Welcome, Guest. Please login or register.

Author Topic: just sent this to EaseUS back up - virus infections  (Read 1231 times)

0 Members and 1 Guest are viewing this topic.

snadge

  • Guest
just sent this to EaseUS back up - virus infections
« on: 31 December 2014, 23:01:35 »
Advertisement
https://www.facebook.com/easeussoftware

http://www.todo-backup.com/

Quote
I installed this on my partnes r8,1 laptop to backup the computer and it

A) it installed bubledock (which I had to use malwarebytes to remove)
B) god game empire
C) it changed my hompage and searchpage to v9.c0m to which WEB OF TRUST said this was was a bad website
D ) put in services called :

IEpluginservices
Global update service (for cinema PUP I refused to install) x2


Also
CinemaHD Go pro 2.4c in google extensions further proving the above service

Every few minutes your browser takes you to untrusted websites

I got this from supposedly trusted website TECH RADAR
http://www.techradar.com/news/software/applications/best-free-backup-software-11-programs-we-recommend-1137924

IAM NOT HAPPY ABOUT THIS

It took me hours to sort out!

The public should and will be made aware of your software

Regards

heres what just MalwareBytes found:

Quote
Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 31/12/2014
Scan Time: 22:29:06
Logfile: mbam log.txt
Administrator: Yes

Version: 2.00.4.1028
Malware Database: v2014.12.31.05
Rootkit Database: v2014.12.30.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 8.1
CPU: x64
File System: NTFS
User: Amy

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 356225
Time Elapsed: 5 min, 54 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 4
PUP.Optional.NorthernThemesService.A, C:\Users\Amy\AppData\NTSFile\NTS.exe, 2200, , [88d987e22e4ed0661d6454a1639e0ff1]
PUP.Optional.CinemaHD.A, C:\Program Files (x86)\CinemaHD Go Pro 2.4cV31.12\94d0ada4-e366-4d52-a827-402a16954e74-6.exe, 3348, , [7fe25415e498c37364d60bafbb4a48b8]
PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Popcornew\popcornew.exe, 3044, , [09581158fd7f1f170a5d4078966f32ce]
PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Popcornew\popcornew.exe, 3780, , [09581158fd7f1f170a5d4078966f32ce]

Modules: 1
PUP.Optional.NorthernThemesService.A, C:\Users\Amy\AppData\NTSFile\helper.dll, , [fd64cd9c6616f64083dace96c73c27d9],

