Trojaner-Board - V9.com enfernen

Trojaner-Board (https://www.trojaner-board.de/)

- Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)

- - V9.com enfernen (https://www.trojaner-board.de/156064-v9-com-enfernen.html)

V9.com Virus entfernen.
Ich habe unerwünschte Software V9.com Virus auf dem System! Wie kann ich es loswerden? Firefox und Internet Explorer sind betroffen habe schon Addons gelöscht und about:config, ohne Erfolg.

Hallo und :hallo:

Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden?

Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520

Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten!
Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht!

Zudem bitte auch ein Log mit Farbars Tool machen:

Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

http://www.trojaner-board.de/picture...&pictureid=307

[CODE]Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlauf Datum: 06.07.2014
Suchlauf-Zeit: 10:45:00
Logdatei: Log.txt
Administrator: Ja

Version: 2.00.2.1012
Malware Datenbank: v2014.07.04.02
Rootkit Datenbank: v2014.07.03.01
Lizenz: Testversion
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Self-protection: Deaktiviert

Betriebssystem: Windows 8
CPU: x64
Dateisystem: NTFS
Benutzer: Witali

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 271535
Verstrichene Zeit: 22 Min, 14 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristics: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 3
PUP.Optional.IePluginService.A, C:\ProgramData\IePluginService\PluginService.exe, 1152, , [93efd6c5fc7fd16593da8ece68996898]
PUP.Optional.WpManager, C:\ProgramData\WPM\wprotectmanager.exe, 1208, , [94ee5249b1ca6dc97d6b84e26c95956b]
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\srpts.exe, 2664, , [3e443c5f780368ce5201666bbb47f907]

Module: 6
PUP.Optional.NextLive.A, C:\Users\Witali\AppData\Roaming\newnext.me\nengine.dll, , [275b306be497a88e2977085209f8857b],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Smartbar.Communication.NamedPipe.dll, , [3e443c5f780368ce5201666bbb47f907],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Smartbar.Common.dll, , [3e443c5f780368ce5201666bbb47f907],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Smartbar.Communication.dll, , [3e443c5f780368ce5201666bbb47f907],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\srpt.dll, , [3e443c5f780368ce5201666bbb47f907],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\srptc.dll, , [3e443c5f780368ce5201666bbb47f907],

Registrierungsschlüssel: 65
PUP.Optional.IePluginService.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\IePluginService, , [93efd6c5fc7fd16593da8ece68996898],
PUP.Optional.WpManager, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Wpm, , [94ee5249b1ca6dc97d6b84e26c95956b],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110311301136}, , [1d65108be19a3df9f98ab968a75a2fd1],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440344304436}, , [1d65108be19a3df9f98ab968a75a2fd1],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550355305536}, , [1d65108be19a3df9f98ab968a75a2fd1],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660366306636}, , [1d65108be19a3df9f98ab968a75a2fd1],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550355305536}, , [1d65108be19a3df9f98ab968a75a2fd1],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660366306636}, , [1d65108be19a3df9f98ab968a75a2fd1],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440344304436}, , [1d65108be19a3df9f98ab968a75a2fd1],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110311301136}, , [1d65108be19a3df9f98ab968a75a2fd1],
PUP.Optional.PlusHD.A, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{11111111-1111-1111-1111-110311301136}, , [1d65108be19a3df9f98ab968a75a2fd1],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\CLASSES\CLSID\{22222222-2222-2222-2222-220322302236}, , [1d65108be19a3df9f98ab968a75a2fd1],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{22222222-2222-2222-2222-220322302236}, , [1d65108be19a3df9f98ab968a75a2fd1],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110311301136}\INPROCSERVER32, , [1d65108be19a3df9f98ab968a75a2fd1],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, , [cfb33566b4c7df5713ab61ee1de5f50b],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}, , [cfb33566b4c7df5713ab61ee1de5f50b],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}, , [cfb33566b4c7df5713ab61ee1de5f50b],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}, , [cfb33566b4c7df5713ab61ee1de5f50b],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}, , [cfb33566b4c7df5713ab61ee1de5f50b],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, , [cfb33566b4c7df5713ab61ee1de5f50b],
PUP.Optional.SupTab.A, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, , [cfb33566b4c7df5713ab61ee1de5f50b],
PUP.Optional.SupTab.A, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, , [cfb33566b4c7df5713ab61ee1de5f50b],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, , [cfb33566b4c7df5713ab61ee1de5f50b],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{D40753C7-8A59-4C1F-BE88-C300F4624D5B}, , [9fe3dfbc304be452dddabec6a161b44c],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{C292AD0A-C11F-479B-B8DB-743E72D283B0}, , [9fe3dfbc304be452dddabec6a161b44c],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{C292AD0A-C11F-479B-B8DB-743E72D283B0}, , [9fe3dfbc304be452dddabec6a161b44c],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{68B81CCD-A80C-4060-8947-5AE69ED01199}, , [b0d27922ff7cae88678a5034b84a28d8],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E6B969FB-6D33-48d2-9061-8BBD4899EB08}, , [7210d5c643385ed8549e13712ed409f7],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}, , [552d851688f3f6400f578dbecb376997],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}, , [9fe3009b80fba591186e176d17eb4eb2],
PUP.Optional.Linkury.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\LPTSystemUpdater, , [3e443c5f780368ce5201666bbb47f907],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\SupTab, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.Sanbreel.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\{b8a90375-3b37-4954-86de-f96c458c4ce2}w64, , [344e5c3fbbc01026e45dda33a064b749],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Iminent, , [453dbbe06a11a98d6ce6bb47d72d8e72],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\21636, , [eb97bbe0fc7f5cda3c6d53772dd5e11f],
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, , [4240a0fb9fdce254ed00807835ce29d7],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}, , [0979e9b22c4f33038dcfbcf6b44eb24e],
PUP.Optional.HDVidCndec.A, HKLM\SOFTWARE\WOW6432NODE\HDvid Codec V6.0, , [750decaf5823c472bdb333a0d131c23e],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\Iminent, , [49392c6ff18ab284c852528679896898],
PUP.Optional.MediaPlayerplus.A, HKLM\SOFTWARE\WOW6432NODE\MediaPlayerplus, , [810196057dfe0234b400636605fdde22],
PUP.Optional.NationZoom.A, HKLM\SOFTWARE\WOW6432NODE\nationzoomSoftware, , [2e54cbd083f871c5620550adde25fa06],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\Plus-HD-2.2, , [96ec1883225942f4806a4792946ead53],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent, , [cab81e7dc0bb6bcb9ab8a9592fd547b9],
PUP.Optional.HDVidCodec.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\dnllcmllkjofnojidnaknldfehfhehoo, , [84fe039896e52c0ae03e0ee04cb7bd43],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\INSTALLEDBROWSEREXTENSIONS\21636, , [562cc1da304b1a1c1c8da624e121aa56],
PUP.Optional.Linkury.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{BC0BF363-63AB-4FF7-8EF1-AE0D7F711B24}, , [bcc6e0bb96e53600fe9c615c8082dd23],
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\WOW6432NODE\SWEETIM, , [f29038633843a1958b98f6f8aa59d927],
PUP.Optional.Feven.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Feven 2.5, , [bcc64853a4d78caa3455dbf75ba730d0],
PUP.Optional.PlusHD.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Plus-HD-2.2, , [2260dcbf4b30ea4caca524a6788a30d0],
PUP.Optional.1ClickDownload.A, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\1ClickDownload, , [3151b2e985f6b97d6627a04ecb386f91],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, , [ccb68f0ce79444f2178850b1ba4ae51b],
PUP.Optional.PlusHD.A, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Plus-HD-2.2, , [0d75712a2e4d03332829b21869990af6],
PUP.Optional.PriceGong.A, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\PriceGong, , [88faf4a7295265d1efa7547db0520cf4],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE\1I1T1Q1S, , [dca62c6f8fec62d4061e4c8bff03c739],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE, , [5131e8b3641766d083b32ebf748f6b95],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\21636, , [41416932d8a391a57d2dc604020035cb],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\Freeven, , [6b17f6a5a7d478be748bf6d722e0758b],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\installdaddy, , [e9998d0ed4a73303130d23cb3bc81be5],
PUP.Optional.PlusHD.A, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\Plus HD, , [88faedaea9d2162083cfbf0b43bfc33d],
PUP.Optional.Ciuvo.A, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\DOMSTORAGE\ciuvo.com, , [820062399dde2412509bf8bad42ec63a],
PUP.Optional.SuperFish.A, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\DOMSTORAGE\superfish.com, , [9ce6bfdc84f7be789f4bb5fd06fcf30d],
PUP.Optional.Qone8, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, , [2e54247746350a2c688426d2bc4702fe],
PUP.Optional.SweetIM.A, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SWEETIM, , [83ff13887efd67cf968cdf0f4db64cb4],
PUP.Optional.HDVidCodec.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\HDvid Codec V6.0, , [ccb6405b13688aac9f9d5c3dc83a7b85],
PUP.Optional.HDVidCodec.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\1ClickDownload, , [c4bee1ba7a015ed8cf6e5445c33f21df],

Registrierungswerte: 9
PUP.Optional.NextLive.A, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|NextLive, C:\Windows\SysWOW64\rundll32.exe "C:\Users\Witali\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l, , [275b306be497a88e2977085209f8857b]
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}, Mysearchdial, , [0979e9b22c4f33038dcfbcf6b44eb24e]
PUP.Optional.QuickStart.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|quick_start@gmail.com, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\2sfzx2xn.default-1387402583828\extensions\quick_start@gmail.com, , [7909d4c7fe7d59dd192d48835ba736ca]
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\WOW6432NODE\SWEETIM|simapp_id, 205476692094826048234177718857667808812, , [f29038633843a1958b98f6f8aa59d927]
PUP.Optional.Linkury.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\LPTSYSTEMUPDATER|ImagePath, "C:\Program Files (x86)\LPT\srpts.exe", , [493955461c5f6acc6ce9d9f87e840ef2]
PUP.Optional.WpManager.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WPM|ImagePath, C:\ProgramData\WPM\wprotectmanager.exe -service, , [a0e27526364595a10eb57a8361a2c13f]
PUP.Optional.InstallCore.A, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE|tb, 0A2O0R1R1H2Z1S1G0H1F, , [5131e8b3641766d083b32ebf748f6b95]
PUP.Optional.QuickStart.A, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MOZILLA\EXTENDS|appid, quick_start@gmail.com, , [8ef40e8d88f393a397790da8ff039769]
PUP.Optional.SweetIM.A, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SWEETIM|simapp_id, 205476692094826048234177718857667808812, , [83ff13887efd67cf968cdf0f4db64cb4]

Registrierungsdaten: 19
PUP.Optional.NationZoom.A, HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND, C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.nationzoom.com/?type=sc&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX, Gut: (iexplore.exe), Schlecht: (C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.nationzoom.com/?type=sc&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX),,[f88aafecd6a574c2981f5632a75d8e72]
PUP.Optional.NationZoom.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://www.nationzoom.com/web/?type=ds&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX&q={searchTerms}, Gut: (hxxp://www.google.com), Schlecht: (hxxp://www.nationzoom.com/web/?type=ds&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX&q={searchTerms}),,[93efcfcc1962eb4bd0e920683fc5d828]
PUP.Optional.NationZoom.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://www.nationzoom.com/?type=hp&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX, Gut: (hxxp://www.google.com), Schlecht: (hxxp://www.nationzoom.com/?type=hp&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX),,[681a89126318c3731e9a2e5a46bea957]
PUP.Optional.NationZoom.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://www.nationzoom.com/?type=hp&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX, Gut: (hxxp://www.google.com), Schlecht: (hxxp://www.nationzoom.com/?type=hp&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX),,[047e3c5f344749edc9f1394f84807090]
PUP.Optional.NationZoom, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://www.nationzoom.com/web/?type=ds&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX&q={searchTerms}, Gut: (hxxp://www.google.com), Schlecht: (hxxp://www.nationzoom.com/web/?type=ds&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX&q={searchTerms}),,[80021a81c8b376c03968286a22e203fd]
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),,[2b574853e39849ede47b187a7b890bf5]
PUP.Optional.NationZoom.A, HKLM\SOFTWARE\WOW6432NODE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND, C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.nationzoom.com/?type=sc&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX, Gut: (iexplore.exe), Schlecht: (C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.nationzoom.com/?type=sc&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX),,[dea4cad193e857df51660d7b5da75ca4]
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\ABOUTURLS|Tabs, hxxp://start.mysearchdial.com/?f=2&a=irmsd1103&cd=2XzuyEtN2Y1L1Qzuzy0CtB0AyBtDyEzztD0Dzy0ByCtAtA0BtN0D0Tzu0SyBtCtDtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=501081809&ir=, Gut: (www.google.com), Schlecht: (hxxp://start.mysearchdial.com/?f=2&a=irmsd1103&cd=2XzuyEtN2Y1L1Qzuzy0CtB0AyBtDyEzztD0Dzy0ByCtAtA0BtN0D0Tzu0SyBtCtDtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=501081809&ir=) ,,[374be1ba1d5e84b292e96b1d47bdaf51]
PUP.Optional.NationZoom.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://www.nationzoom.com/web/?type=ds&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX&q={searchTerms}, Gut: (hxxp://www.google.com), Schlecht: (hxxp://www.nationzoom.com/web/?type=ds&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX&q={searchTerms}),,[ee9452493a41ba7c69502a5e31d303fd]
PUP.Optional.NationZoom.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://www.nationzoom.com/?type=hp&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX, Gut: (hxxp://www.google.com), Schlecht: (hxxp://www.nationzoom.com/?type=hp&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX),,[562ca3f86219d1653a7efc8c2fd559a7]
PUP.Optional.NationZoom.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://www.nationzoom.com/?type=hp&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX, Gut: (hxxp://www.google.com), Schlecht: (hxxp://www.nationzoom.com/?type=hp&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX),,[83ff5a4186f50234b1093a4ee3219d63]
PUP.Optional.NationZoom, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://www.nationzoom.com/web/?type=ds&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX&q={searchTerms}, Gut: (hxxp://www.google.com), Schlecht: (hxxp://www.nationzoom.com/web/?type=ds&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX&q={searchTerms}),,[8101801bc1baa98d663b434f2dd7b050]
PUP.Optional.SnapDo.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04c8v3nrz1Jk2OMIEkAFi8neL2xxaMM0fcHoNm5vmWbLPW5CN0AYPk2M35zz1PFR2aDe5RpLaMZ9H6JXSicvSp283fnUxXXUyOc4lrcEbJwOmB3P0V3j4bPsbZVwOs4xGFHw,,&q={sear chTerms}, Gut: (www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04c8v3nrz1Jk2OMIEkAFi8neL2xxaMM0fcHoNm5vmWbLPW5CN0AYPk2M35zz1PFR2aDe5RpLaMZ9H6JXSicvSp283fnUxXXUyOc4lrcEbJwOmB3P0V3j4bPsbZVwOs4xGFHw,,&q={sear chTerms}),,[c5bd049753280630d3967e0a0afa5aa6]
PUP.Optional.Snapdo, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04c8v3nrz1Jk2OMIEkAFi8neL2xxaMM0fcHoNm5vmWbLPW5CN0AYPk2M35zz1PFR2aDe5RpLaMZ9H6JXSicvSp283fnUxXXUyOc4lrcEbJwOmB3P0V3j4bPsbZVwOs4xGFHw,,&q={sear chTerms}, Gut: (hxxp://www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04c8v3nrz1Jk2OMIEkAFi8neL2xxaMM0fcHoNm5vmWbLPW5CN0AYPk2M35zz1PFR2aDe5RpLaMZ9H6JXSicvSp283fnUxXXUyOc4lrcEbJwOmB3P0V3j4bPsbZVwOs4xGFHw,,&q={sear chTerms}),,[176bbcdf0c6f8bab02cdb7da25df22de]
PUP.Optional.NationZoom.A, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://www.nationzoom.com/?type=hp&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX, Gut: (hxxp://www.google.com), Schlecht: (hxxp://www.nationzoom.com/?type=hp&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX),,[3151adee0a715cda2c88eb9d9b698a76]
PUP.Optional.Snapdo, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Bar, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04c8v3nrz1Jk2OMIEkAFi8neL2xxaMM0fcHoNm5vmWbLPW5CN0AYPk2M35zz1PFR2aDe5RpLaMZ9H6JXSicvSp283fnUxXXUyOc4lrcEbJwOmB3P0V3j4bPsbZVwOs4xGFHw,,&q={sear chTerms}, Gut: (hxxp://www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04c8v3nrz1Jk2OMIEkAFi8neL2xxaMM0fcHoNm5vmWbLPW5CN0AYPk2M35zz1PFR2aDe5RpLaMZ9H6JXSicvSp283fnUxXXUyOc4lrcEbJwOmB3P0V3j4bPsbZVwOs4xGFHw,,&q={sear chTerms}),,[681aedae28530a2c9836b5dccf35c838]
PUP.Optional.Snapdo, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Default_Search_URL, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04c8v3nrz1Jk2OMIEkAFi8neL2xxaMM0fcHoNm5vmWbLPW5CN0AYPk2M35zz1PFR2aDe5RpLaMZ9H6JXSicvSp283fnUxXXUyOc4lrcEbJwOmB3P0V3j4bPsbZVwOs4xGFHw,,&q={sear chTerms}, Gut: (hxxp://www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04c8v3nrz1Jk2OMIEkAFi8neL2xxaMM0fcHoNm5vmWbLPW5CN0AYPk2M35zz1PFR2aDe5RpLaMZ9H6JXSicvSp283fnUxXXUyOc4lrcEbJwOmB3P0V3j4bPsbZVwOs4xGFHw,,&q={sear chTerms}),,[681a207b3a41a88e09c8c7ca38ccea16]
PUP.Optional.Snapdo, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|SearchAssistant, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04c8v3nrz1Jk2OMIEkAFi8neL2xxaMM0fcHoNm5vmWbLPW5CN0AYPk2M35zz1PFR2aDe5RpLaMZ9H6JXSicvSp283fnUxXXUyOc4lrcEbJwOmB3P0V3j4bPsbZVwOs4xGFHw,,&q={sear chTerms}, Gut: (hxxp://www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04c8v3nrz1Jk2OMIEkAFi8neL2xxaMM0fcHoNm5vmWbLPW5CN0AYPk2M35zz1PFR2aDe5RpLaMZ9H6JXSicvSp283fnUxXXUyOc4lrcEbJwOmB3P0V3j4bPsbZVwOs4xGFHw,,&q={sear chTerms}),,[7b07900bee8d6accb51d7e13887ca45c]
PUP.Optional.SnapDo.A, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04c8v3nrz1Jk2OMIEkAFi8neL2xxaMM0fcHoNm5vmWbLPW5CN0AYPk2M35zz1PFR2aDe5RpLaMZ9H6JXSicvSp283fnUxXXUyOc4lrcEbJwOmB3P0V3j4bPsbZVwOs4xGFHw,,&q={sear chTerms}, Gut: (www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04c8v3nrz1Jk2OMIEkAFi8neL2xxaMM0fcHoNm5vmWbLPW5CN0AYPk2M35zz1PFR2aDe5RpLaMZ9H6JXSicvSp283fnUxXXUyOc4lrcEbJwOmB3P0V3j4bPsbZVwOs4xGFHw,,&q={sear chTerms}),,[5131e6b5d1aa5cda17539aee4aba54ac]

