Vielen Dank für die Hinweise!
Viele Grüße,
Tanja
Beiträge von Tanja007
-
-
Danke! Jetzt funktioniert es.
-
Ich habe alles gelöscht, leider ist das Problem noch nicht behoben. Hat jemand noch ne Idee?
-
Hallo bigpen,
vielen Dank für deine Antwort.
Hier ist die Logdatei vom AdwCleaner:
Code
Alles anzeigen# AdwCleaner v4.105 - Bericht erstellt am 17/12/2014 um 04:15:03 # Aktualisiert 08/12/2014 von Xplode # Database : 2014-12-16.1 [Live] # Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits) # Benutzername : TZ-Laptop - TZ-LAPTOP-TOSH # Gestartet von : C:\Users\TZ-Laptop\Downloads\adwcleaner_4.105.exe # Option : Suchen ***** [ Dienste ] ***** Dienst Gefunden : DefaultTabSearch Dienst Gefunden : DefaultTabUpdate Dienst Gefunden : TTNFD ***** [ Dateien / Ordner ] ***** Datei Gefunden : C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.olark.com_0.localstorage-journal Datei Gefunden : C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\defaulttab.config Datei Gefunden : C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\Extensions\addon@defaulttab.com.xpi Datei Gefunden : C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\searchplugins\11-suche.xml Datei Gefunden : C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\searchplugins\ask-search.xml Datei Gefunden : C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\searchplugins\astromenda.xml Datei Gefunden : C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\searchplugins\search-here.xml Datei Gefunden : C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\user.js Datei Gefunden : C:\windows\System32\roboot64.exe Ordner Gefunden : C:\Program Files (x86)\defaulttab Ordner Gefunden : C:\ProgramData\apn Ordner Gefunden : C:\ProgramData\dtdata Ordner Gefunden : C:\Users\Public\Util Ordner Gefunden : C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc Ordner Gefunden : C:\Users\TZ-Laptop\AppData\Local\PriceFountain Ordner Gefunden : C:\Users\TZ-Laptop\AppData\Roaming\defaulttab Ordner Gefunden : C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\Extensions\{8dc5c42e-9204-2a64-8b97-fa94ff8a241f} Ordner Gefunden : C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\Extensions\addon@defaulttab.com.xpi Ordner Gefunden : C:\Users\TZ-Laptop\AppData\Roaming\PriceFountain Ordner Gefunden : C:\Users\TZ-Laptop\AppData\Roaming\Systweak Ordner Gefunden : C:\Users\TZ-Laptop\AppData\Roaming\wse_astromenda Ordner Gefunden : C:\windows\SysWOW64\config\systemprofile\AppData\Roaming\defaulttab ***** [ Tasks ] ***** Task Gefunden : WSE_Astromenda Task Gefunden : Price Fountain Task Gefunden : DefaultCheck Task Gefunden : DefaultReg ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\DefaultTab Schlüssel Gefunden : HKCU\Software\BRS Schlüssel Gefunden : HKCU\Software\Conduit Schlüssel Gefunden : HKCU\Software\Default Tab Schlüssel Gefunden : HKCU\Software\DefaultTab Schlüssel Gefunden : HKCU\Software\Google\Chrome\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae Schlüssel Gefunden : HKCU\Software\InstallCore Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{c1d89ae7-449d-4929-b24b-fded04adbe06} Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CE1AA41E-920B-4925-A6A2-A8D104E9BFDD} Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7F6AFBF1-E065-4627-A2FD-810366367D01} Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7F6AFBF1-E065-4627-A2FD-810366367D01} Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} Schlüssel Gefunden : HKCU\Software\StormWatch Schlüssel Gefunden : HKCU\Software\systweak Schlüssel Gefunden : [x64] HKCU\Software\BRS Schlüssel Gefunden : [x64] HKCU\Software\Conduit Schlüssel Gefunden : [x64] HKCU\Software\Default Tab Schlüssel Gefunden : [x64] HKCU\Software\DefaultTab Schlüssel Gefunden : [x64] HKCU\Software\InstallCore Schlüssel Gefunden : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2E00D31D-D171-423D-836D-1A4D7EA7F1A9} Schlüssel Gefunden : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{c1d89ae7-449d-4929-b24b-fded04adbe06} Schlüssel Gefunden : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CE1AA41E-920B-4925-A6A2-A8D104E9BFDD} Schlüssel Gefunden : [x64] HKCU\Software\StormWatch Schlüssel Gefunden : [x64] HKCU\Software\systweak Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{38495740-0035-4471-851E-F5BBB86AB085} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{72D89EBF-0C5D-4190-91FD-398E45F1D007} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{9CB2CD61-FFA0-406C-9D2D-8FDE6F4A4D8A} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\DefaultTabBHO.DLL Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\DefaultTabBHO.DefaultTabBrowser