Registry Keys: 158
PUP.Optional.NorthernThemesService.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Northern Themes Service, , [88d987e22e4ed0661d6454a1639e0ff1],
PUP.Optional.IePluginService.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\IePluginServices, , [3e23f772f3899e98917bd3a3877a5da3],
PUP.Optional.Popcornew.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Popcornew_update, , [f86972f70b719d993d29b9ff61a419e7],
PUP.Optional.Popcornew.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Popcornew_update_m, , [f86972f70b719d993d29b9ff61a419e7],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\POPCORNEWUPDATE.EXE, , [f86972f70b719d993d29b9ff61a419e7],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\POPCORNEWUPDATE.EXE, , [f86972f70b719d993d29b9ff61a419e7],
PUP.Optional.CinemaHD.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110611901163}, , [4f12cb9e9fddb08640fa9921cf36d32d],
PUP.Optional.CinemaHD.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{11111111-1111-1111-1111-110611901163}, , [4f12cb9e9fddb08640fa9921cf36d32d],
PUP.Optional.CinemaHD.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440644904463}, , [4f12cb9e9fddb08640fa9921cf36d32d],
PUP.Optional.CinemaHD.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550655905563}, , [4f12cb9e9fddb08640fa9921cf36d32d],
PUP.Optional.CinemaHD.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660666906663}, , [4f12cb9e9fddb08640fa9921cf36d32d],
PUP.Optional.CinemaHD.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550655905563}, , [4f12cb9e9fddb08640fa9921cf36d32d],
PUP.Optional.CinemaHD.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660666906663}, , [4f12cb9e9fddb08640fa9921cf36d32d],
PUP.Optional.CinemaHD.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440644904463}, , [4f12cb9e9fddb08640fa9921cf36d32d],
PUP.Optional.CinemaHD.A, HKLM\SOFTWARE\CLASSES\486f39d5be3842d1a5b143880bdcbae60069063.BHO.1, , [4f12cb9e9fddb08640fa9921cf36d32d],
PUP.Optional.CinemaHD.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110611901163}, , [4f12cb9e9fddb08640fa9921cf36d32d],
PUP.Optional.CinemaHD.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110611901163}, , [4f12cb9e9fddb08640fa9921cf36d32d],
PUP.Optional.CinemaHD.A, HKLM\SOFTWARE\CLASSES\486f39d5be3842d1a5b143880bdcbae60069063.BHO, , [4f12cb9e9fddb08640fa9921cf36d32d],
PUP.Optional.CinemaHD.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\486f39d5be3842d1a5b143880bdcbae60069063.BHO, , [4f12cb9e9fddb08640fa9921cf36d32d],
PUP.Optional.CinemaHD.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\486f39d5be3842d1a5b143880bdcbae60069063.BHO.1, , [4f12cb9e9fddb08640fa9921cf36d32d],
PUP.Optional.CinemaHD.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{22222222-2222-2222-2222-220622902263}, , [4f12cb9e9fddb08640fa9921cf36d32d],
PUP.Optional.CinemaHD.A, HKLM\SOFTWARE\CLASSES\486f39d5be3842d1a5b143880bdcbae60069063.Sandbox.1, , [4f12cb9e9fddb08640fa9921cf36d32d],
PUP.Optional.CinemaHD.A, HKLM\SOFTWARE\CLASSES\486f39d5be3842d1a5b143880bdcbae60069063.Sandbox, , [4f12cb9e9fddb08640fa9921cf36d32d],
PUP.Optional.CinemaHD.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\486f39d5be3842d1a5b143880bdcbae60069063.Sandbox, , [4f12cb9e9fddb08640fa9921cf36d32d],
PUP.Optional.CinemaHD.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\486f39d5be3842d1a5b143880bdcbae60069063.Sandbox.1, , [4f12cb9e9fddb08640fa9921cf36d32d],
PUP.Optional.CinemaHD.A, HKLM\SOFTWARE\CLASSES\CLSID\{22222222-2222-2222-2222-220622902263}, , [4f12cb9e9fddb08640fa9921cf36d32d],
PUP.Optional.CinemaHD.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110611901163}\INPROCSERVER32, , [4f12cb9e9fddb08640fa9921cf36d32d],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, , [69f8db8eff7df442d397d60cb15110f0],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}, , [69f8db8eff7df442d397d60cb15110f0],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}, , [69f8db8eff7df442d397d60cb15110f0],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}, , [69f8db8eff7df442d397d60cb15110f0],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}, , [69f8db8eff7df442d397d60cb15110f0],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, , [69f8db8eff7df442d397d60cb15110f0],
PUP.Optional.Boxore.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{EFA7A511-B491-4312-BB35-4586B99E45ED}, , [9bc6fe6b55271224a9a76a7135cd54ac],
PUP.Optional.Boxore.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{9E598662-1ABE-48BC-B522-EF13ED372D08}, , [9bc6fe6b55271224a9a76a7135cd54ac],
PUP.Optional.Boxore.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{7711974F-6685-46CD-A62E-63C7B46F9705}, , [9bc6fe6b55271224a9a76a7135cd54ac],
PUP.Optional.Boxore.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{9E598662-1ABE-48BC-B522-EF13ED372D08}, , [9bc6fe6b55271224a9a76a7135cd54ac],
PUP.Optional.Boxore.A, HKLM\SOFTWARE\CLASSES\AdRotate.AdRotate.1, , [9bc6fe6b55271224a9a76a7135cd54ac],
PUP.Optional.Boxore.A, HKLM\SOFTWARE\CLASSES\AdRotate.AdRotate, , [9bc6fe6b55271224a9a76a7135cd54ac],
PUP.Optional.Boxore.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\AdRotate.AdRotate, , [9bc6fe6b55271224a9a76a7135cd54ac],
PUP.Optional.Boxore.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{EFA7A511-B491-4312-BB35-4586B99E45ED}, , [9bc6fe6b55271224a9a76a7135cd54ac],
PUP.Optional.Boxore.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\AdRotate.AdRotate.1, , [9bc6fe6b55271224a9a76a7135cd54ac],
PUP.Optional.Boxore.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EFA7A511-B491-4312-BB35-4586B99E45ED}, , [9bc6fe6b55271224a9a76a7135cd54ac],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\Popcornew.OneClickCtrl.9, , [7ee3d891df9d45f123eb5217b251b44c],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\Popcornew.OneClickProcessLauncherMachine, , [9bc671f80d6fc274fb13cd9cf11224dc],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\Popcornew.OneClickProcessLauncherMachine.1.0, , [9ec3c2a71369181e44ca274291722ed2],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\Popcornew.Update3WebControl.3, , [88d98fda5a22e55120ee14559271ac54],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\PopcornewUpdate.CoCreateAsync, , [83dee78213699f977f8f0465e02303fd],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\PopcornewUpdate.CoCreateAsync.1.0, , [7fe287e21369bc7a14fa006926dd10f0],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\PopcornewUpdate.CoreClass, , [362b5d0cd6a665d124ea6306699a6e92],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\PopcornewUpdate.CoreClass.1, , [6100f6736e0e57df9876274234cf32ce],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\PopcornewUpdate.CoreMachineClass, , [0859eb7e97e59a9c808e026725dede22],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\PopcornewUpdate.CoreMachineClass.1, , [e081b6b3f08c1c1acc4292d7788bd42c],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\PopcornewUpdate.CredentialDialogMachine, , [00615019afcdc76fdf2f7ced06fd3cc4],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\PopcornewUpdate.CredentialDialogMachine.1.0, , [4e13d8915428be78e727f67393701de3],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\PopcornewUpdate.OnDemandCOMClassMachine, , [124f0366f4883ff720eeb4b5ad56857b],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\PopcornewUpdate.OnDemandCOMClassMachine.1.0, , [9fc2f376e993dd59f7175b0e996a30d0],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\PopcornewUpdate.OnDemandCOMClassMachineFallback, , [1c4576f38def40f64ac4165308fbee12],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\PopcornewUpdate.OnDemandCOMClassMachineFallback.1.0, , [372a28416b11a88e64aa0366bc47f010],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\PopcornewUpdate.OnDemandCOMClassSvc, , [d28feb7ed0acae887797fd6c20e3b24e],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\PopcornewUpdate.OnDemandCOMClassSvc.1.0, , [8fd23b2eb2ca3afcd638d792c43f52ae],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\PopcornewUpdate.ProcessLauncher, , [fe637aef15673ef886886306be45f60a],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\PopcornewUpdate.ProcessLauncher.1.0, , [570a82e7b1cb2016b6581851ac57d62a],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\PopcornewUpdate.Update3COMClassService, , [a1c06702dba1211514faf0790bf825db],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\PopcornewUpdate.Update3COMClassService.1.0, , [8dd4f673c7b5a690a16dee7b22e13ec2],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\PopcornewUpdate.Update3WebMachine, , [7be65910314b92a4d13db7b2c241cd33],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\PopcornewUpdate.Update3WebMachine.1.0, , [e1801752661622143bd3e188b05359a7],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\PopcornewUpdate.Update3WebMachineFallback, , [a5bc5c0dafcd86b00608452433d022de],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\PopcornewUpdate.Update3WebMachineFallback.1.0, , [461b9ecb611b092d64aa6ffaab584bb5],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\PopcornewUpdate.Update3WebSvc, , [a1c03c2d33490c2a6ba385e44fb48f71],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\PopcornewUpdate.Update3WebSvc.1.0, , [233e2049047884b20a045f0a659e09f7],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\APPID\PopcornewUpdate.exe, , [4a1775f40775a39310fd06635aa9ea16],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\MIME\DATABASE\CONTENT TYPE\application/x-vnd.Popcornew.oneclickctrl.9, , [90d144251c60cc6aaf62a5c1c43f7e82],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\MIME\DATABASE\CONTENT TYPE\application/x-vnd.Popcornew.update3webcontrol.3, , [065b52172359b58139d8471f56ad8977],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\30935, , [263b84e58bf150e66b31950347bc758b],
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, , [f46d24457a027cbaa0cd0abcb0544db3],
PUP.Optional.CinemaHD.A, HKLM\SOFTWARE\WOW6432NODE\CinemaHD Go Pro 2.4cV31.12, , [124fe881a5d739fd822cf072a3604ab6],
