Uerwünschtes Pop-Up-Menü

Tanja007

Hallo,

wenn ich auf den Home-Button klicke oder wenn ich eine www-Seite eingebe, erscheint bei mir immer ein Pop-Up-Menü, welches mir anzeigt, dass ich eine Datei öffnen möchte vom Typ application/octet-stream von https://ad.doubleclick.net und eine Frage, wie mit dieser Datei verfahren werden soll, öffnen mit.. oder speichern.
Kann mir jemand sagen, wie ich das ändern kann ohne dass ich Firefox neu installieren muss?

Vielen Dank im voraus für eure Hilfe.

Viele Grüße,

Tanja

bigpen

Mache bitte je einen Scan mit Adwcleaner und Malwarebytes und stelle die beiden Logdateien hier ins Forum.

Adwcleaner Anleitung:
http://www.at2907.net/downloads/adw.php

Anleitung Für MalwareBites Antimalware (MBAM):
http://www.at2907.net/downloads/mbam.php

Tanja007

Hallo bigpen,

vielen Dank für deine Antwort.

Hier ist die Logdatei vom AdwCleaner:

Code

# AdwCleaner v4.105 - Bericht erstellt am 17/12/2014 um 04:15:03
# Aktualisiert 08/12/2014 von Xplode
# Database : 2014-12-16.1 [Live]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : TZ-Laptop - TZ-LAPTOP-TOSH
# Gestartet von : C:\Users\TZ-Laptop\Downloads\adwcleaner_4.105.exe
# Option : Suchen


***** [ Dienste ] *****


Dienst Gefunden : DefaultTabSearch
Dienst Gefunden : DefaultTabUpdate
Dienst Gefunden : TTNFD


***** [ Dateien / Ordner ] *****


Datei Gefunden : C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.olark.com_0.localstorage-journal
Datei Gefunden : C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\defaulttab.config
Datei Gefunden : C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\Extensions\addon@defaulttab.com.xpi
Datei Gefunden : C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\searchplugins\11-suche.xml
Datei Gefunden : C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\searchplugins\ask-search.xml
Datei Gefunden : C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\searchplugins\astromenda.xml
Datei Gefunden : C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\searchplugins\search-here.xml
Datei Gefunden : C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\user.js
Datei Gefunden : C:\windows\System32\roboot64.exe
Ordner Gefunden : C:\Program Files (x86)\defaulttab
Ordner Gefunden : C:\ProgramData\apn
Ordner Gefunden : C:\ProgramData\dtdata
Ordner Gefunden : C:\Users\Public\Util
Ordner Gefunden : C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc
Ordner Gefunden : C:\Users\TZ-Laptop\AppData\Local\PriceFountain
Ordner Gefunden : C:\Users\TZ-Laptop\AppData\Roaming\defaulttab
Ordner Gefunden : C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\Extensions\{8dc5c42e-9204-2a64-8b97-fa94ff8a241f}
Ordner Gefunden : C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\Extensions\addon@defaulttab.com.xpi
Ordner Gefunden : C:\Users\TZ-Laptop\AppData\Roaming\PriceFountain
Ordner Gefunden : C:\Users\TZ-Laptop\AppData\Roaming\Systweak
Ordner Gefunden : C:\Users\TZ-Laptop\AppData\Roaming\wse_astromenda
Ordner Gefunden : C:\windows\SysWOW64\config\systemprofile\AppData\Roaming\defaulttab


***** [ Tasks ] *****


Task Gefunden : WSE_Astromenda
Task Gefunden : Price Fountain
Task Gefunden : DefaultCheck
Task Gefunden : DefaultReg


