Code:
Alles auswählen Aufklappen ATTFilter
<?xml version="1.0" encoding="UTF-16" ?>
<mbam-log>
<header>
<date>2016/04/15 22:11:05 +0200</date>
<logfile>mbam-log-2016-04-15 (22-09-56).xml</logfile>
<isadmin>yes</isadmin>
</header>
<engine>
<version>2.2.1.1043</version>
<malware-database>v2016.04.15.05</malware-database>
<rootkit-database>v2016.04.09.01</rootkit-database>
<license>trial</license>
<file-protection>enabled</file-protection>
<web-protection>enabled</web-protection>
<self-protection>disabled</self-protection>
</engine>
<system>
<hostname>SCHWARZEGIRL</hostname>
<ip>192.168.0.29</ip>
<osversion>Windows 8.1</osversion>
<arch>x64</arch>
<username>Schatz</username>
<filesys>NTFS</filesys>
</system>
<summary>
<type>threat</type>
<result>completed</result>
<objects>360877</objects>
<time>1310</time>
<processes>0</processes>
<modules>0</modules>
<keys>0</keys>
<values>1</values>
<datas>1</datas>
<folders>54</folders>
<files>179</files>
<sectors>0</sectors>
</summary>
<options>
<memory>enabled</memory>
<startup>enabled</startup>
<filesystem>enabled</filesystem>
<archives>enabled</archives>
<rootkits>disabled</rootkits>
<deeprootkit>disabled</deeprootkit>
<heuristics>enabled</heuristics>
<pup>enabled</pup>
<pum>enabled</pum>
</options>
<items>
<value><path>HKU\S-1-5-21-3205940643-3366264869-3578409839-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS</path><valuename>AutoConfigUrl</valuename><vendor>Hijack.AutoConfigURL.ShrtCln</vendor><action>success</action><valuedata>hxxp://stopblock.me/wpad.dat?35ade8c4837d2e8a8976f6dffa3d5efb227413</valuedata><hash>42df139c99006dc97d929ae1a0648c74</hash></value>
<data><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES</path><valuename>DefaultScope</valuename><vendor>PUP.Optional.Qone8</vendor><action>replaced</action><valuedata>{33BB0A4E-99AF-4226-BDF6-49120163DE86}</valuedata><baddata>{33BB0A4E-99AF-4226-BDF6-49120163DE86}</baddata><gooddata>{0633EE93-D776-472f-A0FF-E1416B8B2E3A}</gooddata><hash>e73a7d32aeebb97dba9b81b6887d0ff1</hash></data>
<folder><path>C:\Users\Schatz\AppData\Roaming\updates</path><vendor>PUP.Optional.PCProCleaner</vendor><action>success</action><hash>978ac9e60d8cc571adc2e374e71d0af6</hash></folder>
<folder><path>C:\Users\Schatz\Documents\PPC-software</path><vendor>PUP.Optional.ProCleaningSoftware</vendor><action>success</action><hash>f1307936afea82b413cb069fda2ab848</hash></folder>
<folder><path>C:\Program Files (x86)\Sosition</path><vendor>PUP.Optional.YesSearches</vendor><action>success</action><hash>928fb8f76336e94dbe25aff8fd070ff1</hash></folder>
<folder><path>C:\Program Files (x86)\hohobnd</path><vendor>PUP.Optional.HohoSearch</vendor><action>success</action><hash>869b4c634b4ec76f59fa5e09ad584fb1</hash></folder>
<folder><path>C:\Program Files (x86)\hohobnd\dmp</path><vendor>PUP.Optional.HohoSearch</vendor><action>success</action><hash>869b4c634b4ec76f59fa5e09ad584fb1</hash></folder>
<folder><path>C:\Program Files (x86)\hohobnd\dmp\CCeuter.exe</path><vendor>PUP.Optional.HohoSearch</vendor><action>success</action><hash>869b4c634b4ec76f59fa5e09ad584fb1</hash></folder>
<folder><path>C:\Program Files (x86)\hohobnd\dmp\ghabuk.exe</path><vendor>PUP.Optional.HohoSearch</vendor><action>success</action><hash>869b4c634b4ec76f59fa5e09ad584fb1</hash></folder>
<folder><path>C:\Program Files (x86)\hohobnd\dmp\SstrprSrv.exe</path><vendor>PUP.Optional.HohoSearch</vendor><action>success</action><hash>869b4c634b4ec76f59fa5e09ad584fb1</hash></folder>
<folder><path>C:\Program Files (x86)\hohobnd\dmp\SstrprTsk.exe</path><vendor>PUP.Optional.HohoSearch</vendor><action>success</action><hash>869b4c634b4ec76f59fa5e09ad584fb1</hash></folder>
<folder><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\36lecpt5.default-1388567396924\extensions\{9f0e13d8-98ad-4d9d-9d25-049819b552b7}</path><vendor>PUP.Optional.SetSearchSetting</vendor><action>success</action><hash>c35e7e319efbea4c0f1f95cf947106fa</hash></folder>
<folder><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></folder>
<folder><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\adblockplus</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></folder>
<folder><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\bookmarkbackups</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></folder>
<folder><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\CertUtils</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></folder>
<folder><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\cliqz</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></folder>
<folder><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\cliqz\antitracking</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></folder>
<folder><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\cliqz\telemetry-categories</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></folder>
<folder><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\cliqz_thumbnails</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></folder>
<folder><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\crashes</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></folder>