Ordner: 104
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT, , [3e443c5f780368ce5201666bbb47f907],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Configs, , [3e443c5f780368ce5201666bbb47f907],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Resources, , [3e443c5f780368ce5201666bbb47f907],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\en-US, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-419, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-ES, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-BE, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CA, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CH, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-FR, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-LU, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-CH, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-IT, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pl, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt-BR, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru-MO, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\tr-TR, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\vi-VI, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-CN, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-TW, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates, , [a6dcd6c5fe7d73c39c2cf3e58082e917],
PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates\Firefox, , [a6dcd6c5fe7d73c39c2cf3e58082e917],
PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates\Firefox\chrome, , [a6dcd6c5fe7d73c39c2cf3e58082e917],
PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates\Firefox\chrome\content, , [a6dcd6c5fe7d73c39c2cf3e58082e917],
PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates\Firefox\chrome\content\libraries, , [a6dcd6c5fe7d73c39c2cf3e58082e917],
PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates\Firefox\chrome\content\resources, , [a6dcd6c5fe7d73c39c2cf3e58082e917],
PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates\Firefox\chrome\locale, , [a6dcd6c5fe7d73c39c2cf3e58082e917],
PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates\Firefox\chrome\locale\en-US, , [a6dcd6c5fe7d73c39c2cf3e58082e917],
PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates\Firefox\chrome\skin, , [a6dcd6c5fe7d73c39c2cf3e58082e917],
PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates\Firefox\defaults, , [a6dcd6c5fe7d73c39c2cf3e58082e917],
PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates\Firefox\defaults\preferences, , [a6dcd6c5fe7d73c39c2cf3e58082e917],
PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates\libraries, , [a6dcd6c5fe7d73c39c2cf3e58082e917],
PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates\resources, , [a6dcd6c5fe7d73c39c2cf3e58082e917],
PUP.Optional.HDVidCodec.A, C:\Users\Witali\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\hdvidcodec.com, , [0f737427512abc7a8894b638cd3602fe],
PUP.Optional.Iminent.A, C:\Users\Witali\AppData\Local\Temp\Iminent, , [ceb47a219eddbf771ec87e1956acbc44],
PUP.Optional.Iminent.A, C:\Users\Witali\AppData\Local\Temp\Iminent\Log, , [ceb47a219eddbf771ec87e1956acbc44],
PUP.Optional.HDVidCodec.A, C:\Program Files (x86)\HDvid Codec V6.0, , [ccb6405b13688aac9f9d5c3dc83a7b85],
PUP.Optional.HDVidCodec.A, C:\Program Files (x86)\hdvidcodec.com, , [c4bee1ba7a015ed8cf6e5445c33f21df],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeExe, , [a1e1cccf7a0140f62939d2c7669c16ea],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeExe\Dic-Eng, , [a1e1cccf7a0140f62939d2c7669c16ea],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeExe\GuideFiles, , [a1e1cccf7a0140f62939d2c7669c16ea],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\LocalDB, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\exe, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\MyBackupPc, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\OptimizerPro, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\Qone8, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\Storimbo, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.NextLive.A, C:\Users\Witali\AppData\Roaming\newnext.me, , [91f19cff700b68cec4b83c5dcf33e61a],
PUP.Optional.NextLive.A, C:\Users\Witali\AppData\Roaming\newnext.me\cache, , [91f19cff700b68cec4b83c5dcf33e61a],
PUP.Optional.IePluginService.A, C:\ProgramData\IePluginService, , [2e54dcbfccaf7cbac3c8504aea180af6],
PUP.Optional.IePluginService.A, C:\ProgramData\IePluginService\update, , [2e54dcbfccaf7cbac3c8504aea180af6],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\userCode, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\icons, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\icons\actions, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\api, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\popupResource, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com, , [8af8c4d7e695350138269d00d82aa25e],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\chrome, , [8af8c4d7e695350138269d00d82aa25e],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\chrome\content, , [8af8c4d7e695350138269d00d82aa25e],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\chrome\content\api, , [8af8c4d7e695350138269d00d82aa25e],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\chrome\content\core, , [8af8c4d7e695350138269d00d82aa25e],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\defaults, , [8af8c4d7e695350138269d00d82aa25e],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\defaults\preferences, , [8af8c4d7e695350138269d00d82aa25e],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData, , [8af8c4d7e695350138269d00d82aa25e],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins, , [8af8c4d7e695350138269d00d82aa25e],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\userCode, , [8af8c4d7e695350138269d00d82aa25e],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\locale, , [8af8c4d7e695350138269d00d82aa25e],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\locale\en-US, , [8af8c4d7e695350138269d00d82aa25e],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\skin, , [8af8c4d7e695350138269d00d82aa25e],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\chrome, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\chrome\content, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\chrome\content\api, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\chrome\content\core, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\defaults, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\defaults\preferences, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\userCode, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\locale, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\locale\en-US, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\skin, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-2.2, , [b1d14754ccafd0662f7b9c02d929c040],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-2.5, , [bdc56b3053288ea823872f6f52b0de22],
PUP.Optional.ClickNMark.A, C:\Program Files (x86)\click-n-mark-5, , [d8aad1ca0576171f2e90207ee0227b85],

Dateien: 1194
PUP.Optional.IePluginService.A, C:\ProgramData\IePluginService\PluginService.exe, , [93efd6c5fc7fd16593da8ece68996898],
PUP.Optional.WpManager, C:\ProgramData\WPM\wprotectmanager.exe, , [94ee5249b1ca6dc97d6b84e26c95956b],
PUP.Optional.NextLive.A, C:\Users\Witali\AppData\Roaming\newnext.me\nengine.dll, , [275b306be497a88e2977085209f8857b],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-2.2\Plus-HD-2.2-bho64.dll, , [1d65108be19a3df9f98ab968a75a2fd1],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\SupTab.dll, , [cfb33566b4c7df5713ab61ee1de5f50b],
PUP.Optional.SupTab.A, C:\Users\Witali\AppData\Roaming\SupTab\SupTab.dll, , [dca6e6b588f370c6c89a989d9b65e917],
PUP.Optional.InstallRex, C:\$Recycle.Bin\S-1-5-21-215413311-585589717-95820281-1001\$R15J0KA.exe, , [e79bc2d9a7d464d2d709bf855aa6d030],
PUP.Optional.BundleInstaller.A, C:\$Recycle.Bin\S-1-5-21-215413311-585589717-95820281-1001\$R1TVC1S.exe, , [5e2489122c4fcf67ff9658f3748dfc04],
PUP.Optional.OneClickDownloader.A, C:\$Recycle.Bin\S-1-5-21-215413311-585589717-95820281-1001\$R4BQN0P.exe, , [344ee6b5a0dbb97da37c6dab936ed030],
PUP.Optional.BundleInstaller.A, C:\$Recycle.Bin\S-1-5-21-215413311-585589717-95820281-1001\$R4LVT6U.exe, , [49395e3d7506290dc683a7b98480ce32],
PUP.Optional.BundleInstaller.A, C:\$Recycle.Bin\S-1-5-21-215413311-585589717-95820281-1001\$R5IGK2Q.exe, , [3c46bae18cefe45251744704b849ec14],
PUP.Optional.BundleInstaller.A, C:\$Recycle.Bin\S-1-5-21-215413311-585589717-95820281-1001\$R7PGWW3.exe, , [2f535d3e344778be4bb677d4e61b21df],
PUP.Optional.OneClickDownloader.A, C:\$Recycle.Bin\S-1-5-21-215413311-585589717-95820281-1001\$RMG7WA1.exe, , [b2d084179fdca09697884bcd0ef345bb],
PUP.Optional.BundleInstaller.A, C:\$Recycle.Bin\S-1-5-21-215413311-585589717-95820281-1001\$RTGN3TX.exe, , [e2a0cfcce497003681c8cb9527ddd62a],
PUP.Optional.OptimumInstaller.A, C:\$Recycle.Bin\S-1-5-21-215413311-585589717-95820281-1001\$RUNOFPQ.exe, , [6a18d6c5c4b7f3438543e86b8b767c84],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\bhs12DF.tmp, , [4c367922641757df863276be60a05da3],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\bhsE7CC.tmp, , [c1c19a012853a88e6058c37104fca25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\pniueGko.exe.part, , [344e910a64173ff78530fe47ce334fb1],
PUP.Optional.Solimba.mr, C:\Users\Witali\AppData\Local\Temp\GtaEk5zH.exe.part, , [85fda4f7c9b2c571011040d7ad54d828],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\parent.txt, , [245e22797605d660329394b77e83b050],
PUP.Optional.PayByAds.A, C:\Users\Witali\AppData\Local\Temp\dsrlte.exe, , [ccb6ecaf5d1ea49233b6734c6a9a7c84],
PUP.Optional.DomalQ, C:\Users\Witali\AppData\Local\Temp\K9UiiNYm.exe.part, , [d7abe4b7b9c255e1027d21405fa58779],
PUP.Optional.SweetIM, C:\Users\Witali\AppData\Local\Temp\mgsqlite3.dll, , [9fe31388235857df2837feb83fc54eb2],
PUP.Optional.NextLive.A, C:\Users\Witali\AppData\Local\Temp\setupA9_.exe, , [037fbedde596ad89ced28bcf41c0b050],
PUP.Optional.Iminent, C:\Users\Witali\AppData\Local\Temp\Umbrella.exef296a17, , [8002bae11b609e985986709d4db4ee12],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\041bc179-e08b-42da-b56a-e4edb9085cbb0\parent.txt, , [b1d12378572460d61baad5761ae7ab55],
PUP.Optional.ScramblePacker.A, C:\Users\Witali\AppData\Local\Temp\8984877d-e867-4ce1-925e-d3acc74b5b5d\software\feven-2-5.exe, , [f58d1289d5a6142203ef5928e31eed13],
Backdoor.Bot, C:\Users\Witali\AppData\Local\Temp\android\android.exe, , [f1916f2c542754e2ab577af902ffdd23],
Backdoor.Bot, C:\Users\Witali\AppData\Local\Temp\b0c2ba3b-05aa-43bc-a2c1-94fae2d19a34\android.exe, , [86fc0e8d99e254e214ee80f3d22fe917],
PUP.Optional.Fortunitas.A, C:\Users\Witali\AppData\Local\Temp\b0c2ba3b-05aa-43bc-a2c1-94fae2d19a34\software\FortunitasSetup.exe, , [f58daeeddba09d999db266f8e61e0df3],
PUP.Optional.ScramblePacker.A, C:\Users\Witali\AppData\Local\Temp\b0c2ba3b-05aa-43bc-a2c1-94fae2d19a34\software\mediaplayerpluuss.exe, , [fe84d3c8f289bd798b676c1513ee45bb],
PUP.Optional.ShoppingHelper.A, C:\Users\Witali\AppData\Local\Temp\b0c2ba3b-05aa-43bc-a2c1-94fae2d19a34\software\ShoppinHelper2_Setup2.exe, , [433fa8f3c2b91b1b7e10ee4e7a86f30d],
PUP.Optional.SmartBar, C:\Users\Witali\AppData\Local\Temp\MSI1015.tmp-\Smartbar.Installer.CustomActions.dll, , [b5cdeead1566ed49250a9c928b75d12f],
PUP.Optional.ScramblePacker.A, C:\Users\Witali\AppData\Local\Temp\f50672b0-7a72-4f16-91d7-ceee2f119948\software\feven-2-5.exe, , [c9b9168568135ed82bc78ff2f40d1ae6],
PUP.Optional.NationZoom.A, C:\Users\Witali\AppData\Local\Temp\fullpackage_temp1387395728\Baofeng.exe, , [99e92f6c3d3e5cdaf68ce94417e939c7],
PUP.Optional.WpManager, C:\Users\Witali\AppData\Local\Temp\fullpackage_temp1387395728\tmp\NewGdp.exe, , [84fee5b690eb5bdb4f99a6c04db47888],
PUP.Optional.Feven.A, C:\Users\Witali\AppData\Local\Temp\~nsu.tmp\Au_.exe, , [dfa3207b4536132347623efd2dd4c13f],
PUP.Optional.BundleInstaller, C:\Users\Witali\AppData\Local\Temp\DM\parent.txt, , [3250ebb07506f244f8f7e0630df46c94],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\sfckhzrirswogkh\parent.txt, , [8ff3d6c56f0c033350b17fccbb4607f9],
PUP.Optional.SkyTech.A, C:\Users\Witali\AppData\Local\Temp\sfckhzrirswogkh\software\tugs_nationzoom.exe, , [4042fc9f9ddeb77f4b03174558a9916f],
PUP.Optional.NextLive.A, C:\Users\Witali\AppData\Local\genienext\nengine.dll, , [bcc629720972072fbee24614d42d47b9],
PUP.Optional.SmartBar, C:\Windows\Installer\MSI1015.tmp, , [dfa32d6ef487f343c06f131bbc4440c0],
PUP.Optional.PlusHD.A, C:\Windows\Tasks\Plus-HD-2.2-chromeinstaller.job, , [8af89a011368c274910e7d499d6524dc],
PUP.Optional.PlusHD.A, C:\Windows\Tasks\Plus-HD-2.2-codedownloader.job, , [9ae8a0fb0972dd597d226561a959718f],
PUP.Optional.PlusHD.A, C:\Windows\Tasks\Plus-HD-2.2-enabler.job, , [b9c9613aa9d24ceafba44086ca38f10f],
PUP.Optional.PlusHD.A, C:\Windows\Tasks\Plus-HD-2.2-firefoxinstaller.job, , [dea424774932989ecbd4378f7e8442be],
PUP.Optional.PlusHD.A, C:\Windows\Tasks\Plus-HD-2.2-updater.job, , [245e6833bac170c63867873f5fa34ab6],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\PublisherSettings.xml, , [3e443c5f780368ce5201666bbb47f907],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Smartbar.Communication.NamedPipe.dll, , [3e443c5f780368ce5201666bbb47f907],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\FiddlerCore.dll, , [3e443c5f780368ce5201666bbb47f907],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\HtmlAgilityPack.dll, , [3e443c5f780368ce5201666bbb47f907],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\linmsl.exe, , [3e443c5f780368ce5201666bbb47f907],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\LPTInstaller.msi, , [3e443c5f780368ce5201666bbb47f907],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\lrrot.dll, , [3e443c5f780368ce5201666bbb47f907],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\NewConfig.txt, , [3e443c5f780368ce5201666bbb47f907],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Newtonsoft.Json.dll, , [3e443c5f780368ce5201666bbb47f907],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Proxy.pac, , [3e443c5f780368ce5201666bbb47f907],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Smartbar.Common.dll, , [3e443c5f780368ce5201666bbb47f907],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Smartbar.Communication.dll, , [3e443c5f780368ce5201666bbb47f907],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Smartbar.Infrastructure.Utilities.dll, , [3e443c5f780368ce5201666bbb47f907],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Smartbar.Monetization.Proxy.ProxyRemover.exe, , [3e443c5f780368ce5201666bbb47f907],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Smartbar.Monetization.Proxy.ProxyService.dll, , [3e443c5f780368ce5201666bbb47f907],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Smartbar.Personalization.Common.dll, , [3e443c5f780368ce5201666bbb47f907],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Smartbar.Resources.HistoryAndStatsWrapper.dll, , [3e443c5f780368ce5201666bbb47f907],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\sppsm.dll, , [3e443c5f780368ce5201666bbb47f907],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\spusm.dll, , [3e443c5f780368ce5201666bbb47f907],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\srbs.dll, , [3e443c5f780368ce5201666bbb47f907],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\srbu.dll, , [3e443c5f780368ce5201666bbb47f907],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\sreu.dll, , [3e443c5f780368ce5201666bbb47f907],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\srpdm.dll, , [3e443c5f780368ce5201666bbb47f907],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\srprl.dll, , [3e443c5f780368ce5201666bbb47f907],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\srpt.dll, , [3e443c5f780368ce5201666bbb47f907],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\srptc.dll, , [3e443c5f780368ce5201666bbb47f907],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\srptm.exe, , [3e443c5f780368ce5201666bbb47f907],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\srptm.exe.config, , [3e443c5f780368ce5201666bbb47f907],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\srpts.exe, , [3e443c5f780368ce5201666bbb47f907],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\srut.dll, , [3e443c5f780368ce5201666bbb47f907],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\System.Data.SQLite.dll, , [3e443c5f780368ce5201666bbb47f907],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\UserSettings.xml, , [3e443c5f780368ce5201666bbb47f907],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\XMLOperations.xml, , [3e443c5f780368ce5201666bbb47f907],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Configs\BrowserSettings.xml, , [3e443c5f780368ce5201666bbb47f907],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Configs\LPTMapping.xml, , [3e443c5f780368ce5201666bbb47f907],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Configs\Timers.xml, , [3e443c5f780368ce5201666bbb47f907],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Resources\LPT.xml, , [3e443c5f780368ce5201666bbb47f907],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\install.data, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\uninstall.exe, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\WebDataJs, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\data.html, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\indexIE.html, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\indexIE8.html, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\main.css, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\style.css, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\ver.txt, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\arrow.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\default_add_logo.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\default_add_logo_hover.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\default_logo.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\googlelogo.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\googlelogo2.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\google_trends.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\icon128.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\icon16.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\icon48.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\loading.gif, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\logo32.ico, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\27.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\0.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\1.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\10.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\11.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\12.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\13.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\14.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\15.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\16.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\17.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\18.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\19.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\2.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\20.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\21.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\22.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\23.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\24.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\25.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\26.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\28.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\29.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\3.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\30.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\31.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\32.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\33.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\34.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\35.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\36.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\37.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\38.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\39.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\4.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\40.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\41.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\42.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\43.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\44.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\45.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\46.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\47.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\5.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\6.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\7.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\8.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\9.png, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\background.js, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\common.js, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\ga.js, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\ie8.js, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\jquery-1.11.0.min.js, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\jquery-base.js, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\jquery.autocomplete.js, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\js.js, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\library.js, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\xagainit.js, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\en-US\messages.json, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-419\messages.json, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-ES\messages.json, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-BE\messages.json, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CA\messages.json, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CH\messages.json, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-FR\messages.json, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-LU\messages.json, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-CH\messages.json, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-IT\messages.json, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pl\messages.json, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt\messages.json, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt-BR\messages.json, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru\messages.json, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru-MO\messages.json, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\tr-TR\messages.json, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\vi-VI\messages.json, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-CN\messages.json, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-TW\messages.json, , [12709efd621944f28a62d102f80a04fc],
PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates\source.crx, , [a6dcd6c5fe7d73c39c2cf3e58082e917],
PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates\unins000.dat, , [a6dcd6c5fe7d73c39c2cf3e58082e917],
PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates\Firefox\icon.png, , [a6dcd6c5fe7d73c39c2cf3e58082e917],
PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates\Firefox\install.rdf, , [a6dcd6c5fe7d73c39c2cf3e58082e917],
PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates\Firefox\chrome\content\main.js.bak, , [a6dcd6c5fe7d73c39c2cf3e58082e917],
PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates\Firefox\chrome\content\main.xul, , [a6dcd6c5fe7d73c39c2cf3e58082e917],
PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates\Firefox\chrome\locale\en-US\overlay.dtd, , [a6dcd6c5fe7d73c39c2cf3e58082e917],
PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates\Firefox\chrome\skin\overlay.css, , [a6dcd6c5fe7d73c39c2cf3e58082e917],
PUP.Optional.HDVidCodec.A, C:\Windows\Tasks\HDvid Codec V1-codedownloader.job, , [39499506215acf679a812ac444bfde22],
PUP.Optional.HDVidCodec.A, C:\Users\Witali\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\hdvidcodec.com\HDVidCodec.lnk, , [0f737427512abc7a8894b638cd3602fe],
PUP.Optional.HDVidCodec.A, C:\Users\Witali\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\hdvidcodec.com\Uninstall.lnk, , [0f737427512abc7a8894b638cd3602fe],
PUP.Optional.FunMoods.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pflphaooapbgpeakohlggbpidpppgdff_0.localstorage, , [ec96207bd3a8d363adacc234e81b40c0],
PUP.Optional.HDVidCodec.A, C:\Windows\Tasks\HDvid Codec V6.0-firefoxinstaller.job, , [b1d1a1fa24573bfbd23b52aa956e26da],
PUP.Optional.HDVidCodec.A, C:\Windows\Tasks\HDvid Codec V6.0-updater.job, , [86fca7f487f4f73f060717e5b15229d7],
PUP.Optional.NationZoom.A, C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\nationzoom.xml, , [87fb118a2952a096570f9964cd3620e0],
PUP.Optional.Sanbreel.A, C:\Windows\System32\Drivers\{b8a90375-3b37-4954-86de-f96c458c4ce2}w64.sys, , [344e5c3fbbc01026e45dda33a064b749],
PUP.Optional.HDVidCodec.A, C:\Program Files (x86)\HDvid Codec V6.0\45971.xpi, , [ccb6405b13688aac9f9d5c3dc83a7b85],
PUP.Optional.HDVidCodec.A, C:\Program Files (x86)\HDvid Codec V6.0\HDvid Codec V6.0-firefoxinstaller.exe, , [ccb6405b13688aac9f9d5c3dc83a7b85],
PUP.Optional.HDVidCodec.A, C:\Program Files (x86)\HDvid Codec V6.0\HDvid Codec V6.0-updater.exe, , [ccb6405b13688aac9f9d5c3dc83a7b85],
PUP.Optional.HDVidCodec.A, C:\Program Files (x86)\HDvid Codec V6.0\Uninstall.exe, , [ccb6405b13688aac9f9d5c3dc83a7b85],
PUP.Optional.HDVidCodec.A, C:\Program Files (x86)\HDvid Codec V6.0\utils.exe, , [ccb6405b13688aac9f9d5c3dc83a7b85],
PUP.Optional.HDVidCodec.A, C:\Program Files (x86)\hdvidcodec.com\b.bmp, , [c4bee1ba7a015ed8cf6e5445c33f21df],
PUP.Optional.HDVidCodec.A, C:\Program Files (x86)\hdvidcodec.com\finish.bmp, , [c4bee1ba7a015ed8cf6e5445c33f21df],
PUP.Optional.HDVidCodec.A, C:\Program Files (x86)\hdvidcodec.com\FinishHDVID.exe, , [c4bee1ba7a015ed8cf6e5445c33f21df],
PUP.Optional.HDVidCodec.A, C:\Program Files (x86)\hdvidcodec.com\HDVidCodec.exe, , [c4bee1ba7a015ed8cf6e5445c33f21df],
PUP.Optional.HDVidCodec.A, C:\Program Files (x86)\hdvidcodec.com\HDvidCodec10.crx, , [c4bee1ba7a015ed8cf6e5445c33f21df],
PUP.Optional.HDVidCodec.A, C:\Program Files (x86)\hdvidcodec.com\HDvidCodecIE.exe, , [c4bee1ba7a015ed8cf6e5445c33f21df],
PUP.Optional.HDVidCodec.A, C:\Program Files (x86)\hdvidcodec.com\hdvidextsetup.exe, , [c4bee1ba7a015ed8cf6e5445c33f21df],
PUP.Optional.HDVidCodec.A, C:\Program Files (x86)\hdvidcodec.com\hdvid_temp.bmp, , [c4bee1ba7a015ed8cf6e5445c33f21df],
PUP.Optional.HDVidCodec.A, C:\Program Files (x86)\hdvidcodec.com\uninst.exe, , [c4bee1ba7a015ed8cf6e5445c33f21df],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeExe\VBeeClient.vsto, , [a1e1cccf7a0140f62939d2c7669c16ea],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeExe\Dic-Eng\adj.exc, , [a1e1cccf7a0140f62939d2c7669c16ea],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeExe\Dic-Eng\adv.exc, , [a1e1cccf7a0140f62939d2c7669c16ea],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeExe\Dic-Eng\cntlist, , [a1e1cccf7a0140f62939d2c7669c16ea],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeExe\Dic-Eng\cntlist.rev, , [a1e1cccf7a0140f62939d2c7669c16ea],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeExe\Dic-Eng\data.adj, , [a1e1cccf7a0140f62939d2c7669c16ea],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeExe\Dic-Eng\data.adv, , [a1e1cccf7a0140f62939d2c7669c16ea],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeExe\Dic-Eng\data.noun, , [a1e1cccf7a0140f62939d2c7669c16ea],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeExe\Dic-Eng\data.verb, , [a1e1cccf7a0140f62939d2c7669c16ea],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeExe\Dic-Eng\english.model, , [a1e1cccf7a0140f62939d2c7669c16ea],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeExe\Dic-Eng\frames.vrb, , [a1e1cccf7a0140f62939d2c7669c16ea],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeExe\Dic-Eng\index.adj, , [a1e1cccf7a0140f62939d2c7669c16ea],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeExe\Dic-Eng\index.adv, , [a1e1cccf7a0140f62939d2c7669c16ea],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeExe\Dic-Eng\index.noun, , [a1e1cccf7a0140f62939d2c7669c16ea],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeExe\Dic-Eng\index.sense, , [a1e1cccf7a0140f62939d2c7669c16ea],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeExe\Dic-Eng\index.verb, , [a1e1cccf7a0140f62939d2c7669c16ea],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeExe\Dic-Eng\log.grind.2.1, , [a1e1cccf7a0140f62939d2c7669c16ea],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeExe\Dic-Eng\noun.exc, , [a1e1cccf7a0140f62939d2c7669c16ea],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeExe\Dic-Eng\sentidx.vrb, , [a1e1cccf7a0140f62939d2c7669c16ea],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeExe\Dic-Eng\sents.vrb, , [a1e1cccf7a0140f62939d2c7669c16ea],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeExe\Dic-Eng\verb.exc, , [a1e1cccf7a0140f62939d2c7669c16ea],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeExe\Dic-Eng\verb.Framestext, , [a1e1cccf7a0140f62939d2c7669c16ea],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeExe\GuideFiles\License.rtf, , [a1e1cccf7a0140f62939d2c7669c16ea],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeExe\GuideFiles\SelectSlidesGuide.rtf, , [a1e1cccf7a0140f62939d2c7669c16ea],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Simple 04_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\3 colors 01_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\3 colors 01_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\3 colors 01_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\3 Colors 02_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\3 Colors 02_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\3 Colors 02_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\3 Colors 03_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\3 Colors 03_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\3 Colors 03_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\3 Colors 04_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\3 Colors 04_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\3 Colors 04_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\3 Colors 05_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\3 Colors 05_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\3 Colors 05_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\3 Colors 06_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\3 Colors 06_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\3 Colors 06_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\3 Colors 07_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\3 Colors 07_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\3 Colors 08_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\3 Colors 08_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\3 Colors 08_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_6frame_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_6frame_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_blue_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_blue_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_blue_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_book_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_book_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_book_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_chinesepaper_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_chinesepaper_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_chinesepaper_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_greenstars_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_greenstars_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_greenstars_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_majestic_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_majestic_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_paperback_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_paperback_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_paperback_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_pareeca_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_pareeca_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_pareeca_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_pink_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_pink_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_pink_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_spirala_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_spirala_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_spirala_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\3 Colors 07_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_6frame_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_majestic_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Comics03_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_Elemental_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_Verve_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Bubbles_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\BaloonGirl_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\BaloonGirl_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\BaloonGirl_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ChineseDoll_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ChineseDoll_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ChineseDoll_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Christmas1_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Christmas1_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Christmas1_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Christmas2_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Christmas2_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Christmas2_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Comics01_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Comics01_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Comics01_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Comics02_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Comics02_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Comics02_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Comics03_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Comics03_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Comics04_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Comics04_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Comics04_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Comics05_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Comics05_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Comics05_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Comics06_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Comics06_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Comics06_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_Angles_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_Angles_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_Angles_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_Apo_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_Apo_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_Apo_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_BlackTie_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_BlackTie_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_BlackTie_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_Composite_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_Composite_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_Composite_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_Elemental_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_Elemental_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_gray_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_gray_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_gray_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_Horizon_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_Horizon_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_Horizon_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_Newspaper_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_Newspaper_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_Newspaper_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_Paper_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_Paper_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_Paper_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_Technic_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_Technic_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_Technic_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_Verve_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_Verve_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Bubbles_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Bubbles_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Classic_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Classic_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Classic_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Desert_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Desert_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Desert_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Earth_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Earth_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Earth_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Flower_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Flower_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Flower_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Leaves_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Leaves_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Leaves_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Ornament_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Ornament_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Ornament_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Sky_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Sky_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Sky_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Sport_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Sport_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Sport_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Urban_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Urban_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Urban_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\HandShake_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\HandShake_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\HandShake_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Large_title_A_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Large_title_A_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Large_title_A_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Large_title_B_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Large_title_B_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Large_title_B_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Large_title_C_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Large_title_C_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Large_title_C_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Large_title_D_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Large_title_D_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Large_title_D_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\logo.png, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark 01_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark 01_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark 01_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark 02_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark 02_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark 03_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark 03_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark 03_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark 04_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark 04_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark 04_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark 05_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark 05_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark 05_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark Flowers_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark Flowers_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark Flowers_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark Paper_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark Paper_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark Paper_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark Plants_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark Plants_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark Sand_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark Sand_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark Sand_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark Stars_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark Stars_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark Stars_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark Waves_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark Waves_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark Waves_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Painting_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Painting_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Painting_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PaymentPanel-Background.png, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PaymentPanel-Background_v35.png, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PaymentPanel-Buy1.png, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PaymentPanel-Buy2.png, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PaymentPanel-Buy3.png, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PpD_sport_06_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PpD_sport_06_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PpD_techPp_01_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PpD_techPp_01_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PpD_techPp_01_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PpD_techPp_02_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PpD_techPp_02_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PpD_techPp_02_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PpD_techPp_04_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PpD_techPp_04_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PpD_techPp_04_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PpD_travl_01_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PpD_travl_01_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PpD_travl_01_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PpD_travl_06_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PpD_travl_06_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PpD_travl_06_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_educ_01_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_educ_01_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_educ_02_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_educ_02_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_educ_02_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_educ_03_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_educ_03_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_educ_03_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_educ_04_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_educ_04_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_educ_04_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_educ_05_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_educ_05_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_educ_05_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_educ_06_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_educ_06_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_educ_06_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_educ_08_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_educ_08_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_legal_01_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_legal_01_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_legal_01_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_legal_02_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_legal_02_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_legal_02_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_legal_03_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_legal_03_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_legal_03_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_legl_04_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_legl_04_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_medc_03_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_medc_03_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_medc_03_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_sport_01_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_sport_01_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_sport_01_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_sport_02_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_sport_02_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_sport_03_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_sport_03_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_sport_03_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_sport_04_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_sport_04_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_sport_04_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_sport_05_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_sport_05_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_sport_05_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_tech_03_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_tech_03_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_tech_03_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_travl_03_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_travl_03_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_travl_03_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_travl_04_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_travl_04_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_travl_04_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_travl_05_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_travl_05_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_travl_05_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PurpleButterfly_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PurpleButterfly_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\RedHeadCalling_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\RedHeadCalling_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\RedHeadCalling_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ShipsComing_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ShipsComing_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ShipsComing_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Simple 01_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Simple 01_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Simple 01_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Simple 02_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Simple 02_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Simple 02_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Simple 03_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Simple 03_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Simple 03_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Simple 04_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Simple 04_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark 02_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark Plants_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_01_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_06_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_11_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_17_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppD_Classic_14_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PpD_sport_06_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_educ_01_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_educ_08_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_legl_04_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_sport_02_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PurpleButterfly_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\SunFlower_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\SunFlower_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\SunFlower_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],