PUP.Optional.CinemaHD.A, HKLM\SOFTWARE\WOW6432NODE\CinemaHD Go Pro 2.4cV31.12-nv, , [d8892049d0ac69cde7c769f9c14206fa],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\Popcornew, , [c79a561393e937ff56bb6801847f4bb5],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\supWPM, , [99c8ea7f443841f5b8dd3342c63dc43c],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Popcornew.OneClickCtrl.9, , [342d22471369c27406085811c04337c9],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Popcornew.OneClickProcessLauncherMachine, , [2a3754157606e94d30de2148bd46936d],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Popcornew.OneClickProcessLauncherMachine.1.0, , [8dd472f74e2e68cea7672c3d19ea59a7],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Popcornew.Update3WebControl.3, , [0d544920403cad89f519d6936b9801ff],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PopcornewUpdate.CoCreateAsync, , [2b3684e592ea80b6bb53c5a41fe404fc],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PopcornewUpdate.CoCreateAsync.1.0, , [e67bbcad0d6f171f57b773f6af54966a],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PopcornewUpdate.CoreClass, , [233e1356a1dbcb6be22c2b3e9a69ee12],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PopcornewUpdate.CoreClass.1, , [eb76f871a6d6ea4c5cb238319b689f61],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PopcornewUpdate.CoreMachineClass, , [0a5765040d6fb0864ac4432648bb27d9],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PopcornewUpdate.CoreMachineClass.1, , [1f42bcadaad257df5db1c9a0f310da26],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PopcornewUpdate.CredentialDialogMachine, , [c39efe6baad292a4d13d3237f90a24dc],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PopcornewUpdate.CredentialDialogMachine.1.0, , [39281b4e56266fc7a06e2e3bf50e29d7],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PopcornewUpdate.OnDemandCOMClassMachine, , [bda4bdac5a2213239a746dfc887bb64a],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PopcornewUpdate.OnDemandCOMClassMachine.1.0, , [f071b0b973092115c9450b5e9b68cc34],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PopcornewUpdate.OnDemandCOMClassMachineFallback, , [a1c01158215b082e43cb5f0a21e28d73],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PopcornewUpdate.OnDemandCOMClassMachineFallback.1.0, , [065b2346215b57dfdf2f80e925def10f],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PopcornewUpdate.OnDemandCOMClassSvc, , [f170f970304c42f443cb680135ceef11],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PopcornewUpdate.OnDemandCOMClassSvc.1.0, , [bea3f475ef8d7fb724ea48217c8732ce],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PopcornewUpdate.ProcessLauncher, , [e77a0b5ec4b83afccb4396d332d17090],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PopcornewUpdate.ProcessLauncher.1.0, , [1849a3c6611b89ad808e15549172fe02],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PopcornewUpdate.Update3COMClassService, , [4a176405eb913afc32dc5a0ffb089c64],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PopcornewUpdate.Update3COMClassService.1.0, , [c1a0e08990ec94a2d23ca4c53cc74ab6],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PopcornewUpdate.Update3WebMachine, , [4c1576f3b1cbb77f000ea7c26b981fe1],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PopcornewUpdate.Update3WebMachine.1.0, , [87da5514473577bfee20adbc0bf806fa],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PopcornewUpdate.Update3WebMachineFallback, , [49180d5c19638babf618026747bc0cf4],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PopcornewUpdate.Update3WebMachineFallback.1.0, , [6af73831bfbd8aac65a92049ae55619f],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PopcornewUpdate.Update3WebSvc, , [2c354524a2da7cba6ba34425e61dbf41],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PopcornewUpdate.Update3WebSvc.1.0, , [2938323783f957dfd03e3b2e8281867a],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\PopcornewUpdate.exe, , [b2afd297bbc1122457b6521737ccaa56],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MIME\DATABASE\CONTENT TYPE\application/x-vnd.Popcornew.oneclickctrl.9, , [ff628bdee993b086bf522d394fb4758b],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MIME\DATABASE\CONTENT TYPE\application/x-vnd.Popcornew.update3webcontrol.3, , [5011d69376065bdbd0410066b74caf51],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\GLOBALUPDATE\UPDATE, , [035e4623f28ab6806370582548bbc739],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\INSTALLEDBROWSEREXTENSIONS\30935, , [88d92742aecec6704c50b3e5748f4cb4],
PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, , [441d2742354754e2abc2606622e260a0],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{4F43B27D-288E-460B-BFC6-F5AC79047CA4}, , [db86fb6ecab2e254610a89dc2bd82cd4],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS\@staging.google.com/globalUpdate Update;version=10, , [4c15e5845f1df541447d4c91cb393ac6],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS\@staging.google.com/globalUpdate Update;version=4, , [2e33da8f5c20bb7bd9e905d8e32119e7],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS\@tools.Popcornew.com/Popcornew Update;version=3, , [a4bd14551b611c1a1ef2175259aa59a7],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS\@tools.Popcornew.com/Popcornew Update;version=9, , [7be6d9904d2f00360010c2a7847fc23e],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPDP, , [65fc3f2a710b3ff7a1c2cca941c2b24e],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPTAB, , [f8698ddc93e961d5d1c37104dc2727d9],
PUP.Optional.V9.A, HKLM\SOFTWARE\WOW6432NODE\V9SOFTWARE\v9hp, , [eb76294080fc5bdb6cb63a672fd46e92],
PUP.Optional.IEPluginServices.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\APPLICATION\IePluginServices, , [a1c06bfe8af2cb6bdddb59113ac9c13f],
PUP.Optional.Popcornew.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Popcornew, , [2e33aebb017b77bfb65c79f07c87a25e],
PUP.Optional.CinemaHD.A, HKU\S-1-5-21-529024820-2446659567-4048709091-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\CinemaHD Go Pro 2.4cV31.12-nv, , [e57c4e1b99e3d264109f521013f0758b],
PUP.Optional.Nosibay.A, HKU\S-1-5-21-529024820-2446659567-4048709091-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Nosibay, , [ff625a0f225a94a23e7ed19421e2d030],
PUP.Optional.Popcornew.A, HKU\S-1-5-21-529024820-2446659567-4048709091-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Popcornew, , [3a27105904783cfab26094d5719204fc],
PUP.Optional.CinemaHD.A, HKU\S-1-5-21-529024820-2446659567-4048709091-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\CinemaHD Go Pro 2.4cV31.12, , [99c8c6a3e498b284812fc0a249ba53ad],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-529024820-2446659567-4048709091-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, , [76eb5b0e23598aace7269d32ea1a8977],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-529024820-2446659567-4048709091-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\30935, , [76eb19500676ec4a0e9f7ff238cb0df3],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-529024820-2446659567-4048709091-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\Cinema HDV31.12, , [f46d0f5a4834360067c2580ee91a32ce],
PUP.Optional.Qone8, HKU\S-1-5-21-529024820-2446659567-4048709091-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, , [83dedc8d82fa3df990dc398df80ccc34],
PUP.Optional.FastStart.A, HKU\S-1-5-21-529024820-2446659567-4048709091-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MOZILLA\EXTENDS, , [a8b9d9903f3d4aeccddacda508fba45c],
PUP.Optional.GlobalUpdate.T, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\globalUpdate, , [1d4422476a12d165ebf157edd132cb35],
PUP.Optional.GlobalUpdate.T, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\globalUpdatem, , [1d4422476a12d165ebf157edd132cb35],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\GOOGLEUPDATE.EXE, , [1d4422476a12d165ebf157edd132cb35],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\GOOGLEUPDATE.EXE, , [1d4422476a12d165ebf157edd132cb35],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}, , [1d4422476a12d165ebf157edd132cb35],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\globalUpdate.OneClickCtrl.10, , [1d4422476a12d165ebf157edd132cb35],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdate.OneClickCtrl.10, , [1d4422476a12d165ebf157edd132cb35],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5645E0E7-FC12-43BF-A6E4-F9751942B298}, , [1d4422476a12d165ebf157edd132cb35],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{5645E0E7-FC12-43BF-A6E4-F9751942B298}, , [1d4422476a12d165ebf157edd132cb35],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}, , [1d4422476a12d165ebf157edd132cb35],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\globalUpdate.Update3WebControl.4, , [1d4422476a12d165ebf157edd132cb35],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdate.Update3WebControl.4, , [1d4422476a12d165ebf157edd132cb35],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}, , [1d4422476a12d165ebf157edd132cb35],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}, , [1d4422476a12d165ebf157edd132cb35],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}, , [1d4422476a12d165ebf157edd132cb35],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}, , [1d4422476a12d165ebf157edd132cb35],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{909F2E0D-650B-46B9-A27D-5A893BDDF58D}, , [74ed8ddc0e6e96a0b3ba4d0b5ea545bb],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{909F2E0D-650B-46B9-A27D-5A893BDDF58D}, , [74ed8ddc0e6e96a0b3ba4d0b5ea545bb],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{909F2E0D-650B-46B9-A27D-5A893BDDF58D}, , [74ed8ddc0e6e96a0b3ba4d0b5ea545bb],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{ADA3F4C6-F003-41AE-968D-6C2FFF09DA28}, , [74ed8ddc0e6e96a0b3ba4d0b5ea545bb],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{ADA3F4C6-F003-41AE-968D-6C2FFF09DA28}, , [74ed8ddc0e6e96a0b3ba4d0b5ea545bb],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{ADA3F4C6-F003-41AE-968D-6C2FFF09DA28}, , [74ed8ddc0e6e96a0b3ba4d0b5ea545bb],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{0F840CB3-F4B0-4746-9211-94E5372FBD05}, , [74ed8ddc0e6e96a0b3ba4d0b5ea545bb],
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{9892108A-038E-4D48-9D3C-D1E2A9B706EC}, , [74ed8ddc0e6e96a0b3ba4d0b5ea545bb],
PUP.Optional.CinemaHD.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\CinemaHD Go Pro 2.4cV31.12, , [f869afba1d5f0a2c8248cb9247bc867a],