***** [ Verknüpfungen ] *****




***** [ Registrierungsdatenbank ] *****


Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\DefaultTab
Schlüssel Gefunden : HKCU\Software\BRS
Schlüssel Gefunden : HKCU\Software\Conduit
Schlüssel Gefunden : HKCU\Software\Default Tab
Schlüssel Gefunden : HKCU\Software\DefaultTab
Schlüssel Gefunden : HKCU\Software\Google\Chrome\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae
Schlüssel Gefunden : HKCU\Software\InstallCore
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{c1d89ae7-449d-4929-b24b-fded04adbe06}
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CE1AA41E-920B-4925-A6A2-A8D104E9BFDD}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gefunden : HKCU\Software\StormWatch
Schlüssel Gefunden : HKCU\Software\systweak
Schlüssel Gefunden : [x64] HKCU\Software\BRS
Schlüssel Gefunden : [x64] HKCU\Software\Conduit
Schlüssel Gefunden : [x64] HKCU\Software\Default Tab
Schlüssel Gefunden : [x64] HKCU\Software\DefaultTab
Schlüssel Gefunden : [x64] HKCU\Software\InstallCore
Schlüssel Gefunden : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2E00D31D-D171-423D-836D-1A4D7EA7F1A9}
Schlüssel Gefunden : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{c1d89ae7-449d-4929-b24b-fded04adbe06}
Schlüssel Gefunden : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CE1AA41E-920B-4925-A6A2-A8D104E9BFDD}
Schlüssel Gefunden : [x64] HKCU\Software\StormWatch
Schlüssel Gefunden : [x64] HKCU\Software\systweak
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{38495740-0035-4471-851E-F5BBB86AB085}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{72D89EBF-0C5D-4190-91FD-398E45F1D007}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{9CB2CD61-FFA0-406C-9D2D-8FDE6F4A4D8A}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\DefaultTabBHO.DLL
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\DefaultTabBHO.DefaultTabBrowser
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\DefaultTabBHO.DefaultTabBrowser.1
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\DefaultTabBHO.DefaultTabBrowserActiveX
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\DefaultTabBHO.DefaultTabBrowserActiveX.1
Schlüssel Gefunden : HKLM\SOFTWARE\Default Tab
Schlüssel Gefunden : HKLM\SOFTWARE\DefaultTab
Schlüssel Gefunden : HKLM\SOFTWARE\Google\Chrome\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc
Schlüssel Gefunden : HKLM\SOFTWARE\Google\Chrome\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{c1d89ae7-449d-4929-b24b-fded04adbe06}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A1E28287-1A31-4B0F-8D05-AA8C465D3C5A}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DefaultTab
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DefaultTab Chrome
Schlüssel Gefunden : HKLM\SOFTWARE\systweak
Schlüssel Gefunden : HKLM\SOFTWARE\TermTutor
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{1F8EDE97-36D5-422A-B8F0-9406E2D87C60}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2E00D31D-D171-423D-836D-1A4D7EA7F1A9}
Wert Gefunden : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [termtutor@termtutor.com]


***** [ Browser ] *****


-\\ Internet Explorer v11.0.9600.17496


Einstellung Gefunden : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page] - hxxp://astromenda.com/?f=1&a=ast_ir_14_43_ff&cd=2XzuyEtN2Y1L1Qzu0BzzyBtD0FyE0CzztC0EyCzy0B0Bzy0AtN0D0Tzu0StCtDtByCtN1L2XzutAtFyDtFtCtFyEtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyCtB0AtByCyDyEyBtGtB0FyDtBtGtD0Azy0BtG0BzzyC0BtGyDzz0F0A0D0AyE0DyC0A0F0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyDtAyC0Azy0Azy0EtG0FyEyE0EtGyEyEtCyCtGzyzyyEyCtGtAzzyCyE0ByBtDtAyC0A0F0F2Q&cr=952292191&ir=
Einstellung Gefunden : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL] - hxxp://isearch.glarysoft.com/?src=iehome


-\\ Mozilla Firefox v34.0.5 (x86 de)


[n3btdyw5.default] - Zeile gefunden : user_pref("extensions.astrmndasr.hmpgUrl", "hxxp://astromenda.com/?f=1&a=ast_ir_14_43_ff&cd=2XzuyEtN2Y1L1Qzu0BzzyBtD0FyE0CzztC0EyCzy0B0Bzy0AtN0D0Tzu0StCtDtByCtN1L2XzutAtFyDtFtCtFyEtN1L1CzutCyEtBzytDyD[...]
[n3btdyw5.default] - Zeile gefunden : user_pref("extensions.astrmndasr.newTabUrl", "hxxp://astromenda.com/?f=2&a=ast_ir_14_43_ff&cd=2XzuyEtN2Y1L1Qzu0BzzyBtD0FyE0CzztC0EyCzy0B0Bzy0AtN0D0Tzu0StCtDtByCtN1L2XzutAtFyDtFtCtFyEtN1L1CzutCyEtBzytD[...]
[n3btdyw5.default] - Zeile gefunden : user_pref("extensions.astrmndasr.prtnrId", "WSE_Astromenda");
[n3btdyw5.default] - Zeile gefunden : user_pref("extensions.astrmndasr.srchPrvdr", "Astromenda");
[n3btdyw5.default] - Zeile gefunden : user_pref("extensions.astrmndasr.tlbrSrchUrl", "hxxp://astromenda.com/?f=3&a=ast_ir_14_43_ff&cd=2XzuyEtN2Y1L1Qzu0BzzyBtD0FyE0CzztC0EyCzy0B0Bzy0AtN0D0Tzu0StCtDtByCtN1L2XzutAtFyDtFtCtFyEtN1L1CzutCyEtBzy[...]