Code:

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T105_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T105_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T105_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T107_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T107_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T107_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T109_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T109_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T109_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T115_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T115_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T115_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T116_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T116_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T116_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T119_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T119_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T119_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T120_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T120_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T120_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T121_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T121_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T121_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T202_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T202_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T202_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T203_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T203_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T203_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T205_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T205_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T205_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T207_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T207_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T207_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T211_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T211_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T211_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T213_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T213_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T213_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T218_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T218_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T218_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T219_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T219_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T219_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T220_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T220_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T220_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T301_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T301_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T301_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T302_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T302_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T302_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T303_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T303_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T303_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T304_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T304_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T304_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T305_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T305_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T305_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T306_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T306_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T306_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T307_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T307_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T307_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T308_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T308_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T308_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T309_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T309_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T309_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T311_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T311_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T311_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T312_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T312_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T312_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T313_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T313_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T313_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T314_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T314_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T314_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T316_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T316_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T316_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T317_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T317_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T317_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T318_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T318_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T318_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T319_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T319_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T319_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T320_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T320_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T320_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T322_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T322_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T322_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T324_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T324_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T324_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T325_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T325_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T325_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T326_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T326_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T326_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T327_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T327_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T327_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Teenage_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Teenage_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp02_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp02_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp02_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp03_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp03_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp03_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp04_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp04_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp04_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp05_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp05_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp05_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp06_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp06_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp06_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp07_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp07_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp08_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp08_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp08_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp09_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp09_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp09_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp10_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp10_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp10_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp11_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp11_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp11_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp12_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp12_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp12_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp01_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp01_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Teenage_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp01_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp07_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp13_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp18_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11E_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11J_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\VisualBeeLogo.png, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y103_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y307_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y319_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y327_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp13_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp13_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp14_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp14_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp14_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp15_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp15_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp15_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp16_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp16_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp16_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp17_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp17_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp17_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp18_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp18_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp19_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp19_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp19_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp20_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp20_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp20_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11A_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11A_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11A_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11B_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11B_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11B_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11C_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11C_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11C_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11D_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11D_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11D_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11E_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11E_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11F_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11F_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11F_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11G_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11G_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11G_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11H_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11H_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11H_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11I_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11I_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11I_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11J_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11J_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11K_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11K_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11K_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11L_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11L_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11L_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11M_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11M_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11M_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11N_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11N_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11N_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\WatchingTheSea_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\WatchingTheSea_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\WatchingTheSea_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Watching_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Watching_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Watching_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\WeddingSoon_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\WeddingSoon_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\WeddingSoon_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\WindGirl_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\WindGirl_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\WindGirl_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y101_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y101_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y101_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y103_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y103_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y305_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y305_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y305_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y306_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y306_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y306_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y307_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y307_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y308_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y308_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y308_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y312_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y312_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y312_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y319_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y319_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y323_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y323_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y323_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y324_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y324_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y324_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y327_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y327_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y330_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y330_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y330_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y332_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y332_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y332_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y333_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y333_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y333_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y335_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y335_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y335_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y336_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y336_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y336_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\myTemplates_3M_SCI_Female_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\myTemplates_3M_SCI_Female_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\myTemplates_3M_SCI_Female_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\myTemplates_3M_SCI_Guy_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\myTemplates_3M_SCI_Guy_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\myTemplates_3M_SCI_Guy_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\myTemplates_3M_SCI_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\myTemplates_3M_SCI_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\myTemplates_3M_SCI_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\myTemplates_3M_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\myTemplates_3M_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\myTemplates_3M_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\myTemplate_Background.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\myTemplate_Button.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_01_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_01_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_02_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_02_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_02_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_03_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_03_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_03_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_04_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_04_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_04_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_05_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_05_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_05_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_06_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_06_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_07_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_07_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_07_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_08_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_08_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_08_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_09_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_09_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_09_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_10_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_10_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_10_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_11_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_11_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_12_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_12_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_12_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_13_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_13_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_13_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_15_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_15_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_15_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_16_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_16_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_16_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_17_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_17_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_18_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_18_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_18_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_19_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_19_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_19_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_20_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_20_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_20_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppD_Classic_14_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppD_Classic_14_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PpD_educ_07_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PpD_educ_07_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PpD_educ_07_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PpD_medc_01_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PpD_medc_01_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PpD_medc_01_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PpD_medc_02_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PpD_medc_02_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PpD_medc_02_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\base.css, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\mypcbackup.css, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\nationzoom.css, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\optimizerpro.css, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\position1A.css, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\position2A.css, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\position2B.css, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\position2C.css, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\position3A.css, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\position3B.css, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\position3C.css, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\position3D.css, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\position4A.css, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\storimbo.css, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\style.css, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\bg_app.png, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\boton.jpg, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\boton_xl.jpg, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\bullet-short.gif, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\bullet-shortw.gif, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\bullet.gif, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\butpause.png, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\butplay.png, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\check-close.png, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\check.jpg, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\check.png, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\cross.jpg, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\hide.png, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\less.png, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\logo-win.jpg, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\more.png, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\mypcbackup.png, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\optimizerpro-img.png, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\optimizerpro-logo-big.png, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\optimizerpro-logo.png, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\percentage-bg.png, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\progress.png, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\progress_small.png, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\progress_small_bg.png, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\screen-geaudioconverter.png, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\screen-gevideoconverter.png, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\screen-ifish.png, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\screen-miul.png, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\screen-olivebrowser.png, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\screen-printpdf.png, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\screen-vafmusic.png, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\screen-vafplayer.png, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\screen-zipper.png, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\show.png, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\exe\box.html, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\exe\close.html, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\exe\finish.html, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\exe\group.html, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\exe\instalando.html, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\exe\options.html, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\exe\welcome.html, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\MyBackupPc\info.html, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\OptimizerPro\info.html, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\Qone8\info.html, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\Storimbo\info.html, , [9ae84b505d1ef541dc912e6be220a25e], 

PUP.Optional.NextLive.A, C:\Users\Witali\AppData\Roaming\newnext.me\nengine.cookie, , [91f19cff700b68cec4b83c5dcf33e61a], 

PUP.Optional.NextLive.A, C:\Users\Witali\AppData\Roaming\newnext.me\cache\spark.bin, , [91f19cff700b68cec4b83c5dcf33e61a], 

PUP.Optional.IePluginService.A, C:\ProgramData\IePluginService\update\conf, , [2e54dcbfccaf7cbac3c8504aea180af6], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\background.html, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\crossriderManifest.json, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\manifest.json, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\popup.html, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\manifest.xml, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins.json, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\193_revizer_p_dynamic_b2b_m.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\47_resources_background.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\102_dealply_m.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\105_corticas_m.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\117_coupons_intext_ads_5_m.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\119_similar_web_m.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\120_luck_m.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\123_intext_adv_m.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\124_superfish_no_search_no_coupons_m.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\125_arcadi2_m.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\126_revizer_ws_m.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\174_arcadi_serp_dynamic_id_m.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\175_coolmirage_m.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\177_crossriderDashboard.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\178_revizer_ws_dynamic_m.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\179_revizer_p_dynamic_m.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\17_jQuery.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\180_bpo_serp_m.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\182_openUrl.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\183_tabsWrapper.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\184_noproblemppc_m.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\189_active_sanity.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\190_pops_5_m.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\191_ciuvo_m.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\192_revizer_ws_dynamic_b2b_m.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\194_retargeting_bi_m.js.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\195_icm_convertmedia_m.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\197_kreapixel_pops_m.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\198_superfish_no_search_no_coupons_plushd_m.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\199_superfish_no_coupons_plushd_m.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\19_CHAppAPIWrapper.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\1_base.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\200_foxydeal_m.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\204_pricedetect_m.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\21_debug.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\22_resources.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\28_initializer.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\127_revizer_p_m.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\128_superfish_pricora_m.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\135_arcadi3_m.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\138_getdeal_m.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\13_CrossriderAppUtils.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\141_corticas_ru_m.js.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\142_intext_fa_m.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\14_CrossriderUtils.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\159_cortica_rollover_m.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\171_arcadi2_sourceID_m.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\4_jquery_1_7_1.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\64_appApiMessage.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\72_appApiValidation.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\78_CrossriderInfo.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\7_hooks.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\80_CHPopupAppAPI.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\91_monetizationLoader.js.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\93_superfish_no_coupons_m.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\97_resourceApiWrapper.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\9_search_engine_hook.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\userCode\background.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\userCode\extension.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\icons\icon128.png, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\icons\icon16.png, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\icons\icon48.png, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\icons\actions\1.png, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\background.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\main.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\api\chrome.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\api\cookie.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\api\message.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\api\pageAction.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\api\pageActionBG.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\app_api.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\bg_app_api.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\consts.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\cookie_store.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\crossriderAPI.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\delegate.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\events.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\extensionDataStore.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\installer.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\logFile.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\logging.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\onBGDocumentLoad.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\reports.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\storageWrapper.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\updateManager.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\util.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\xhr.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\popupResource\newPopup.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\popupResource\popup.js, , [97ebc0db28530f274530e7b4fe041de3], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\chrome.manifest, , [8af8c4d7e695350138269d00d82aa25e], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\install.rdf, , [8af8c4d7e695350138269d00d82aa25e], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\chrome\content\background.html, , [8af8c4d7e695350138269d00d82aa25e], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\chrome\content\dialog.js, , [8af8c4d7e695350138269d00d82aa25e], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\chrome\content\ffCoreFilesIndex.txt, , [8af8c4d7e695350138269d00d82aa25e], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\chrome\content\options.js, , [8af8c4d7e695350138269d00d82aa25e], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\chrome\content\options.xul, , [8af8c4d7e695350138269d00d82aa25e], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\chrome\content\search_dialog.xul, , [8af8c4d7e695350138269d00d82aa25e], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\skin\button1.png, , [8af8c4d7e695350138269d00d82aa25e], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\skin\button2.png, , [8af8c4d7e695350138269d00d82aa25e], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\skin\button3.png, , [8af8c4d7e695350138269d00d82aa25e], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\skin\button4.png, , [8af8c4d7e695350138269d00d82aa25e], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\skin\button5.png, , [8af8c4d7e695350138269d00d82aa25e], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\skin\crossrider_statusbar.png, , [8af8c4d7e695350138269d00d82aa25e], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\skin\icon128.png, , [8af8c4d7e695350138269d00d82aa25e], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\skin\icon16.png, , [8af8c4d7e695350138269d00d82aa25e], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\skin\icon24.png, , [8af8c4d7e695350138269d00d82aa25e], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\skin\icon48.png, , [8af8c4d7e695350138269d00d82aa25e], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\skin\panelarrow-up.png, , [8af8c4d7e695350138269d00d82aa25e], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\skin\popup.html, , [8af8c4d7e695350138269d00d82aa25e], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\skin\update.css, , [8af8c4d7e695350138269d00d82aa25e], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\chrome.manifest, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\install.rdf, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\chrome\content\3797d4fa385b0f20d9509ad32b672fd6.js, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\chrome\content\68547978802754956948bee5226935db.js, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\chrome\content\background.html, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\chrome\content\dialog.js, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\chrome\content\ffCoreFilesIndex.txt, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\chrome\content\options.js, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\chrome\content\options.xul, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\chrome\content\search_dialog.xul, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\manifest.xml, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins.json, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\223.js, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\1.js, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\102.js, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\104.js, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\119.js, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\123.js, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\13.js, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\14.js, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\155.js, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\158.js, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\16.js, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\17.js, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\177.js, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\178.js, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\179.js, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\180.js, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\182.js, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\183.js, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\184.js, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\189.js, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\191.js, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\194.js, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\195.js, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\207.js, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\21.js, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\22.js, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\220.js, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\221.js, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\226.js, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\232.js, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\242.js, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\244.js, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\246.js, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\262.js, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\263.js, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\268.js, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\273.js, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\28.js, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\4.js, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\47.js, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\64.js, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\7.js, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\72.js, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\78.js, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\9.js, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\91.js, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\93.js, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\98.js, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\userCode\background.js, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\userCode\extension.js, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\skin\button1.png, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\skin\button2.png, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\skin\button3.png, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\skin\button4.png, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\skin\button5.png, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\skin\crossrider_statusbar.png, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\skin\icon128.png, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\skin\icon16.png, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\skin\icon24.png, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\skin\icon48.png, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\skin\panelarrow-up.png, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\skin\popup.html, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\skin\update.css, , [285a07943e3d3ef8b1ad77265ca64fb1], 

PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-2.2\Plus-HD-2.2-codedownloader.exe, , [b1d14754ccafd0662f7b9c02d929c040], 

PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-2.2\33036.crx, , [b1d14754ccafd0662f7b9c02d929c040], 

PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-2.2\33036.xpi, , [b1d14754ccafd0662f7b9c02d929c040], 

PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-2.2\Installer.log, , [b1d14754ccafd0662f7b9c02d929c040], 

PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-2.2\Plus-HD-2.2-bg.exe, , [b1d14754ccafd0662f7b9c02d929c040], 

PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-2.2\Plus-HD-2.2-buttonutil.dll, , [b1d14754ccafd0662f7b9c02d929c040], 

PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-2.2\Plus-HD-2.2-buttonutil.exe, , [b1d14754ccafd0662f7b9c02d929c040], 

PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-2.2\Plus-HD-2.2-buttonutil64.dll, , [b1d14754ccafd0662f7b9c02d929c040], 

PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-2.2\Plus-HD-2.2-buttonutil64.exe, , [b1d14754ccafd0662f7b9c02d929c040], 

PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-2.2\Plus-HD-2.2-chromeinstaller.exe, , [b1d14754ccafd0662f7b9c02d929c040], 

PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-2.2\Plus-HD-2.2-enabler.exe, , [b1d14754ccafd0662f7b9c02d929c040], 

PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-2.2\Plus-HD-2.2-firefoxinstaller.exe, , [b1d14754ccafd0662f7b9c02d929c040], 

PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-2.2\Plus-HD-2.2-helper.exe, , [b1d14754ccafd0662f7b9c02d929c040], 

PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-2.2\Plus-HD-2.2-updater.exe, , [b1d14754ccafd0662f7b9c02d929c040], 

PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-2.2\Plus-HD-2.2.ico, , [b1d14754ccafd0662f7b9c02d929c040], 

PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-2.5\33438.crx, , [bdc56b3053288ea823872f6f52b0de22], 

PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-2.5\33438.xpi, , [bdc56b3053288ea823872f6f52b0de22], 

PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-2.5\Installer.log, , [bdc56b3053288ea823872f6f52b0de22], 

PUP.Optional.ClickNMark.A, C:\Program Files (x86)\click-n-mark-5\45182.xpi, , [d8aad1ca0576171f2e90207ee0227b85], 

PUP.Optional.ClickNMark.A, C:\Program Files (x86)\click-n-mark-5\background.html, , [d8aad1ca0576171f2e90207ee0227b85], 

PUP.Optional.ClickNMark.A, C:\Program Files (x86)\click-n-mark-5\Installer.log, , [d8aad1ca0576171f2e90207ee0227b85], 

PUP.Optional.Dsrlte.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\prefs.js, Gut: (), Schlecht: (user_pref("browser.startup.homepage", "hxxp://rts.dsrlte.com");), ,[3a484f4c6912280e6fbe7d436f95ab55]

PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\prefs.js, Gut: (), Schlecht: (user_pref("extensions.crossrider.bic", "14676aabc5449fec3b077edf343695ed");), ,[acd6a5f6334847ef00f2bd0308fcda26]
 

Physische Sektoren: 0

(No malicious items detected)
 
 

(end)

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-07-2014

Ran by Witali (administrator) on FAMILIEN-PC on 06-07-2014 12:22:08

Running from C:\Users\Witali\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HKKNIXYH

Platform: Windows 8 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 10

Boot Mode: Normal
 
 
 

==================== Processes (Whitelisted) =================
 

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe

(Cherished Technololgy LIMITED) C:\ProgramData\IePluginService\PluginService.exe

(Cherished Technololgy LIMITED) C:\ProgramData\WPM\wprotectmanager.exe

(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe

(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe

(Microsoft Corporation) C:\Windows\System32\dasHost.exe

(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe

() C:\Program Files (x86)\LPT\srpts.exe

(Tlapia) C:\Program Files (x86)\sysTPL\sysTPLMonitor.exe

(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe

(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe

(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe

(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4206.722_x64__8wekyb3d8bbwe\LiveComm.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe

(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe

(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe

(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe

(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe

(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe

(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Tlapia) C:\Program Files (x86)\sysTPL\sysTPL.exe

(Tlapia) C:\Program Files (x86)\sysTPL\sysTPLService.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [5299320 2012-10-25] (VIA)

HKLM\...\Run: [ACMON] => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [107192 2012-09-11] (ASUS)

HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40312 2014-05-08] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [BtTray] => C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe [364032 2012-08-15] (IVT Corporation)

HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.)