Registry Values: 8
PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|Popcornew, C:\Program Files (x86)\Popcornew\Popcornew\popcornew.exe, , [09581158fd7f1f170a5d4078966f32ce]
PUP.Optional.V9.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, http://search.v9.com/web/?type=ds&ts=1420063404&from=nsbuk&uid=BHTXWR202A1032GX670215F5_P02702A12G107359dabfXXXXXX150100&i=psd&t=34e6c7abc&q={searchTerms}, , [273add8cde9ea78ffad298ec3bc8e11f]
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\GLOBALUPDATE\UPDATE|path, C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe, , [035e4623f28ab6806370582548bbc739]
PUP.Optional.V9.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, http://search.v9.com/web/?type=ds&ts=1420063404&from=nsbuk&uid=BHTXWR202A1032GX670215F5_P02702A12G107359dabfXXXXXX150100&i=psd&t=34e6c7abc&q={searchTerms}, , [81e039309edebe785379d0b49073c53b]
PUP.Optional.FastStart.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|faststartff@gmail.com, C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8xda7k1i.default\extensions\faststartff@gmail.com, , [5a075c0dc4b893a3c51ac8112fd5a35d]
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPDP|dir, C:\Program Files (x86)\SupTab, , [65fc3f2a710b3ff7a1c2cca941c2b24e]
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPTAB|ptid, nsbuk, , [f8698ddc93e961d5d1c37104dc2727d9]
PUP.Optional.FastStart.A, HKU\S-1-5-21-529024820-2446659567-4048709091-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MOZILLA\EXTENDS|appid, faststartff@gmail.com, , [a8b9d9903f3d4aeccddacda508fba45c]