<folder><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\crashes\events</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></folder>
<folder><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\datareporting</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></folder>
<folder><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></folder>
<folder><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\browser-mailcheck@web.de</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></folder>
<folder><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\browser-mailcheck@web.de\components</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></folder>
<folder><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\browser-mailcheck@web.de\defaults</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></folder>
<folder><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\browser-mailcheck@web.de\defaults\preferences</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></folder>
<folder><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\browser-mailcheck@web.de\META-INF</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></folder>
<folder><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\{9f0e13d8-98ad-4d9d-9d25-049819b552b7}</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></folder>
<folder><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\gmp</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></folder>
<folder><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\healthreport</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></folder>
<folder><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\gmp-gmpopenh264</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></folder>
<folder><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\gmp-gmpopenh264\1.1</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></folder>
<folder><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\gmp-gmpopenh264\1.3</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></folder>
<folder><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\searchplugins</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></folder>
<folder><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\minidumps</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></folder>
<folder><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\sessionstore-backups</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></folder>
<folder><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></folder>
<folder><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\persistent</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></folder>
<folder><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\persistent\chrome</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></folder>
<folder><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\persistent\chrome\idb</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></folder>
<folder><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\persistent\chrome\idb\2588645841ssegtnti</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></folder>
<folder><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\persistent\http+++web.de</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></folder>
<folder><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\persistent\http+++web.de\idb</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></folder>
<folder><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\persistent\http+++web.de\idb\301792106ttes</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></folder>
<folder><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\persistent\http+++www.amazon.de</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></folder>
<folder><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\persistent\http+++www.amazon.de\idb</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></folder>
<folder><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\persistent\http+++www.amazon.de\idb\2153786202SecrroitpSt</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></folder>
<folder><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\persistent\moz-safe-about+home</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></folder>
<folder><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\persistent\moz-safe-about+home\idb</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></folder>
<folder><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\persistent\moz-safe-about+home\idb\818200132aebmoouht</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></folder>
<folder><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\temporary</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></folder>
<folder><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\temporary\https+++www.facebook.com</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></folder>
<folder><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\temporary\https+++www.facebook.com\asmjs</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></folder>
<folder><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\webapps</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></folder>
