxp://www.sweet-page.com/?type=hp&ts=1404717514&from=wld&uid=TOSHIBAXDT01ACA100_1355JNLRSXX1355JNLRSX</valuedata><baddata>hxxp://www.sweet-page.com/?type=hp&ts=1404717514&from=wld&uid=TOSHIBAXDT01ACA100_1355JNLRSXX1355JNLRSX</baddata><gooddata>www.google.com</gooddata><hash>9e0d8d187dfeff377b0d52672fd5fe02</hash></data> <data><path>HKU\S-1-5-21-3655537212-2632354052-3119508721-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN</path><valuename>Default_Page_URL</valuename><vendor>PUP.Optional.SweetPage.A</vendor><action>replaced</action><valuedata>hxxp://www.sweet-page.com/?type=hp&ts=1404717514&from=wld&uid=TOSHIBAXDT01ACA100_1355JNLRSXX1355JNLRSX</valuedata><baddata>hxxp://www.sweet-page.com/?type=hp&ts=1404717514&from=wld&uid=TOSHIBAXDT01ACA100_1355JNLRSXX1355JNLRSX</baddata><gooddata>www.google.com</gooddata><hash>e0cb3471d6a5e155a0e7784150b4bd43</hash></data> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\bookmarks</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\bookmarks\css</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\bookmarks\img</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\classification</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\classification\css</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\classification\img</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\classification\img\skin</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\cloud</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\cloud\css</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\cloud\img</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\cloud\img\skin</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\dialog</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\dialog\img</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\dialog\img\skin</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\extensions</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\extensions\css</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\extensions\img</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\guide</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\guide\css</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\lastVisited</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\lastVisited\css</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\lastVisited\img</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\notice</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\notice\css</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\search</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\search\css</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\search\img</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\setup</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\setup\css</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\setup\img</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\setup\img\skin</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\shortcuts</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\shortcuts\img</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\skins</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\skins\css</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\skins\img</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\skins\img\skin</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\weather</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\weather\css</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\weather\img</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\weather\img\skin</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\css</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\img</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\img\skin</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\js</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\_locales</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\_locales\de</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\_locales\en</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\_locales\es</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\_locales\es_419</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\_locales\fr</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\_locales\fr-BE</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\_locales\fr-CA</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\_locales\fr-CH</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\_locales\fr-LU</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\_locales\it</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\_locales\it-CH</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\_locales\ja</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\_locales\pl</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\_locales\pt_BR</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\_locales\pt_PT</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\_locales\ru</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\_locales\tr</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\_locales\vi</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\_locales\zh_CN</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\_locales\zh_TW</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\_metadata</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></folder> <folder><path>C:\ProgramData\IePluginServices</path><vendor>PUP.Optional.IePluginServices.A</vendor><action>success</action><hash>3e6df2b396e577bf1e4fe3dddd257a86</hash></folder> <folder><path>C:\ProgramData\IePluginServices\update</path><vendor>PUP.Optional.IePluginServices.A</vendor><action>success</action><hash>3e6df2b396e577bf1e4fe3dddd257a86</hash></folder> <folder><path>C:\ProgramData\WindowsMangerProtect</path><vendor>PUP.Optional.WPM.A</vendor><action>delete-on-reboot</action><hash>6843099c0477ec4a33aecbf77c8659a7</hash></folder> <folder><path>C:\ProgramData\WindowsMangerProtect\log</path><vendor>PUP.Optional.WPM.A</vendor><action>success</action><hash>6843099c0477ec4a33aecbf77c8659a7</hash></folder> <folder><path>C:\ProgramData\WindowsMangerProtect\update</path><vendor>PUP.Optional.WPM.A</vendor><action>success</action><hash>6843099c0477ec4a33aecbf77c8659a7</hash></folder> <file><path>C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe</path><vendor>PUP.Optional.WPM.A</vendor><action>delete-on-reboot</action><hash>7d2e2085b9c23ff74f2deda5e918f50b</hash></file> <file><path>C:\ProgramData\IePluginServices\PluginService.exe</path><vendor>PUP.Optional.IePluginService.A</vendor><action>success</action><hash>23883f66017a58de5c1f7ae549b814ec</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Temp\1497952\1497952.zipDir\UninstallManager.exe</path><vendor>PUP.Optional.Skytech.A</vendor><action>success</action><hash>6e3d40654833ac8abd137c12cf320cf4</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Temp\1497952\1497952.zipDir\tmp\SupTab_Setup302.exe</path><vendor>PUP.Optional.IePluginService.A</vendor><action>success</action><hash>aefd911448331521116a26392cd518e8</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Temp\1497952\1497952.zipDir\tmp\wpm_v20.0.0.502.exe</path><vendor>PUP.Optional.WPM.A</vendor><action>success</action><hash>8724cadbbcbf5adce498f79b7190d030</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pelmeidfhdlhlbjimpabfcbnnojbboma_0.localstorage</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>5b505e471b60201649e5a28ad62edb25</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pelmeidfhdlhlbjimpabfcbnnojbboma_0.localstorage-journal</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>95168d187cff261036f80428ea1ab64a</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\background.html</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\index.html</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\jump.html</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\manifest.json</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\bookmarks\bookmarks.js</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\bookmarks\css\style.css</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\bookmarks\img\logo.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\bookmarks\img\searchButton.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\classification\classification.js</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\classification\css\style.css</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\classification\img\logo.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\classification\img\skin\del.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\classification\img\skin\main.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\classification\img\skin\selected.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\cloud\cloud.js</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\cloud\cloudApp.js</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\cloud\cloudWebsite.js</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\cloud\createWebsite.js</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\cloud\css\style.css</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\cloud\img\logo.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\cloud\img\skin\buttonBg.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\cloud\img\skin\categoryBg.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\cloud\img\skin\icons.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\cloud\img\skin\searchBg.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\cloud\img\skin\searchButton.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\cloud\img\skin\searchLeft.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\cloud\img\skin\selected.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\cloud\img\skin\tabsBg.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\dialog\img\skin\headerBg.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\extensions\extensions.js</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\extensions\css\style.css</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\extensions\img\logo.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\guide\guide.js</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\guide\css\style.css</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\lastVisited\lastVisited.js</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\lastVisited\css\style.css</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\lastVisited\img\logo.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\notice\notice.js</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\notice\css\style.css</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\search\search.js</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\search\css\style.css</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\search\img\google-new-logo.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\search\img\logo.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\search\img\searchicon.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\search\img\searchicon2.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\setup\setup.js</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\setup\css\style.css</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\setup\img\logo.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\setup\img\skin\dialBoxStyle.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\setup\img\skin\icons.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\shortcuts\img\oBookmarks.