Registry Data: 10
PUP.Optional.V9.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, http://search.v9.com/web/?type=ds&ts=1420063404&from=nsbuk&uid=BHTXWR202A1032GX670215F5_P02702A12G107359dabfXXXXXX150100&i=psd&t=34e6c7abc&q={searchTerms}, Good: (www.google.com), Bad: (http://search.v9.com/web/?type=ds&ts=1420063404&from=nsbuk&uid=BHTXWR202A1032GX670215F5_P02702A12G107359dabfXXXXXX150100&i=psd&t=34e6c7abc&q={searchTerms}),,[fb6613563d3f0c2a9e97ef8b976e44bc]
PUP.Optional.V9.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, http://www.v9.com/?type=hp&ts=1420063404&from=nsbuk&uid=BHTXWR202A1032GX670215F5_P02702A12G107359dabfXXXXXX150100&i=psd&t=34e6c7abc, Good: (www.google.com), Bad: (http://www.v9.com/?type=hp&ts=1420063404&from=nsbuk&uid=BHTXWR202A1032GX670215F5_P02702A12G107359dabfXXXXXX150100&i=psd&t=34e6c7abc),,[fd64f4754f2dd26462d298e232d33bc5]
PUP.Optional.V9.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://www.v9.com/?type=hp&ts=1420063404&from=nsbuk&uid=BHTXWR202A1032GX670215F5_P02702A12G107359dabfXXXXXX150100&i=psd&t=34e6c7abc, Good: (www.google.com), Bad: (http://www.v9.com/?type=hp&ts=1420063404&from=nsbuk&uid=BHTXWR202A1032GX670215F5_P02702A12G107359dabfXXXXXX150100&i=psd&t=34e6c7abc),,[550c88e16319f83e67cf14666e97738d]
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Good: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Bad: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),,[1f4215547705360099e1434160a5fe02]
PUP.Optional.V9.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, http://search.v9.com/web/?type=ds&ts=1420063404&from=nsbuk&uid=BHTXWR202A1032GX670215F5_P02702A12G107359dabfXXXXXX150100&i=psd&t=34e6c7abc&q={searchTerms}, Good: (www.google.com), Bad: (http://search.v9.com/web/?type=ds&ts=1420063404&from=nsbuk&uid=BHTXWR202A1032GX670215F5_P02702A12G107359dabfXXXXXX150100&i=psd&t=34e6c7abc&q={searchTerms}),,[84dd78f1e894d3630332c5b59d68a759]
PUP.Optional.V9.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, http://www.v9.com/?type=hp&ts=1420063404&from=nsbuk&uid=BHTXWR202A1032GX670215F5_P02702A12G107359dabfXXXXXX150100&i=psd&t=34e6c7abc, Good: (www.google.com), Bad: (http://www.v9.com/?type=hp&ts=1420063404&from=nsbuk&uid=BHTXWR202A1032GX670215F5_P02702A12G107359dabfXXXXXX150100&i=psd&t=34e6c7abc),,[6bf62d3c1b61ca6cc0741e5cb35256aa]
PUP.Optional.V9.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://www.v9.com/?type=hp&ts=1420063404&from=nsbuk&uid=BHTXWR202A1032GX670215F5_P02702A12G107359dabfXXXXXX150100&i=psd&t=34e6c7abc, Good: (www.google.com), Bad: (http://www.v9.com/?type=hp&ts=1420063404&from=nsbuk&uid=BHTXWR202A1032GX670215F5_P02702A12G107359dabfXXXXXX150100&i=psd&t=34e6c7abc),,[fd64f871a4d86ccad85e71093acbfe02]
PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Good: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Bad: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),,[e37e73f6ceaeb383adcd62228e77b749]
PUP.Optional.V9.A, HKU\S-1-5-21-529024820-2446659567-4048709091-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://www.v9.com/?type=hp&ts=1420063404&from=nsbuk&uid=BHTXWR202A1032GX670215F5_P02702A12G107359dabfXXXXXX150100&i=psd&t=34e6c7abc, Good: (www.google.com), Bad: (http://www.v9.com/?type=hp&ts=1420063404&from=nsbuk&uid=BHTXWR202A1032GX670215F5_P02702A12G107359dabfXXXXXX150100&i=psd&t=34e6c7abc),,[c59cf673b9c3290d69c558226c99f60a]
PUP.Optional.V9.A, HKU\S-1-5-21-529024820-2446659567-4048709091-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, http://www.v9.com/?type=hp&ts=1420063404&from=nsbuk&uid=BHTXWR202A1032GX670215F5_P02702A12G107359dabfXXXXXX150100&i=psd&t=34e6c7abc, Good: (www.google.com), Bad: (http://www.v9.com/?type=hp&ts=1420063404&from=nsbuk&uid=BHTXWR202A1032GX670215F5_P02702A12G107359dabfXXXXXX150100&i=psd&t=34e6c7abc),,[c0a1dc8d3349f73f1f0d304a44c10ff1]