HKLM-x32\...\Run: [ASUSWebStorage] => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\AsusWSPanel.exe [3417984 2012-08-28] (ASUS Cloud Corporation)

HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [750160 2014-07-06] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [mobilegeni daemon] => C:\Program Files (x86)\Mobogenie\DaemonProcess.exe

HKLM-x32\...\Run: [sysTPL] => C:\Program Files (x86)\sysTPL\sysTPL.exe [1244440 2014-01-24] (Tlapia)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

HKU\S-1-5-21-215413311-585589717-95820281-1001\...\Run: [NextLive] => C:\Windows\SysWOW64\rundll32.exe "C:\Users\Witali\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l

ShellIconOverlayIdentifiers: AsusWSShellExt_B -> {6D4133E5-0742-4ADC-8A8C-9303440F7190} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\ASUSWSShellExt64.dll (ASUS Cloud Corporation.)

ShellIconOverlayIdentifiers: AsusWSShellExt_O -> {64174815-8D98-4CE6-8646-4C039977D808} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\ASUSWSShellExt64.dll (ASUS Cloud Corporation.)

ShellIconOverlayIdentifiers: AsusWSShellExt_U -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4D} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\ASUSWSShellExt64.dll (ASUS Cloud Corporation.)
 

==================== Internet (Whitelisted) ====================
 

ProxyEnable: Internet Explorer proxy is enabled.

ProxyServer: http=127.0.0.1:8877

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04c8v3nrz1Jk2OMIEkAFi8neL2xxaMM0fcHoNm5vmWbLPW5CN0AYPk2M35zz1PFR2aDe5RpLaMZ9H6JXSicvSp283fnUxXXUyOc4lrcEbJwOmB3P0V3j4bPsbZVwOs4xGFHw,,&q={searchTerms}

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.nationzoom.com/?type=hp&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX

HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04c8v3nrz1Jk2OMIEkAFi8neL2xxaMM0fcHoNm5vmWbLPW5CN0AYPk2M35zz1PFR2aDe5RpLaMZ9H6JXSicvSp283fnUxXXUyOc4lrcEbJwOmB3P0V3j4bPsbZVwOs4xGFHw,,&q={searchTerms}

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX&q={searchTerms}

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.nationzoom.com/?type=hp&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.nationzoom.com/?type=hp&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.nationzoom.com/web/?type=ds&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX&q={searchTerms}

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX&q={searchTerms}

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.nationzoom.com/?type=hp&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.nationzoom.com/?type=hp&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.nationzoom.com/web/?type=ds&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX&q={searchTerms}

StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.nationzoom.com/?type=sc&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX

SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX&q={searchTerms}

SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd1103&cd=2XzuyEtN2Y1L1Qzuzy0CtB0AyBtDyEzztD0Dzy0ByCtAtA0BtN0D0Tzu0SyBtCtDtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=501081809&ir=

SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX&q={searchTerms}

SearchScopes: HKLM - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = hxxp://www.bing.com/search?q={searchTerms}&amp;form=IE10TR&amp;src=IE10TR&amp;pc=ASU2JS

SearchScopes: HKLM-x32 - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04c8v3nrz1Jk2OMIEkAFi8neL2xxaMM0fcHoNm5vmWbLPW5CN0AYPk2M35zz1PFR2aDe5RpLaMZ9H6JXSicvSp283fnUxXXUyOc4lrcEbJwOmB3P0V3j4bPsbZVwOs4xGFHw,,&q={searchTerms}

SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04c8v3nrz1Jk2OMIEkAFi8neL2xxaMM0fcHoNm5vmWbLPW5CN0AYPk2M35zz1PFR2aDe5RpLaMZ9H6JXSicvSp283fnUxXXUyOc4lrcEbJwOmB3P0V3j4bPsbZVwOs4xGFHw,,&q={searchTerms}

SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&amp;form=IE10TR&amp;src=IE10TR&amp;pc=ASU2JS

SearchScopes: HKCU - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04c8v3nrz1Jk2OMIEkAFi8neL2xxaMM0fcHoNm5vmWbLPW5CN0AYPk2M35zz1PFR2aDe5RpLaMZ9H6JXSicvSp283fnUxXXUyOc4lrcEbJwOmB3P0V3j4bPsbZVwOs4xGFHw,,&q={searchTerms}

SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04c8v3nrz1Jk2OMIEkAFi8neL2xxaMM0fcHoNm5vmWbLPW5CN0AYPk2M35zz1PFR2aDe5RpLaMZ9H6JXSicvSp283fnUxXXUyOc4lrcEbJwOmB3P0V3j4bPsbZVwOs4xGFHw,,&q={searchTerms}

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 

BHO: Plus-HD-2.2 - {11111111-1111-1111-1111-110311301136} - C:\Program Files (x86)\Plus-HD-2.2\Plus-HD-2.2-bho64.dll No File

BHO-x32: IETabPage Class - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - C:\Program Files (x86)\SupTab\SupTab.dll No File

BHO-x32: No Name - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} -  No File

Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File

Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Windows\SysWow64\skype4com.dll (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
 

FireFox:

========

FF ProfilePath: C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995

FF Homepage: hxxp://rts.dsrlte.com

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_125.dll ()

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_125.dll ()

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF SearchPlugin: C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\searchplugins\keepmysearch.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\nationzoom.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: HDvid Codec V6.0 - C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\Extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com [2014-07-06]

FF Extension: Plus-HD-2.2 - C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\Extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com [2014-07-06]

FF HKLM-x32\...\Firefox\Extensions: [quick_start@gmail.com] - C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\2sfzx2xn.default-1387402583828\extensions\quick_start@gmail.com

FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
 

Chrome: 

=======

CHR Extension: (Plus-HD-2.2) - C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo [2013-12-18]

CHR HKLM-x32\...\Chrome\Extension: [dnllcmllkjofnojidnaknldfehfhehoo] - C:\Program Files (x86)\HDvidCodec.com\HDvidCodec10.crx [2013-06-30]
 

==================== Services (Whitelisted) =================
 

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-07-06] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-07-06] (Avira Operations GmbH & Co. KG)

R2 ASUS InstantOn; C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [277120 2012-04-13] (ASUS)

R2 BlueSoleilCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe [1578496 2012-08-14] (IVT Corporation) [File not signed]

R3 BsHelpCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe [138752 2012-08-14] (IVT Corporation) [File not signed]

R2 IePluginService; C:\ProgramData\IePluginService\PluginService.exe [705136 2014-04-11] (Cherished Technololgy LIMITED)

R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)

R2 LPTSystemUpdater; C:\Program Files (x86)\LPT\srpts.exe [32288 2014-02-09] ()

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)

R2 sysTPLMonitor.exe; C:\Program Files (x86)\sysTPL\sysTPLMonitor.exe [399640 2014-01-24] (Tlapia)

R2 sysTPLService.exe; C:\Program Files (x86)\sysTPL\sysTPLService.exe [400664 2014-01-24] (Tlapia)

R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27768 2012-10-22] (VIA Technologies, Inc.)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)

R2 Wpm; C:\ProgramData\WPM\wprotectmanager.exe [510608 2014-03-05] (Cherished Technololgy LIMITED)
 

==================== Drivers (Whitelisted) ====================
 

R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [62848 2012-11-20] (ASUS Corporation)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-06] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [130584 2014-06-07] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-12-10] (Avira Operations GmbH & Co. KG)

U5 BlueletAudio; C:\Windows\System32\Drivers\BlueletAudio.sys [34912 2012-06-15] (Ralink Corporation.)

R3 BtAudioBusSrv; C:\Windows\System32\Drivers\BtAudioBus.sys [23136 2012-06-15] (IVT Corporation)

U4 BthHFEnum; 

S3 BthL2caScoIfSrv; C:\Windows\System32\Drivers\BtL2caScoIf.sys [56904 2012-07-19] (Ralink Corporation)

S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)

S3 btUrbFilterDrv; C:\Windows\System32\Drivers\IvtUrbBtFlt.sys [48736 2012-08-14] (Ralink Corporation)

R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)

R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-07-06] (Malwarebytes Corporation)

R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2014-05-12] (Malwarebytes Corporation)

R3 rtbth; C:\Windows\System32\drivers\rtbth.sys [695392 2012-08-14] (Ralink Technology, Corp.)

R1 {b8a90375-3b37-4954-86de-f96c458c4ce2}w64; C:\Windows\System32\drivers\{b8a90375-3b37-4954-86de-f96c458c4ce2}w64.sys [61120 2014-04-24] (StdLib)

U5 BlueletAudio; C:\Windows\SysWOW64\Drivers\BlueletAudio.sys [34912 2012-06-15] (Ralink Corporation.)

U0 msahci; 
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-07-06 12:16 - 2014-07-06 12:22 - 00000000 ____D () C:\FRST

2014-07-06 11:21 - 2014-07-06 11:21 - 00626510 _____ () C:\LOG1.Xml

2014-07-06 10:27 - 2014-07-06 10:27 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-07-06 10:26 - 2014-07-06 10:26 - 00001100 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-07-06 10:26 - 2014-07-06 10:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-07-06 10:26 - 2014-07-06 10:26 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-07-06 10:26 - 2014-07-06 10:26 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-07-06 10:26 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-07-06 10:26 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2014-07-06 10:26 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-07-06 09:53 - 2014-07-06 10:39 - 00000468 _____ () C:\Users\Witali\AppData\Roaming\Microsoft\Windows\Start Menu\Google.website

2014-06-23 22:16 - 2014-06-23 22:16 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-06-07 15:45 - 2014-06-07 15:45 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Witali\Downloads\SpyHunter-installer.exe
 

==================== One Month Modified Files and Folders =======
 

2014-07-06 12:22 - 2014-07-06 12:16 - 00000000 ____D () C:\FRST

2014-07-06 12:14 - 2013-06-02 22:11 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-07-06 12:03 - 2013-12-18 21:21 - 00000000 ____D () C:\Program Files (x86)\Plus-HD-2.2

2014-07-06 12:03 - 2013-05-16 18:36 - 00003592 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-215413311-585589717-95820281-1001

2014-07-06 12:00 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\system32\sru

2014-07-06 11:48 - 2014-02-18 14:14 - 00000000 ____D () C:\Program Files (x86)\sysTPL

2014-07-06 11:45 - 2014-04-01 17:39 - 00000000 ____D () C:\Program Files (x86)\SupTab

2014-07-06 11:21 - 2014-07-06 11:21 - 00626510 _____ () C:\LOG1.Xml

2014-07-06 11:14 - 2013-12-18 21:14 - 00000000 ____D () C:\Program Files (x86)\HDvid Codec V6.0

2014-07-06 11:14 - 2013-10-26 20:58 - 00000000 ____D () C:\Program Files (x86)\HDvid Codec V1

2014-07-06 10:39 - 2014-07-06 09:53 - 00000468 _____ () C:\Users\Witali\AppData\Roaming\Microsoft\Windows\Start Menu\Google.website

2014-07-06 10:27 - 2014-07-06 10:27 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-07-06 10:26 - 2014-07-06 10:26 - 00001100 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-07-06 10:26 - 2014-07-06 10:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-07-06 10:26 - 2014-07-06 10:26 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-07-06 10:26 - 2014-07-06 10:26 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-07-06 09:51 - 2013-12-18 21:22 - 00001354 _____ () C:\Windows\Tasks\Plus-HD-2.2-updater.job

2014-07-06 09:51 - 2013-12-18 21:22 - 00001256 _____ () C:\Windows\Tasks\Plus-HD-2.2-codedownloader.job

2014-07-06 09:51 - 2013-12-18 21:22 - 00001156 _____ () C:\Windows\Tasks\Plus-HD-2.2-enabler.job

2014-07-06 09:51 - 2013-12-18 21:21 - 00002130 _____ () C:\Windows\Tasks\Plus-HD-2.2-firefoxinstaller.job

2014-07-06 09:51 - 2013-12-18 21:21 - 00002002 _____ () C:\Windows\Tasks\Plus-HD-2.2-chromeinstaller.job

2014-07-06 09:51 - 2013-12-18 21:14 - 00002198 _____ () C:\Windows\Tasks\HDvid Codec V6.0-firefoxinstaller.job

2014-07-06 09:51 - 2013-12-18 21:14 - 00001352 _____ () C:\Windows\Tasks\HDvid Codec V6.0-updater.job

2014-07-06 09:51 - 2013-10-26 20:58 - 00001222 _____ () C:\Windows\Tasks\HDvid Codec V1-codedownloader.job

2014-07-06 09:51 - 2013-05-16 18:29 - 00000401 _____ () C:\Users\Witali\AppData\Roaming\sp_data.sys

2014-07-06 09:13 - 2013-01-22 21:19 - 01556059 _____ () C:\Windows\WindowsUpdate.log

2014-07-06 09:01 - 2012-07-26 07:26 - 00000226 _____ () C:\Windows\win.ini

2014-07-06 08:59 - 2013-06-02 22:11 - 00003772 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-07-06 08:56 - 2013-06-01 11:22 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2014-07-06 08:54 - 2013-12-18 21:21 - 00000000 ____D () C:\Users\Witali\AppData\Roaming\newnext.me

2014-07-06 08:54 - 2013-12-11 00:10 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2014-07-01 20:12 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\AUInstallAgent

2014-06-23 22:16 - 2014-06-23 22:16 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-06-14 21:36 - 2012-07-26 09:59 - 00000000 ____D () C:\Windows\CbsTemp

2014-06-08 22:00 - 2013-12-09 22:40 - 00000000 ____D () C:\Program Files (x86)\Plus-HD-2.5

2014-06-07 16:08 - 2012-08-15 19:46 - 00000739 _____ () C:\Windows\SysWOW64\bscs.ini

2014-06-07 16:08 - 2012-08-02 15:24 - 00023334 _____ () C:\Windows\PFRO.log

2014-06-07 16:08 - 2012-07-26 09:22 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-06-07 16:07 - 2013-12-18 23:36 - 00000000 ____D () C:\Users\Witali\Desktop\Alte Firefox-Daten

2014-06-07 16:07 - 2012-07-26 07:26 - 00262144 ___SH () C:\Windows\system32\config\BBI

2014-06-07 15:45 - 2014-06-07 15:45 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Witali\Downloads\SpyHunter-installer.exe

2014-06-07 15:26 - 2013-06-01 11:22 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
 

Files to move or delete:

====================

C:\ProgramData\SetStretch.exe
 
 

Some content of TEMP:

====================

C:\Users\Witali\AppData\Local\Temp\96984uninstall.exe

C:\Users\Witali\AppData\Local\Temp\avgnt.exe

C:\Users\Witali\AppData\Local\Temp\BackupSetup.exe

C:\Users\Witali\AppData\Local\Temp\dsrlte.exe

C:\Users\Witali\AppData\Local\Temp\FortunitasUntemp.exe

C:\Users\Witali\AppData\Local\Temp\mgsqlite3.dll

C:\Users\Witali\AppData\Local\Temp\setupA9_.exe

C:\Users\Witali\AppData\Local\Temp\ShoppinHelper2new2.exe

C:\Users\Witali\AppData\Local\Temp\Sqlite3.dll

C:\Users\Witali\AppData\Local\Temp\vcredist_x64.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2014-07-06 12:05
 

==================== End Of Log ============================

--- --- ---

--- --- ---

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-07-2014

Ran by Witali (administrator) on FAMILIEN-PC on 06-07-2014 12:22:08

Running from C:\Users\Witali\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HKKNIXYH

Platform: Windows 8 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 10

Boot Mode: Normal
 
 
 

==================== Processes (Whitelisted) =================
 

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe

(Cherished Technololgy LIMITED) C:\ProgramData\IePluginService\PluginService.exe

(Cherished Technololgy LIMITED) C:\ProgramData\WPM\wprotectmanager.exe

(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe

(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe

(Microsoft Corporation) C:\Windows\System32\dasHost.exe

(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe

() C:\Program Files (x86)\LPT\srpts.exe

(Tlapia) C:\Program Files (x86)\sysTPL\sysTPLMonitor.exe

(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe

(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe

(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe

(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4206.722_x64__8wekyb3d8bbwe\LiveComm.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe

(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe

(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe

(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe

(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe

(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe

(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Tlapia) C:\Program Files (x86)\sysTPL\sysTPL.exe

(Tlapia) C:\Program Files (x86)\sysTPL\sysTPLService.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [5299320 2012-10-25] (VIA)

HKLM\...\Run: [ACMON] => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [107192 2012-09-11] (ASUS)

HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40312 2014-05-08] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [BtTray] => C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe [364032 2012-08-15] (IVT Corporation)

HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.)

HKLM-x32\...\Run: [ASUSWebStorage] => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\AsusWSPanel.exe [3417984 2012-08-28] (ASUS Cloud Corporation)

HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [750160 2014-07-06] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [mobilegeni daemon] => C:\Program Files (x86)\Mobogenie\DaemonProcess.exe

HKLM-x32\...\Run: [sysTPL] => C:\Program Files (x86)\sysTPL\sysTPL.exe [1244440 2014-01-24] (Tlapia)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

HKU\S-1-5-21-215413311-585589717-95820281-1001\...\Run: [NextLive] => C:\Windows\SysWOW64\rundll32.exe "C:\Users\Witali\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l

ShellIconOverlayIdentifiers: AsusWSShellExt_B -> {6D4133E5-0742-4ADC-8A8C-9303440F7190} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\ASUSWSShellExt64.dll (ASUS Cloud Corporation.)

ShellIconOverlayIdentifiers: AsusWSShellExt_O -> {64174815-8D98-4CE6-8646-4C039977D808} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\ASUSWSShellExt64.dll (ASUS Cloud Corporation.)

ShellIconOverlayIdentifiers: AsusWSShellExt_U -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4D} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\ASUSWSShellExt64.dll (ASUS Cloud Corporation.)
 

==================== Internet (Whitelisted) ====================
 

ProxyEnable: Internet Explorer proxy is enabled.