Schlüssel Gefunden : HKLM\SOFTWARE\Classes\DefaultTabBHO.DefaultTabBrowser.1 Schlüssel Gefunden : HKLM\SOFTWARE\Classes\DefaultTabBHO.DefaultTabBrowserActiveX Schlüssel Gefunden : HKLM\SOFTWARE\Classes\DefaultTabBHO.DefaultTabBrowserActiveX.1 Schlüssel Gefunden : HKLM\SOFTWARE\Default Tab Schlüssel Gefunden : HKLM\SOFTWARE\DefaultTab Schlüssel Gefunden : HKLM\SOFTWARE\Google\Chrome\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc Schlüssel Gefunden : HKLM\SOFTWARE\Google\Chrome\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{c1d89ae7-449d-4929-b24b-fded04adbe06} Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7F6AFBF1-E065-4627-A2FD-810366367D01} Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A1E28287-1A31-4B0F-8D05-AA8C465D3C5A} Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{CD95D125-2992-4858-B3EF-5F6FB52FBAD6} Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DefaultTab Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DefaultTab Chrome Schlüssel Gefunden : HKLM\SOFTWARE\systweak Schlüssel Gefunden : HKLM\SOFTWARE\TermTutor Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{1F8EDE97-36D5-422A-B8F0-9406E2D87C60} Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472F-A0FF-E1416B8B2E3A} Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2E00D31D-D171-423D-836D-1A4D7EA7F1A9} Wert Gefunden : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [termtutor@termtutor.com] ***** [ Browser ] ***** -\\ Internet Explorer v11.0.9600.17496 Einstellung Gefunden : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page] - hxxp://astromenda.com/?f=1&a=ast_ir_14_43_ff&cd=2XzuyEtN2Y1L1Qzu0BzzyBtD0FyE0CzztC0EyCzy0B0Bzy0AtN0D0Tzu0StCtDtByCtN1L2XzutAtFyDtFtCtFyEtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyCtB0AtByCyDyEyBtGtB0FyDtBtGtD0Azy0BtG0BzzyC0BtGyDzz0F0A0D0AyE0DyC0A0F0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyDtAyC0Azy0Azy0EtG0FyEyE0EtGyEyEtCyCtGzyzyyEyCtGtAzzyCyE0ByBtDtAyC0A0F0F2Q&cr=952292191&ir= Einstellung Gefunden : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL] - hxxp://isearch.glarysoft.com/?src=iehome -\\ Mozilla Firefox v34.0.5 (x86 de) [n3btdyw5.default] - Zeile gefunden : user_pref("extensions.astrmndasr.hmpgUrl", "hxxp://astromenda.com/?f=1&a=ast_ir_14_43_ff&cd=2XzuyEtN2Y1L1Qzu0BzzyBtD0FyE0CzztC0EyCzy0B0Bzy0AtN0D0Tzu0StCtDtByCtN1L2XzutAtFyDtFtCtFyEtN1L1CzutCyEtBzytDyD[...] [n3btdyw5.default] - Zeile gefunden : user_pref("extensions.astrmndasr.newTabUrl", "hxxp://astromenda.com/?f=2&a=ast_ir_14_43_ff&cd=2XzuyEtN2Y1L1Qzu0BzzyBtD0FyE0CzztC0EyCzy0B0Bzy0AtN0D0Tzu0StCtDtByCtN1L2XzutAtFyDtFtCtFyEtN1L1CzutCyEtBzytD[...] [n3btdyw5.default] - Zeile gefunden : user_pref("extensions.astrmndasr.prtnrId", "WSE_Astromenda"); [n3btdyw5.default] - Zeile gefunden : user_pref("extensions.astrmndasr.srchPrvdr", "Astromenda"); [n3btdyw5.default] - Zeile gefunden : user_pref("extensions.astrmndasr.tlbrSrchUrl", "hxxp://astromenda.com/?f=3&a=ast_ir_14_43_ff&cd=2XzuyEtN2Y1L1Qzu0BzzyBtD0FyE0CzztC0EyCzy0B0Bzy0AtN0D0Tzu0StCtDtByCtN1L2XzutAtFyDtFtCtFyEtN1L1CzutCyEtBzy[...] -\\ Google Chrome v39.0.2171.95 [C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Web data] - Gefunden [Search Provider] : hxxp://isearch.glarysoft.com/?q={searchTerms}&src=gcsearch [C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Web data] - Gefunden [Search Provider] : hxxp://astromenda.com/results.php?f=4&q={searchTerms}&a=ast_ir_14_43_ff&cd=2XzuyEtN2Y1L1Qzu0BzzyBtD0FyE0CzztC0EyCzy0B0Bzy0AtN0D0Tzu0StCtDtByCtN1L2XzutAtFyDtFtCtFyEtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyCtB0AtByCyDyEyBtGtB0FyDtBtGtD0Azy0BtG0BzzyC0BtGyDzz0F0A0D0AyE0DyC0A0F0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyDtAyC0Azy0Azy0EtG0FyEyE0EtGyEyEtCyCtGzyzyyEyCtGtAzzyCyE0ByBtDtAyC0A0F0F2Q&cr=952292191&ir= [C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\preferences] - Gefunden [Extension] : kdidombaedgpfiiedeimiebkmbilgmlc [C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\preferences] - Gefunden [Startup_URLs] : hxxp://astromenda.com/?f=7&a=ast_ir_14_43_ff&cd=2XzuyEtN2Y1L1Qzu0BzzyBtD0FyE0CzztC0EyCzy0B0Bzy0AtN0D0Tzu0StCtDtByCtN1L2XzutAtFyDtFtCtFyEtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyCtB0AtByCyDyEyBtGtB0FyDtBtGtD0Azy0BtG0BzzyC0BtGyDzz0F0A0D0AyE0DyC0A0F0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyDtAyC0Azy0Azy0EtG0FyEyE0EtGyEyEtCyCtGzyzyyEyCtGtAzzyCyE0ByBtDtAyC0A0F0F2Q&cr=952292191&ir= ************************* AdwCleaner[R0].txt - [10367 octets] - [17/12/2014 04:06:05] AdwCleaner[R1].txt - [10230 octets] - [17/12/2014 04:15:03] ########## EOF - C:\AdwCleaner\AdwCleaner[R1].txt - [10291 octets] ##########