-\\ Google Chrome v39.0.2171.95


[C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Web data] - Gefunden [Search Provider] : hxxp://isearch.glarysoft.com/?q={searchTerms}&src=gcsearch
[C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Web data] - Gefunden [Search Provider] : hxxp://astromenda.com/results.php?f=4&q={searchTerms}&a=ast_ir_14_43_ff&cd=2XzuyEtN2Y1L1Qzu0BzzyBtD0FyE0CzztC0EyCzy0B0Bzy0AtN0D0Tzu0StCtDtByCtN1L2XzutAtFyDtFtCtFyEtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyCtB0AtByCyDyEyBtGtB0FyDtBtGtD0Azy0BtG0BzzyC0BtGyDzz0F0A0D0AyE0DyC0A0F0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyDtAyC0Azy0Azy0EtG0FyEyE0EtGyEyEtCyCtGzyzyyEyCtGtAzzyCyE0ByBtDtAyC0A0F0F2Q&cr=952292191&ir=
[C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\preferences] - Gefunden [Extension] : kdidombaedgpfiiedeimiebkmbilgmlc
[C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\preferences] - Gefunden [Startup_URLs] : hxxp://astromenda.com/?f=7&a=ast_ir_14_43_ff&cd=2XzuyEtN2Y1L1Qzu0BzzyBtD0FyE0CzztC0EyCzy0B0Bzy0AtN0D0Tzu0StCtDtByCtN1L2XzutAtFyDtFtCtFyEtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyCtB0AtByCyDyEyBtGtB0FyDtBtGtD0Azy0BtG0BzzyC0BtGyDzz0F0A0D0AyE0DyC0A0F0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyDtAyC0Azy0Azy0EtG0FyEyE0EtGyEyEtCyCtGzyzyyEyCtGtAzzyCyE0ByBtDtAyC0A0F0F2Q&cr=952292191&ir=


*************************


AdwCleaner[R0].txt - [10367 octets] - [17/12/2014 04:06:05]
AdwCleaner[R1].txt - [10230 octets] - [17/12/2014 04:15:03]


########## EOF - C:\AdwCleaner\AdwCleaner[R1].txt - [10291 octets] ##########

Alles anzeigen

Hier ist die Logdatei von MalwareBytes:

Code

Malwarebytes Anti-Malware
http://www.malwarebytes.org


Scan Date: 17.12.2014
Scan Time: 04:30:03
Logfile: hola.txt
Administrator: Yes


Version: 2.00.4.1028
Malware Database: v2014.12.16.05
Rootkit Database: v2014.12.14.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled


OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: TZ-Laptop


Scan Type: Threat Scan
Result: Completed
Objects Scanned: 389464
Time Elapsed: 40 min, 46 sec


Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled


Processes: 1
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe, 1916, , [4342402345374fe753154d5a8e76728e]


Modules: 0
(No malicious items detected)