ProxyServer: http=127.0.0.1:8877

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04c8v3nrz1Jk2OMIEkAFi8neL2xxaMM0fcHoNm5vmWbLPW5CN0AYPk2M35zz1PFR2aDe5RpLaMZ9H6JXSicvSp283fnUxXXUyOc4lrcEbJwOmB3P0V3j4bPsbZVwOs4xGFHw,,&q={searchTerms}

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.nationzoom.com/?type=hp&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX

HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04c8v3nrz1Jk2OMIEkAFi8neL2xxaMM0fcHoNm5vmWbLPW5CN0AYPk2M35zz1PFR2aDe5RpLaMZ9H6JXSicvSp283fnUxXXUyOc4lrcEbJwOmB3P0V3j4bPsbZVwOs4xGFHw,,&q={searchTerms}

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX&q={searchTerms}

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.nationzoom.com/?type=hp&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.nationzoom.com/?type=hp&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.nationzoom.com/web/?type=ds&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX&q={searchTerms}

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX&q={searchTerms}

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.nationzoom.com/?type=hp&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.nationzoom.com/?type=hp&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.nationzoom.com/web/?type=ds&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX&q={searchTerms}

StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.nationzoom.com/?type=sc&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX

SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX&q={searchTerms}

SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd1103&cd=2XzuyEtN2Y1L1Qzuzy0CtB0AyBtDyEzztD0Dzy0ByCtAtA0BtN0D0Tzu0SyBtCtDtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=501081809&ir=

SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX&q={searchTerms}

SearchScopes: HKLM - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = hxxp://www.bing.com/search?q={searchTerms}&amp;form=IE10TR&amp;src=IE10TR&amp;pc=ASU2JS

SearchScopes: HKLM-x32 - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04c8v3nrz1Jk2OMIEkAFi8neL2xxaMM0fcHoNm5vmWbLPW5CN0AYPk2M35zz1PFR2aDe5RpLaMZ9H6JXSicvSp283fnUxXXUyOc4lrcEbJwOmB3P0V3j4bPsbZVwOs4xGFHw,,&q={searchTerms}

SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04c8v3nrz1Jk2OMIEkAFi8neL2xxaMM0fcHoNm5vmWbLPW5CN0AYPk2M35zz1PFR2aDe5RpLaMZ9H6JXSicvSp283fnUxXXUyOc4lrcEbJwOmB3P0V3j4bPsbZVwOs4xGFHw,,&q={searchTerms}

SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&amp;form=IE10TR&amp;src=IE10TR&amp;pc=ASU2JS

SearchScopes: HKCU - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04c8v3nrz1Jk2OMIEkAFi8neL2xxaMM0fcHoNm5vmWbLPW5CN0AYPk2M35zz1PFR2aDe5RpLaMZ9H6JXSicvSp283fnUxXXUyOc4lrcEbJwOmB3P0V3j4bPsbZVwOs4xGFHw,,&q={searchTerms}

SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04c8v3nrz1Jk2OMIEkAFi8neL2xxaMM0fcHoNm5vmWbLPW5CN0AYPk2M35zz1PFR2aDe5RpLaMZ9H6JXSicvSp283fnUxXXUyOc4lrcEbJwOmB3P0V3j4bPsbZVwOs4xGFHw,,&q={searchTerms}

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 

BHO: Plus-HD-2.2 - {11111111-1111-1111-1111-110311301136} - C:\Program Files (x86)\Plus-HD-2.2\Plus-HD-2.2-bho64.dll No File

BHO-x32: IETabPage Class - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - C:\Program Files (x86)\SupTab\SupTab.dll No File

BHO-x32: No Name - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} -  No File

Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File

Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Windows\SysWow64\skype4com.dll (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
 

FireFox:

========

FF ProfilePath: C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995

FF Homepage: hxxp://rts.dsrlte.com

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_125.dll ()

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_125.dll ()

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF SearchPlugin: C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\searchplugins\keepmysearch.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\nationzoom.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: HDvid Codec V6.0 - C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\Extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com [2014-07-06]

FF Extension: Plus-HD-2.2 - C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\Extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com [2014-07-06]

FF HKLM-x32\...\Firefox\Extensions: [quick_start@gmail.com] - C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\2sfzx2xn.default-1387402583828\extensions\quick_start@gmail.com

FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
 

Chrome: 

=======

CHR Extension: (Plus-HD-2.2) - C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo [2013-12-18]

CHR HKLM-x32\...\Chrome\Extension: [dnllcmllkjofnojidnaknldfehfhehoo] - C:\Program Files (x86)\HDvidCodec.com\HDvidCodec10.crx [2013-06-30]
 

==================== Services (Whitelisted) =================
 

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-07-06] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-07-06] (Avira Operations GmbH & Co. KG)

R2 ASUS InstantOn; C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [277120 2012-04-13] (ASUS)

R2 BlueSoleilCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe [1578496 2012-08-14] (IVT Corporation) [File not signed]

R3 BsHelpCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe [138752 2012-08-14] (IVT Corporation) [File not signed]

R2 IePluginService; C:\ProgramData\IePluginService\PluginService.exe [705136 2014-04-11] (Cherished Technololgy LIMITED)

R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)

R2 LPTSystemUpdater; C:\Program Files (x86)\LPT\srpts.exe [32288 2014-02-09] ()

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)

R2 sysTPLMonitor.exe; C:\Program Files (x86)\sysTPL\sysTPLMonitor.exe [399640 2014-01-24] (Tlapia)

R2 sysTPLService.exe; C:\Program Files (x86)\sysTPL\sysTPLService.exe [400664 2014-01-24] (Tlapia)

R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27768 2012-10-22] (VIA Technologies, Inc.)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)

R2 Wpm; C:\ProgramData\WPM\wprotectmanager.exe [510608 2014-03-05] (Cherished Technololgy LIMITED)
 

==================== Drivers (Whitelisted) ====================
 

R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [62848 2012-11-20] (ASUS Corporation)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-06] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [130584 2014-06-07] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-12-10] (Avira Operations GmbH & Co. KG)

U5 BlueletAudio; C:\Windows\System32\Drivers\BlueletAudio.sys [34912 2012-06-15] (Ralink Corporation.)

R3 BtAudioBusSrv; C:\Windows\System32\Drivers\BtAudioBus.sys [23136 2012-06-15] (IVT Corporation)

U4 BthHFEnum; 

S3 BthL2caScoIfSrv; C:\Windows\System32\Drivers\BtL2caScoIf.sys [56904 2012-07-19] (Ralink Corporation)

S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)

S3 btUrbFilterDrv; C:\Windows\System32\Drivers\IvtUrbBtFlt.sys [48736 2012-08-14] (Ralink Corporation)

R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)

R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-07-06] (Malwarebytes Corporation)

R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2014-05-12] (Malwarebytes Corporation)

R3 rtbth; C:\Windows\System32\drivers\rtbth.sys [695392 2012-08-14] (Ralink Technology, Corp.)

R1 {b8a90375-3b37-4954-86de-f96c458c4ce2}w64; C:\Windows\System32\drivers\{b8a90375-3b37-4954-86de-f96c458c4ce2}w64.sys [61120 2014-04-24] (StdLib)

U5 BlueletAudio; C:\Windows\SysWOW64\Drivers\BlueletAudio.sys [34912 2012-06-15] (Ralink Corporation.)

U0 msahci; 
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-07-06 12:16 - 2014-07-06 12:22 - 00000000 ____D () C:\FRST

2014-07-06 11:21 - 2014-07-06 11:21 - 00626510 _____ () C:\LOG1.Xml

2014-07-06 10:27 - 2014-07-06 10:27 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-07-06 10:26 - 2014-07-06 10:26 - 00001100 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-07-06 10:26 - 2014-07-06 10:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-07-06 10:26 - 2014-07-06 10:26 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-07-06 10:26 - 2014-07-06 10:26 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-07-06 10:26 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-07-06 10:26 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2014-07-06 10:26 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-07-06 09:53 - 2014-07-06 10:39 - 00000468 _____ () C:\Users\Witali\AppData\Roaming\Microsoft\Windows\Start Menu\Google.website

2014-06-23 22:16 - 2014-06-23 22:16 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-06-07 15:45 - 2014-06-07 15:45 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Witali\Downloads\SpyHunter-installer.exe
 

==================== One Month Modified Files and Folders =======
 

2014-07-06 12:22 - 2014-07-06 12:16 - 00000000 ____D () C:\FRST

2014-07-06 12:14 - 2013-06-02 22:11 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-07-06 12:03 - 2013-12-18 21:21 - 00000000 ____D () C:\Program Files (x86)\Plus-HD-2.2

2014-07-06 12:03 - 2013-05-16 18:36 - 00003592 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-215413311-585589717-95820281-1001

2014-07-06 12:00 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\system32\sru

2014-07-06 11:48 - 2014-02-18 14:14 - 00000000 ____D () C:\Program Files (x86)\sysTPL

2014-07-06 11:45 - 2014-04-01 17:39 - 00000000 ____D () C:\Program Files (x86)\SupTab

2014-07-06 11:21 - 2014-07-06 11:21 - 00626510 _____ () C:\LOG1.Xml

2014-07-06 11:14 - 2013-12-18 21:14 - 00000000 ____D () C:\Program Files (x86)\HDvid Codec V6.0

2014-07-06 11:14 - 2013-10-26 20:58 - 00000000 ____D () C:\Program Files (x86)\HDvid Codec V1

2014-07-06 10:39 - 2014-07-06 09:53 - 00000468 _____ () C:\Users\Witali\AppData\Roaming\Microsoft\Windows\Start Menu\Google.website

2014-07-06 10:27 - 2014-07-06 10:27 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-07-06 10:26 - 2014-07-06 10:26 - 00001100 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-07-06 10:26 - 2014-07-06 10:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-07-06 10:26 - 2014-07-06 10:26 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-07-06 10:26 - 2014-07-06 10:26 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-07-06 09:51 - 2013-12-18 21:22 - 00001354 _____ () C:\Windows\Tasks\Plus-HD-2.2-updater.job

2014-07-06 09:51 - 2013-12-18 21:22 - 00001256 _____ () C:\Windows\Tasks\Plus-HD-2.2-codedownloader.job

2014-07-06 09:51 - 2013-12-18 21:22 - 00001156 _____ () C:\Windows\Tasks\Plus-HD-2.2-enabler.job

2014-07-06 09:51 - 2013-12-18 21:21 - 00002130 _____ () C:\Windows\Tasks\Plus-HD-2.2-firefoxinstaller.job

2014-07-06 09:51 - 2013-12-18 21:21 - 00002002 _____ () C:\Windows\Tasks\Plus-HD-2.2-chromeinstaller.job

2014-07-06 09:51 - 2013-12-18 21:14 - 00002198 _____ () C:\Windows\Tasks\HDvid Codec V6.0-firefoxinstaller.job

2014-07-06 09:51 - 2013-12-18 21:14 - 00001352 _____ () C:\Windows\Tasks\HDvid Codec V6.0-updater.job

2014-07-06 09:51 - 2013-10-26 20:58 - 00001222 _____ () C:\Windows\Tasks\HDvid Codec V1-codedownloader.job

2014-07-06 09:51 - 2013-05-16 18:29 - 00000401 _____ () C:\Users\Witali\AppData\Roaming\sp_data.sys

2014-07-06 09:13 - 2013-01-22 21:19 - 01556059 _____ () C:\Windows\WindowsUpdate.log

2014-07-06 09:01 - 2012-07-26 07:26 - 00000226 _____ () C:\Windows\win.ini

2014-07-06 08:59 - 2013-06-02 22:11 - 00003772 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-07-06 08:56 - 2013-06-01 11:22 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2014-07-06 08:54 - 2013-12-18 21:21 - 00000000 ____D () C:\Users\Witali\AppData\Roaming\newnext.me

2014-07-06 08:54 - 2013-12-11 00:10 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2014-07-01 20:12 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\AUInstallAgent

2014-06-23 22:16 - 2014-06-23 22:16 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-06-14 21:36 - 2012-07-26 09:59 - 00000000 ____D () C:\Windows\CbsTemp

2014-06-08 22:00 - 2013-12-09 22:40 - 00000000 ____D () C:\Program Files (x86)\Plus-HD-2.5

2014-06-07 16:08 - 2012-08-15 19:46 - 00000739 _____ () C:\Windows\SysWOW64\bscs.ini

2014-06-07 16:08 - 2012-08-02 15:24 - 00023334 _____ () C:\Windows\PFRO.log

2014-06-07 16:08 - 2012-07-26 09:22 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-06-07 16:07 - 2013-12-18 23:36 - 00000000 ____D () C:\Users\Witali\Desktop\Alte Firefox-Daten

2014-06-07 16:07 - 2012-07-26 07:26 - 00262144 ___SH () C:\Windows\system32\config\BBI

2014-06-07 15:45 - 2014-06-07 15:45 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Witali\Downloads\SpyHunter-installer.exe

2014-06-07 15:26 - 2013-06-01 11:22 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
 

Files to move or delete:

====================

C:\ProgramData\SetStretch.exe
 
 

Some content of TEMP:

====================

C:\Users\Witali\AppData\Local\Temp\96984uninstall.exe

C:\Users\Witali\AppData\Local\Temp\avgnt.exe

C:\Users\Witali\AppData\Local\Temp\BackupSetup.exe

C:\Users\Witali\AppData\Local\Temp\dsrlte.exe

C:\Users\Witali\AppData\Local\Temp\FortunitasUntemp.exe

C:\Users\Witali\AppData\Local\Temp\mgsqlite3.dll

C:\Users\Witali\AppData\Local\Temp\setupA9_.exe

C:\Users\Witali\AppData\Local\Temp\ShoppinHelper2new2.exe

C:\Users\Witali\AppData\Local\Temp\Sqlite3.dll

C:\Users\Witali\AppData\Local\Temp\vcredist_x64.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2014-07-06 12:05
 

==================== End Of Log ============================

--- --- ---

--- --- ---

Das Teil ist ja vollgerotzt ohne Ende :balla:

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop.

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es ein Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

Code:

ComboFix 14-07-03.01 - Witali 06.07.2014  13:48:31.1.2 - x64

Microsoft Windows 8  6.2.9200.0.1252.49.1031.18.3980.2389 [GMT 2:00]

ausgeführt von:: c:\users\Witali\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6UTN1C8W\ComboFix.exe

AV: Avira Desktop *Disabled/Updated* {4D041356-F94D-285F-8768-AAE50FA36859}

AV: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

SP: Avira Desktop *Disabled/Updated* {F665F2B2-DF77-27D1-BDD8-9197742422E4}

SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

.

((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\programdata\SetStretch.exe

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\background.html

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\crossriderManifest.json

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\manifest.xml

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins.json

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\1_base.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\102_dealply_m.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\105_corticas_m.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\117_coupons_intext_ads_5_m.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\119_similar_web_m.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\120_luck_m.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\123_intext_adv_m.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\124_superfish_no_search_no_coupons_m.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\125_arcadi2_m.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\126_revizer_ws_m.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\127_revizer_p_m.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\128_superfish_pricora_m.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\13_CrossriderAppUtils.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\135_arcadi3_m.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\138_getdeal_m.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\14_CrossriderUtils.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\141_corticas_ru_m.js.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\142_intext_fa_m.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\159_cortica_rollover_m.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\17_jQuery.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\171_arcadi2_sourceID_m.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\174_arcadi_serp_dynamic_id_m.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\175_coolmirage_m.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\177_crossriderDashboard.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\178_revizer_ws_dynamic_m.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\179_revizer_p_dynamic_m.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\180_bpo_serp_m.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\182_openUrl.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\183_tabsWrapper.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\184_noproblemppc_m.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\189_active_sanity.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\19_CHAppAPIWrapper.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\190_pops_5_m.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\191_ciuvo_m.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\192_revizer_ws_dynamic_b2b_m.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\193_revizer_p_dynamic_b2b_m.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\194_retargeting_bi_m.js.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\195_icm_convertmedia_m.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\197_kreapixel_pops_m.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\198_superfish_no_search_no_coupons_plushd_m.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\199_superfish_no_coupons_plushd_m.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\200_foxydeal_m.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\204_pricedetect_m.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\21_debug.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\22_resources.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\28_initializer.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\4_jquery_1_7_1.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\47_resources_background.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\64_appApiMessage.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\7_hooks.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\72_appApiValidation.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\78_CrossriderInfo.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\80_CHPopupAppAPI.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\9_search_engine_hook.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\91_monetizationLoader.js.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\93_superfish_no_coupons_m.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\97_resourceApiWrapper.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\userCode\background.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\userCode\extension.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\icons\actions\1.png

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\icons\icon128.png

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\icons\icon16.png

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\icons\icon48.png

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\api\chrome.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\api\cookie.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\api\message.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\api\pageAction.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\api\pageActionBG.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\background.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\app_api.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\bg_app_api.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\consts.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\cookie_store.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\crossriderAPI.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\delegate.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\events.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\extensionDataStore.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\installer.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\logFile.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\logging.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\onBGDocumentLoad.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\popupResource\newPopup.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\popupResource\popup.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\reports.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\storageWrapper.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\updateManager.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\util.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\xhr.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\main.js

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\manifest.json

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\popup.html

c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Preferences

c:\users\Witali\AppData\Local\Microsoft\Windows\Temporary Internet Files\Storimbo_iels

c:\windows\msvcr71.dll

.

.

(((((((((((((((((((((((   Dateien erstellt von 2014-06-06 bis 2014-07-06  ))))))))))))))))))))))))))))))

.

.

2014-07-06 11:52 . 2014-07-06 11:52        --------        d-----w-        c:\users\Default\AppData\Local\temp

2014-07-06 10:16 . 2014-07-06 10:24        --------        d-----w-        C:\FRST

2014-07-06 08:27 . 2014-07-06 08:27        122584        ----a-w-        c:\windows\system32\drivers\MBAMSwissArmy.sys

2014-07-06 08:26 . 2014-05-12 05:26        64216        ----a-w-        c:\windows\system32\drivers\mwac.sys

2014-07-06 08:26 . 2014-05-12 05:26        91352        ----a-w-        c:\windows\system32\drivers\mbamchameleon.sys

2014-07-06 08:26 . 2014-05-12 05:25        25816        ----a-w-        c:\windows\system32\drivers\mbam.sys

2014-07-06 08:26 . 2014-07-06 08:26        --------        d-----w-        c:\program files (x86)\Malwarebytes Anti-Malware

2014-07-06 08:26 . 2014-07-06 08:26        --------        d-----w-        c:\programdata\Malwarebytes

2014-07-01 19:02 . 2014-07-01 19:02        283312        ----a-w-        c:\programdata\Microsoft\Windows\Sqm\Manifest\Sqm10242.bin

.

.

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2014-07-06 07:51 . 2013-05-16 16:29        401        ----a-w-        c:\users\Witali\AppData\Roaming\sp_data.sys

2014-07-06 06:56 . 2013-06-01 09:22        117712        ----a-w-        c:\windows\system32\drivers\avgntflt.sys

2014-06-07 13:26 . 2013-06-01 09:22        130584        ----a-w-        c:\windows\system32\drivers\avipbb.sys

2014-04-24 10:22 . 2014-05-03 18:38        61120        ----a-w-        c:\windows\system32\drivers\{b8a90375-3b37-4954-86de-f96c458c4ce2}w64.sys

.

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"NextLive"="c:\users\Witali\AppData\Roaming\newnext.me\nengine.dll" [2013-11-14 1283584]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" [2014-05-08 40312]

"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904]

"BtTray"="c:\program files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe" [2012-08-15 364032]

"RemoteControl10"="c:\program files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe" [2012-03-28 91432]

"ASUSWebStorage"="c:\program files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\AsusWSPanel.exe" [2012-08-28 3417984]

"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2014-07-06 750160]

"sysTPL"="c:\program files (x86)\sysTPL\sysTPL.exe" [2014-01-24 1244440]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"EnableUIADesktopToggle"= 0 (0x0)

"EnableCursorSuppression"= 1 (0x1)

"ConsentPromptBehaviorUser"= 3 (0x3)

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]

"Userinit"="userinit.exe"

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]

"LoadAppInit_DLLs"=1 (0x1)

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]

"aux1"=wdmaud.drv

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

@=""

.