Folders: 159
PUP.Optional.NorthernThemesService.A, C:\Users\Amy\AppData\NTSFile, , [fd64cd9c6616f64083dace96c73c27d9],
PUP.Optional.IePluginServices.A, C:\ProgramData\IePluginServices, , [1c454b1e502c31054766162a33d0ef11],
PUP.Optional.IePluginServices.A, C:\ProgramData\IePluginServices\update, , [1c454b1e502c31054766162a33d0ef11],
PUP.Optional.FastStart.A, C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8xda7k1i.default\extensions\faststartff@gmail.com, , [d48d9bce5923f83e913f9ea307fc43bd],
PUP.Optional.FastStart.A, C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8xda7k1i.default\extensions\faststartff@gmail.com\chrome, , [d48d9bce5923f83e913f9ea307fc43bd],
PUP.Optional.FastStart.A, C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8xda7k1i.default\extensions\faststartff@gmail.com\chrome\content, , [d48d9bce5923f83e913f9ea307fc43bd],
PUP.Optional.FastStart.A, C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8xda7k1i.default\extensions\faststartff@gmail.com\chrome\content\include, , [d48d9bce5923f83e913f9ea307fc43bd],
PUP.Optional.FastStart.A, C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8xda7k1i.default\extensions\faststartff@gmail.com\chrome\content\include\tools, , [d48d9bce5923f83e913f9ea307fc43bd],
PUP.Optional.FastStart.A, C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8xda7k1i.default\extensions\faststartff@gmail.com\chrome\content\js, , [d48d9bce5923f83e913f9ea307fc43bd],
PUP.Optional.FastStart.A, C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8xda7k1i.default\extensions\faststartff@gmail.com\chrome\content\js\lib, , [d48d9bce5923f83e913f9ea307fc43bd],
PUP.Optional.FastStart.A, C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8xda7k1i.default\extensions\faststartff@gmail.com\chrome\content\js\module, , [d48d9bce5923f83e913f9ea307fc43bd],
PUP.Optional.FastStart.A, C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8xda7k1i.default\extensions\faststartff@gmail.com\chrome\content\js\pack, , [d48d9bce5923f83e913f9ea307fc43bd],
PUP.Optional.FastStart.A, C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8xda7k1i.default\extensions\faststartff@gmail.com\chrome\locale, , [d48d9bce5923f83e913f9ea307fc43bd],
PUP.Optional.FastStart.A, C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8xda7k1i.default\extensions\faststartff@gmail.com\chrome\locale\en, , [d48d9bce5923f83e913f9ea307fc43bd],
PUP.Optional.FastStart.A, C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8xda7k1i.default\extensions\faststartff@gmail.com\chrome\locale\en-US, , [d48d9bce5923f83e913f9ea307fc43bd],
PUP.Optional.FastStart.A, C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8xda7k1i.default\extensions\faststartff@gmail.com\chrome\locale\es, , [d48d9bce5923f83e913f9ea307fc43bd],
PUP.Optional.FastStart.A, C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8xda7k1i.default\extensions\faststartff@gmail.com\chrome\locale\es-419, , [d48d9bce5923f83e913f9ea307fc43bd],
PUP.Optional.FastStart.A, C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8xda7k1i.default\extensions\faststartff@gmail.com\chrome\locale\fr, , [d48d9bce5923f83e913f9ea307fc43bd],
PUP.Optional.FastStart.A, C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8xda7k1i.default\extensions\faststartff@gmail.com\chrome\locale\fr-BE, , [d48d9bce5923f83e913f9ea307fc43bd],
PUP.Optional.FastStart.A, C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8xda7k1i.default\extensions\faststartff@gmail.com\chrome\locale\fr-CA, , [d48d9bce5923f83e913f9ea307fc43bd],
PUP.Optional.FastStart.A, C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8xda7k1i.default\extensions\faststartff@gmail.com\chrome\locale\fr-CH, , [d48d9bce5923f83e913f9ea307fc43bd],
PUP.Optional.FastStart.A, C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8xda7k1i.default\extensions\faststartff@gmail.com\chrome\locale\fr-LU, , [d48d9bce5923f83e913f9ea307fc43bd],
PUP.Optional.FastStart.A, C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8xda7k1i.default\extensions\faststartff@gmail.com\chrome\locale\it, , [d48d9bce5923f83e913f9ea307fc43bd],
PUP.Optional.FastStart.A, C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8xda7k1i.default\extensions\faststartff@gmail.com\chrome\locale\it-CH, , [d48d9bce5923f83e913f9ea307fc43bd],
PUP.Optional.FastStart.A, C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8xda7k1i.default\extensions\faststartff@gmail.com\chrome\locale\pl, , [d48d9bce5923f83e913f9ea307fc43bd],
PUP.Optional.FastStart.A, C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8xda7k1i.default\extensions\faststartff@gmail.com\chrome\locale\pt-BR, , [d48d9bce5923f83e913f9ea307fc43bd],
PUP.Optional.FastStart.A, C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8xda7k1i.default\extensions\faststartff@gmail.com\chrome\locale\ru, , [d48d9bce5923f83e913f9ea307fc43bd],
PUP.Optional.FastStart.A, C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8xda7k1i.default\extensions\faststartff@gmail.com\chrome\locale\ru-MO, , [d48d9bce5923f83e913f9ea307fc43bd],
PUP.Optional.FastStart.A, C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8xda7k1i.default\extensions\faststartff@gmail.com\chrome\locale\tr, , [d48d9bce5923f83e913f9ea307fc43bd],
PUP.Optional.FastStart.A, C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8xda7k1i.default\extensions\faststartff@gmail.com\chrome\locale\vi, , [d48d9bce5923f83e913f9ea307fc43bd],
PUP.Optional.FastStart.A, C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8xda7k1i.default\extensions\faststartff@gmail.com\chrome\locale\zh-CN, , [d48d9bce5923f83e913f9ea307fc43bd],
PUP.Optional.FastStart.A, C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8xda7k1i.default\extensions\faststartff@gmail.com\chrome\locale\zh-TW, , [d48d9bce5923f83e913f9ea307fc43bd],
PUP.Optional.FastStart.A, C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8xda7k1i.default\extensions\faststartff@gmail.com\chrome\skin, , [d48d9bce5923f83e913f9ea307fc43bd],
PUP.Optional.FastStart.A, C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8xda7k1i.default\extensions\faststartff@gmail.com\defaults, , [d48d9bce5923f83e913f9ea307fc43bd],
PUP.Optional.FastStart.A, C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8xda7k1i.default\extensions\faststartff@gmail.com\defaults\preferences, , [d48d9bce5923f83e913f9ea307fc43bd],
PUP.Optional.FastStart.A, C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8xda7k1i.default\extensions\faststartff@gmail.com\modules, , [d48d9bce5923f83e913f9ea307fc43bd],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update, , [1d4422476a12d165ebf157edd132cb35],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0, , [1d4422476a12d165ebf157edd132cb35],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Download, , [1d4422476a12d165ebf157edd132cb35],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Install, , [1d4422476a12d165ebf157edd132cb35],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Offline, , [1d4422476a12d165ebf157edd132cb35],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Offline\{3E63B211-9A86-4CA4-92CF-4578348C73CA}, , [1d4422476a12d165ebf157edd132cb35],
PUP.Optional.GlobalUpdate.A, C:\Users\Amy\AppData\Local\Temp\comh.59811, , [c998e5845f1d8babcb2d311355aeef11],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab, , [adb4f47503798da9c15553f6768d13ed],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\skin, , [adb4f47503798da9c15553f6768d13ed],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web, , [adb4f47503798da9c15553f6768d13ed],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img, , [adb4f47503798da9c15553f6768d13ed],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js, , [adb4f47503798da9c15553f6768d13ed],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales, , [adb4f47503798da9c15553f6768d13ed],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\en-US, , [adb4f47503798da9c15553f6768d13ed],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-419, , [adb4f47503798da9c15553f6768d13ed],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-ES, , [adb4f47503798da9c15553f6768d13ed],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-BE, , [adb4f47503798da9c15553f6768d13ed],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CA, , [adb4f47503798da9c15553f6768d13ed],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CH, , [adb4f47503798da9c15553f6768d13ed],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-FR, , [adb4f47503798da9c15553f6768d13ed],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-LU, , [adb4f47503798da9c15553f6768d13ed],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-CH, , [adb4f47503798da9c15553f6768d13ed],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-IT, , [adb4f47503798da9c15553f6768d13ed],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pl, , [adb4f47503798da9c15553f6768d13ed],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt, , [adb4f47503798da9c15553f6768d13ed],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt-BR, , [adb4f47503798da9c15553f6768d13ed],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru, , [adb4f47503798da9c15553f6768d13ed],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru-MO, , [adb4f47503798da9c15553f6768d13ed],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\tr-TR, , [adb4f47503798da9c15553f6768d13ed],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\vi-VI, , [adb4f47503798da9c15553f6768d13ed],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-CN, , [adb4f47503798da9c15553f6768d13ed],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-TW, , [adb4f47503798da9c15553f6768d13ed],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\ext, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\icons, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\jquery-ui, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\jquery-ui\css, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\jquery-ui\css\smoothness, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\jquery-ui\css\smoothness\images, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\jquery-ui\js, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\lib, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\skin, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\skin\features, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\skin\fonts, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\skin\social, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\_locales, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\_locales\it, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\_locales\ar, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\_locales\bg, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\_locales\bn, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\_locales\ca, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\_locales\cs, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\_locales\da, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\_locales\de, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\_locales\el, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\_locales\en_GB, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\_locales\en_US, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\_locales\es, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\_locales\es_419, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\_locales\et, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\_locales\fa, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\_locales\fi, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\_locales\fil, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\_locales\fr, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\_locales\he, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\_locales\hi, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\_locales\hr, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\_locales\hu, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\_locales\id, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\_locales\ja, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\_locales\ko, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\_locales\lt, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\_locales\lv, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\_locales\ms, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\_locales\nb, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\_locales\nl, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\_locales\pl, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\_locales\pt_BR, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\_locales\pt_PT, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\_locales\ro, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\_locales\ru, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\_locales\sk, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\_locales\sl, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\_locales\sr, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\_locales\sv, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\_locales\ta, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\_locales\te, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\_locales\th, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\_locales\tr, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\_locales\uk, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\_locales\vi, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\_locales\zh_CN, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.4_0\_locales\zh_TW, , [78e9f475d9a379bd006972e6be4520e0],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Popcornew, , [035e2e3b3547ea4c3e2c9bbd6d9653ad],
PUP.Optional.Popcornew.A, C:\Users\Amy\AppData\Local\Popcornew\CrashReports, , [035e2e3b3547ea4c3e2c9bbd6d9653ad],
PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew, , [74ed8ddc0e6e96a0b3ba4d0b5ea545bb],
PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\CrashReports, , [74ed8ddc0e6e96a0b3ba4d0b5ea545bb],
PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Popcornew, , [74ed8ddc0e6e96a0b3ba4d0b5ea545bb],
PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Popcornew\IE, , [74ed8ddc0e6e96a0b3ba4d0b5ea545bb],
PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update, , [74ed8ddc0e6e96a0b3ba4d0b5ea545bb],
PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0, , [74ed8ddc0e6e96a0b3ba4d0b5ea545bb],
PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\Download, , [74ed8ddc0e6e96a0b3ba4d0b5ea545bb],
PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\Download\{82BE43A3-77AF-4978-B081-893EF286DC00}, , [74ed8ddc0e6e96a0b3ba4d0b5ea545bb],
PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\Download\{82BE43A3-77AF-4978-B081-893EF286DC00}\7.1.0.0, , [74ed8ddc0e6e96a0b3ba4d0b5ea545bb],
PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\Install, , [74ed8ddc0e6e96a0b3ba4d0b5ea545bb],
PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\Offline, , [74ed8ddc0e6e96a0b3ba4d0b5ea545bb],
PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\Offline\{E470E86C-7659-4C0A-95CC-7D7C7AA2775C}, , [74ed8ddc0e6e96a0b3ba4d0b5ea545bb],
PUP.Optional.Nosibay.A, C:\Users\Amy\AppData\Roaming\Nosibay, , [332e0b5e13690a2c60704f0b16ed4db3],
PUP.Optional.CinemaHD.A, C:\Program Files (x86)\CinemaHD Go Pro 2.4cV31.12, , [f869afba1d5f0a2c8248cb9247bc867a],
PUP.Optional.CrossRider.A, C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8xda7k1i.default\extensions\6c03cee0ab9442c4a67a507@58d658df5a30468fabf5c7a.com, , [cf92e188a1dbd1654efd87d8b35016ea],
PUP.Optional.CrossRider.A, C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8xda7k1i.default\extensions\6c03cee0ab9442c4a67a507@58d658df5a30468fabf5c7a.com\chrome, , [cf92e188a1dbd1654efd87d8b35016ea],
PUP.Optional.CrossRider.A, C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8xda7k1i.default\extensions\6c03cee0ab9442c4a67a507@58d658df5a30468fabf5c7a.com\chrome\content, , [cf92e188a1dbd1654efd87d8b35016ea],
PUP.Optional.CrossRider.A, C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8xda7k1i.default\extensions\6c03cee0ab9442c4a67a507@58d658df5a30468fabf5c7a.com\chrome\content\api, , [cf92e188a1dbd1654efd87d8b35016ea],
PUP.Optional.CrossRider.A, C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8xda7k1i.default\extensions\6c03cee0ab9442c4a67a507@58d658df5a30468fabf5c7a.com\chrome\content\core, , [cf92e188a1dbd1654efd87d8b35016ea],
PUP.Optional.CrossRider.A, C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8xda7k1i.default\extensions\6c03cee0ab9442c4a67a507@58d658df5a30468fabf5c7a.com\defaults, , [cf92e188a1dbd1654efd87d8b35016ea],
PUP.Optional.CrossRider.A, C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8xda7k1i.default\extensions\6c03cee0ab9442c4a67a507@58d658df5a30468fabf5c7a.com\defaults\preferences, , [cf92e188a1dbd1654efd87d8b35016ea],
PUP.Optional.CrossRider.A, C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8xda7k1i.default\extensions\6c03cee0ab9442c4a67a507@58d658df5a30468fabf5c7a.com\extensionData, , [cf92e188a1dbd1654efd87d8b35016ea],
PUP.Optional.CrossRider.A, C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8xda7k1i.default\extensions\6c03cee0ab9442c4a67a507@58d658df5a30468fabf5c7a.com\extensionData\plugins, , [cf92e188a1dbd1654efd87d8b35016ea],
PUP.Optional.CrossRider.A, C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8xda7k1i.default\extensions\6c03cee0ab9442c4a67a507@58d658df5a30468fabf5c7a.com\extensionData\userCode, , [cf92e188a1dbd1654efd87d8b35016ea],
PUP.Optional.CrossRider.A, C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8xda7k1i.default\extensions\6c03cee0ab9442c4a67a507@58d658df5a30468fabf5c7a.com\locale, , [cf92e188a1dbd1654efd87d8b35016ea],
PUP.Optional.CrossRider.A, C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8xda7k1i.default\extensions\6c03cee0ab9442c4a67a507@58d658df5a30468fabf5c7a.com\locale\en-US, , [cf92e188a1dbd1654efd87d8b35016ea],
PUP.Optional.CrossRider.A, C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8xda7k1i.default\extensions\6c03cee0ab9442c4a67a507@58d658df5a30468fabf5c7a.com\skin, , [cf92e188a1dbd1654efd87d8b35016ea],