Registry Keys: 38
PUP.Optional.DefaultTab, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\DefaultTabSearch, , [daabe08305772e08a75564bb8c79966a], 
PUP.Optional.DefaultTab.A, HKLM\SOFTWARE\CLASSES\APPID\{38495740-0035-4471-851E-F5BBB86AB085}, , [dda80a59cdafb284ee75eceb27db5aa6], 
PUP.Optional.DefaultTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{38495740-0035-4471-851E-F5BBB86AB085}, , [dda80a59cdafb284ee75eceb27db5aa6], 
PUP.Optional.DefaultTab.A, HKLM\SOFTWARE\CLASSES\APPID\{72D89EBF-0C5D-4190-91FD-398E45F1D007}, , [7a0b3f24cbb155e1d1934f8813ef4cb4], 
PUP.Optional.DefaultTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{72D89EBF-0C5D-4190-91FD-398E45F1D007}, , [7a0b3f24cbb155e1d1934f8813ef4cb4], 
PUP.Optional.DefaultTab.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{7F6AFBF1-E065-4627-A2FD-810366367D01}, , [ff86e281ed8fc76fc6cd8255e220619f], 
PUP.Optional.DefaultTab.A, HKU\S-1-5-21-3364865112-3343377762-37286677-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{7F6AFBF1-E065-4627-A2FD-810366367D01}, , [ff86e281ed8fc76fc6cd8255e220619f], 
PUP.Optional.DefaultTab.A, HKU\S-1-5-21-3364865112-3343377762-37286677-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{7F6AFBF1-E065-4627-A2FD-810366367D01}, , [ff86e281ed8fc76fc6cd8255e220619f], 
PUP.Optional.DefaultTab.A, HKU\S-1-5-21-3364865112-3343377762-37286677-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{7F6AFBF1-E065-4627-A2FD-810366367D01}, , [ff86e281ed8fc76fc6cd8255e220619f], 
PUP.Optional.DefaultTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{7F6AFBF1-E065-4627-A2FD-810366367D01}, , [ff86e281ed8fc76fc6cd8255e220619f], 
PUP.Optional.DefaultTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B2D33ED6-EBBD-467C-BF6F-F175D9B51363}, , [ceb75112dba141f5194d7166867cd42c], 
PUP.Optional.DefaultTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BAD84EE2-624D-4e7c-A8BB-41EFD720FD77}, , [dca9bca791ebb77fb5b28453f70bf10f], 
PUP.Optional.DefaultTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{A1E28287-1A31-4B0F-8D05-AA8C465D3C5A}, , [b4d15b08601c84b2b7ae5c7bfd059967], 
PUP.Optional.DefaultTab.A, HKLM\SOFTWARE\CLASSES\DefaultTabBHO.DefaultTabBrowserActiveX, , [691c0e55d1ab3cfa36e3f3a4a55e7090], 
PUP.Optional.DefaultTab.A, HKLM\SOFTWARE\CLASSES\DefaultTabBHO.DefaultTabBrowserActiveX.1, , [176efa69f983310521f841564cb7ee12], 
PUP.Optional.DefaultTab.A, HKLM\SOFTWARE\CLASSES\APPID\DefaultTabBHO.DLL, , [b7ce97cc8eee86b08692e7b0976c58a8], 
PUP.Optional.Astromenda.A, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\pfkfdlcdbajamklbneflfbcmfgddmpae, , [97ee5b08e29a40f6bde317b88e76ab55], 
PUP.Optional.DefaultTab.A, HKLM\SOFTWARE\WOW6432NODE\Default Tab, , [592c065d1567c4724cfe381cde259b65], 
PUP.Optional.DefaultTab.A, HKLM\SOFTWARE\WOW6432NODE\DefaultTab, , [b8cd154e74083df900a2b69fb44fcc34], 
PUP.Optional.DefaultTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\DefaultTabBHO.DefaultTabBrowserActiveX, , [a7dec99a2b51dd5943d6aceb1ae92ad6], 
PUP.Optional.DefaultTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\DefaultTabBHO.DefaultTabBrowserActiveX.1, , [34514320e69673c31dfcd2c53cc7857b], 
PUP.Optional.DefaultTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\DefaultTabBHO.DLL, , [cbba580bc0bc191d997f0c8baa5922de], 
PUP.Optional.DefaultTab.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\kdidombaedgpfiiedeimiebkmbilgmlc, , [e3a264ff453774c2d91cd69c60a3de22], 
PUP.Optional.Astromenda.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\pfkfdlcdbajamklbneflfbcmfgddmpae, , [ccb9224185f73501aef2bb14d331bb45], 
PUP.Optional.SystemSpeedup, HKLM\SOFTWARE\WOW6432NODE\SYSTWEAK\ssd, , [7015ef748af241f589ceed821fe4c23e], 
PUP.Optional.DefaultTab.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\DefaultTabUpdate, , [4342402345374fe753154d5a8e76728e], 
PUP.Optional.TermTutor.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TTNFD, , [394cabb8592376c0dda00b574db65ca4], 
PUP.Optional.DefaultTab.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Default tab, , [3c494122daa251e54308470de81bd12f], 
PUP.Optional.DefaultTab.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DefaultTab, , [1e6722416c104de9554cbe978d76629e], 
PUP.Optional.DefaultTab.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\DefaultTab, , [cbba9cc7522af93d9a805c3bb84b738d], 
PUP.Optional.DefaultTab.A, HKU\S-1-5-21-3364865112-3343377762-37286677-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Default Tab, , [ee97a7bca7d5d85e92b9193b0ff4e719], 
PUP.Optional.DefaultTab.A, HKU\S-1-5-21-3364865112-3343377762-37286677-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DefaultTab, , [0f76d68d7dff36001a87a6afc340fc04], 
PUP.Optional.DefaultTab.A, HKU\S-1-5-21-3364865112-3343377762-37286677-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\DefaultTab, , [b4d198cbf08c7cbacd4d4f483ac9c13f], 
PUP.Optional.Astromenda.A, HKU\S-1-5-21-3364865112-3343377762-37286677-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\pfkfdlcdbajamklbneflfbcmfgddmpae, , [5332dd866d0fed492f72d5fad232fb05], 
PUP.Optional.InstallCore.A, HKU\S-1-5-21-3364865112-3343377762-37286677-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE\1I1T1Q1S, , [add8362d7dffdc5a151f6d2741c22ed2], 
PUP.Optional.InstallCore.A, HKU\S-1-5-21-3364865112-3343377762-37286677-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE, , [f68f6003463643f33f14ffab49bb7f81], 
PUP.Optional.SystemSpeedup, HKU\S-1-5-21-3364865112-3343377762-37286677-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SYSTWEAK\ssd, , [7d0840232d4fce680b4b412e22e1c43c], 
PUP.Optional.DefaultTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\DefaultTab Chrome, , [aed72c37443847ef0774bc7f877c0bf5], 


Registry Values: 3
PUP.Optional.TermTutor.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|termtutor@termtutor.com, C:\Program Files (x86)\Mozilla Firefox\extensions\termtutor@termtutor.com, , [7c0972f1c8b4ab8b6e0d6bf7956e4ab6]
PUP.Optional.TermTutor.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TTNFD|ImagePath, system32\drivers\ttnfd.sys, , [394cabb8592376c0dda00b574db65ca4]
PUP.Optional.InstallCore.A, HKU\S-1-5-21-3364865112-3343377762-37286677-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE|tb, 0R2Y1I1P1N0J1U1C, , [f68f6003463643f33f14ffab49bb7f81]