R2 IePluginService;IePlugin Service;c:\programdata\IePluginService\PluginService.exe;c:\programdata\IePluginService\PluginService.exe [x]

R2 Wpm;Wpm Service;c:\programdata\WPM\wprotectmanager.exe;c:\programdata\WPM\wprotectmanager.exe [x]

R3 BthL2caScoIfSrv;Bluetooth Profile Interface Driver Service;c:\windows\System32\Drivers\BtL2caScoIf.sys;c:\windows\SYSNATIVE\Drivers\BtL2caScoIf.sys [x]

R3 BthLEEnum;Treiber für energiearme Bluetooth-Geräte;c:\windows\system32\DRIVERS\BthLEEnum.sys;c:\windows\SYSNATIVE\DRIVERS\BthLEEnum.sys [x]

R3 btUrbFilterDrv;IVT URB Bluetooth Filter Driver Service;c:\windows\System32\Drivers\IvtUrbBtFlt.sys;c:\windows\SYSNATIVE\Drivers\IvtUrbBtFlt.sys [x]

R3 RTL8168;Realtek 8168 NT-Treiber;c:\windows\system32\DRIVERS\Rt630x64.sys;c:\windows\SYSNATIVE\DRIVERS\Rt630x64.sys [x]

S0 iaStorA;iaStorA;c:\windows\System32\drivers\iaStorA.sys;c:\windows\SYSNATIVE\drivers\iaStorA.sys [x]

S1 {b8a90375-3b37-4954-86de-f96c458c4ce2}w64;{b8a90375-3b37-4954-86de-f96c458c4ce2}w64;c:\windows\system32\drivers\{b8a90375-3b37-4954-86de-f96c458c4ce2}w64.sys;c:\windows\SYSNATIVE\drivers\{b8a90375-3b37-4954-86de-f96c458c4ce2}w64.sys [x]

S1 ATKWMIACPIIO;ATKWMIACPI Driver;c:\program files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys;c:\program files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [x]

S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]

S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x]

S2 ASMMAP64;ASMMAP64;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [x]

S2 ASUS InstantOn;ASUS InstantOn Service;c:\program files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe;c:\program files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [x]

S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]

S2 Intel(R) ME Service;Intel(R) ME Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [x]

S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]

S2 LPTSystemUpdater;LPT System Updater Service;c:\program files (x86)\LPT\srpts.exe;c:\program files (x86)\LPT\srpts.exe [x]

S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe;c:\program files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [x]

S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [x]

S2 sysTPLMonitor.exe;sysTPLMonitor;c:\program files (x86)\sysTPL\sysTPLMonitor.exe;c:\program files (x86)\sysTPL\sysTPLMonitor.exe [x]

S2 sysTPLService.exe;sysTPLService;c:\program files (x86)\sysTPL\sysTPLService.exe;c:\program files (x86)\sysTPL\sysTPLService.exe [x]

S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]

S2 VIAKaraokeService;VIA Karaoke digital mixer Service;c:\windows\system32\viakaraokesrv.exe;c:\windows\SYSNATIVE\viakaraokesrv.exe [x]

S3 AiCharger;ASUS Charger Driver;c:\windows\system32\DRIVERS\AiCharger.sys;c:\windows\SYSNATIVE\DRIVERS\AiCharger.sys [x]

S3 ATP;ASUS PS/2 Port Input Device;c:\windows\System32\drivers\AsusTP.sys;c:\windows\SYSNATIVE\drivers\AsusTP.sys [x]

S3 BtAudioBusSrv;IVT Bluetooth Audio Bus Service;c:\windows\System32\Drivers\BtAudioBus.sys;c:\windows\SYSNATIVE\Drivers\BtAudioBus.sys [x]

S3 HIDSwitch;ASUS Wireless Radio Control;c:\windows\System32\drivers\AsHIDSwitch64.sys;c:\windows\SYSNATIVE\drivers\AsHIDSwitch64.sys [x]

S3 IntcDAud;Intel(R) Display-Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]

S3 L1C;NDIS Miniport Driver for Qualcomm Atheros AR81xx PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C63x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C63x64.sys [x]

S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]

S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys;c:\windows\SYSNATIVE\drivers\MBAMSwissArmy.sys [x]

S3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys;c:\windows\SYSNATIVE\drivers\mwac.sys [x]

S3 netr28x;Ralink 802.11n Extensible Wireless Driver;c:\windows\system32\DRIVERS\netr28x.sys;c:\windows\SYSNATIVE\DRIVERS\netr28x.sys [x]

S3 rtbth;RTBTH Bluetooth Device Driver;c:\windows\System32\drivers\rtbth.sys;c:\windows\SYSNATIVE\drivers\rtbth.sys [x]

S3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys;c:\windows\SYSNATIVE\drivers\viahduaa.sys [x]

.

.

Inhalt des "geplante Tasks" Ordners

.

2014-07-06 c:\windows\Tasks\Adobe Flash Player Updater.job

- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-02 06:59]

.

2014-07-06 c:\windows\Tasks\Plus-HD-2.2-codedownloader.job

- c:\program files (x86)\Plus-HD-2.2\Plus-HD-2.2-codedownloader.exe [2013-12-18 19:21]

.

.

--------- X64 Entries -----------

.

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_B]

@="{6D4133E5-0742-4ADC-8A8C-9303440F7190}"

[HKEY_CLASSES_ROOT\CLSID\{6D4133E5-0742-4ADC-8A8C-9303440F7190}]

2012-03-13 09:23        1500672        ----a-w-        c:\program files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\AsusWSShellExt64.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_O]

@="{64174815-8D98-4CE6-8646-4C039977D808}"

[HKEY_CLASSES_ROOT\CLSID\{64174815-8D98-4CE6-8646-4C039977D808}]

2012-03-13 09:23        1500672        ----a-w-        c:\program files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\AsusWSShellExt64.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_U]

@="{1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4D}"

[HKEY_CLASSES_ROOT\CLSID\{1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4D}]

2012-03-13 09:23        1500672        ----a-w-        c:\program files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\AsusWSShellExt64.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-08-16 170304]

"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-08-16 398656]

"HDAudDeck"="c:\program files (x86)\VIA\VIAudioi\VDeck\VDeck.exe" [2012-10-25 5299320]

"ACMON"="c:\program files (x86)\ASUS\Splendid\ACMON.exe" [2012-09-11 107192]

.

------- Zusätzlicher Suchlauf -------

.

uLocal Page = c:\windows\system32\blank.htm

uStart Page = https://www.google.de/

mDefault_Search_URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX&q={searchTerms}

mDefault_Page_URL = hxxp://www.nationzoom.com/?type=hp&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX

mStart Page = hxxp://www.nationzoom.com/?type=hp&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX

mLocal Page = c:\windows\SysWOW64\blank.htm

mSearch Page = hxxp://www.nationzoom.com/web/?type=ds&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX&q={searchTerms}

uInternet Settings,ProxyServer = http=127.0.0.1:8877

uSearchAssistant = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04c8v3nrz1Jk2OMIEkAFi8neL2xxaMM0fcHoNm5vmWbLPW5CN0AYPk2M35zz1PFR2aDe5RpLaMZ9H6JXSicvSp283fnUxXXUyOc4lrcEbJwOmB3P0V3j4bPsbZVwOs4xGFHw,,&q={searchTerms}

TCP: DhcpNameServer = 192.168.2.1

FF - ProfilePath - c:\users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\

FF - prefs.js: browser.startup.homepage - hxxp://rts.dsrlte.com

.

- - - - Entfernte verwaiste Registrierungseinträge - - - -

.

BHO-{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - c:\program files (x86)\SupTab\SupTab.dll

BHO-{84FF7BD6-B47F-46F8-9130-01B2696B36CB} - (no file)

Toolbar-Locked - (no file)

Wow6432Node-HKLM-Run-mobilegeni daemon - c:\program files (x86)\Mobogenie\DaemonProcess.exe

BHO-{11111111-1111-1111-1111-110311301136} - c:\program files (x86)\Plus-HD-2.2\Plus-HD-2.2-bho64.dll

Toolbar-Locked - (no file)

AddRemove-Plus-HD-2.2 - c:\program files (x86)\Plus-HD-2.2\Uninstall.exe

.

.

.

--------------------- Gesperrte Registrierungsschluessel ---------------------

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

@SACL=(02 0000)

.

Zeit der Fertigstellung: 2014-07-06  13:54:38

ComboFix-quarantined-files.txt  2014-07-06 11:54

.

Vor Suchlauf: 11 Verzeichnis(se), 156.612.677.632 Bytes frei

Nach Suchlauf: 16 Verzeichnis(se), 156.737.949.696 Bytes frei

.

- - End Of File - - 2C2BAFB9B4AEEC5D54A724189BD85911

Adware/Junkware/Toolbars entfernen

1. Schritt: adwCleaner

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

3. Schritt: Frisches Log mit FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Code:

# AdwCleaner v3.214 - Bericht erstellt am 06/07/2014 um 22:42:13

# Aktualisiert 29/06/2014 von Xplode

# Betriebssystem : Windows 8  (64 bits)

# Benutzername : Witali - FAMILIEN-PC

# Gestartet von : C:\Users\Witali\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4U7YANJ3\adwcleaner_3.214 (1).exe

# Option : Löschen
 

***** [ Dienste ] *****
 

Dienst Gelöscht : IePluginService

Dienst Gelöscht : LPTSystemUpdater

[#] Dienst Gelöscht : Wpm
 

***** [ Dateien / Ordner ] *****
 

Ordner Gelöscht : C:\ProgramData\IePluginService

Ordner Gelöscht : C:\ProgramData\VisualBee

Ordner Gelöscht : C:\ProgramData\WPM

Ordner Gelöscht : C:\Program Files (x86)\click-n-mark-5

Ordner Gelöscht : C:\Program Files (x86)\HDvid Codec V6.0

Ordner Gelöscht : C:\Program Files (x86)\HDvidCodec.com

Ordner Gelöscht : C:\Program Files (x86)\LPT

Ordner Gelöscht : C:\Program Files (x86)\MediaPlayerplus

Ordner Gelöscht : C:\Program Files (x86)\Mobogenie

Ordner Gelöscht : C:\Program Files (x86)\Plus-HD-2.2

Ordner Gelöscht : C:\Program Files (x86)\Storimbo

Ordner Gelöscht : C:\Program Files (x86)\SupTab

Ordner Gelöscht : C:\Program Files (x86)\Plus-HD-2.5

Ordner Gelöscht : C:\Program Files\V-bates

Ordner Gelöscht : C:\Users\Witali\AppData\Local\BeamriseUninstall

Ordner Gelöscht : C:\Users\Witali\AppData\Local\emaze

Ordner Gelöscht : C:\Users\Witali\AppData\Local\genienext

Ordner Gelöscht : C:\Users\Witali\AppData\Local\Mobogenie

Ordner Gelöscht : C:\Users\Witali\AppData\Local\VisualBeeClient

Ordner Gelöscht : C:\Users\Witali\AppData\Local\VisualBeeExe

Ordner Gelöscht : C:\Users\Witali\AppData\LocalLow\Plus-HD-2.2

Ordner Gelöscht : C:\Users\Witali\AppData\Roaming\337Games

Ordner Gelöscht : C:\Users\Witali\AppData\Roaming\newnext.me

Ordner Gelöscht : C:\Users\Witali\AppData\Roaming\SupTab

Ordner Gelöscht : C:\Users\Witali\AppData\Roaming\Systweak

Ordner Gelöscht : C:\Users\Witali\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HDvidCodec.com

Ordner Gelöscht : C:\Users\Witali\Documents\Mobogenie

Ordner Gelöscht : C:\Users\Witali\Documents\Optimizer Pro

Ordner Gelöscht : C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\Extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com

Ordner Gelöscht : C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\Extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com

Datei Gelöscht : C:\Users\Witali\daemonprocess.txt

Datei Gelöscht : C:\Users\Witali\Desktop\HDVidCodec.lnk

Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\nationzoom.xml

Datei Gelöscht : C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pflphaooapbgpeakohlggbpidpppgdff_0.localstorage

Datei Gelöscht : C:\Windows\Tasks\Plus-HD-2.2-codedownloader.job

Datei Gelöscht : C:\Windows\System32\Tasks\Plus-HD-2.2-codedownloader
 

***** [ Verknüpfungen ] *****
 

Verknüpfung Desinfiziert : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk

Verknüpfung Desinfiziert : C:\Users\Witali\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk

Verknüpfung Desinfiziert : C:\Users\Witali\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk
 

***** [ Registrierungsdatenbank ] *****
 

Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [quick_start@gmail.com]

Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\dnllcmllkjofnojidnaknldfehfhehoo

Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [NextLive]

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\smartbar_rasapi32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\smartbar_rasmancs

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C007DADD-132A-624C-088E-59EE6CF0711F}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C292AD0A-C11F-479B-B8DB-743E72D283B0}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{D40753C7-8A59-4C1F-BE88-C300F4624D5B}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220322302236}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422902208}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355305536}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366306636}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{C292AD0A-C11F-479B-B8DB-743E72D283B0}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440344304436}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440444904408}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{12218CF7-AA48-478E-A74D-0CB5959CD159}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F905DC7D-36D2-4B6F-A89A-016BF87D7776}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{173ecd4c-0558-4193-8ffd-fbe078ad6048}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4554a836-d0c3-44f6-9129-73ce4dc5ae59}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{596588e5-2e46-4e09-96a1-f0c502465e6e}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5c0c354a-7740-467d-be22-d7c351b8dfc4}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7fe48e05-3622-471a-8840-2dc4915175fc}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}

Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220322302236}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110311301136}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355305536}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366306636}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311301136}

Wert Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{12218CF7-AA48-478E-A74D-0CB5959CD159}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F905DC7D-36D2-4B6F-A89A-016BF87D7776}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{173ecd4c-0558-4193-8ffd-fbe078ad6048}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4554a836-d0c3-44f6-9129-73ce4dc5ae59}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{596588e5-2e46-4e09-96a1-f0c502465e6e}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5c0c354a-7740-467d-be22-d7c351b8dfc4}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7fe48e05-3622-471a-8840-2dc4915175fc}

Schlüssel Gelöscht : HKCU\Software\1ClickDownload

Schlüssel Gelöscht : HKCU\Software\ClickConnect

Schlüssel Gelöscht : HKCU\Software\InstallCore

Schlüssel Gelöscht : HKCU\Software\installedbrowserextensions

Schlüssel Gelöscht : HKCU\Software\SweetIM

Schlüssel Gelöscht : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\HDvid Codec V1

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Plus-HD-2.2

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\PriceGong

Schlüssel Gelöscht : HKLM\Software\{1146AC44-2F03-4431-B4FD-889BC837521F}

Schlüssel Gelöscht : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}

Schlüssel Gelöscht : HKLM\Software\{6791A2F3-FC80-475C-A002-C014AF797E9C}

Schlüssel Gelöscht : HKLM\Software\HDvid Codec V1

Schlüssel Gelöscht : HKLM\Software\IePlugin

Schlüssel Gelöscht : HKLM\Software\Iminent

Schlüssel Gelöscht : HKLM\Software\installedbrowserextensions

Schlüssel Gelöscht : HKLM\Software\MediaPlayerplus

Schlüssel Gelöscht : HKLM\Software\nationzoomSoftware

Schlüssel Gelöscht : HKLM\Software\Plus-HD-2.2

Schlüssel Gelöscht : HKLM\Software\SupTab

Schlüssel Gelöscht : HKLM\Software\supWPM

Schlüssel Gelöscht : HKLM\Software\SweetIM

Schlüssel Gelöscht : HKLM\Software\Wpm

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{BC0BF363-63AB-4FF7-8EF1-AE0D7F711B24}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\1ClickDownload

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HDvid Codec V1

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MediaPlayerplus

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Plus-HD-2.2

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SupTab

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\installedbrowserextensions
 

***** [ Browser ] *****
 

-\\ Internet Explorer v10.0.9200.16798
 

Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]

Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]

Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]

Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [Default_Search_URL]

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [SearchAssistant]

Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [Tabs]

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [Default]

Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [Default]

Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
 

-\\ Mozilla Firefox v30.0 (de)
 

[ Datei : C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\prefs.js ]
 

Zeile gelöscht : user_pref("extensions.a34f57b0c8cdb4914818c928df47c6c4f3a243122a6fc40c9a1e6ba11e930da09com45971.45971.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssf[...]

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.InstallationThankYouPage", false);

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.InstallationTime", 1387394484);

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036_dbWasSet", true);

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036_dbWasSet_FF25_FIX", true[...]

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.active", true);

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.addressbar", "NA");

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.addressbarenhanced", "");

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.asyncdb.was_copied", "true");

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.asyncdb_dbWasSet", true);

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.asyncdb_dbWasSet_FF25_FIX", true);

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.asyncinternaldb.was_copied", "true");

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.asyncinternaldb_dbWasSet", true);

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.asyncinternaldb_dbWasSet_FF25_FIX", true);

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.backgroundver", 3);

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.certdomaininstaller", "");

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.changeprevious", false);

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.cookie.InstallationTime.value", "%221387394484%22");

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.cookie.InstallerParams.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.cookie.InstallerParams.value", "%7B%22source_id%22%3A%22000222%22%2C%22sub_id%22%3A%220%22%2C%22uz[...]

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.description", "Turn YouTube videos to High Definition by default");

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.domain", "");

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.enablesearch", false);

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.homepage", "");

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.iframe", false);

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.InstallerIdentifiers.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.InstallerIdentifiers.value", "%7B%22installer_bic%22%3A%220EF3387AB5254DAAB70BD32C19209[...]

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.InstallerParams.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.InstallerParams.value", "%7B%22source_id%22%3A%22000222%22%2C%22sub_id%22%3A%220%22%2C%[...]

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.InstallerParamsCache.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.InstallerParamsCache.value", "%7B%22source_id%22%3A%22000222%22%2C%22sub_id%22%3A%220%2[...]

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.InstallerUserIdentifiersCache.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.InstallerUserIdentifiersCache.value", "%7B%22installer_bic%22%3A%220EF3387AB5254DAAB70B[...]

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.Resources_appVer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.Resources_appVer.value", "227");

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.Resources_lastVersion.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.Resources_lastVersion.value", "1");

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.Resources_meta.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.Resources_meta.value", "%7B%7D");

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.Resources_nextCheck.expiration", "Sun Jul 06 2014 15:01:25 GMT+0200");

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.Resources_nextCheck.value", "true");

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.Resources_queue.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.Resources_queue.value", "%7B%7D");

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.__194_lastCheck__.expiration", "Sun Jul 06 2014 10:24:00 GMT+0200");

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.__194_lastCheck__.value", "true");

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.installer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.installer.value", "%7B%22InstallerIdentifiers%22%3A%7B%22installer_bic%22%3A%220EF3387A[...]

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.monetization_plugin_bundledUrls.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssf[...]

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.monetization_plugin_bundledWithHash.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.monetization_plugin_bundledWithHash.value", "null");

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.monetization_plugin_notBundledArr_.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.monetization_plugin_notBundledArr_.value", "%5B%5D");

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.monetization_plugin_regBundledWithSoftware.expiration", "Fri Feb 01 2030 00:00:00 GMT+0[...]

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.monetization_plugin_regBundledWithSoftware.value", "%7B%7D");

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.lastDailyReport", "1404629740822");

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.lastUpdate", "1404630012467");

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.manifesturl", "");

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.name", "Plus-HD-2.2");

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.newtab", "");

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.opensearch", "");

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.pluginsurl", "hxxp://js.demogensrv.com/plugin/apps/33036/plugins/na/ff/plugins.json");

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.pluginsversion", 215);

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.publisher", "Plus HD");

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.searchstatus", 0);

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.setnewtab", false);

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.thankyou", "");

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.updateinterval", 360);

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.ver", 227);

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.apps", "33036");

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.bic", "14676aabc5449fec3b077edf343695ed");

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.cid", 33036);

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.firstrun", false);

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.hadappinstalled", true);

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.installationdate", 1404629733);

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.modetype", "production");

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.reportInstall", true);

Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.statsDailyCounter", 1);

Zeile gelöscht : user_pref("extensions.crossrider.bic", "14676aabc5449fec3b077edf343695ed");
 

-\\ Google Chrome v
 

*************************
 

AdwCleaner[R0].txt - [32916 octets] - [06/07/2014 22:40:32]

AdwCleaner[S0].txt - [26947 octets] - [06/07/2014 22:42:13]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [27008 octets] ##########

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.1.4 (04.06.2014:1)

OS: Windows 8 x64

Ran by Witali on 06.07.2014 at 22:51:50,44

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 
 
 

~~~ Registry Values
 
 
 

~~~ Registry Keys
 
 
 

~~~ Files
 
 
 

~~~ Folders
 

Successfully deleted: [Folder] "C:\ProgramData\apn"

Successfully deleted: [Folder] "C:\Program Files (x86)\hdvid codec v1"

Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin"
 