<file><path>C:\Program Files (x86)\hohobnd\CCeuter.exe</path><vendor>PUP.Optional.YesSearches</vendor><action>success</action><hash>7fa2fcb354452e080a055ecb10f26d93</hash></file>
<file><path>C:\Program Files (x86)\hohobnd\FFeuter.exe</path><vendor>PUP.Optional.YesSearches</vendor><action>success</action><hash>45dcddd2e7b2a393119955d3877bfc04</hash></file>
<file><path>C:\Users\Schatz\Downloads\iMeshSetup-r1487-w-bf.exe</path><vendor>PUP.Optional.iMeshMusicBoxTB</vendor><action>success</action><hash>938e08a7a3f61422401b400e2fd250b0</hash></file>
<file><path>C:\Users\Schatz\Downloads\SoftonicDownloader_fuer_icq(1).exe</path><vendor>PUP.Optional.SofTonic</vendor><action>success</action><hash>9b86149b178270c61b3d1d2ee71abc44</hash></file>
<file><path>C:\Users\Schatz\Downloads\CDex_TSV44ML77.exe</path><vendor>PUP.Optional.Conduit</vendor><action>success</action><hash>9f82ebc46237e6507b21b19b1de4837d</hash></file>
<file><path>C:\Users\Schatz\Downloads\CryptLoad_1.1.8.rar</path><vendor>PUP.Optional.NetCat</vendor><action>success</action><hash>849d901f2574a98de78f0c80df233dc3</hash></file>
<file><path>C:\Users\Schatz\Downloads\SoftonicDownloader_fuer_icq.exe</path><vendor>PUP.Optional.SofTonic</vendor><action>success</action><hash>5bc609a6ff9afc3a74e459f2e120b24e</hash></file>
<file><path>C:\Windows\Installer\57a7d3b8.msi</path><vendor>PUP.Optional.Iminent</vendor><action>success</action><hash>10112c834356c86e7be72b23966b06fa</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\36lecpt5.default-1388567396924\extensions\adbeaverSG@adbeaver.org.xpi</path><vendor>PUP.Optional.AdBeaver</vendor><action>success</action><hash>3ce5604fe5b443f33c28ee4a72918977</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\adbeaverSG@adbeaver.org.xpi</path><vendor>PUP.Optional.AdBeaver</vendor><action>success</action><hash>48d9872804954aec85df25136e9528d8</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\updates\updates.aiu</path><vendor>PUP.Optional.PCProCleaner</vendor><action>success</action><hash>978ac9e60d8cc571adc2e374e71d0af6</hash></file>
<file><path>C:\Users\Schatz\Documents\PPC-software\logerror.txt</path><vendor>PUP.Optional.ProCleaningSoftware</vendor><action>success</action><hash>f1307936afea82b413cb069fda2ab848</hash></file>
<file><path>C:\Program Files (x86)\Sosition\{A16B1AF7-982D-40C3-B5C1-633E1A6A6678}</path><vendor>PUP.Optional.YesSearches</vendor><action>success</action><hash>928fb8f76336e94dbe25aff8fd070ff1</hash></file>
<file><path>C:\Windows\System32\Tasks\Sosition Reports</path><vendor>PUP.Optional.YesSearches</vendor><action>success</action><hash>bb66802fadec1125994cffa8f60ed030</hash></file>
<file><path>C:\Program Files (x86)\hohobnd\conf.json</path><vendor>PUP.Optional.HohoSearch</vendor><action>success</action><hash>869b4c634b4ec76f59fa5e09ad584fb1</hash></file>
<file><path>C:\Program Files (x86)\hohobnd\@E9438230-A7DF-4D1F-8F2D-CA1D0F0F7924.xpi</path><vendor>PUP.Optional.HohoSearch</vendor><action>success</action><hash>869b4c634b4ec76f59fa5e09ad584fb1</hash></file>
<file><path>C:\Program Files (x86)\hohobnd\Uninst.exe</path><vendor>PUP.Optional.HohoSearch</vendor><action>success</action><hash>869b4c634b4ec76f59fa5e09ad584fb1</hash></file>
<file><path>C:\Program Files (x86)\hohobnd\{A16B1AF7-982D-40C3-B5C1-633E1A6A6678}</path><vendor>PUP.Optional.HohoSearch</vendor><action>success</action><hash>869b4c634b4ec76f59fa5e09ad584fb1</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\36lecpt5.default-1388567396924\extensions\{9f0e13d8-98ad-4d9d-9d25-049819b552b7}\install.rdf</path><vendor>PUP.Optional.SetSearchSetting</vendor><action>success</action><hash>c35e7e319efbea4c0f1f95cf947106fa</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\36lecpt5.default-1388567396924\extensions\{9f0e13d8-98ad-4d9d-9d25-049819b552b7}\bootstrap.js</path><vendor>PUP.Optional.SetSearchSetting</vendor><action>success</action><hash>c35e7e319efbea4c0f1f95cf947106fa</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\36lecpt5.default-1388567396924\extensions\{9f0e13d8-98ad-4d9d-9d25-049819b552b7}\search.json</path><vendor>PUP.Optional.SetSearchSetting</vendor><action>success</action><hash>c35e7e319efbea4c0f1f95cf947106fa</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\36lecpt5.default-1388567396924\prefs.js</path><vendor>PUP.Optional.DeskCut</vendor><action>replaced</action><baddata>deskCutv2@gmail.com</baddata><gooddata></gooddata><hash>889957581f7adc5a9ff1a8c15da8a15f</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js</path><vendor>PUP.Optional.DeskCut</vendor><action>replaced</action><baddata>deskCutv2@gmail.com</baddata><gooddata></gooddata><hash>cd54416ecdcc2a0cf79944252dd8dd23</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\searchplugins\DD1B66D4.xml</path><vendor>PUP.Optional.HohoSearch</vendor><action>success</action><hash>c160c2eda3f6b3832205c99e19ecba46</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\prefs.js</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\adbeaver-log.txt</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\addons.json</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\addons.sqlite</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