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\shortcuts\img\oDownloads.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\shortcuts\img\oExtensions.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\shortcuts\img\oHistory.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\shortcuts\img\oNewtab.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\skins\cloudWallpaper.js</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\skins\skins.js</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\skins\css\style.css</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\skins\img\logo.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\skins\img\skin\categoryBg.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\skins\img\skin\delete.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\skins\img\skin\download.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\skins\img\skin\icons.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\skins\img\skin\loading.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\weather\weather.js</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\weather\css\style.css</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\weather\img\logo.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\weather\img\skin\line.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\weather\img\skin\locationIcon.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\weather\img\skin\searchButton.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\app\weather\img\skin\weather.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\css\all.css</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\img\game.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\img\icon_128.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\img\icon_16.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\img\icon_48.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\img\NEW.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\img\shopping.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\img\weather.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\img\webstore.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\img\skin\default.jpg</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\img\skin\iconsprite.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\img\skin\idialog_s.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\img\skin\ios5_button.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\img\skin\left.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\img\skin\loading.gif</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\img\skin\loading2.gif</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\img\skin\qBoxBg.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\img\skin\q_bg.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\img\skin\q_bg0.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\img\skin\q_left.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\img\skin\q_left0.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\img\skin\q_right.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\img\skin\q_right0.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\img\skin\right.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\img\skin\selected.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\img\skin\titleBg.png</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\js\all.js</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\js\background.js</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\js\ga.js</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\js\jq.mobi.js</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\js\jump.js</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\js\pop.js</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\js\redirect.js</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\js\xagainit.js</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\_locales\de\messages.json</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\_locales\en\messages.json</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\_locales\es\messages.json</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\_locales\es_419\messages.json</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\_locales\fr\messages.json</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\_locales\fr-BE\messages.json</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\_locales\fr-CA\messages.json</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\_locales\fr-CH\messages.json</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\_locales\fr-LU\messages.json</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\_locales\it\messages.json</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\_locales\it-CH\messages.json</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\_locales\ja\messages.json</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\_locales\pl\messages.json</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\_locales\pt_BR\messages.json</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\_locales\pt_PT\messages.json</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\_locales\ru\messages.json</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\_locales\tr\messages.json</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\_locales\vi\messages.json</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\_locales\zh_CN\messages.json</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\_locales\zh_TW\messages.json</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.1_0\_metadata\verified_contents.json</path><vendor>PUP.Optional.QuickStart.A</vendor><action>success</action><hash>0c9f7c293c3fc076c526e8c8b34fd52b</hash></file> <file><path>C:\ProgramData\WindowsMangerProtect\log\ProtectWindowsManager_2014-07-07[09-19-12-873].log</path><vendor>PUP.Optional.WPM.A</vendor><action>success</action><hash>6843099c0477ec4a33aecbf77c8659a7</hash></file> <file><path>C:\ProgramData\WindowsMangerProtect\update\conf</path><vendor>PUP.Optional.WPM.A</vendor><action>success</action><hash>6843099c0477ec4a33aecbf77c8659a7</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Preferences</path><vendor>PUP.Optional.SweetPage.A</vendor><action>replaced</action><baddata> "host_referral_list": [ 