Hier ist die Logdatei von MalwareBytes:Code
Alles anzeigenMalwarebytes Anti-Malware http://www.malwarebytes.org Scan Date: 17.12.2014 Scan Time: 04:30:03 Logfile: hola.txt Administrator: Yes Version: 2.00.4.1028 Malware Database: v2014.12.16.05 Rootkit Database: v2014.12.14.01 License: Trial Malware Protection: Enabled Malicious Website Protection: Enabled Self-protection: Disabled OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: TZ-Laptop Scan Type: Threat Scan Result: Completed Objects Scanned: 389464 Time Elapsed: 40 min, 46 sec Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Enabled PUM: Enabled Processes: 1 PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe, 1916, , [4342402345374fe753154d5a8e76728e] Modules: 0 (No malicious items detected) Registry Keys: 38 PUP.Optional.DefaultTab, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\DefaultTabSearch, , [daabe08305772e08a75564bb8c79966a], PUP.Optional.DefaultTab.A, HKLM\SOFTWARE\CLASSES\APPID\{38495740-0035-4471-851E-F5BBB86AB085}, , [dda80a59cdafb284ee75eceb27db5aa6], PUP.Optional.DefaultTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{38495740-0035-4471-851E-F5BBB86AB085}, , [dda80a59cdafb284ee75eceb27db5aa6], PUP.Optional.DefaultTab.A, HKLM\SOFTWARE\CLASSES\APPID\{72D89EBF-0C5D-4190-91FD-398E45F1D007}, , [7a0b3f24cbb155e1d1934f8813ef4cb4], PUP.Optional.DefaultTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{72D89EBF-0C5D-4190-91FD-398E45F1D007}, , [7a0b3f24cbb155e1d1934f8813ef4cb4], PUP.Optional.DefaultTab.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{7F6AFBF1-E065-4627-A2FD-810366367D01}, , [ff86e281ed8fc76fc6cd8255e220619f], PUP.Optional.DefaultTab.A, HKU\S-1-5-21-3364865112-3343377762-37286677-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{7F6AFBF1-E065-4627-A2FD-810366367D01}, , [ff86e281ed8fc76fc6cd8255e220619f], PUP.Optional.DefaultTab.A, HKU\S-1-5-21-3364865112-3343377762-37286677-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{7F6AFBF1-E065-4627-A2FD-810366367D01}, , [ff86e281ed8fc76fc6cd8255e220619f], PUP.Optional.DefaultTab.A, HKU\S-1-5-21-3364865112-3343377762-37286677-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{7F6AFBF1-E065-4627-A2FD-810366367D01}, , [ff86e281ed8fc76fc6cd8255e220619f], PUP.Optional.DefaultTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{7F6AFBF1-E065-4627-A2FD-810366367D01}, , [ff86e281ed8fc76fc6cd8255e220619f], PUP.Optional.DefaultTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B2D33ED6-EBBD-467C-BF6F-F175D9B51363}, , [ceb75112dba141f5194d7166867cd42c], PUP.Optional.DefaultTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BAD84EE2-624D-4e7c-A8BB-41EFD720FD77}, , [dca9bca791ebb77fb5b28453f70bf10f], PUP.Optional.DefaultTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{A1E28287-1A31-4B0F-8D05-AA8C465D3C5A}, , [b4d15b08601c84b2b7ae5c7bfd059967], PUP.Optional.DefaultTab.A, HKLM\SOFTWARE\CLASSES\DefaultTabBHO.DefaultTabBrowserActiveX, , [691c0e55d1ab3cfa36e3f3a4a55e7090], PUP.Optional.DefaultTab.A, HKLM\SOFTWARE\CLASSES\DefaultTabBHO.DefaultTabBrowserActiveX.1, , [176efa69f983310521f841564cb7ee12], PUP.Optional.DefaultTab.A, HKLM\SOFTWARE\CLASSES\APPID\DefaultTabBHO.DLL, , [b7ce97cc8eee86b08692e7b0976c58a8], PUP.Optional.Astromenda.A, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\pfkfdlcdbajamklbneflfbcmfgddmpae, , [97ee5b08e29a40f6bde317b88e76ab55], PUP.Optional.DefaultTab.A, HKLM\SOFTWARE\WOW6432NODE\Default Tab, , [592c065d1567c4724cfe381cde259b65], PUP.Optional.DefaultTab.A, HKLM\SOFTWARE\WOW6432NODE\DefaultTab, , [b8cd154e74083df900a2b69fb44fcc34], PUP.Optional.DefaultTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\DefaultTabBHO.DefaultTabBrowserActiveX, , [a7dec99a2b51dd5943d6aceb1ae92ad6], PUP.Optional.DefaultTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\DefaultTabBHO.DefaultTabBrowserActiveX.1, , [34514320e69673c31dfcd2c53cc7857b], PUP.Optional.DefaultTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\DefaultTabBHO.DLL, , [cbba580bc0bc191d997f0c8baa5922de], PUP.Optional.DefaultTab.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\kdidombaedgpfiiedeimiebkmbilgmlc, , [e3a264ff453774c2d91cd69c60a3de22], PUP.Optional.Astromenda.