\addons.sqlite-journal</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\blocklist.xml</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\cert8.db</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\CertUtils.zip</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\cliqz.db</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\cliqz.dbattrack</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\cliqz.dbhumanweb</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\cliqz.dbusafe</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\compatibility.ini</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\content-prefs.sqlite</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\cookies.sqlite</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\cookies.sqlite-shm</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\cookies.sqlite-wal</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions.ini</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions.json</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions.sqlite</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions.sqlite.protect</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\formhistory.sqlite</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\healthreport.sqlite</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\healthreport.sqlite-shm</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\healthreport.sqlite-wal</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\key3.db</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\lightnings.sqlite</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\localstore.rdf</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\logins.json</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\marionette.log</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\smartcliqz-custom-data-cache.json</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\mimeTypes.rdf</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\permissions.sqlite</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\places.sqlite</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\places.sqlite-shm</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\places.sqlite-wal</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\pluginreg.dat</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\search-metadata.json</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\secmod.db</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\sessionCheckpoints.json</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\sessionstore.bak</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\sessionstore.bak-20140825202822</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\sessionstore.js</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\signons.sqlite</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\SiteSecurityServiceState.txt</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\Telemetry.FailedProfileLocks.txt</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\times.json</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\urlclassifierkey3.txt</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\webappsstore.sqlite</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\webappsstore.sqlite-shm</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\webappsstore.sqlite-wal</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\xulstore.json</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\adblockplus\elemhide.css</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\adblockplus\patterns-backup1.ini</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\adblockplus\patterns-backup2.ini</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\adblockplus\patterns-backup3.ini</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\adblockplus\patterns-backup4.ini</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\adblockplus\patterns-backup5.ini</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\adblockplus\patterns.ini</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\bookmarkbackups\bookmarks-2014-02-15_5.json</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\bookmarkbackups\bookmarks-2014-02-17_5.json</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\bookmarkbackups\bookmarks-2014-02-19_5.json</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\bookmarkbackups\bookmarks-2014-02-26_5.json</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\bookmarkbackups\bookmarks-2014-03-05_5.json</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\bookmarkbackups\bookmarks-2014-03-23_5.json</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\bookmarkbackups\bookmarks-2014-03-27_5.json</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\bookmarkbackups\bookmarks-2014-03-31_5.json</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\bookmarkbackups\bookmarks-2014-04-22_5.json</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\bookmarkbackups\bookmarks-2014-08-17_5.json</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\bookmarkbackups\bookmarks-2014-09-18_5.json</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\bookmarkbackups\bookmarks-2014-12-07_28_5LeUQwpRPS1lEGYQvcieDA==.jsonlz4</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\bookmarkbackups\bookmarks-2015-11-15_28_lk0H1mCFKKIDCLw+hlHIaQ==.jsonlz4</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\bookmarkbackups\bookmarks-2016-04-07_29_ElanrkgLfmTAFxN436P3Bw==.jsonlz4</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\CertUtils\certutil.exe</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\CertUtils\freebl3.dll</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\CertUtils\libnspr4.dll</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\CertUtils\libplc4.dll</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\CertUtils\libplds4.dll</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\CertUtils\msvcr100.dll</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\CertUtils\nss3.dll</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\CertUtils\nssckbi.dll</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\CertUtils\nssdbm3.dll</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\CertUtils\nssutil3.dll</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\CertUtils\smime3.dll</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\CertUtils\softokn3.dll</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\CertUtils\sqlite3.dll</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\CertUtils\ssl3.dll</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\cliqz\smartcliqz-trigger-urls-cache.json</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\cliqz\antitracking\cookie_whitelist.json</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\cliqz\antitracking\tracker_owners.json</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\cliqz\telemetry-categories\categories.json</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\crashes\store.json.mozlz4</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\datareporting\state.json</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\cliqz@cliqz.com.xpi</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\{b5ff4533-981b-4303-87ae-ff7b33382325}.xpi</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\browser-mailcheck@web.de\chrome.jar</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\browser-mailcheck@web.de\chrome.manifest</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\browser-mailcheck@web.de\install.rdf</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\browser-mailcheck@web.de\components\aboutNetError.js</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\browser-mailcheck@web.de\components\mCollectAutoComplete.js</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\browser-mailcheck@web.de\defaults\preferences\unitedinternet-debug.js</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\browser-mailcheck@web.de\defaults\preferences\unitedinternet-general.js</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\browser-mailcheck@web.de\defaults\preferences\unitedinternet-highlight.js</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\browser-mailcheck@web.de\defaults\preferences\unitedinternet-login.js</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\browser-mailcheck@web.de\defaults\preferences\unitedinternet-neterror.js</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\browser-mailcheck@web.de\defaults\preferences\unitedinternet-newtab.js</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\browser-mailcheck@web.de\defaults\preferences\unitedinternet-pref.js</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\browser-mailcheck@web.de\defaults\preferences\unitedinternet-search.js</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\browser-mailcheck@web.de\defaults\preferences\unitedinternet-shopping.js</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\browser-mailcheck@web.de\defaults\preferences\unitedinternet-tracking.js</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\browser-mailcheck@web.de\defaults\preferences\unitedinternet-util.js</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\browser-mailcheck@web.de\META-INF\manifest.mf</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\browser-mailcheck@web.de\META-INF\mozilla.rsa</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\browser-mailcheck@web.de\META-INF\mozilla.sf</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\{9f0e13d8-98ad-4d9d-9d25-049819b552b7}\bootstrap.js</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\{9f0e13d8-98ad-4d9d-9d25-049819b552b7}\install.rdf</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\{9f0e13d8-98ad-4d9d-9d25-049819b552b7}\search.json</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\healthreport\state.json</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\gmp-gmpopenh264\1.1\gmpopenh264.dll</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\gmp-gmpopenh264\1.1\gmpopenh264.info</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\gmp-gmpopenh264\1.3\gmpopenh264.dll</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\gmp-gmpopenh264\1.3\gmpopenh264.info</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\searchplugins\bing-lavasoft.xml</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