Registry Data: 1
PUP.Optional.Astromenda.A, HKU\S-1-5-21-3364865112-3343377762-37286677-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://astromenda.com/?f=1&a=ast_ir_14_43_ff&cd=2XzuyEtN2Y1L1Qzu0BzzyBtD0FyE0CzztC0EyCzy0B0Bzy0AtN0D0Tzu0StCtDtByCtN1L2XzutAtFyDtFtCtFyEtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyCtB0AtByCyDyEyBtGtB0FyDtBtGtD0Azy0BtG0BzzyC0BtGyDzz0F0A0D0AyE0DyC0A0F0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyDtAyC0Azy0Azy0EtG0FyEyE0EtGyEyEtCyCtGzyzyyEyCtGtAzzyCyE0ByBtDtAyC0A0F0F2Q&cr=952292191&ir=, Good: (http://www.google.com), Bad: (http://astromenda.com/?f=1&a=ast_ir_14_43_ff&cd=2XzuyEtN2Y1L1Qzu0BzzyBtD0FyE0CzztC0EyCzy0B0Bzy0AtN0D0Tzu0StCtDtByCtN1L2XzutAtFyDtFtCtFyEtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyCtB0AtByCyDyEyBtGtB0FyDtBtGtD0Azy0BtG0BzzyC0BtGyDzz0F0A0D0AyE0DyC0A0F0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyDtAyC0Azy0Azy0EtG0FyEyE0EtGyEyEtCyCtGzyzyyEyCtGtAzzyCyE0ByBtDtAyC0A0F0F2Q&cr=952292191&ir=),,[d1b47ae94834b086ad164131b94c2ed2]


Folders: 29
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\css, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\css\jquery_ui, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\css\jquery_ui\images, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\engines_icons, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\injection, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\js, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\_locales, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\_locales\en, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab, , [8203ca9994e803337604d06b0df69e62], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab\DefaultTab, , [8203ca9994e803337604d06b0df69e62], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab\DefaultTab\Apps, , [8203ca9994e803337604d06b0df69e62], 
PUP.Optional.DefaultTab.A, C:\Program Files (x86)\DefaultTab, , [aed72c37443847ef0774bc7f877c0bf5], 
PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\WSE_Astromenda, , [e89daeb5dca057dfa92981bf847fe51b], 
PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\WSE_Astromenda\icons_3.5.1.4, , [e89daeb5dca057dfa92981bf847fe51b], 
PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\WSE_Astromenda\UpdateProc, , [e89daeb5dca057dfa92981bf847fe51b], 
PUP.Optional.PriceFountain.A, C:\Users\TZ-Laptop\AppData\Roaming\PriceFountain, , [d5b0a1c20f6d191d6dedf54ee91a4fb1], 
PUP.Optional.PriceFountain.A, C:\Users\TZ-Laptop\AppData\Roaming\PriceFountain\UpdateProc, , [d5b0a1c20f6d191d6dedf54ee91a4fb1], 
PUP.Optional.PriceFountain.A, C:\Users\TZ-Laptop\AppData\Local\PriceFountain, , [4f367ee594e874c209520043ae5505fb], 
PUP.Optional.PriceFountain.A, C:\Users\TZ-Laptop\AppData\Local\PriceFountain\logs, , [4f367ee594e874c209520043ae5505fb], 
PUP.Optional.DefaultTab.A, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\defaulttab, , [acd969fa6b114ee82a3d94b7a162659b], 
PUP.Optional.DefaultTab.A, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\defaulttab\defaulttab, , [acd969fa6b114ee82a3d94b7a162659b], 
PUP.Optional.DefaultTab.A, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\defaulttab\defaulttab\Apps, , [acd969fa6b114ee82a3d94b7a162659b], 
PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\extensions\{8dc5c42e-9204-2a64-8b97-fa94ff8a241f}, , [364f1a490973ea4c3cc293b8df2440c0], 
PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\extensions\{8dc5c42e-9204-2a64-8b97-fa94ff8a241f}\content, , [364f1a490973ea4c3cc293b8df2440c0], 
PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\extensions\{8dc5c42e-9204-2a64-8b97-fa94ff8a241f}\content\browser, , [364f1a490973ea4c3cc293b8df2440c0], 
PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\extensions\{8dc5c42e-9204-2a64-8b97-fa94ff8a241f}\content\external, , [364f1a490973ea4c3cc293b8df2440c0], 