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\pfkfdlcdbajamklbneflfbcmfgddmpae, , [ccb9224185f73501aef2bb14d331bb45], PUP.Optional.SystemSpeedup, HKLM\SOFTWARE\WOW6432NODE\SYSTWEAK\ssd, , [7015ef748af241f589ceed821fe4c23e], PUP.Optional.DefaultTab.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\DefaultTabUpdate, , [4342402345374fe753154d5a8e76728e], PUP.Optional.TermTutor.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TTNFD, , [394cabb8592376c0dda00b574db65ca4], PUP.Optional.DefaultTab.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Default tab, , [3c494122daa251e54308470de81bd12f], PUP.Optional.DefaultTab.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DefaultTab, , [1e6722416c104de9554cbe978d76629e], PUP.Optional.DefaultTab.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\DefaultTab, , [cbba9cc7522af93d9a805c3bb84b738d], PUP.Optional.DefaultTab.A, HKU\S-1-5-21-3364865112-3343377762-37286677-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Default Tab, , [ee97a7bca7d5d85e92b9193b0ff4e719], PUP.Optional.DefaultTab.A, HKU\S-1-5-21-3364865112-3343377762-37286677-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DefaultTab, , [0f76d68d7dff36001a87a6afc340fc04], PUP.Optional.DefaultTab.A, HKU\S-1-5-21-3364865112-3343377762-37286677-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\DefaultTab, , [b4d198cbf08c7cbacd4d4f483ac9c13f], PUP.Optional.Astromenda.A, HKU\S-1-5-21-3364865112-3343377762-37286677-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\pfkfdlcdbajamklbneflfbcmfgddmpae, , [5332dd866d0fed492f72d5fad232fb05], PUP.Optional.InstallCore.A, HKU\S-1-5-21-3364865112-3343377762-37286677-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE\1I1T1Q1S, , [add8362d7dffdc5a151f6d2741c22ed2], PUP.Optional.InstallCore.A, HKU\S-1-5-21-3364865112-3343377762-37286677-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE, , [f68f6003463643f33f14ffab49bb7f81], PUP.Optional.SystemSpeedup, HKU\S-1-5-21-3364865112-3343377762-37286677-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SYSTWEAK\ssd, , [7d0840232d4fce680b4b412e22e1c43c], PUP.Optional.DefaultTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\DefaultTab Chrome, , [aed72c37443847ef0774bc7f877c0bf5], Registry Values: 3 PUP.Optional.TermTutor.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|termtutor@termtutor.com, C:\Program Files (x86)\Mozilla Firefox\extensions\termtutor@termtutor.com, , [7c0972f1c8b4ab8b6e0d6bf7956e4ab6] PUP.Optional.TermTutor.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TTNFD|ImagePath, system32\drivers\ttnfd.sys, , [394cabb8592376c0dda00b574db65ca4] PUP.Optional.InstallCore.A, HKU\S-1-5-21-3364865112-3343377762-37286677-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE|tb, 0R2Y1I1P1N0J1U1C, , [f68f6003463643f33f14ffab49bb7f81] Registry Data: 1 PUP.Optional.Astromenda.A, HKU\S-1-5-21-3364865112-3343377762-37286677-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://astromenda.com/?f=1&a=ast_ir_14_43_ff&cd=2XzuyEtN2Y1L1Qzu0BzzyBtD0FyE0CzztC0EyCzy0B0Bzy0AtN0D0Tzu0StCtDtByCtN1L2XzutAtFyDtFtCtFyEtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyCtB0AtByCyDyEyBtGtB0FyDtBtGtD0Azy0BtG0BzzyC0BtGyDzz0F0A0D0AyE0DyC0A0F0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyDtAyC0Azy0Azy0EtG0FyEyE0EtGyEyEtCyCtGzyzyyEyCtGtAzzyCyE0ByBtDtAyC0A0F0F2Q&cr=952292191&ir=, Good: (http://www.google.com), Bad: (http://astromenda.com/?f=1&a=ast_ir_14_43_ff&cd=2XzuyEtN2Y1L1Qzu0BzzyBtD0FyE0CzztC0EyCzy0B0Bzy0AtN0D0Tzu0StCtDtByCtN1L2XzutAtFyDtFtCtFyEtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyCtB0AtByCyDyEyBtGtB0FyDtBtGtD0Azy0BtG0BzzyC0BtGyDzz0F0A0D0AyE0DyC0A0F0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyDtAyC0Azy0Azy0EtG0FyEyE0EtGyEyEtCyCtGzyzyyEyCtGtAzzyCyE0ByBtDtAyC0A0F0F2Q&cr=952292191&ir=),,[d1b47ae94834b086ad164131b94c2ed2] Folders: 29 PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\css, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\css\jquery_ui, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\css\jquery_ui\images, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\engines_icons, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\injection, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\js, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\_locales, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\_locales\en, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab, , [8203ca9994e803337604d06b0df69e62], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab\DefaultTab, , [8203ca9994e803337604d06b0df69e62], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab\DefaultTab\Apps, , [8203ca9994e803337604d06b0df69e62], PUP.Optional.DefaultTab.A, C:\Program