2, [ "hxxp://a.ligatus.com/", [ "hxxp://d.ligatus.com/", 1.8043542189575343, "hxxp://i.ligatus.com/", 3.1152098481147172, "hxxp://x.ligatus.com/", 2.066525344788971, "https://t.qservz.com/", 2.066525344788971 ] ], [ "hxxp://ad.ad-srv.net/", [ "hxxp://ad.ad-srv.net/", 0.6400171444521193 ] ], [ "hxxp://ad.de.doubleclick.net/", [ "hxxp://cm.g.doubleclick.net/", 1.967674022654115, "hxxp://googleads.g.doubleclick.net/", 1.967674022654115, "hxxp://i.tfag.de/", 2.2535753763730892, "hxxp://pagead2.googlesyndication.com/", 2.8253780838110374, "hxxp://www1.mpnrs.com/", 1.967674022654115, "hxxp://www3.mpnrs.com/", 1.967674022654115 ] ], [ "hxxp://ad.doubleclick.net/", [ "hxxp://googleads4.g.doubleclick.net/", 1.298664854951716, "hxxp://r3---sn-uxax3vh50nugp5-8pxl.googlevideo.com/", 0.7448640705095196, "hxxp://r7---sn-uxax3vh50nugp5-8pxl.googlevideo.com/", 0.7448640705095196, "hxxp://s.youtube.com/", 0.5941177705254502, "hxxp://s.ytimg.com/", 0.5941177705254502, "hxxp://s0.2mdn.net/", 0.6694909205174847, "hxxp://s1.2mdn.net/", 1.4873597484062389, "hxxp://www.gstatic.com/", 0.9335589639640425, "hxxp://www.youtube.com/", 1.2957134666247367, "https://bs.serving-sys.com/", 0.5187446205334154 ] ], [ "hxxp://ad.turn.com/", [ "hxxp://cdn.turn.com/", 1.58456620867069 ] ], [ "hxxp://ad2.adfarm1.adition.com/", [ "hxxp://adclear.teufel.de/", 0.2862789259565281, "hxxp://adfarm.mediaplex.com/", 0.2862789259565281, "hxxp://imagesrv.adition.com/", 0.2880628895055676, "hxxp://sb.scorecardresearch.com/", 0.28986437501302, "hxxp://vt.adition.com/", 0.2884520345640728, "hxxp://www3.base.de/", 0.28986437501302 ] ], [ "hxxp://adplus.goo.mx/", [ "hxxp://a.thanksearch.com/", 0.14992898321724035, "hxxp://adplus.goo.mx/", 0.5163217596726917, "hxxp://ajax.googleapis.com/", 0.5737968314519996, "hxxp://b.thanksearch.com/", 0.7233994427079832, "hxxp://c.thanksearch.com/", 0.16263603031623497, "hxxp://f.thanksearch.com/", 0.20463847161716406 ] ], [ "hxxp://adscale.nuggad.net/", [ "https://4155398.fls.doubleclick.net/", 1.5534601413860656, "https://ad.doubleclick.net/", 2.3743401081839832 ] ], [ "hxxp://adtigerat.adspirit.net/", [ "hxxp://adtigerat.adspirit.net/", 1.453044910343409, "hxxp://hal9000.redintelligence.net/", 1.888248979223594, "hxxp://n12.hal9000.redintelligence.net/", 1.8043542189575343, "hxxp://n54.hal9000.redintelligence.net/", 1.1908737845119726 ] ], [ "hxxp://banners.webmasterplan.com/", [ "hxxp://banners.webmasterplan.com/", 2.43816892412274 ] ], [ "hxxp://cdn.turn.com/", [ "hxxp://ad.yieldlab.net/", 1.967674022654115, "hxxp://r.casalemedia.com/", 1.298664854951716 ] ], [ "hxxp://cm.g.doubleclick.net/", [ "hxxp://cm.g.doubleclick.net/", 0.07671521726453633, "hxxp://sync.tidaltv.com/", 0.2464182277518711 ] ], [ "hxxp://connexity.net/", [ "hxxp://r.casalemedia.com/", 1.6498080812796947, "https://connexity.net/", 1.6498080812796947 ] ], [ "hxxp://creative.m2pub.com/", [ "hxxp://s.m2pub.com/", 1.0284571721863194 ] ], [ "hxxp://cshoppingbox.partner.leguide.com/", [ "hxxp://cimg.leguide.com/", 2.8253780838110374, "hxxp://code.jquery.com/", 1.967674022654115, "hxxp://csimg.leguide.com/", 5.684391621000776, "hxxp://www.google-analytics.com/", 2.2535753763730892 ] ], [ "hxxp://ct1.addthis.com/", [ "hxxp://m.addthis.com/", 1.58456620867069 ] ], [ "hxxp://disqus.com/", [ "hxxp://a.disquscdn.com/", 5.112588913562827, "hxxp://b.scorecardresearch.com/", 2.2535753763730892, "hxxp://disqus.com/", 1.967674022654115, "hxxp://referrer.disqus.com/", 1.967674022654115, "hxxp://www.google-analytics.com/", 1.967674022654115 ] ], [ "hxxp://fra1.ib.adnxs.com/", [ "hxxp://bid.openx.net/", 1.8043542189575343, "hxxp://cdn.adspirit.de/", 2.066525344788971, "hxxp://mediafriends.adspirit.net/", 2.328696470620408 ] ], [ "hxxp://free2play.chip.de/", [ "hxxp://de.ioam.de/", 2.2535753763730892, "hxxp://free2play.chip.de/", 3.111279437530011, "hxxp://omniture.chip.de/", 2.5394767300920633, "hxxp://pagead2.googlesyndication.com/", 2.8253780838110374, "hxxp://platform.twitter.com/", 1.967674022654115, "hxxp://tracker.vinsight.de/", 4.254884852405906, "hxxp://www.chip.de/", 5.112588913562827, "hxxp://www.facebook.com/", 2.8253780838110374, "https://apis.google.com/", 2.2535753763730892, "https://www.facebook.com/", 2.8253780838110374 ] ], [ "hxxp://googleads.g.doubleclick.net/", [ "hxxp://cm.g.doubleclick.net/", 0.09827949573942081, "hxxp://pagead2.googlesyndication.com/", 0.4554768567639536, "hxxp://www.gstatic.com/", 0.29603467346323786 ] ], [ "hxxp://govome2.inspsearch.com/", [ "hxxp://520915e23b16731debb0-b62db66babb53291017ef0f16ee290b6.r78.cf2.rackcdn.com/", 1.967674022654115, "hxxp://appapi.inspsearchapi.com/", 3.3971807912489846, "hxxp://csearchcdn1.inspcloud.com/", 3.3971807912489846, "hxxp://csearchcdn3.inspcloud.com/", 1.967674022654115, "hxxp://csr.inspcloud.com/", 1.967674022654115, "hxxp://eventlog.inspsearchapi.com/", 4.254884852405906, "hxxp://govome2.inspsearch.com/", 1.967674022654115, "hxxp://images.infospace.com/", 1.967674022654115, "hxxp://www.google-analytics.com/", 2.8253780838110374, "hxxp://www.google.com/", 3.9689834986869323 ] ], [ "hxxp://ib.adnxs.com/", [ "hxxp://ads.yahoo.com/", 2.2733802, "hxxp://adx.adnxs.com/", 2.2733802, "hxxp://cm.g.doubleclick.net/", 2.2733802, "hxxp://eu-gmtdmp.gd1.mookie1.com/", 2.2733802, "hxxp://ib.adnxs.com/", 