Files: 132
PUP.Optional.DefaultTab, C:\Program Files (x86)\DefaultTab\DefaultTabSearch.exe, , [daabe08305772e08a75564bb8c79966a], 
PUP.Optional.DefaultTab, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab\DefaultTab\DefaultTabBHO.dll, , [1c69b4afa8d492a4204035ed42bfd62a], 
PUP.Optional.DefaultTab, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab\DefaultTab\DefaultTabStart.exe, , [a5e0fa697a0270c6540c6eb48d74718f], 
PUP.Optional.DefaultTab, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab\DefaultTab\DefaultTabWrap.dll, , [1174432055273ff71f417ea452af48b8], 
PUP.Optional.DefaultTab, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab\DefaultTab\DefaultTabWrap64.dll, , [652082e11b615fd76cf4ea38da277987], 
PUP.Optional.PriceFountain.A, C:\Windows\Tasks\Price Fountain.job, , [295cff642e4ed75f43dfb1a4b0534cb4], 
PUP.Optional.PriceFountain.A, C:\Windows\System32\Tasks\Price Fountain, , [e3a2a5be3b41d165da497cd9c340768a], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\defaulttab.config, , [c8bdb7ac592364d22d738ec761a2a35d], 
PUP.Optional.Astromenda.A, C:\Windows\Tasks\WSE_Astromenda.job, , [54315a0958249a9c2f5baaadea198c74], 
PUP.Optional.Astromenda, C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\searchplugins\Astromenda.xml, , [265f8dd64636bf77495266ffc142a35d], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\searchplugins\search-here.xml, , [285dc0a317652610beba8efad82b7888], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\extensions\addon@defaulttab.com.xpi, , [543133305d1f8aac5e528801ca39ab55], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe, , [4342402345374fe753154d5a8e76728e], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\18x18.png, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\background.html, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\blank.html, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\icon.png, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\manifest.json, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\new_tab.html, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\search_box.html, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\css\injection.css, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\css\jquery_ui\jquery-ui-1.8.16.custom.css, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\css\jquery_ui\images\ui-bg_flat_0_aaaaaa_40x100.png, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\css\jquery_ui\images\ui-bg_flat_75_ffffff_40x100.png, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\css\jquery_ui\images\ui-bg_glass_55_fbf9ee_1x400.png, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\css\jquery_ui\images\ui-bg_glass_65_ffffff_1x400.png, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\css\jquery_ui\images\ui-bg_glass_75_dadada_1x400.png, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\css\jquery_ui\images\ui-bg_glass_75_e6e6e6_1x400.png, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\css\jquery_ui\images\ui-bg_glass_95_fef1ec_1x400.png, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\css\jquery_ui\images\ui-bg_highlight-soft_75_cccccc_1x100.png, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\css\jquery_ui\images\ui-icons_222222_256x240.png, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\css\jquery_ui\images\ui-icons_2e83ff_256x240.png, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\css\jquery_ui\images\ui-icons_454545_256x240.png, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\css\jquery_ui\images\ui-icons_888888_256x240.png, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\css\jquery_ui\images\ui-icons_cd0a0a_256x240.png, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\help.png, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\engines_icons\Bing.png, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\engines_icons\Google.png, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\engines_icons\Search here.png, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\engines_icons\Yahoo.png, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\injection\search_bottom_border_bg.png, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\injection\bullet_arrow_down.png, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\injection\bullet_arrow_down_old.png, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\injection\icon.png, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\injection\search-inner-wrapper.png, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\injection\search-left.png, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\injection\search_arrow_top_button.png, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\injection\search_arrow_top_button_hovered.png, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\injection\search_bottom_bg.png, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\injection\search_bottom_left_before_corner.png, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\injection\search_bottom_left_corner.png, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\injection\search_bottom_right_before_corner.png, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\injection\search_bottom_right_corner.png, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\injection\search_left_border_bg.png, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\injection\search_left_bottom_border_bg.png, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\injection\search_middle_bg.png, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\injection\search_right_border_bg.png, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\injection\search_right_bottom_border_bg.png, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\injection\search_top_bg.png, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\injection\search_top_left_before_corner.png, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\injection\search_top_left_corner.png, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\injection\search_top_right_before_corner.png, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\images\injection\search_top_right_corner.png, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\js\bg.js, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\js\ConfigManager.js, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\js\content.js, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\js\InjectionManager.js, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\js\jquery-1.7.1.min.js, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\js\jquery-ui-1.8.16.custom.min.js, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\js\jquery.guid.js, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\js\md5.js, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\js\newTab.js, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\js\ScriptChecker.js, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\js\ScriptInjector.js, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\js\SearchBox.js, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\2.0.9_0\_locales\en\messages.json, , [7312a2c1b3c97abc076259c950b333cd], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab\DefaultTab\facebook_ie.ico, , [8203ca9994e803337604d06b0df69e62], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab\DefaultTab\addon.ico, , [8203ca9994e803337604d06b0df69e62], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab\DefaultTab\amazon_ie.ico, , [8203ca9994e803337604d06b0df69e62], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab\DefaultTab\bing.ico, , [8203ca9994e803337604d06b0df69e62], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab\DefaultTab\blocklist.json, , [8203ca9994e803337604d06b0df69e62], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab\DefaultTab\DefaultTabBHO.cfg, , [8203ca9994e803337604d06b0df69e62], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab\DefaultTab\DT.ico, , [8203ca9994e803337604d06b0df69e62], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab\DefaultTab\DTReg.exe, , [8203ca9994e803337604d06b0df69e62], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab\DefaultTab\google.ico, , [8203ca9994e803337604d06b0df69e62], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab\DefaultTab\imdb_ie.ico, , [8203ca9994e803337604d06b0df69e62], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab\DefaultTab\searchhere.ico, , [8203ca9994e803337604d06b0df69e62], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab\DefaultTab\search_here_ie.ico, , [8203ca9994e803337604d06b0df69e62], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab\DefaultTab\twitter_ie.ico, , [8203ca9994e803337604d06b0df69e62], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab\DefaultTab\uninstalldt.exe, , [8203ca9994e803337604d06b0df69e62], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab\DefaultTab\update.exe, , [8203ca9994e803337604d06b0df69e62], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab\DefaultTab\wikipedia_ie.ico, , [8203ca9994e803337604d06b0df69e62], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab\DefaultTab\yahoo.ico, , [8203ca9994e803337604d06b0df69e62], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab\DefaultTab\yahoo_ie.ico, , [8203ca9994e803337604d06b0df69e62], 
PUP.Optional.DefaultTab.A, C:\Users\TZ-Laptop\AppData\Roaming\DefaultTab\DefaultTab\youtube_ie.ico, , [8203ca9994e803337604d06b0df69e62], 
PUP.Optional.DefaultTab.A, C:\Program Files (x86)\DefaultTab\DefaultTab.crx, , [aed72c37443847ef0774bc7f877c0bf5], 
PUP.Optional.DefaultTab.A, C:\Program Files (x86)\DefaultTab\DefaultTabHost.exe, , [aed72c37443847ef0774bc7f877c0bf5], 
PUP.Optional.DefaultTab.A, C:\Program Files (x86)\DefaultTab\DefaultTabHost.json, , [aed72c37443847ef0774bc7f877c0bf5], 
PUP.Optional.DefaultTab.A, C:\Program Files (x86)\DefaultTab\DefaultTabSearch.log, , [aed72c37443847ef0774bc7f877c0bf5], 
PUP.Optional.DefaultTab.A, C:\Program Files (x86)\DefaultTab\uid, , [aed72c37443847ef0774bc7f877c0bf5], 
PUP.Optional.DefaultTab.A, C:\Program Files (x86)\DefaultTab\uninstaller.exe, , [aed72c37443847ef0774bc7f877c0bf5], 
PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\WSE_Astromenda\icons_3.5.1.4\ctr.ico, , [e89daeb5dca057dfa92981bf847fe51b], 
PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\WSE_Astromenda\UpdateProc\bkup.dat, , [e89daeb5dca057dfa92981bf847fe51b], 
PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\WSE_Astromenda\UpdateProc\config.dat, , [e89daeb5dca057dfa92981bf847fe51b], 
PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\WSE_Astromenda\UpdateProc\info.dat, , [e89daeb5dca057dfa92981bf847fe51b], 
PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\WSE_Astromenda\UpdateProc\STTL.DAT, , [e89daeb5dca057dfa92981bf847fe51b], 
PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\WSE_Astromenda\UpdateProc\TTL.DAT, , [e89daeb5dca057dfa92981bf847fe51b], 
PUP.Optional.PriceFountain.A, C:\Users\TZ-Laptop\AppData\Roaming\PriceFountain\UpdateProc\info.dat, , [d5b0a1c20f6d191d6dedf54ee91a4fb1], 
PUP.Optional.DefaultTab.A, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\defaulttab\defaulttab\addon.ico, , [acd969fa6b114ee82a3d94b7a162659b], 
PUP.Optional.DefaultTab.A, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\defaulttab\defaulttab\DefaultTabBHO.cfg, , [acd969fa6b114ee82a3d94b7a162659b], 
PUP.Optional.DefaultTab.A, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\defaulttab\defaulttab\DefaultTabUninstaller.exe, , [acd969fa6b114ee82a3d94b7a162659b], 
PUP.Optional.DefaultTab.A, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\defaulttab\defaulttab\DT.ico, , [acd969fa6b114ee82a3d94b7a162659b], 
PUP.Optional.DefaultTab.A, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\defaulttab\defaulttab\searchhere.ico, , [acd969fa6b114ee82a3d94b7a162659b], 
PUP.Optional.DefaultTab.A, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\defaulttab\defaulttab\uninstalldt.exe, , [acd969fa6b114ee82a3d94b7a162659b], 
PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\extensions\{8dc5c42e-9204-2a64-8b97-fa94ff8a241f}\bootstrap.js, , [364f1a490973ea4c3cc293b8df2440c0], 
PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\extensions\{8dc5c42e-9204-2a64-8b97-fa94ff8a241f}\chrome.manifest, , [364f1a490973ea4c3cc293b8df2440c0], 
PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\extensions\{8dc5c42e-9204-2a64-8b97-fa94ff8a241f}\icon.png, , [364f1a490973ea4c3cc293b8df2440c0], 
PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\extensions\{8dc5c42e-9204-2a64-8b97-fa94ff8a241f}\icon64.png, , [364f1a490973ea4c3cc293b8df2440c0], 
PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\extensions\{8dc5c42e-9204-2a64-8b97-fa94ff8a241f}\install.rdf, , [364f1a490973ea4c3cc293b8df2440c0], 
PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\extensions\{8dc5c42e-9204-2a64-8b97-fa94ff8a241f}\content\browser\astr.2.0.jsm, , [364f1a490973ea4c3cc293b8df2440c0], 
PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\extensions\{8dc5c42e-9204-2a64-8b97-fa94ff8a241f}\content\browser\astr.2.0h.jsm, , [364f1a490973ea4c3cc293b8df2440c0], 
PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\extensions\{8dc5c42e-9204-2a64-8b97-fa94ff8a241f}\content\browser\background.js, , [364f1a490973ea4c3cc293b8df2440c0], 
PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\extensions\{8dc5c42e-9204-2a64-8b97-fa94ff8a241f}\content\browser\browser.js, , [364f1a490973ea4c3cc293b8df2440c0], 
PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\extensions\{8dc5c42e-9204-2a64-8b97-fa94ff8a241f}\content\browser\header.js, , [364f1a490973ea4c3cc293b8df2440c0], 
PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\extensions\{8dc5c42e-9204-2a64-8b97-fa94ff8a241f}\content\browser\timer.jsm, , [364f1a490973ea4c3cc293b8df2440c0], 
PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\extensions\{8dc5c42e-9204-2a64-8b97-fa94ff8a241f}\content\external\aes.js, , [364f1a490973ea4c3cc293b8df2440c0], 
PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\extensions\{8dc5c42e-9204-2a64-8b97-fa94ff8a241f}\content\external\hmac-md5.js, , [364f1a490973ea4c3cc293b8df2440c0], 
PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\extensions\{8dc5c42e-9204-2a64-8b97-fa94ff8a241f}\content\external\jsencrypt.min.js, , [364f1a490973ea4c3cc293b8df2440c0], 
PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\extensions\{8dc5c42e-9204-2a64-8b97-fa94ff8a241f}\content\external\md5.js, , [364f1a490973ea4c3cc293b8df2440c0], 
PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\extensions\{8dc5c42e-9204-2a64-8b97-fa94ff8a241f}\content\external\string.min.js, , [364f1a490973ea4c3cc293b8df2440c0], 
PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\n3btdyw5.default\extensions\{8dc5c42e-9204-2a64-8b97-fa94ff8a241f}\content\external\underscore-min.js, , [364f1a490973ea4c3cc293b8df2440c0], 
PUP.Optional.Astromenda.A, C:\Users\TZ-Laptop\AppData\Local\Google\Chrome\User Data\Default\Preferences, Good: (), Bad: (      "startup_urls": [ "http://astromenda.com/?f=7&a=ast_ir_14_43_ff&cd=2XzuyEtN2Y1L1Qzu0BzzyBtD0FyE0CzztC0EyCzy0B0Bzy0AtN0D0Tzu0StCtDtByCtN1L2XzutAtFyDtFtCtFyEtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyCtB0AtByCyDyEyBtGtB0FyDtBtGtD0Azy0BtG0BzzyC0BtGyDzz0F0A0D0AyE0DyC0A0F0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyDtAyC0Azy0Azy0EtG0FyEyE0EtGyEyEtCyCtGzyzyyEyCtGtAzzyCyE0ByBtDtAyC0A0F0F2Q&cr=952292191&ir=", "http://www.google.com" ],), ,[bdc8a5beb7c562d4e6ea406825e01ee2]