\searchplugins\youtube.xml</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\minidumps\16595f46-1b5b-4859-94ae-c8d31ba7fdc4.dmp</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\minidumps\18940f69-c432-49bd-a7ed-9ca8c0bfdd9e.dmp</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\minidumps\222ba3f1-322f-48cf-a608-a563f8142d64.dmp</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\minidumps\222ba3f1-322f-48cf-a608-a563f8142d64.extra</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\minidumps\49062ef6-033e-4fe6-b2cf-910ae14e6804.dmp</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\minidumps\9130cf14-4bb0-49ce-a24c-56d92ccdf2fa.dmp</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\minidumps\9130cf14-4bb0-49ce-a24c-56d92ccdf2fa.extra</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\sessionstore-backups\previous.js</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\sessionstore-backups\recovery.bak</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\sessionstore-backups\recovery.js</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\sessionstore-backups\upgrade.js-20150108202552</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\persistent\chrome\.metadata</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\persistent\chrome\idb\2588645841ssegtnti.sqlite</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\persistent\http+++web.de\.metadata</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\persistent\http+++web.de\idb\301792106ttes.sqlite</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\persistent\http+++www.amazon.de\.metadata</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\persistent\http+++www.amazon.de\idb\2153786202SecrroitpSt.sqlite</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\persistent\moz-safe-about+home\.metadata</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\persistent\moz-safe-about+home\idb\818200132aebmoouht.sqlite</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\temporary\https+++www.facebook.com\.metadata</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\temporary\https+++www.facebook.com\asmjs\metadata</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\temporary\https+++www.facebook.com\asmjs\module13</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\temporary\https+++www.facebook.com\asmjs\module14</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\temporary\https+++www.facebook.com\asmjs\module15</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\webapps\webapps.json</path><vendor>PUP.Optional.FakeFFProfile</vendor><action>success</action><hash>33ee3f707e1b3ff7c36a5710ec197f81</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\prefs.js</path><vendor>PUP.Optional.HohoSearch</vendor><action>replaced</action><baddata>user_pref("browser.search.searchengine.hp", "hxxp://www.hohosearch.com/?ts=AHEqA3EtAHMlBE..&v=20160412&uid=E9FA6529327CEEC1BDEC07434F4F02E2&ptid=epf2&mode=ffsengext"</baddata><gooddata></gooddata><hash>63be7e31841561d52267e384cb3a2dd3</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\prefs.js</path><vendor>PUP.Optional.HohoSearch</vendor><action>replaced</action><baddata>ile the application is running,
* the changes will be overwritten when the application exits.
*
* To make a manual change to preferences, you can visit the URL about :config
*/
user_p</baddata><gooddata></gooddata><hash>4bd63e7110899d99ee9ba3c416efb44c</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\prefs.js</path><vendor>PUP.Optional.HohoSearch</vendor><action>replaced</action><baddata>ning,
* the changes will be overwritten when the application exits.
*
* To make a manual change to preferences, you can visit the URL about :config
*/
user_pref("accessibility.typeahea</baddata><gooddata></gooddata><hash>57ca129d712849edf49524439b6a55ab</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\prefs.js</path><vendor>PUP.Optional.WinYahoo</vendor><action>replaced</action><baddata>user_pref("browser.startup.homepage", "https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_adsafld_16_15&param1=1&param2=f%3D1%26b%3DFirefox%26cc%3Dde%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzuzzyE0AyC0Czz0Fzy0 AyEzytBtD0DtDyDtN0D0Tzu0StCyDyCtAtN1L2XzutAtFtBtDtFtCtFtBtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StAtByByEyCyEtBtBtGyD0EtDtAtGzzyB0E0FtGtC0ByBzytGzztBzy0AtC0 Dzz0FyBzytDyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0Azy0FyByCtCyBtAtGyCtA0DyDtGyEtC0F0DtGzyyDyEtDtG0DtD0C0AtB0AtD0F0DyD0F0C2QtN0A0LzuyEtN1B2Z1V1T1S1NzutCzzyDtA%26 cr%3D489122474%26a%3Dwbf_adsafld_16_15%26os_ver%3D6.3%26os%3DWindows%2B8.1"</baddata><gooddata>user_pref("browser.startup.homepage", "https://www.malwarebytes.org/restorebrowser/</gooddata><hash>27fa3b74891042f4d2b3006918ed49b7</hash></file>
<file><path>C:\Users\Schatz\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\prefs.js</path><vendor>PUP.Optional.DeskCut</vendor><action>replaced</action><baddata>deskCutv2@gmail.com</baddata><gooddata></gooddata><hash>e8390ca32f6a201619773732818454ac</hash></file>
</items>
</mbam-log>
Code:
Alles auswählen Aufklappen ATTFilter
Adaware Cleaner hat keine Bedrohung gefunden