11.485533621597163, "hxxp://pixel.rubiconproject.com/", 2.2733802, "hxxp://t.mookie1.com/", 2.2733802, "hxxp://tap.rubiconproject.com/", 2.2733802, "hxxp://us-u.openx.net/", 2.2733802, "hxxp://view.atdmt.com/", 2.2733802 ] ], [ "hxxp://ih.adscale.de/", [ "hxxp://ads.creative-serving.com/", 1.967674022654115, "hxxp://ads.heias.com/", 1.967674022654115, "hxxp://cdn.adrolays.de/", 1.967674022654115, "hxxp://ib.adnxs.com/", 1.967674022654115, "hxxp://ih.adscale.de/", 5.941702839347852, "hxxp://match.v1.rtb.revcloud.adaos-ads.net/", 1.967674022654115, "hxxp://rtb.adrolays.de/", 1.967674022654115, "hxxp://track.adform.net/", 1.967674022654115, "hxxp://tracking.m6r.eu/", 1.967674022654115, "hxxp://uip.semasio.net/", 1.967674022654115 ] ], [ "hxxp://imasdk.googleapis.com/", [ "hxxp://pagead2.googlesyndication.com/", 1.9357094349986688, "hxxp://pubads.g.doubleclick.net/", 1.4767751382309469 ] ], [ "hxxp://intranet.ooelfv.at/", [ "hxxp://cf.intranet.ooelfv.at/", 4.13374828065791, "hxxp://intranet.ooelfv.at/", 5.800318733729479 ] ], [ "hxxp://ip1.casalemedia.com/", [ "hxxp://ad.360yield.com/", 1.967674022654115, "hxxp://casale-match.dotomi.com/", 1.967674022654115, "hxxp://dis.criteo.com/", 1.967674022654115, "hxxp://dsum.casalemedia.com/", 3.3971807912489846, "hxxp://ib.adnxs.com/", 1.967674022654115, "hxxp://idpix.media6degrees.com/", 1.967674022654115, "hxxp://magnetic.t.domdex.com/", 1.967674022654115, "hxxp://match.adsrvr.org/", 1.967674022654115, "hxxp://r.casalemedia.com/", 1.967674022654115, "hxxp://www.wtp101.com/", 1.967674022654115 ] ], [ "hxxp://kinox.to/", [ "hxxp://code.jquery.com/", 1.8043542189575343, "hxxp://creative.m2pub.com/", 1.8043542189575343, "hxxp://go.oclaserver.com/", 1.8043542189575343, "hxxp://kinox.to/", 14.12639713303505, "hxxp://mygpuid.com/", 1.8043542189575343, "hxxp://onclickads.net/", 2.066525344788971, "hxxp://www.google-analytics.com/", 2.066525344788971 ] ], [ "hxxp://m.xp1.ru4.com/", [ "hxxp://ad.doubleclick.net/", 1.967674022654115 ] ], [ "hxxp://n12.hal9000.redintelligence.net/", [ "hxxp://cdn.contentspread.net/", 1.8043542189575343, "hxxp://internorm.vonlist.at/", 1.8043542189575343 ] ], [ "hxxp://n18.ad.ad-srv.net/", [ "hxxp://cdn.contentspread.net/", 1.8043542189575343 ] ], [ "hxxp://n31.hal9000.redintelligence.net/", [ "hxxp://banners.webmasterplan.com/", 2.2535753763730892, "hxxp://www.conrad.at/", 2.2535753763730892 ] ], [ "hxxp://n34.ad.ad-srv.net/", [ "hxxp://farm.plista.com/", 1.967674022654115, "hxxp://static.plista.com/", 3.6830821449679587 ] ], [ "hxxp://n49.ad.ad-srv.net/", [ "hxxp://ad.ad-srv.net/", 2.066525344788971, "hxxp://ad.zanox.com/", 1.8043542189575343, "hxxp://banners.webmasterplan.com/", 2.066525344788971, "hxxp://cdn.contentspread.net/", 2.5908675964518446, "hxxp://cdn.home24.de/", 1.8043542189575343, "hxxp://cdnakm.home24.com/", 1.8043542189575343, "hxxp://n18.ad.ad-srv.net/", 1.8043542189575343, "hxxp://tr.jollydays.at/", 1.8043542189575343, "hxxp://tr.jollydays.de/", 1.8043542189575343, "hxxp://www.vfg.com/", 1.8043542189575343 ] ], [ "hxxp://n51.ad.ad-srv.net/", [ "hxxp://farm.plista.com/", 1.967674022654115, "hxxp://static.plista.com/", 1.967674022654115 ] ], [ "hxxp://n54.hal9000.redintelligence.net/", [ "hxxp://cdn.contentspread.net/", 1.8043542189575343, "hxxp://internorm.vonlist.at/", 1.8043542189575343 ] ], [ "hxxp://n93.hal9000.redintelligence.net/", [ "hxxp://ad3.adfarm1.adition.com/", 1.8043542189575343, "hxxp://imagesrv.adition.com/", 1.8043542189575343 ] ], [ "hxxp://n95.hal9000.redintelligence.net/", [ "hxxp://ad.zanox.com/", 1.8043542189575343, "hxxp://affiliate-jollydays-at.upcdn.com/", 1.8043542189575343, "hxxp://cdn.contentspread.net/", 2.066525344788971 ] ], [ "hxxp://n97.ad.ad-srv.net/", [ "hxxp://cdn.contentspread.net/", 2.2535753763730892, "hxxp://impat.tradedoubler.com/", 1.967674022654115 ] ], [ "hxxp://odin.goo.mx/", [ "hxxp://ib.adnxs.com/", 0.8539264087955587 ] ], [ "hxxp://ooe.arbeiterkammer.at/", [ "hxxp://media.arbeiterkammer.at/", 12.111676428470684, "hxxp://ooe.arbeiterkammer.at/", 4.01606046710758, "hxxp://piwik.arbeiterkammer.at/", 2.127083409456189 ] ], [ "hxxp://platform.twitter.com/", [ "hxxp://cdn.api.twitter.com/", 0.30574358485252645, "https://twitter.com/", 0.7717035730029486 ] ], [ "hxxp://rcm-de.amazon.de/", [ "hxxp://ecx.images-amazon.com/", 1.967674022654115, "hxxp://fls-eu.amazon-adsystem.com/", 1.967674022654115 ] ], [ "hxxp://rcm-eu.amazon-adsystem.com/", [ "hxxp://ecx.images-amazon.com/", 1.58456620867069, "hxxp://fls-eu.amazon-adsystem.com/", 1.58456620867069 ] ], [ "hxxp://s.m2pub.com/", [ "hxxp://m2pub.adk2.co/", 0.7753709679967143 ] ], [ "hxxp://static.williamhill.com/", [ "hxxp://ads2.williamhill.com/", 1.8043542189575343, "hxxp://cacheserve.williamhill.com/", 1.8043542189575343, "hxxp://cachestatic.williamhill.com/", 7.572118987249137, "hxxp://metrics.williamhill.com/", 2.066525344788971, "hxxp://netrefer-a.akamaihd.net/", 1.8043542189575343, "hxxp://nexus.ensighten.com/", 2.5908675964518446, "hxxp://static.williamhill.com/", 1.8043542189575343, "hxxp://www.google-analytics.com/", 1.8043542189575343 ] ], [ "hxxp://view.atdmt.com/", [ "hxxp://cdn.atdmt.com/", 0.8571188042681327, "hxxp://ib.adnxs.com/", 1.0928930962692258, "hxxp://spe.atdmt.com/", 0.9683544665892406 ] ], [ "hxxp://widgets.outbrain.com/", [ "hxxp://b.scorecardresearch.com/", 2.066525344788971 ] ], [ "hxxp://www.ad4mat.de/", [ "hxxp://ad.zanox.com/", 3.496732773304977, "hxxp://d.refinedads.com/", 2.025335319191497, "hxxp://static.ad4mat.net/", 2.6138943008368893, "hxxp://static.baby-markt.de/", 2.025335319191497, "hxxp://track.tnm.de/", 2.025335319191497, "hxxp://tracking.base.de/", 2.025335319191497, "hxxp://tracking.opus-fashion.com/", 2.025335319191497, "hxxp://www.ad4mat.de/", 3.496732773304977, "hxxp://www3.base.de/", 2.025335319191497 ] ], [ "hxxp://www.badzell.at/", [ "hxxp://badzell.webplus.at/", 1.8043542189575343, "hxxp://produkte.homepagewetter.de/", 1.8043542189575343, "hxxp://webplus.at/", 1.8043542189575343, "hxxp://www.badzell.at/", 6.523434483923393 ] ], [ "hxxp://www.bfi.at/", [ "hxxp://www.bfi.at/", 18.58816919756116, "hxxp://www.google-analytics.com/", 2.396937274834959 ] ], [ "hxxp://www.chip.de/", [ "hxxp://beacon.krxd.net/", 2.5394767300920633, "hxxp://images.intellitxt.com/", 5.684391621000776, "hxxp://load.s3.amazonaws.com/", 1.967674022654115, "hxxp://loadm.exelator.com/", 2.2535753763730892, "hxxp://p.yieldlab.net/", 1.967674022654115, "hxxp://pagead2.googlesyndication.com/", 9.121017976912416, "hxxp://platform.twitter.com/", 2.8253780838110374, "hxxp://www.chip.de/", 65.68398145742903, "hxxp://www.gstatic.com/", 1.967674022654115, "https://www.facebook.com/", 2.5394767300920633 ] ], [ "hxxp://www.computerbild.de/", [ "hxxp://apiservices.krxd.net/", 2.066525344788971, "hxxp://b.scorecardresearch.com/", 2.5908675964518446, "hxxp://beacon.krxd.net/", 2.328696470620408, "hxxp://ds.serving-sys.com/", 2.853038722283281, "hxxp://images.intellitxt.com/", 5.2125788547662095, "hxxp://images.outbrain.com/", 3.6395520997775903, "hxxp://pagead2.googlesyndication.com/", 1.8043542189575343, "hxxp://pix04.revsci.net/", 1.8043542189575343, "hxxp://ww251.smartadserver.com/", 5.2125788547662095, "https://pagead2.googlesyndication.com/", 2.5908675964518446 ] ], [ "hxxp://www.crysis-shooter.de/", [ "hxxp://fonts.googleapis.com/", 1.967674022654115, "hxxp://fonts.gstatic.com/", 1.967674022654115, "hxxp://rcm-de.amazon.de/", 1.967674022654115, "hxxp://static.globalgameport.com/", 11.9742214028182, "hxxp://stats.globalgameport.com/", 2.2535753763730892, "hxxp://themes.googleusercontent.com/", 2.2535753763730892, "hxxp://www.crysis-shooter.de/", 9.68701057306641, "hxxp://www.watchdogs-game.de/", 1.967674022654115 ] ], [ "hxxp://www.gamestar.de/", [ "hxxp://beacon.krxd.net/", 2.5394767300920633, "hxxp://imagesrv.adition.com/", 4.254884852405906, "hxxp://load.s3.amazonaws.com/", 1.967674022654115, "hxxp://loadm.exelator.com/", 2.2535753763730892, "hxxp://p.yieldlab.net/", 1.967674022654115, "hxxp://pagead2.googlesyndication.com/", 4.254884852405906, "hxxp://pix04.revsci.net/", 1.967674022654115, "hxxp://sb.scorecardresearch.com/", 2.5394767300920633, "hxxp://www.gamestar.de/", 22.552571490420235, "hxxp://www.save.tv/", 2.5394767300920633 ] ], [ "hxxp://www.google.com/", [ "hxxp://www.google.com/", 0.8571188042681327 ] ], [ "hxxp://www.pcgames.de/", [ "hxxp://ad2.adfarm1.adition.com/", 2.2535753763730892, "hxxp://adscale.nuggad.net/", 2.5394767300920633, "hxxp://cdn.stroeerdigitalmedia.de/", 2.2535753763730892, "hxxp://de-wrigley-car-15-07-14.s3.amazonaws.com/", 1.967674022654115, "hxxp://ds.serving-sys.com/", 3.111279437530011, "hxxp://ih.adscale.de/", 3.6830821449679587, "hxxp://imagesrv.adition.com/", 2.2535753763730892, "hxxp://pagead2.googlesyndication.com/", 2.2535753763730892, "hxxp://pcgames.ivwbox.de/", 1.967674022654115, "hxxp://www.pcgames.de/", 20.837163368106392 ] ], [ "hxxp://www.projekt95.net/", [ "hxxp://beacon-5.newrelic.com/", 2.328696470620408, "hxxp://js-agent.newrelic.com/", 2.328696470620408, "hxxp://www.projekt95.net/", 6.785605609754829, "hxxp://www.youtube.com/", 1.8043542189575343, "https://fonts.googleapis.com/", 1.8043542189575343, "https://themes.googleusercontent.com/", 2.328696470620408 ] ], [ "hxxp://www.spielaffe.de/", [ "hxxp://ad.360yield.com/", 1.8043542189575343, "hxxp://adtigerat.adspirit.net/", 2.066525344788971, "hxxp://cdn.kaisergames.de/", 15.961595013855105, "hxxp://cluster.ad-serverparc.nl/", 2.066525344788971, "hxxp://ib.adnxs.com/", 3.1152098481147172, "hxxp://platform.twitter.com/", 1.8043542189575343, "hxxp://static.ak.facebook.com/", 1.8043542189575343, "hxxp://www.google-analytics.com/", 1.8043542189575343, "hxxp://x.bidswitch.net/", 2.066525344788971, "https://s-static.ak.facebook.com/", 1.8043542189575343 ] ], [ "hxxp://www.spielen.com/", [ "hxxp://d2j0rygefnbpzs.cloudfront.net/", 4.688236603103335, "hxxp://d5p.de17a.com/", 1.8043542189575343, "hxxp://d6tizftlrpuof.cloudfront.net/", 1.8043542189575343, "hxxp://logs.spilgames.com/", 1.8043542189575343, "hxxp://radar.cedexis.com/", 1.8043542189575343, "hxxp://static1.spilcdn.com/", 3.6395520997775903, "hxxp://static2.spilcdn.com/", 11.242514748889247, "hxxp://static3.spilcdn.com/", 5.736921106429082, "hxxp://www.spielen.com/", 11.242514748889247, "hxxp://www.wtp101.com/", 1.8043542189575343 ] ], [ "hxxp://www.sweet-page.com/", [ "hxxp://a.thanksearch.com/", 1.3052305473034391, "hxxp://adplus.goo.mx/", 2.190797835181022, "hxxp://b.thanksearch.com/", 1.8077809791198132, "hxxp://c.thanksearch.com/", 0.8695170351810221, "hxxp://d.thanksearch.com/", 1.530157435181022, "hxxp://e.thanksearch.com/", 1.3052305473034391, "hxxp://f.thanksearch.com/", 0.9222136912422305, "hxxp://odin.goo.mx/", 0.6445901473034392, "hxxp://www.sweet-page.com/", 1.2525338912422306, "hxxp://xa.xingcloud.com/", 0.6445901473034392 ] ], [ "hxxp://www.veedi.com/", [ "hxxp://beacon-6.newrelic.com/", 1.8043542189575343, "hxxp://fonts.googleapis.com/", 1.8043542189575343, "hxxp://js-agent.newrelic.com/", 1.8043542189575343, "hxxp://redir.adap.tv/", 2.066525344788971, "hxxp://s0.2mdn.net/", 1.8043542189575343, "hxxp://stats.g.doubleclick.net/", 2.328696470620408, "hxxp://themes.googleusercontent.com/", 2.066525344788971, "hxxp://www.veedi.com/", 3.901723225609027 ] ], [ "hxxp://www.vhsak.at/", [ "hxxp://www.vhsak.at/", 1.347811300947841 ] ], [ "hxxp://www.youtube.com/", [ "hxxp://csi.gstatic.com/", 1.967674022654115, "hxxp://i1.ytimg.com/", 7.845805855116219, "hxxp://i4.ytimg.com/", 1.967674022654115, "hxxp://pagead2.googlesyndication.com/", 2.2535753763730892, "hxxp://r2---sn-c0q7lne7.googlevideo.com/", 