Files (x86)\DefaultTab, , [aed72c37443847ef0774bc7f877c0bf5], PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\WSE_Astromenda, , [e89daeb5dca057dfa92981bf847fe51b], PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\WSE_Astromenda\icons_3.5.1.4, , [e89daeb5dca057dfa92981bf847fe51b], PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\WSE_Astromenda\UpdateProc, , [e89daeb5dca057dfa92981bf847fe51b], PUP.Optional.PriceFountain.A, C:\Users\TZ-Laptop\AppData\Roaming\PriceFountain, , [d5b0a1c20f6d191d6dedf54ee91a4fb1], PUP.Optional.PriceFountain.A, C:\Users\TZ-Laptop\AppData\Roaming\PriceFountain\UpdateProc, , [d5b0a1c20f6d191d6dedf54ee91a4fb1], PUP.Optional.PriceFountain.A, C:\Users\TZ-Laptop\AppData\Local\PriceFountain, , [4f367ee594e874c209520043ae5505fb], PUP.Optional.PriceFountain.A, C:\Users\TZ-Laptop\AppData\Local\PriceFountain\logs, , [4f367ee594e874c209520043ae5505fb], PUP.Optional.DefaultTab.A, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\defaulttab, , [acd969fa6b114ee82a3d94b7a162659b], PUP.Optional.DefaultTab.A, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\defaulttab\defaulttab, , [acd969fa6b114ee82a3d94b7a162659b], PUP.Optional.DefaultTab.A, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\defaulttab\defaulttab\Apps, , [acd969fa6b114ee82a3d94b7a162659b], PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\extensions\{8dc5c42e-9204-2a64-8b97-fa94ff8a241f}, , [364f1a490973ea4c3cc293b8df2440c0], PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\extensions\{8dc5c42e-9204-2a64-8b97-fa94ff8a241f}\content, , [364f1a490973ea4c3cc293b8df2440c0], PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\extensions\{8dc5c42e-9204-2a64-8b97-fa94ff8a241f}\content\browser, , [364f1a490973ea4c3cc293b8df2440c0], PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\extensions\{8dc5c42e-9204-2a64-8b97-fa94ff8a241f}\content\external, , [364f1a490973ea4c3cc293b8df2440c0], Files: 132 PUP.Optional.DefaultTab, C:\Program Files (x86)\DefaultTab\DefaultTabSearch.exe, , [daabe08305772e08a75564bb8c79966a], PUP.Optional.DefaultTab, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab\DefaultTab\DefaultTabBHO.dll, , [1c69b4afa8d492a4204035ed42bfd62a], PUP.Optional.DefaultTab, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab\DefaultTab\DefaultTabStart.exe, , [a5e0fa697a0270c6540c6eb48d74718f], PUP.Optional.DefaultTab, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab\DefaultTab\DefaultTabWrap.dll, , [1174432055273ff71f417ea452af48b8], PUP.Optional.DefaultTab, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab\DefaultTab\DefaultTabWrap64.dll, , [652082e11b615fd76cf4ea38da277987], PUP.Optional.PriceFountain.A, C:\Windows\Tasks\Price Fountain.job, , [295cff642e4ed75f43dfb1a4b0534cb4], PUP.Optional.PriceFountain.A, C:\Windows\System32\Tasks\Price Fountain, , [e3a2a5be3b41d165da497cd9c340768a], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\defaulttab.config, , [c8bdb7ac592364d22d738ec761a2a35d], PUP.Optional.Astromenda.A, C:\Windows\Tasks\WSE_Astromenda.job, , [54315a0958249a9c2f5baaadea198c74], PUP.Optional.Astromenda, C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\searchplugins\Astromenda.xml, , [265f8dd64636bf77495266ffc142a35d], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\searchplugins\search-here.xml, , [285dc0a317652610beba8efad82b7888], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\extensions\addon@defaulttab.com.xpi, , [543133305d1f8aac5e528801ca39ab55], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe, , [4342402345374fe753154d5a8e76728e], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\18x18.png, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\background.html, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\blank.html, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\icon.png, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\manifest.json, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\new_tab.html, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\search_box.html, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\css\injection.css, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\css\jquery_ui\jquery-ui-1.8.16.custom.css, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\css\jquery_ui\images\ui-bg_flat_0_aaaaaa_40x100.png, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\css\jquery_ui\images\ui-bg_flat_75_ffffff_40x100.png, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\css\jquery_ui\images\ui-bg_glass_55_fbf9ee_1x400.png, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\css\jquery_ui\images\ui-bg_glass_65_ffffff_1x400.png, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\css\jquery_ui\images\ui-bg_glass_75_dadada_1x400.png, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\css\jquery_ui\images\ui-bg_glass_75_e6e6e6_1x400.png, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\css\jquery_ui\images\ui-bg_glass_95_fef1ec_1x400.png, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\css\jquery_ui\images\ui-bg_highlight-soft_75_cccccc_1x100.png, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\css\jquery_ui\images\ui-icons_222222_256x240.png, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\css\jquery_ui\images\ui-icons_2e83ff_256x240.png, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\css\jquery_ui\images\ui-icons_454545_256x240.png, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\css\jquery_ui\images\ui-icons_888888_256x240.png, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\css\jquery_ui\images\ui-icons_cd0a0a_256x240.png, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\help.png, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\engines_icons\Bing.png, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\engines_icons\Google.png, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\engines_icons\Search here.png, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\engines_icons\Yahoo.png, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\injection\search_bottom_border_bg.png, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\injection\bullet_arrow_down.png, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\injection\bullet_arrow_down_old.png, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\injection\icon.png, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\injection\search-inner-wrapper.png, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\injection\search-left.png, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\injection\search_arrow_top_button.png, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\injection\search_arrow_top_button_hovered.png, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\injection\search_bottom_bg.png, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\injection\search_bottom_left_before_corner.png, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\injection\search_bottom_left_corner.png, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\injection\search_bottom_right_before_corner.png, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\injection\search_bottom_right_corner.png, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\injection\search_left_border_bg.png, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\injection\search_left_bottom_border_bg.png, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\injection\search_middle_bg.png, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\injection\search_right_border_bg.png, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\injection\search_right_bottom_border_bg.png, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\injection\search_top_bg.png, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\injection\search_top_left_before_corner.png, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\injection\search_top_left_corner.png, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\injection\search_top_right_before_corner.png, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\injection\search_top_right_corner.png, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\js\bg.js, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\js\ConfigManager.js, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\js\content.js, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\js\InjectionManager.js, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\js\jquery-1.7.1.min.js, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\js\jquery-ui-1.8.16.custom.min.js, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\js\jquery.guid.js, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\js\md5.js, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\js\newTab.js, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\js\ScriptChecker.js, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