 
 

~~~ Event Viewer Logs were cleared
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 06.07.2014 at 23:01:24,05

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-07-2014

Ran by Witali (administrator) on FAMILIEN-PC on 06-07-2014 23:13:15

Running from C:\Users\Witali\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HKKNIXYH

Platform: Windows 8 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 10

Boot Mode: Normal
 
 
 

==================== Processes (Whitelisted) =================
 

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe

(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe

(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe

(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe

(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe

(Microsoft Corporation) C:\Windows\System32\dasHost.exe

(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe

(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe

(Tlapia) C:\Program Files (x86)\sysTPL\sysTPLMonitor.exe

(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe

(Tlapia) C:\Program Files (x86)\sysTPL\sysTPLService.exe

(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe

(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe

(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe

(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe

(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Tlapia) C:\Program Files (x86)\sysTPL\sysTPL.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe

(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe

(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4206.722_x64__8wekyb3d8bbwe\LiveComm.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe

(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

(Farbar) C:\Users\Witali\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HKKNIXYH\FRST64 (1).exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [5299320 2012-10-25] (VIA)

HKLM\...\Run: [ACMON] => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [107192 2012-09-11] (ASUS)

HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40312 2014-05-08] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [BtTray] => C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe [364032 2012-08-15] (IVT Corporation)

HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.)

HKLM-x32\...\Run: [ASUSWebStorage] => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\AsusWSPanel.exe [3417984 2012-08-28] (ASUS Cloud Corporation)

HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [750160 2014-07-06] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [sysTPL] => C:\Program Files (x86)\sysTPL\sysTPL.exe [1244440 2014-01-24] (Tlapia)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

ShellIconOverlayIdentifiers: AsusWSShellExt_B -> {6D4133E5-0742-4ADC-8A8C-9303440F7190} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\ASUSWSShellExt64.dll (ASUS Cloud Corporation.)

ShellIconOverlayIdentifiers: AsusWSShellExt_O -> {64174815-8D98-4CE6-8646-4C039977D808} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\ASUSWSShellExt64.dll (ASUS Cloud Corporation.)

ShellIconOverlayIdentifiers: AsusWSShellExt_U -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4D} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\ASUSWSShellExt64.dll (ASUS Cloud Corporation.)
 

==================== Internet (Whitelisted) ====================
 

ProxyEnable: Internet Explorer proxy is enabled.

ProxyServer: http=127.0.0.1:8877

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 

SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd1103&cd=2XzuyEtN2Y1L1Qzuzy0CtB0AyBtDyEzztD0Dzy0ByCtAtA0BtN0D0Tzu0SyBtCtDtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=501081809&ir=

SearchScopes: HKLM-x32 - DefaultScope value is missing.

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Windows\SysWow64\skype4com.dll (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
 

FireFox:

========

FF ProfilePath: C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995

FF Homepage: hxxp://rts.dsrlte.com

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_125.dll ()

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_125.dll ()

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF SearchPlugin: C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\searchplugins\keepmysearch.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
 

Chrome: 

=======

Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
 

==================== Services (Whitelisted) =================
 

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-07-06] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-07-06] (Avira Operations GmbH & Co. KG)

R2 ASUS InstantOn; C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [277120 2012-04-13] (ASUS)

R2 BlueSoleilCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe [1578496 2012-08-14] (IVT Corporation) [File not signed]

R3 BsHelpCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe [138752 2012-08-14] (IVT Corporation) [File not signed]

R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)

S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)

S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)

R2 sysTPLMonitor.exe; C:\Program Files (x86)\sysTPL\sysTPLMonitor.exe [399640 2014-01-24] (Tlapia)

R2 sysTPLService.exe; C:\Program Files (x86)\sysTPL\sysTPLService.exe [400664 2014-01-24] (Tlapia)

R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27768 2012-10-22] (VIA Technologies, Inc.)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)
 

==================== Drivers (Whitelisted) ====================
 

U5 AppMgmt; C:\Windows\system32\svchost.exe [29696 2012-09-20] (Microsoft Corporation)

R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [62848 2012-11-20] (ASUS Corporation)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-06] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [130584 2014-06-07] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-12-10] (Avira Operations GmbH & Co. KG)

U5 BlueletAudio; C:\Windows\System32\Drivers\BlueletAudio.sys [34912 2012-06-15] (Ralink Corporation.)

R3 BtAudioBusSrv; C:\Windows\System32\Drivers\BtAudioBus.sys [23136 2012-06-15] (IVT Corporation)

U4 BthHFEnum; 

S3 BthL2caScoIfSrv; C:\Windows\System32\Drivers\BtL2caScoIf.sys [56904 2012-07-19] (Ralink Corporation)

S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)

S3 btUrbFilterDrv; C:\Windows\System32\Drivers\IvtUrbBtFlt.sys [48736 2012-08-14] (Ralink Corporation)

R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )

S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)

S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2014-05-12] (Malwarebytes Corporation)

R3 rtbth; C:\Windows\System32\drivers\rtbth.sys [695392 2012-08-14] (Ralink Technology, Corp.)

U5 BlueletAudio; C:\Windows\SysWOW64\Drivers\BlueletAudio.sys [34912 2012-06-15] (Ralink Corporation.)

S3 catchme; \??\C:\ComboFix\catchme.sys [X]

U0 msahci; 

S1 {b8a90375-3b37-4954-86de-f96c458c4ce2}w64; system32\drivers\{b8a90375-3b37-4954-86de-f96c458c4ce2}w64.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-07-06 23:01 - 2014-07-06 23:01 - 00000808 _____ () C:\Users\Witali\Desktop\JRT.txt

2014-07-06 22:51 - 2014-07-06 22:51 - 00000000 ____D () C:\Windows\ERUNT

2014-07-06 22:41 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll

2014-07-06 22:38 - 2014-07-06 22:42 - 00000000 ____D () C:\AdwCleaner

2014-07-06 13:54 - 2014-07-06 13:54 - 00028227 _____ () C:\ComboFix.txt

2014-07-06 13:47 - 2014-07-06 13:54 - 00000000 ____D () C:\Qoobox

2014-07-06 13:47 - 2014-07-06 13:54 - 00000000 ____D () C:\ComboFix

2014-07-06 13:47 - 2014-07-06 13:53 - 00000000 ____D () C:\Windows\erdnt

2014-07-06 13:47 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe

2014-07-06 13:47 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe

2014-07-06 13:47 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2014-07-06 13:47 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe

2014-07-06 13:47 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe

2014-07-06 13:47 - 2000-08-31 02:00 - 00212480 _____ (SteelWerX) C:\Windows\SWXCACLS.exe

2014-07-06 13:47 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe

2014-07-06 13:47 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe

2014-07-06 13:47 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe

2014-07-06 12:26 - 2014-07-06 12:26 - 00026655 _____ () C:\Users\Witali\Desktop\FRST.txt

2014-07-06 12:26 - 2014-07-06 12:26 - 00023994 _____ () C:\Users\Witali\Desktop\Addition.txt

2014-07-06 12:16 - 2014-07-06 23:13 - 00000000 ____D () C:\FRST

2014-07-06 11:21 - 2014-07-06 11:21 - 00626510 _____ () C:\LOG1.Xml

2014-07-06 10:27 - 2014-07-06 22:46 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-07-06 10:26 - 2014-07-06 10:26 - 00001100 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-07-06 10:26 - 2014-07-06 10:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-07-06 10:26 - 2014-07-06 10:26 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-07-06 10:26 - 2014-07-06 10:26 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-07-06 10:26 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-07-06 10:26 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2014-07-06 10:26 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-07-06 09:53 - 2014-07-06 10:39 - 00000468 _____ () C:\Users\Witali\AppData\Roaming\Microsoft\Windows\Start Menu\Google.website

2014-06-23 22:16 - 2014-06-23 22:16 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-06-07 15:45 - 2014-06-07 15:45 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Witali\Downloads\SpyHunter-installer.exe
 

==================== One Month Modified Files and Folders =======
 

2014-07-06 23:14 - 2013-06-02 22:11 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-07-06 23:13 - 2014-07-06 12:16 - 00000000 ____D () C:\FRST

2014-07-06 23:02 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\system32\sru

2014-07-06 23:01 - 2014-07-06 23:01 - 00000808 _____ () C:\Users\Witali\Desktop\JRT.txt

2014-07-06 23:00 - 2013-05-16 18:36 - 00003590 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-215413311-585589717-95820281-1001

2014-07-06 22:58 - 2013-01-22 21:19 - 01635051 _____ () C:\Windows\WindowsUpdate.log

2014-07-06 22:51 - 2014-07-06 22:51 - 00000000 ____D () C:\Windows\ERUNT

2014-07-06 22:46 - 2014-07-06 10:27 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-07-06 22:46 - 2013-05-16 18:29 - 00000401 _____ () C:\Users\Witali\AppData\Roaming\sp_data.sys

2014-07-06 22:45 - 2012-08-15 19:46 - 00000739 _____ () C:\Windows\SysWOW64\bscs.ini

2014-07-06 22:45 - 2012-08-02 15:24 - 00025170 _____ () C:\Windows\PFRO.log

2014-07-06 22:45 - 2012-07-26 09:22 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-07-06 22:45 - 2012-07-26 07:26 - 00262144 ___SH () C:\Windows\system32\config\BBI

2014-07-06 22:42 - 2014-07-06 22:38 - 00000000 ____D () C:\AdwCleaner

2014-07-06 22:42 - 2013-12-11 00:10 - 00001059 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk

2014-07-06 22:42 - 2013-05-16 18:25 - 00000000 ____D () C:\Users\Witali

2014-07-06 22:27 - 2013-12-11 00:10 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2014-07-06 13:54 - 2014-07-06 13:54 - 00028227 _____ () C:\ComboFix.txt

2014-07-06 13:54 - 2014-07-06 13:47 - 00000000 ____D () C:\Qoobox

2014-07-06 13:54 - 2014-07-06 13:47 - 00000000 ____D () C:\ComboFix

2014-07-06 13:54 - 2012-07-26 07:37 - 00000000 __RHD () C:\Users\Default

2014-07-06 13:53 - 2014-07-06 13:47 - 00000000 ____D () C:\Windows\erdnt

2014-07-06 13:53 - 2012-07-26 07:26 - 00000215 _____ () C:\Windows\system.ini

2014-07-06 13:44 - 2014-02-18 14:14 - 00000000 ____D () C:\Program Files (x86)\sysTPL

2014-07-06 12:26 - 2014-07-06 12:26 - 00026655 _____ () C:\Users\Witali\Desktop\FRST.txt

2014-07-06 12:26 - 2014-07-06 12:26 - 00023994 _____ () C:\Users\Witali\Desktop\Addition.txt

2014-07-06 11:21 - 2014-07-06 11:21 - 00626510 _____ () C:\LOG1.Xml

2014-07-06 10:39 - 2014-07-06 09:53 - 00000468 _____ () C:\Users\Witali\AppData\Roaming\Microsoft\Windows\Start Menu\Google.website

2014-07-06 10:26 - 2014-07-06 10:26 - 00001100 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-07-06 10:26 - 2014-07-06 10:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-07-06 10:26 - 2014-07-06 10:26 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-07-06 10:26 - 2014-07-06 10:26 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-07-06 09:01 - 2012-07-26 07:26 - 00000226 _____ () C:\Windows\win.ini

2014-07-06 08:59 - 2013-06-02 22:11 - 00003772 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-07-06 08:56 - 2013-06-01 11:22 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2014-07-01 20:12 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\AUInstallAgent

2014-06-23 22:16 - 2014-06-23 22:16 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-06-14 21:36 - 2012-07-26 09:59 - 00000000 ____D () C:\Windows\CbsTemp

2014-06-07 16:07 - 2013-12-18 23:36 - 00000000 ____D () C:\Users\Witali\Desktop\Alte Firefox-Daten

2014-06-07 15:45 - 2014-06-07 15:45 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Witali\Downloads\SpyHunter-installer.exe

2014-06-07 15:26 - 2013-06-01 11:22 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
 

Some content of TEMP:

====================

C:\Users\Witali\AppData\Local\Temp\avgnt.exe

C:\Users\Witali\AppData\Local\Temp\Quarantine.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2014-07-06 12:05
 

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

--- --- ---

Es wurde keine Addition.txt erstellt.Mfg.

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 03-07-2014

Ran by Witali at 2014-07-06 23:28:51

Running from C:\Users\Witali\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HKKNIXYH

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}

AV: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}

AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installed Programs ======================
 

Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.125 - Adobe Systems Incorporated)

Adobe Reader X (10.1.10) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.10 - Adobe Systems Incorporated)

Alcor Micro USB Card Reader (HKLM-x32\...\AmUStor) (Version: 3.4.117.01527 - Alcor Micro Corp.)

Alcor Micro USB Card Reader (x32 Version: 3.4.117.01527 - Alcor Micro Corp.) Hidden

ASUS Instant Connect (HKLM-x32\...\{89ECB85A-D933-4CEA-9116-5CBC9C2ED95B}) (Version: 1.2.8 - ASUS)

ASUS InstantOn (HKLM-x32\...\{749F674B-2674-47E8-879C-5626A06B2A91}) (Version: 3.0.4 - ASUS)

ASUS LifeFrame3 (HKLM-x32\...\{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}) (Version: 3.1.9 - ASUS)

ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.1.9 - ASUS)

ASUS Power4Gear Hybrid (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 2.0.4 - ASUS)

ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 1.0.36 - ASUS)

ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 1.03.0005 - ASUS)

ASUS Tutor (HKLM-x32\...\{58172D66-2F69-4215-9AEC-ED8196023736}) (Version: 1.0.7 - ASUS)

ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 2.1.5 - ASUS)

ASUS WebStorage Sync Agent (HKLM-x32\...\ASUS WebStorage) (Version: 1.1.9.120 - ASUS Cloud Corporation)

ASUSDVD (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.4126.52 - CyberLink Corp.)

ASUSDVD (x32 Version: 10.0.4126.52 - CyberLink Corp.) Hidden

Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.7 - Atheros Communications Inc.)

ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0025 - ASUS)

Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.5.450 - Avira)

Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)

Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)

Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)

ffdshow v1.2.4422 [2012-04-09] (HKLM-x32\...\ffdshow_is1) (Version: 1.2.4422.0 - )

HDvid Codec V6.0 (HKLM-x32\...\HDvid Codec V6.0) (Version: 1.31.153.0 - installdaddy) <==== ATTENTION

Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)

Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.2828 - Intel Corporation)

Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)

Intel® Trusted Connect Service Client (Version: 1.24.388.1 - Intel Corporation) Hidden

Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)

Microsoft Office (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.6120.5004 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Mozilla Firefox 30.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 30.0 (x86 de)) (Version: 30.0 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)

Platform (x32 Version: 1.39 - VIA Technologies, Inc.) Hidden

Ralink Bluetooth Stack64 (HKLM\...\{ED818A3C-3DF5-CDCF-3DB2-A646D7B31A16}) (Version: 9.0.717.0 - Ralink Corporation)

Ralink RT2860 Wireless LAN Card (HKLM-x32\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309B0}) (Version: 1.2.0.40 - Ralink)

Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)

Shopping Helper Smartbar Engine (HKCU\...\{0ecd4143-81ca-459f-9b0d-f67a45b6b073}) (Version: 10.215.63.15249 - ReSoft Ltd.) <==== ATTENTION

sysTPL (HKLM-x32\...\{4B74BC31-B353-4B8F-8CBE-DAB4FF326FF1}) (Version: 1.4.1.2 - Tlapia) <==== ATTENTION

VIA Platform Device Manager (HKLM-x32\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.39 - VIA Technologies, Inc.)

Windows Driver Package - ASUS (ATP) Mouse  (11/09/2012 1.0.0.153) (HKLM\...\5AB9160B769DD2E134ADCB8010377DECA2479378) (Version: 11/09/2012 1.0.0.153 - ASUS)

WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.41.1 - ASUS)
 

==================== Restore Points  =========================
 

17-05-2014 19:49:05 Geplanter Prüfpunkt

06-07-2014 10:59:34 Geplanter Prüfpunkt
 

==================== Hosts content: ==========================
 

2012-07-26 07:26 - 2014-07-06 13:52 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1       localhost
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {1AAFF332-5C62-4558-9991-DAA649C4C9C5} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask

Task: {23A5D8BE-9196-40EB-BD89-794398B2B073} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList

Task: {4B2C7400-D249-4248-93BA-0FC16AE948DC} - System32\Tasks\ASUS Live Update => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2012-08-22] (ASUSTeK Computer Inc.)

Task: {558D434A-C25F-4F8B-B1D7-E77F2F2EB591} - System32\Tasks\ASUS Touchpad Launcher (x64) => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2012-11-20] (AsusTek)

Task: {7FFC4441-7728-47DF-8BFB-9636438EB65B} - System32\Tasks\ASUS P4G => C:\Program Files\ASUS\P4G\BatteryLife.exe [2012-08-24] (ASUS)

Task: {A72208BF-7A49-4FB8-B684-252375F3443A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing

Task: {A9F285AF-5B73-40C9-A53E-58803D1A1E5C} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2012-09-18] (ASUSTek Computer Inc.)

Task: {B5514C22-04DD-4026-943F-B9735787FABD} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-06] (Adobe Systems Incorporated)

Task: {C6A88F2D-53D2-4805-9D69-443738A1847C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState

Task: {CE8409E8-A7F3-4719-B979-6AF6C6503B43} - \Plus-HD-2.2-codedownloader No Task File <==== ATTENTION

Task: {E1B64C2B-BA2A-4C45-AEFF-187843092D8B} - System32\Tasks\ASUS Patch for VIA Audio => C:\Windows\system32\AsPatchViaAudio.exe [2012-11-07] (ASUSTek Computer INC.)

Task: {EBF06DEC-4228-4813-AC0C-62821AE4E330} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
 

==================== Loaded Modules (whitelisted) =============
 

2012-08-24 19:26 - 2012-08-24 19:26 - 00031360 _____ () C:\Program Files\ASUS\P4G\DevMng.dll

2013-01-22 21:05 - 2012-10-25 11:26 - 00078456 _____ () C:\Program Files (x86)\VIA\VIAudioi\VDeck\QsApoApi64.dll

2013-01-22 21:05 - 2012-10-25 11:26 - 00386168 _____ () C:\Program Files (x86)\VIA\VIAudioi\VDeck\Dts2ApoApi64.dll

2012-11-22 05:28 - 2012-08-15 19:52 - 00094208 _____ () C:\Windows\system32\IccLibDll_x64.dll

2012-08-14 16:13 - 2012-08-14 16:13 - 00009728 _____ () C:\Windows\system32\BsHelpCSps.dll

2012-07-26 11:48 - 2012-07-26 11:46 - 00170864 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4206.722_x64__8wekyb3d8bbwe\ModernShared\ErrorReporting\ErrorReporting.dll

2012-08-14 16:11 - 2012-08-14 16:11 - 00022528 _____ () C:\Windows\SYSTEM32\BsTrace.dll

2012-08-14 16:13 - 2012-08-14 16:13 - 00009728 _____ () C:\Windows\SYSTEM32\BsHelpCSps.dll

2012-08-14 16:13 - 2012-08-14 16:13 - 00052736 _____ () C:\Windows\SYSTEM32\BlueSoleilCSps.dll

2012-09-11 16:01 - 2012-09-11 16:01 - 00009216 _____ () C:\Program Files (x86)\ASUS\Splendid\GLCDdll.dll

2012-08-14 16:16 - 2012-08-14 16:16 - 00072192 _____ () C:\Windows\SYSTEM32\BsProfilefunc.dll

2012-08-15 19:20 - 2012-08-15 19:20 - 00356352 _____ () C:\Windows\SYSTEM32\BsExtendFunc.dll

2013-01-22 21:03 - 2012-06-25 12:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
 

==================== Alternate Data Streams (whitelisted) =========
 
 

==================== Safe Mode (whitelisted) ===================
 
 

==================== EXE Association (whitelisted) =============
 
 

==================== MSCONFIG/TASK MANAGER disabled items =========
 
 

==================== Faulty Device Manager Devices =============
 

Name: Teredo Tunneling Pseudo-Interface

Description: Microsoft-Teredo-Tunneling-Adapter

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: tunnel

Problem: : This device cannot start. (Code10)

Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.

On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
 
 

==================== Event log errors: =========================
 

Application errors:

==================
 

System errors:

=============
 

Microsoft Office Sessions:

=========================
 

CodeIntegrity Errors:

===================================

  Date: 2014-07-06 13:51:58.619

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 30%

Total physical RAM: 3979.67 MB

Available physical RAM: 2764.69 MB

Total Pagefile: 4747.67 MB

Available Pagefile: 3414.96 MB

Total Virtual: 8192 MB

Available Virtual: 8191.85 MB
 

==================== Drives ================================
 

Drive c: (OS) (Fixed) (Total:186.3 GB) (Free:145.8 GB) NTFS ==>[System with boot components (obtained from reading drive)]

Drive d: (Data) (Fixed) (Total:258.15 GB) (Free:258.03 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (Size: 466 GB) (Disk ID: 04A53D1B)
 

Partition: GPT Partition Type.
 

==================== End Of Log ============================

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ProxyEnable: Internet Explorer proxy is enabled.

ProxyServer: http=127.0.0.1:8877

FF Homepage: http://rts.dsrlte.com

S1 {b8a90375-3b37-4954-86de-f96c458c4ce2}w64; system32\drivers\{b8a90375-3b37-4954-86de-f96c458c4ce2}w64.sys [X]

C:\windows\system32\drivers\{b8a90375-3b37-4954-86de-f96c458c4ce2}w64.sys

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Code:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 05-07-2014 01

Ran by Witali at 2014-07-08 22:45:08 Run:1

Running from C:\Users\Witali\Downloads

Boot Mode: Normal

==============================================
 

Content of fixlist:

*****************

ProxyEnable: Internet Explorer proxy is enabled.

ProxyServer: http=127.0.0.1:8877

FF Homepage: hxxp://rts.dsrlte.com