3.9689834986869323, "hxxp://s.youtube.com/", 3.302000307624532, "hxxp://s.ytimg.com/", 5.106480695839627, "hxxp://www.google.com/", 2.2535753763730892, "hxxp://www.youtube.com/", 5.105436204267474, "https://plus.googleapis.com/", 1.967674022654115 ] ], [ "hxxp://www3.mpnrs.com/", [ "hxxp://ad2.adfarm1.adition.com/", 1.8704675623896636, "hxxp://imagesrv.adition.com/", 1.58456620867069, "hxxp://sb.scorecardresearch.com/", 1.967674022654115, "hxxp://tracking.base.de/", 1.967674022654115, "hxxp://vt.adition.com/", 1.967674022654115, "hxxp://ww1.econda-monitor.de/", 1.967674022654115, "hxxp://www3.base.de/", 2.2535753763730892, "hxxp://www3.mpnrs.com/", 0.8571188042681327 ] ], [ "https://accounts.google.com/", [ "https://apis.google.com/", 0.4409215638531517, "https://oauth.googleusercontent.com/", 0.4409215638531517, "https://ssl.gstatic.com/", 0.4172906876533567 ] ], [ "https://apis.google.com/", [ "https://apis.google.com/", 1.7064628539860742, "https://ssl.gstatic.com/", 0.13825075755578542 ] ], [ "https://content.googleapis.com/", [ "https://apis.google.com/", 1.8043542189575343, "https://content.googleapis.com/", 1.8043542189575343 ] ], [ "https://ct1.addthis.com/", [ "https://m.addthis.com/", 1.4956253644698663 ] ], [ "https://googleads.g.doubleclick.net/", [ "https://fonts.googleapis.com/", 0.5187446205334155, "https://pagead2.googlesyndication.com/", 0.5187446205334155, "https://themes.googleusercontent.com/", 0.5187446205334155, "https://tpc.googlesyndication.com/", 0.5187446205334155, "https://www.gstatic.com/", 0.5187446205334155 ] ], [ "https://online.wkooe.at/", [ "https://api-public.addthis.com/", 1.8572295440774185, "https://ct1.addthis.com/", 3.206498870971269, "https://m.addthisedge.com/", 1.8572295440774185, "https://maps.googleapis.com/", 1.8572295440774185, "https://maps.gstatic.com/", 1.8572295440774185, "https://online.wkooe.at/", 27.493346755060603, "https://ssl.google-analytics.com/", 2.127083409456189, "https://wirtschaftskammer01.webtrekk.net/", 2.127083409456189, "https://www.google.at/", 1.8572295440774185, "https://www.google.com/", 1.8572295440774185 ] ], [ "https://plus.googleapis.com/", [ "https://gp3.googleusercontent.com/", 1.0718780514968762, "https://gp4.googleusercontent.com/", 1.637962731860445, "https://gp5.googleusercontent.com/", 2.392742305678536, "https://gp6.googleusercontent.com/", 2.01535251876949, "https://i1.ytimg.com/", 1.4873597484062389, "https://lh3.googleusercontent.com/", 0.9746715912324251, "https://plus.googleapis.com/", 2.43816892412274, "https://ssl.gstatic.com/", 1.5804648629658182 ] ], [ "https://support.google.com/", [ "https://accounts.google.com/", 1.967674022654115, "https://apis.google.com/", 2.5394767300920633, "https://fonts.googleapis.com/", 1.967674022654115, "https://ssl.google-analytics.com/", 1.967674022654115, "https://ssl.gstatic.com/", 3.111279437530011, "https://storage.googleapis.com/", 2.2535753763730892, "https://themes.googleusercontent.com/", 1.967674022654115, "https://www.google.com/", 2.8253780838110374, "https://www.googleapis.com/", 1.967674022654115, "https://www.gstatic.com/", 2.5394767300920633 ] ], [ "https://www.facebook.com/", [ "https://fbstatic-a.akamaihd.net/", 0.4097746620577096 ] ], [ "https://www.google.at/", [ "https://apis.google.com/", 0.8037264599877678, "https://kh.google.com/", 0.05005267980202981, "https://ssl.gstatic.com/", 0.47387818496006934, "https://www.google.at/", 6.442619231623336, "https://www.google.com/", 0.5982184425828531, "https://www.gstatic.com/", 0.8037264599877678 ] ], [ "https://www.google.com/", [ "https://www.google.at/", 0.8248981505401192 ] ] ],</baddata><gooddata></gooddata><hash>f1ba2c79ceada4925ae3806ab94bba46</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Preferences</path><vendor>PUP.Optional.SweetPage.A</vendor><action>replaced</action><baddata> "homepage": "hxxp://www.sweet-page.com/?type=hp&ts=1404717514&from=wld&uid=TOSHIBAXDT01ACA100_1355JNLRSXX1355JNLRSX",</baddata><gooddata></gooddata><hash>c7e4b4f13c3fd85eda6323c7c341e11f</hash></file> <file><path>C:\Users\MAXGAME\AppData\Local\Google\Chrome\User Data\Default\Preferences</path><vendor>PUP.Optional.SweetPage.A</vendor><action>replaced</action><baddata> "startup_urls": [ "hxxp://www.sweet-page.com/?type=hp&ts=1404717514&from=wld&uid=TOSHIBAXDT01ACA100_1355JNLRSXX1355JNLRSX" ],</baddata><gooddata></gooddata><hash>e1ca6a3badce181ee25e519994704eb2</hash></file> </items> </mbam-log> Code:
ATTFilter <?xml version="1.0" encoding="UTF-8" ?> <logs> <record severity="debug" LoggingEventType="2" datetime="2014-07-30T11:10:44.362285+02:00" source="Protection" type="Protection" username="SYSTEM" systemname="MAXGAME-PC" last_modified_tag="2cd691f8-885c-45ce-9bef-61f34ba55502" result="Starting" subtype="Malware Protection"></record> <record severity="debug" LoggingEventType="2" datetime="2014-07-30T11:10:44.364785+02:00" source="Protection" type="Protection" username="SYSTEM" systemname="MAXGAME-PC" last_modified_tag="6d83be35-8a29-4fb5-9764-a6bb802238cb" result="Started" subtype="Malware Protection"></record> <record severity="debug" LoggingEventType="2" datetime="2014-07-30T11:10:44.397285+02:00" source="Protection" type="Protection" username="SYSTEM" systemname="MAXGAME-PC" last_modified_tag="7c4d5d22-309e-4612-ba91-4f8cb93315b8" result="Starting" subtype="Malicious Website Protection"></record> <record severity="debug" LoggingEventType="2" datetime="2014-07-30T11:11:08.892595+02:00" source="Protection" type="Protection" username="SYSTEM" systemname="MAXGAME-PC" last_modified_tag="fdf6e9af-7715-4dc0-8e22-910985ccd265" result="Started" subtype="Malicious Website Protection"></record> <record