Physical Sectors: 0
(No malicious items detected)




(end)

Alles anzeigen

Info by Road-Runner: Code-Klammern gesetzt

Road-Runner

Da hast Du Dir ja jede Menge Mist eingefangen. Lasse alles löschen was die beiden Tools gefunden haben.

Für die Zukunft solltest Du dringend Dein Sicherheitskonzept überdenken. Was unter Sicherheitskonzept zu verstehen ist kannst Du hier oder hier nachlesen.

Tanja007

Ich habe alles gelöscht, leider ist das Problem noch nicht behoben. Hat jemand noch ne Idee?

2002Andreas

Versuch es bitte mal mit einem neuen Profil.

Geh dazu auf: Hilfe..Informationen zur Fehlerbehebung.. und dann rechts auf den Button: Firefox zurücksetzen, siehe dazu auch hier:

Firefox zurücksetzen – die meisten Probleme einfach lösen

Tanja007

Danke! Jetzt funktioniert es.

2002Andreas

Ein Hinweis für die Zukunft mal.

Programme bitte immer nur direkt vom Hersteller laden.

Programme immer nur benutzerdefiniert installieren, damit du genau sehen kannst, was dir evtl. zusätzlich noch installiert werden soll.

Toolbars immer abwählen!

Und bitte nie etwas von der Seite Softonic downloaden

Tanja007

Vielen Dank für die Hinweise!
Viele Grüße,

Tanja