\js\ScriptInjector.js, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\js\SearchBox.js, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\_locales\en\messages.json, , [7312a2c1b3c97abc076259c950b333cd], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab\DefaultTab\facebook_ie.ico, , [8203ca9994e803337604d06b0df69e62], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab\DefaultTab\addon.ico, , [8203ca9994e803337604d06b0df69e62], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab\DefaultTab\amazon_ie.ico, , [8203ca9994e803337604d06b0df69e62], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab\DefaultTab\bing.ico, , [8203ca9994e803337604d06b0df69e62], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab\DefaultTab\blocklist.json, , [8203ca9994e803337604d06b0df69e62], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab\DefaultTab\DefaultTabBHO.cfg, , [8203ca9994e803337604d06b0df69e62], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab\DefaultTab\DT.ico, , [8203ca9994e803337604d06b0df69e62], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab\DefaultTab\DTReg.exe, , [8203ca9994e803337604d06b0df69e62], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab\DefaultTab\google.ico, , [8203ca9994e803337604d06b0df69e62], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab\DefaultTab\imdb_ie.ico, , [8203ca9994e803337604d06b0df69e62], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab\DefaultTab\searchhere.ico, , [8203ca9994e803337604d06b0df69e62], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab\DefaultTab\search_here_ie.ico, , [8203ca9994e803337604d06b0df69e62], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab\DefaultTab\twitter_ie.ico, , [8203ca9994e803337604d06b0df69e62], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab\DefaultTab\uninstalldt.exe, , [8203ca9994e803337604d06b0df69e62], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab\DefaultTab\update.exe, , [8203ca9994e803337604d06b0df69e62], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab\DefaultTab\wikipedia_ie.ico, , [8203ca9994e803337604d06b0df69e62], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab\DefaultTab\yahoo.ico, , [8203ca9994e803337604d06b0df69e62], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab\DefaultTab\yahoo_ie.ico, , [8203ca9994e803337604d06b0df69e62], PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab\DefaultTab\youtube_ie.ico, , [8203ca9994e803337604d06b0df69e62], PUP.Optional.DefaultTab.A, C:\Program Files (x86)\DefaultTab\DefaultTab.crx, , [aed72c37443847ef0774bc7f877c0bf5], PUP.Optional.DefaultTab.A, C:\Program Files (x86)\DefaultTab\DefaultTabHost.exe, , [aed72c37443847ef0774bc7f877c0bf5], PUP.Optional.DefaultTab.A, C:\Program Files (x86)\DefaultTab\DefaultTabHost.json, , [aed72c37443847ef0774bc7f877c0bf5], PUP.Optional.DefaultTab.A, C:\Program Files (x86)\DefaultTab\DefaultTabSearch.log, , [aed72c37443847ef0774bc7f877c0bf5], PUP.Optional.DefaultTab.A, C:\Program Files (x86)\DefaultTab\uid, , [aed72c37443847ef0774bc7f877c0bf5], PUP.Optional.DefaultTab.A, C:\Program Files (x86)\DefaultTab\uninstaller.exe, , [aed72c37443847ef0774bc7f877c0bf5], PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\WSE_Astromenda\icons_3.5.1.4\ctr.ico, , [e89daeb5dca057dfa92981bf847fe51b], PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\WSE_Astromenda\UpdateProc\bkup.dat, , [e89daeb5dca057dfa92981bf847fe51b], PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\WSE_Astromenda\UpdateProc\config.dat, , [e89daeb5dca057dfa92981bf847fe51b], PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\WSE_Astromenda\UpdateProc\info.dat, , [e89daeb5dca057dfa92981bf847fe51b], PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\WSE_Astromenda\UpdateProc\STTL.DAT, , [e89daeb5dca057dfa92981bf847fe51b], PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\WSE_Astromenda\UpdateProc\TTL.DAT, , [e89daeb5dca057dfa92981bf847fe51b], PUP.Optional.PriceFountain.A, C:\Users\TZ-Laptop\AppData\Roaming\PriceFountain\UpdateProc\info.dat, , [d5b0a1c20f6d191d6dedf54ee91a4fb1], PUP.Optional.DefaultTab.A, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\defaulttab\defaulttab\addon.ico, , [acd969fa6b114ee82a3d94b7a162659b], PUP.Optional.DefaultTab.A, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\defaulttab\defaulttab\DefaultTabBHO.cfg, , [acd969fa6b114ee82a3d94b7a162659b], PUP.Optional.DefaultTab.A, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\defaulttab\defaulttab\DefaultTabUninstaller.exe, , [acd969fa6b114ee82a3d94b7a162659b], PUP.Optional.DefaultTab.A, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\defaulttab\defaulttab\DT.ico, , [acd969fa6b114ee82a3d94b7a162659b], PUP.Optional.DefaultTab.A, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\defaulttab\defaulttab\searchhere.ico, , [acd969fa6b114ee82a3d94b7a162659b], PUP.Optional.DefaultTab.A, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\defaulttab\defaulttab\uninstalldt.exe, , [acd969fa6b114ee82a3d94b7a162659b], PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\extensions\{8dc5c42e-9204-2a64-8b97-fa94ff8a241f}\bootstrap.js, , [364f1a490973ea4c3cc293b8df2440c0], PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\extensions\{8dc5c42e-9204-2a64-8b97-fa94ff8a241f}\chrome.manifest, , [364f1a490973ea4c3cc293b8df2440c0], PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\extensions\{8dc5c42e-9204-2a64-8b97-fa94ff8a241f}\icon.png, , [364f1a490973ea4c3cc293b8df2440c0], PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\extensions\{8dc5c42e-9204-2a64-8b97-fa94ff8a241f}\icon64.png, , [364f1a490973ea4c3cc293b8df2440c0], PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\extensions\{8dc5c42e-9204-2a64-8b97-fa94ff8a241f}\install.rdf, , [364f1a490973ea4c3cc293b8df2440c0], PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\extensions\{8dc5c42e-9204-2a64-8b97-fa94ff8a241f}\content\browser\astr.2.0.jsm, , [364f1a490973ea4c3cc293b8df2440c0], PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\extensions\{8dc5c42e-9204-2a64-8b97-fa94ff8a241f}\content\browser\astr.2.0h.jsm, , [364f1a490973ea4c3cc293b8df2440c0], PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\extensions\{8dc5c42e-9204-2a64-8b97-fa94ff8a241f}\content\browser\background.js, , [364f1a490973ea4c3cc293b8df2440c0], PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\extensions\{8dc5c42e-9204-2a64-8b97-fa94ff8a241f}\content\browser\browser.js, , [364f1a490973ea4c3cc293b8df2440c0], PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\extensions\{8dc5c42e-9204-2a64-8b97-fa94ff8a241f}\content\browser\header.js, , [364f1a490973ea4c3cc293b8df2440c0], PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\extensions\{8dc5c42e-9204-2a64-8b97-fa94ff8a241f}\content\browser\timer.jsm, , [364f1a490973ea4c3cc293b8df2440c0], PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\extensions\{8dc5c42e-9204-2a64-8b97-fa94ff8a241f}\content\external\aes.js, , [364f1a490973ea4c3cc293b8df2440c0], PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\extensions\{8dc5c42e-9204-2a64-8b97-fa94ff8a241f}\content\external\hmac-md5.js, , [364f1a490973ea4c3cc293b8df2440c0], PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\extensions\{8dc5c42e-9204-2a64-8b97-fa94ff8a241f}\content\external\jsencrypt.min.js, , [364f1a490973ea4c3cc293b8df2440c0], PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\extensions\{8dc5c42e-9204-2a64-8b97-fa94ff8a241f}\content\external\md5.js, , [364f1a490973ea4c3cc293b8df2440c0], PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\extensions\{8dc5c42e-9204-2a64-8b97-fa94ff8a241f}\content\external\string.min.js, , [364f1a490973ea4c3cc293b8df2440c0], PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\extensions\{8dc5c42e-9204-2a64-8b97-fa94ff8a241f}\content\external\underscore-min.js, , [364f1a490973ea4c3cc293b8df2440c0], PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Preferences, Good: (), Bad: ( "startup_urls": [ "http://astromenda.com/?f=7&a=ast_ir_14_43_ff&cd=2XzuyEtN2Y1L1Qzu0BzzyBtD0FyE0CzztC0EyCzy0B0Bzy0AtN0D0Tzu0StCtDtByCtN1L2XzutAtFyDtFtCtFyEtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyCtB0AtByCyDyEyBtGtB0FyDtBtGtD0Azy0BtG0BzzyC0BtGyDzz0F0A0D0AyE0DyC0A0F0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyDtAyC0Azy0Azy0EtG0FyEyE0EtGyEyEtCyCtGzyzyyEyCtGtAzzyCyE0ByBtDtAyC0A0F0F2Q&cr=952292191&ir=", "http://www.google.com" ],), ,[bdc8a5beb7c562d4e6ea406825e01ee2] Physical Sectors: 0 (No malicious items detected) (end)Info by Road-Runner: Code-Klammern gesetzt
-
Hallo,
wenn ich auf den Home-Button klicke oder wenn ich eine www-Seite eingebe, erscheint bei mir immer ein Pop-Up-Menü, welches mir anzeigt, dass ich eine Datei öffnen möchte vom Typ application/octet-stream von https://ad.doubleclick.net und eine Frage, wie mit dieser Datei verfahren werden soll, öffnen mit.. oder speichern.
Kann mir jemand sagen, wie ich das ändern kann ohne dass ich Firefox neu installieren muss?Vielen Dank im voraus für eure Hilfe.
Viele Grüße,
Tanja