severity="debug" LoggingEventType="1" datetime="2014-07-30T11:11:24.557826+02:00" source="Manual" type="Update" username="SYSTEM" systemname="MAXGAME-PC" fromVersion="2014.2.20.1" last_modified_tag="40caae10-9cc0-4f24-bfeb-6f0394cf63bd" name="Rootkit Database" toVersion="2014.7.17.1"></record> <record severity="debug" LoggingEventType="1" datetime="2014-07-30T11:11:40.246073+02:00" source="Manual" type="Update" username="SYSTEM" systemname="MAXGAME-PC" fromVersion="2014.3.4.9" last_modified_tag="c24c7ac1-ecae-4f0f-ad90-5c6ec13f3719" name="Malware Database" toVersion="2014.7.30.3"></record> <record severity="debug" LoggingEventType="2" datetime="2014-07-30T11:11:41.458591+02:00" source="Protection" type="Protection" username="SYSTEM" systemname="MAXGAME-PC" last_modified_tag="0c9dac52-ede5-4866-89e4-e8652b167221" result="Starting" subtype="Refresh"></record> <record severity="debug" LoggingEventType="2" datetime="2014-07-30T11:11:41.463591+02:00" source="Protection" type="Protection" username="SYSTEM" systemname="MAXGAME-PC" last_modified_tag="5a515549-49f1-471e-a89d-4f7af63b8661" result="Stopping" subtype="Malicious Website Protection"></record> <record severity="debug" LoggingEventType="2" datetime="2014-07-30T11:11:41.526092+02:00" source="Protection" type="Protection" username="SYSTEM" systemname="MAXGAME-PC" last_modified_tag="d26d3f5c-7323-44fb-9083-ba69531fe1a2" result="Stopped" subtype="Malicious Website Protection"></record> <record severity="debug" LoggingEventType="2" datetime="2014-07-30T11:11:45.036146+02:00" source="Protection" type="Protection" username="SYSTEM" systemname="MAXGAME-PC" last_modified_tag="e58a6542-41b4-4599-ba53-056789fbffc2" result="Success" subtype="Refresh"></record> <record severity="debug" LoggingEventType="2" datetime="2014-07-30T11:11:45.048646+02:00" source="Protection" type="Protection" username="SYSTEM" systemname="MAXGAME-PC" last_modified_tag="9dac9c53-8164-46aa-807d-efd89a615ddd" result="Starting" subtype="Malicious Website Protection"></record> <record severity="debug" LoggingEventType="2" datetime="2014-07-30T11:11:45.276150+02:00" source="Protection" type="Protection" username="SYSTEM" systemname="MAXGAME-PC" last_modified_tag="a6bbe18a-700a-4e75-b2d5-ea62ffade548" result="Started" subtype="Malicious Website Protection"></record> <record severity="debug" LoggingEventType="2" datetime="2014-07-30T11:37:07.521445+02:00" source="Protection" type="Protection" username="SYSTEM" systemname="MAXGAME-PC" last_modified_tag="12403c26-955d-46ff-9def-e586ef615fc4" result="Starting" subtype="Malware Protection"></record> <record severity="debug" LoggingEventType="2" datetime="2014-07-30T11:37:07.568246+02:00" source="Protection" type="Protection" username="SYSTEM" systemname="MAXGAME-PC" last_modified_tag="60f8fd74-7ce7-41ee-8930-804e8e4a1439" result="Started" subtype="Malware Protection"></record> <record severity="debug" LoggingEventType="2" datetime="2014-07-30T11:37:07.583846+02:00" source="Protection" type="Protection" username="SYSTEM" systemname="MAXGAME-PC" last_modified_tag="75c4d66d-bd7e-49dc-a982-edfab7826837" result="Starting" subtype="Malicious Website Protection"></record> <record severity="debug" LoggingEventType="2" datetime="2014-07-30T11:38:31.111528+02:00" source="Protection" type="Protection" username="SYSTEM" systemname="MAXGAME-PC" last_modified_tag="e5b4e0dd-506b-4ce8-9b83-4823d4339315" result="Started" subtype="Malicious Website Protection"></record> <record severity="debug" LoggingEventType="2" datetime="2014-07-30T17:41:04.073457+02:00" source="Protection" type="Protection" username="SYSTEM" systemname="MAXGAME-PC" last_modified_tag="162eea7c-6379-4366-8d6d-319623951870" result="Starting" subtype="Malware Protection"></record> <record severity="debug" LoggingEventType="2" datetime="2014-07-30T17:41:04.089057+02:00" source="Protection" type="Protection" username="SYSTEM" systemname="MAXGAME-PC" last_modified_tag="ee9e0957-b308-4882-81db-b2a345fbdef8" result="Started" subtype="Malware Protection"></record> <record severity="debug" LoggingEventType="2" datetime="2014-07-30T17:41:04.089057+02:00" source="Protection" type="Protection" username="SYSTEM" systemname="MAXGAME-PC" last_modified_tag="0720133a-d6be-4bc2-bdbb-f5e5deef9148" result="Starting" subtype="Malicious Website Protection"></record> <record severity="debug" LoggingEventType="2" datetime="2014-07-30T17:42:22.327380+02:00" source="Protection" type="Protection" username="SYSTEM" systemname="MAXGAME-PC" last_modified_tag="9d4d4db9-92cf-4cdb-8271-e92dbbcf16b0" result="Started" subtype="Malicious Website Protection"></record> </logs> Code:
ATTFilter <?xml version="1.0" encoding="UTF-8" ?> <logs> <record severity="debug" LoggingEventType="2" datetime="2014-07-31T15:31:52.143843+02:00" source="Protection" type="Protection" username="SYSTEM" systemname="MAXGAME-PC" last_modified_tag="8ea23ae0-28ce-4e27-b87e-d360688154c3" result="Starting" subtype="Malware Protection"></record> <record severity="debug" LoggingEventType="2" datetime="2014-07-31T15:31:52.143843+02:00" source="Protection" type="Protection" username="SYSTEM" systemname="MAXGAME-PC" last_modified_tag="9d5a1cdb-eb0f-498d-b324-eb619211c164" result="Started" subtype="Malware Protection"></record> <record severity="debug" LoggingEventType="2" datetime="2014-07-31T15:31:52.143843+02:00" source="Protection" type="Protection" username="SYSTEM" systemname="MAXGAME-PC" last_modified_tag="529d4112-90ce-4334-9341-5746f1a5f3e5" result="Starting" subtype="Malicious Website Protection"></record> <record severity="debug" LoggingEventType="2" datetime="2014-07-31T15:32:53.341083+02:00" source="Protection" type="Protection" username="SYSTEM" systemname="MAXGAME-PC" last_modified_tag="860fe09d-cb3a-4b58-a458-6456c3e299cf" result="Started" subtype="Malicious Website Protection"></record> </logs> Was soll ich machen Geändert von Markke (01.08.2014 um 12:39 Uhr) |