S1 {b8a90375-3b37-4954-86de-f96c458c4ce2}w64; system32\drivers\{b8a90375-3b37-4954-86de-f96c458c4ce2}w64.sys [X]

C:\windows\system32\drivers\{b8a90375-3b37-4954-86de-f96c458c4ce2}w64.sys

         

*****************
 

HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable => value deleted successfully.

HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => value deleted successfully.

Firefox homepage deleted successfully.

{b8a90375-3b37-4954-86de-f96c458c4ce2}w64 => Service deleted successfully.

"C:\windows\system32\drivers\{b8a90375-3b37-4954-86de-f96c458c4ce2}w64.sys" => File/Directory not found.
 

==== End of Fixlog ====

Okay, dann Kontrollscans mit MBAM und ESET bitte:

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Code:

Malwarebytes Anti-Malware

www.malwarebytes.org
 

Suchlauf Datum: 09.07.2014

Suchlauf-Zeit: 18:04:08

Logdatei: mbam.txt

Administrator: Ja
 

Version: 2.00.2.1012

Malware Datenbank: v2014.07.07.06

Rootkit Datenbank: v2014.07.03.01

Lizenz: Testversion

Malware Schutz: Aktiviert

Bösartiger Webseiten Schutz: Aktiviert

Self-protection: Deaktiviert
 

Betriebssystem: Windows 8

CPU: x64

Dateisystem: NTFS

Benutzer: Witali
 

Suchlauf-Art: Bedrohungs-Suchlauf

Ergebnis: Abgeschlossen

Durchsuchte Objekte: 280366

Verstrichene Zeit: 20 Min, 4 Sek
 

Speicher: Aktiviert

Autostart: Aktiviert

Dateisystem: Aktiviert

Archive: Aktiviert

Rootkits: Deaktiviert

Heuristics: Aktiviert

PUP: Aktiviert

PUM: Aktiviert
 

Prozesse: 0

(No malicious items detected)
 

Module: 0

(No malicious items detected)
 

Registrierungsschlüssel: 6

PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}, In Quarantäne, [e9c997057b0033034978f8bd27db2ed2], 

PUP.Optional.HDVidCndec.A, HKLM\SOFTWARE\WOW6432NODE\HDvid Codec V6.0, In Quarantäne, [654dc2dafd7e25117f399a3c4eb4b14f], 

PUP.Optional.Feven.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-3\SOFTWARE\APPDATALOW\SOFTWARE\Feven 2.5, Löschen bei Neustart, [11a13c601962b87e626f22b344be7987], 

PUP.Optional.PlusHD.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-3\SOFTWARE\APPDATALOW\SOFTWARE\Plus-HD-2.2, Löschen bei Neustart, [2c8666360873ab8b4b58884538ca0df3], 

PUP.Optional.Ciuvo.A, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-3\SOFTWARE\MICROSOFT\INTERNET EXPLORER\DOMSTORAGE\ciuvo.com, Löschen bei Neustart, [fcb6a0fc710a67cf5af49f17f40e9070], 

PUP.Optional.SuperFish.A, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-3\SOFTWARE\MICROSOFT\INTERNET EXPLORER\DOMSTORAGE\superfish.com, Löschen bei Neustart, [f2c0e4b8037840f6c4896353ae547a86], 
 

Registrierungswerte: 2

PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}, Mysearchdial, In Quarantäne, [e9c997057b0033034978f8bd27db2ed2]

PUP.Optional.QuickStart.A, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-3\SOFTWARE\MOZILLA\EXTENDS|appid, quick_start@gmail.com, Löschen bei Neustart, [367c85173d3ebe78125a3e7a62a035cb]
 

Registrierungsdaten: 1

PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Ersetzt,[ac066d2f9fdc4ee8510031651be952ae]
 

Ordner: 0

(No malicious items detected)
 

Dateien: 1

PUP.Optional.SmartBar, C:\Windows\Installer\MSI1015.tmp, In Quarantäne, [436fbddfb0cb270f81affe3035cb639d], 
 

Physische Sektoren: 0

(No malicious items detected)
 
 

(end)

Code:

ESETSmartInstaller@High as downloader log:

all ok

ESETSmartInstaller@High as downloader log:

all ok

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.7587

# api_version=3.0.2

# EOSSerial=ffe244d527e7c54abb0d5a62572d8424

# engine=19064

# end=finished

# remove_checked=false

# archives_checked=true

# unwanted_checked=true

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2014-07-09 07:47:50

# local_time=2014-07-09 09:47:50 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# lang=1031

# osver=6.2.9200 NT 

# compatibility_mode_1='Avira Desktop'

# compatibility_mode=1810 16777213 100 100 13836 34856892 0 0

# compatibility_mode_1=''

# compatibility_mode=5893 16776574 100 94 9156474 32218745 0 0

# scanned=163804

# found=135

# cleaned=0

# scan_time=3361

sh=BA8348DE19AF57870C0C3FDD2E45A38DD3142FE4 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\click-n-mark-5\45182.xpi.vir"

sh=6965D3FB91F97659F6BE8F2AA0BD50B236EE3972 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\HDvid Codec V6.0\45971.xpi.vir"

sh=2B494D322B2CB30DAB95FD9181CB8609676C8951 ft=1 fh=6f5e9ef43a516102 vn="Win32/Toolbar.CrossRider.Q evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\HDvid Codec V6.0\utils.exe.vir"

sh=AFDC90D93584CB36FFAC62B8224E4B56D399789B ft=1 fh=184bf1af47e40ccd vn="Win32/Packed.ScrambleWrapper.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\HDvidCodec.com\HDvidCodecIE.exe.vir"

sh=B9AE60BC8151665CBD16E57FC89210261E7918D8 ft=1 fh=e96d86828d666d4e vn="Win32/Packed.ScrambleWrapper.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\HDvidCodec.com\hdvidextsetup.exe.vir"

sh=C01E55536CE063A3AD17513FD7CAF46323A93BBB ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\MediaPlayerplus\54246.crx.vir"

sh=D912B10B787E799DDFD38248B6D3BCEA41BBB5E7 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\MediaPlayerplus\54246.xpi.vir"

sh=FDA8505DD607B974C832A3AD139687EDB2A89E5B ft=1 fh=adcc2a161cc8c55f vn="Variante von Win32/Packed.VMDetector.E evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\MediaPlayerplus\utils.exe.vir"

sh=8E6A6992A3C7FEC4000FA1A4D764DD597109E0B5 ft=1 fh=c71c0011cd00713e vn="Win32/NextLive.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Mobogenie\nengine.dll.vir"

sh=63B12CC74709949A898CAE5C352AC875FC011787 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-2.2\33036.crx.vir"

sh=850D43D83BCCC7AC32B6309C363BD31590F5919B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-2.2\33036.xpi.vir"

sh=BF70F55F165966A6F6B8CB3EC98FD015187CDEE0 ft=1 fh=6c1ae11ac5fc7121 vn="Variante von Win32/Toolbar.CrossRider.V evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-2.2\Plus-HD-2.2-bg.exe.vir"

sh=9A02BF450CAA8E0623E7183DFD3814E7381079A8 ft=1 fh=df0f09567720cff3 vn="Variante von Win32/Toolbar.CrossRider.AA evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-2.2\Plus-HD-2.2-buttonutil.exe.vir"

sh=7ECC99C45B856C7995CF55497CC65DE7A31F63FD ft=1 fh=3fb6d963abe5dcf8 vn="Variante von Win64/Toolbar.Crossrider.C evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-2.2\Plus-HD-2.2-buttonutil64.exe.vir"

sh=E8A50F19A2B467710EC3FEC784B210692F528C2E ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-2.5\33438.crx.vir"

sh=A4BFD809873E09D63CBB41E2BC28F8AF90478AB1 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-2.5\33438.xpi.vir"

sh=95D8C7F2851240F836D46EBD0DCB0BBAE3C9C3C8 ft=1 fh=c39b2415a29978f2 vn="Variante von Win32/ELEX.AD evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\IePluginService\PluginService.exe.vir"

sh=8E6A6992A3C7FEC4000FA1A4D764DD597109E0B5 ft=1 fh=c71c0011cd00713e vn="Win32/NextLive.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Witali\AppData\Local\genienext\nengine.dll.vir"

sh=9D7E00EC736140394D5885417303D94D44553A41 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\Extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\194.js.vir"

sh=558386320B8441891EF80A69E8986B4D737DDFDF ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\Extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\91.js.vir"

sh=731FD074CCE94C1B6EE53BFE5E02E87457E32CA6 ft=1 fh=88eaa63364a03904 vn="Win32/Thinknice.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Witali\AppData\Roaming\SupTab\SupTab.dll.vir"

sh=B5ED1E639B7D9AD3C0F3C81E5AA2E9F88DDFEB65 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\102_dealply_m.js.vir"

sh=0B21E41A47E579081215969619861996F43524B1 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\105_corticas_m.js.vir"

sh=7F7359D9F0900191297BFDF5B85D5CDF588CD9EA ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\117_coupons_intext_ads_5_m.js.vir"

sh=FE3704EEF2BFB9DCA552518E7AEC9D6AFC1ED15C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\119_similar_web_m.js.vir"

sh=35CE3B76158991DDEA79CAF0C1F826A7EE18A820 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\120_luck_m.js.vir"

sh=E106EF12FBA54AD37717391E3A2A8B7416B0A30E ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\123_intext_adv_m.js.vir"

sh=6376FE6DF3E7E394FAE45C47A1FDE1CF41CAFBFD ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\124_superfish_no_search_no_coupons_m.js.vir"

sh=D295E3F253D0942BD3114F61DEF5D78DD0FC5BFB ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\125_arcadi2_m.js.vir"

sh=3CFE90E3825BB08EB9B4222552FAC05360188207 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\126_revizer_ws_m.js.vir"

sh=031F6CD140ED363E0F137E627AE1FE4DED5714E2 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\127_revizer_p_m.js.vir"

sh=97C406784CD0DEA751BE4E02EB82633F1F88CA1F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\128_superfish_pricora_m.js.vir"

sh=BB2946641B9FEB2F76D281220A52220336E454E1 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\135_arcadi3_m.js.vir"

sh=8BD506BDCB470B73FE581B4DA1769AD9FBCAF0D8 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\138_getdeal_m.js.vir"

sh=90A4F559561CF603A203F93D56C80B17B8152325 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\141_corticas_ru_m.js.js.vir"

sh=8395A2B6D59D2F3EDDCFC863DDA2F674396DC74C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\142_intext_fa_m.js.vir"

sh=441E98540BDEC21B7E534C2B317AE91925F6CEE7 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\159_cortica_rollover_m.js.vir"

sh=C8B01A1511A63AEC3D40B1D045034D76B1E85EFD ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\171_arcadi2_sourceID_m.js.vir"

sh=078C314715CCC0DE7547172AD4B810FD754115C6 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\174_arcadi_serp_dynamic_id_m.js.vir"

sh=220B01F705C009D135199A26C85EB536B16C9D6E ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\175_coolmirage_m.js.vir"

sh=CFFCA6A4EE3A0DF2319440491BB297ADEC6EEF37 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\178_revizer_ws_dynamic_m.js.vir"

sh=ADB54DE323736C99B4191A45B478B70DF1B7B945 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\179_revizer_p_dynamic_m.js.vir"

sh=C9A8D5AE55FA65E00EE75767C5D2E9B56041858D ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\180_bpo_serp_m.js.vir"

sh=24E6E5A06D24A5CC24C0B705FDB089FD4FEC70AC ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\184_noproblemppc_m.js.vir"

sh=8D569DDCE3A3E2CB97D920A1744F1AE16C2CE3B3 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\189_active_sanity.js.vir"

sh=6B3C17F9D4BD40BFCF87831196C40DBA3C4DB14C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\190_pops_5_m.js.vir"

sh=9F07ACC96BC246F25975479E9382CDF88E7D8711 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\191_ciuvo_m.js.vir"

sh=F913C9EE03B4CCE8680961DBF505FA17BAC140F0 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\192_revizer_ws_dynamic_b2b_m.js.vir"

sh=28F70DF1D28964084CCA8382AE4ADA97EF0C4C0A ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\193_revizer_p_dynamic_b2b_m.js.vir"

sh=CE36251B85631AF0D145BF086D14272593AB253A ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\194_retargeting_bi_m.js.js.vir"

sh=71B07387F9271CF80E8CC3C65ACB4873025E47BC ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\195_icm_convertmedia_m.js.vir"

sh=0A113BDC19C5B96609992E6C9D972B814B918109 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\197_kreapixel_pops_m.js.vir"

sh=9A67AB016B12405F2FF8E65A64A035E46421F243 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\198_superfish_no_search_no_coupons_plushd_m.js.vir"

sh=6DF0914CB2A51AA8E7F1BDDEC414B8969C38A6F7 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\199_superfish_no_coupons_plushd_m.js.vir"

sh=61DB672F16D1D9053F6B8D591E51C53BA3165770 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\200_foxydeal_m.js.vir"

sh=392B3EB529AF22E57C2AC4076E7702176010694C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\204_pricedetect_m.js.vir"

sh=CEFE3720E5F8912F0E75E7966BA64F23C0DAA130 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\91_monetizationLoader.js.js.vir"

sh=0C5AC30A082628E85A9A8B68EF5E5EAFA46F0CC7 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\93_superfish_no_coupons_m.js.vir"

sh=50734BE26157FCF2996922F76B9AF0A0088EFD2A ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\2sfzx2xn.default-1387402583828\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\91_monetizationLoader.js.js"

sh=723D315206A52C4CE6BE51080EAE93F13ACDBD86 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\2sfzx2xn.default-1387402583828\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\194_retargeting_bi_m.js.js"

sh=50734BE26157FCF2996922F76B9AF0A0088EFD2A ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\2sfzx2xn.default-1387402583828\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\91_monetizationLoader.js.js"

sh=B5ED1E639B7D9AD3C0F3C81E5AA2E9F88DDFEB65 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\102_dealply_m.js"

sh=FC28D62EDB6C0C353E97185BB4B6DC87F5EDED14 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\103_intext_5_m.js"

sh=1AA56806D2545B3773D7C5CCEAE82353BDBB575F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\104_jollywallet_m.js"

sh=0B21E41A47E579081215969619861996F43524B1 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\105_corticas_m.js"

sh=30AFCC1D03C04E68202593C239C4964A29BA2E15 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\108_icm_m.js"

sh=7F7359D9F0900191297BFDF5B85D5CDF588CD9EA ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\117_coupons_intext_ads_5_m.js"

sh=FE3704EEF2BFB9DCA552518E7AEC9D6AFC1ED15C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\119_similar_web_m.js"

sh=35CE3B76158991DDEA79CAF0C1F826A7EE18A820 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\120_luck_m.js"

sh=AB97A715437A6FC107817A76C99ED8FBCC81BBAD ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\123_intext_adv_m.js"

sh=B0DF9F21E3E69C188775A6F9C466B19932C9238A ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\124_superfish_no_search_no_coupons_m.js"

sh=D295E3F253D0942BD3114F61DEF5D78DD0FC5BFB ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\125_arcadi2_m.js"

sh=3CFE90E3825BB08EB9B4222552FAC05360188207 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\126_revizer_ws_m.js"

sh=031F6CD140ED363E0F137E627AE1FE4DED5714E2 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\127_revizer_p_m.js"

sh=28ECD06AF56EB424F74BB63563BC79E57C15C2D9 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\128_superfish_pricora_m.js"

sh=BB2946641B9FEB2F76D281220A52220336E454E1 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\135_arcadi3_m.js"

sh=8BD506BDCB470B73FE581B4DA1769AD9FBCAF0D8 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\138_getdeal_m.js"

sh=90A4F559561CF603A203F93D56C80B17B8152325 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\141_corticas_ru_m.js.js"

sh=8395A2B6D59D2F3EDDCFC863DDA2F674396DC74C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\142_intext_fa_m.js"

sh=943F60E8E3F306CF4EE6E844D06FAC7552EE1856 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\155_ibario_pops_m.js"

sh=0CEB1A073B87956FD1F21F8425B8F76015B1BCD8 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\158_50onred_ads_only_no_fb_m.js"

sh=441E98540BDEC21B7E534C2B317AE91925F6CEE7 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\159_cortica_rollover_m.js"

sh=C8B01A1511A63AEC3D40B1D045034D76B1E85EFD ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\171_arcadi2_sourceID_m.js"

sh=078C314715CCC0DE7547172AD4B810FD754115C6 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\174_arcadi_serp_dynamic_id_m.js"

sh=220B01F705C009D135199A26C85EB536B16C9D6E ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\175_coolmirage_m.js"

sh=CFFCA6A4EE3A0DF2319440491BB297ADEC6EEF37 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\178_revizer_ws_dynamic_m.js"

sh=ADB54DE323736C99B4191A45B478B70DF1B7B945 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\179_revizer_p_dynamic_m.js"

sh=73374EAD120BC84FC9C0C827196BCAEB3C20EEB6 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\180_bpo_serp_m.js"

sh=24E6E5A06D24A5CC24C0B705FDB089FD4FEC70AC ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\184_noproblemppc_m.js"

sh=C450AA599E6408FB93F66538C89B8D8B7799642D ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\189_active_sanity.js"

sh=6B3C17F9D4BD40BFCF87831196C40DBA3C4DB14C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\190_pops_5_m.js"

sh=9F07ACC96BC246F25975479E9382CDF88E7D8711 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\191_ciuvo_m.js"

sh=4629F05E0B2C52EA9DD470252C07E2B5EB1FCDF7 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\192_revizer_ws_dynamic_b2b_m.js"

sh=D164DC4FA3FF51AB25A3EA8E4E916AC5D11E69DD ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\193_revizer_p_dynamic_b2b_m.js"

sh=F614992AE877F819DE4A2E45D424DDF5A0DC6F4C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\194_retargeting_bi_m.js.js"

sh=25D0BBF53504FF0F057FCD6656A4672F28744BCF ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\91_monetizationLoader.js.js"

sh=0C5AC30A082628E85A9A8B68EF5E5EAFA46F0CC7 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\93_superfish_no_coupons_m.js"

sh=B5ED1E639B7D9AD3C0F3C81E5AA2E9F88DDFEB65 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\102_dealply_m.js"

sh=0B21E41A47E579081215969619861996F43524B1 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\105_corticas_m.js"

sh=7F7359D9F0900191297BFDF5B85D5CDF588CD9EA ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\117_coupons_intext_ads_5_m.js"

sh=FE3704EEF2BFB9DCA552518E7AEC9D6AFC1ED15C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\119_similar_web_m.js"

sh=35CE3B76158991DDEA79CAF0C1F826A7EE18A820 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\120_luck_m.js"

sh=E106EF12FBA54AD37717391E3A2A8B7416B0A30E ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\123_intext_adv_m.js"

sh=6376FE6DF3E7E394FAE45C47A1FDE1CF41CAFBFD ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\124_superfish_no_search_no_coupons_m.js"

sh=D295E3F253D0942BD3114F61DEF5D78DD0FC5BFB ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\125_arcadi2_m.js"

sh=3CFE90E3825BB08EB9B4222552FAC05360188207 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\126_revizer_ws_m.js"

sh=031F6CD140ED363E0F137E627AE1FE4DED5714E2 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\127_revizer_p_m.js"

sh=97C406784CD0DEA751BE4E02EB82633F1F88CA1F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\128_superfish_pricora_m.js"

sh=BB2946641B9FEB2F76D281220A52220336E454E1 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\135_arcadi3_m.js"

sh=8BD506BDCB470B73FE581B4DA1769AD9FBCAF0D8 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\138_getdeal_m.js"

sh=90A4F559561CF603A203F93D56C80B17B8152325 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\141_corticas_ru_m.js.js"

sh=8395A2B6D59D2F3EDDCFC863DDA2F674396DC74C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\142_intext_fa_m.js"

sh=441E98540BDEC21B7E534C2B317AE91925F6CEE7 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\159_cortica_rollover_m.js"

sh=C8B01A1511A63AEC3D40B1D045034D76B1E85EFD ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\171_arcadi2_sourceID_m.js"

sh=078C314715CCC0DE7547172AD4B810FD754115C6 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\174_arcadi_serp_dynamic_id_m.js"

sh=220B01F705C009D135199A26C85EB536B16C9D6E ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\175_coolmirage_m.js"

sh=CFFCA6A4EE3A0DF2319440491BB297ADEC6EEF37 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\178_revizer_ws_dynamic_m.js"

sh=ADB54DE323736C99B4191A45B478B70DF1B7B945 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\179_revizer_p_dynamic_m.js"

sh=C9A8D5AE55FA65E00EE75767C5D2E9B56041858D ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\180_bpo_serp_m.js"

sh=24E6E5A06D24A5CC24C0B705FDB089FD4FEC70AC ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\184_noproblemppc_m.js"

sh=C98AEA90C3721B5A74EEAA39FD98797405C0187B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\189_active_sanity.js"

sh=6B3C17F9D4BD40BFCF87831196C40DBA3C4DB14C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\190_pops_5_m.js"

sh=9F07ACC96BC246F25975479E9382CDF88E7D8711 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\191_ciuvo_m.js"

sh=F913C9EE03B4CCE8680961DBF505FA17BAC140F0 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\192_revizer_ws_dynamic_b2b_m.js"

sh=28F70DF1D28964084CCA8382AE4ADA97EF0C4C0A ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\193_revizer_p_dynamic_b2b_m.js"

sh=CE36251B85631AF0D145BF086D14272593AB253A ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\194_retargeting_bi_m.js.js"

sh=DA00D43895202044AAF7EFA3BD388B190B155367 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\195_icm_convertmedia_m.js"

sh=0A113BDC19C5B96609992E6C9D972B814B918109 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\197_kreapixel_pops_m.js"

sh=9A67AB016B12405F2FF8E65A64A035E46421F243 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\198_superfish_no_search_no_coupons_plushd_m.js"

sh=6DF0914CB2A51AA8E7F1BDDEC414B8969C38A6F7 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\199_superfish_no_coupons_plushd_m.js"

sh=61DB672F16D1D9053F6B8D591E51C53BA3165770 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\200_foxydeal_m.js"

sh=392B3EB529AF22E57C2AC4076E7702176010694C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\204_pricedetect_m.js"

sh=25D0BBF53504FF0F057FCD6656A4672F28744BCF ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\91_monetizationLoader.js.js"

sh=0C5AC30A082628E85A9A8B68EF5E5EAFA46F0CC7 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\93_superfish_no_coupons_m.js"

sh=3947DC53990D4C0F5E5F655818233800CF9F601B ft=0 fh=0000000000000000 vn="Variante von MSIL/Toolbar.Linkury.C evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\Installer\f762f.msi"

TFC - Temp File Cleaner

Lade dir

TFC (TempFileCleaner von Oldtimer) herunter und speichere es auf den Desktop.

Öffne die TFC.exe.
Vista und Win 7 User mit Rechtsklick "als Administrator starten".
Schließe alle anderen Programme.
Drücke auf den Button Start.
Falls du zu einem Neustart aufgefordert wirst, bestätige diesen.

Sieht soweit ok aus :daumenhoc

Wegen Cookies und anderer Dinge im Web: Um die Pest von vornherein zu blocken (also TrackingCookies, Werbebanner etc.) müsstest du dir mal sowas wie MVPS Hosts File anschauen => Blocking Unwanted Parasites with a Hosts File - sinnvollerweise solltest du alle 4 Wochen mal bei MVPS nachsehen, ob er eine neue Hosts Datei herausgebracht hat. Ist aber nur optional. Um Usertracking zu verhindern kann man gut die Firefox-Erweiterung Ghostery verwenden.

Info: Cookies sind keine Schädlinge direkt, aber es besteht die Gefahr der missbräuchlichen Verwendung (eindeutige Wiedererkennung zB für gezielte Werbung o.ä. => HTTP-Cookie )

Ansonsten gibt es noch gute Cookiemanager, Erweiterungen für den Firefox zB wäre da CookieCuller
Wenn du aber damit leben kannst, dich bei jeder Browsersession überall neu einzuloggen (zB Facebook, Ebay, GMX, oder auch Trojaner-Board) dann stell den Browser einfach so ein, dass einfach alles beim Beenden des Browser inkl. Cookies gelöscht wird.

Ist dein System nun wieder in Ordnung oder gibt's noch andere Funde oder Probleme?