Files: 561
PUP.Optional.NorthernThemesService.A, C:\Users\Amy\AppData\NTSFile\NTS.exe, , [88d987e22e4ed0661d6454a1639e0ff1],
PUP.Optional.CinemaHD.A, C:\Program Files (x86)\CinemaHD Go Pro 2.4cV31.12\94d0ada4-e366-4d52-a827-402a16954e74-6.exe, , [7fe25415e498c37364d60bafbb4a48b8],
PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Popcornew\popcornew.exe, , [09581158fd7f1f170a5d4078966f32ce],
PUP.Optional.IePluginService.A, C:\ProgramData\IePluginServices\PluginService.exe, , [3e23f772f3899e98917bd3a3877a5da3],
PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\PopcornewUpdate.exe, , [f86972f70b719d993d29b9ff61a419e7],
PUP.Optional.CinemaHD.A, C:\Program Files (x86)\CinemaHD Go Pro 2.4cV31.12\CinemaHD Go Pro 2.4cV31.12-bho64.dll, , [4f12cb9e9fddb08640fa9921cf36d32d],
PUP.Optional.CinemaHD.A, C:\Program Files (x86)\CinemaHD Go Pro 2.4cV31.12\CinemaHD Go Pro 2.4cV31.12-bho.dll, , [4f12cb9e9fddb08640fa9921cf36d32d],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\SupTab.dll, , [69f8db8eff7df442d397d60cb15110f0],
PUP.Optional.Boxore.A, C:\Program Files (x86)\Popcornew\Popcornew\IE\AdRotate32.dll, , [9bc6fe6b55271224a9a76a7135cd54ac],
PUP.Optional.CinemaHD.A, C:\Users\Amy\AppData\Roaming\ABRSJC.exe, , [3130e584245896a090aab604a46136ca],
PUP.Optional.CinemaHD.A, C:\Users\Amy\AppData\Roaming\NNGPOWO.exe, , [38297fea5824c76fb9817d3dcd38cf31],
PUP.Optional.Nova.A, C:\Program Files (x86)\4d142b37-87a4-4fb8-b668-085dbe03d6fd\ef749dcd-34c6-42f1-9380-fd7862671f3f.dll, , [9ec31356710b34023bd533cdaa581fe1],
PUP.Optional.Nova.A, C:\Program Files (x86)\ATI Technologies\dff51a4f-21ac-40ce-be8c-b84a67dcdea2.dll, , [86db3f2a0973ec4ace4239c758aaee12],
PUP.Optional.Nova.A, C:\Program Files (x86)\CinemaHD Go Pro 2.4cV31.12\383c4d64-81fa-487a-854a-629b461f8fd6.dll, , [92cf6ffa1a62989eca46887818ea1fe1],
PUP.Optional.CinemaHD.A, C:\Program Files (x86)\CinemaHD Go Pro 2.4cV31.12\94d0ada4-e366-4d52-a827-402a16954e74-2.exe, , [5b06eb7e4c30ec4abd7d902a50b5dd23],
PUP.Optional.CinemaHD.A, C:\Program Files (x86)\CinemaHD Go Pro 2.4cV31.12\94d0ada4-e366-4d52-a827-402a16954e74-3.exe, , [87dae0892953132352e8e2d83bca2cd4],
PUP.Optional.CinemaHD.A, C:\Program Files (x86)\CinemaHD Go Pro 2.4cV31.12\94d0ada4-e366-4d52-a827-402a16954e74-4.exe, , [164baabf3943c5716eccbffb24e1ea16],
PUP.Optional.CinemaHD.A, C:\Program Files (x86)\CinemaHD Go Pro 2.4cV31.12\94d0ada4-e366-4d52-a827-402a16954e74-5.exe, , [421fff6a5527063084b66a505ca9cd33],
PUP.Optional.CinemaHD.A, C:\Program Files (x86)\CinemaHD Go Pro 2.4cV31.12\94d0ada4-e366-4d52-a827-402a16954e74-64.exe, , [acb52b3eb2ca9f973901bbffae576a96],
PUP.Optional.CinemaHD.A, C:\Program Files (x86)\CinemaHD Go Pro 2.4cV31.12\94d0ada4-e366-4d52-a827-402a16954e74-7.exe, , [88d970f96517f244fa40f5c52bdaeb15],
PUP.Optional.CinemaHD.A, C:\Program Files (x86)\CinemaHD Go Pro 2.4cV31.12\CinemaHD Go Pro 2.4cV31.12-bg.exe, , [3829e9803547de581822b00ab2534eb2],
PUP.Optional.CinemaHD.A, C:\Program Files (x86)\CinemaHD Go Pro 2.4cV31.12\CinemaHD Go Pro 2.4cV31.12-codedownloader.exe, , [74edd990b2ca1d1919214e6ce81d2dd3],
PUP.Optional.CrossRider.A, C:\Program Files (x86)\CinemaHD Go Pro 2.4cV31.12\utils.exe, , [aab73e2b1a62a98d4f1181cb1ce4f20e],
PUP.Optional.Skytech.A, C:\Program Files (x86)\SupTab\DpInterface32.dll, , [94cdbdacb9c30b2bdb139b0a9b66b64a],
PUP.Optional.Skytech.A, C:\Program Files (x86)\SupTab\DpInterface64.dll, , [2f324e1b3e3e0630fef0297c2fd21be5],
PUP.Optional.Skytech.A, C:\Program Files (x86)\SupTab\SearchProtect32.dll, , [1051e5841a6276c0529cd0d5629fdf21],
PUP.Optional.Skytech.A, C:\Program Files (x86)\SupTab\SearchProtect64.dll, , [5f029ccd7a02082ec02ef8ad16ebc040],
PUP.Optional.IePluginService.A, C:\Program Files (x86)\SupTab\SupIePluginServiceUpdate.exe, , [560b72f7dba13bfb7696393d12ef6c94],
PUP.Optional.NorthernThemesService.A, C:\Users\Amy\AppData\Local\Temp\Wtmp496171\tmp\NTS_5.0.2.1302.exe, , [58092049bdbfc571b3ce33c2d03126da],
PUP.Optional.BubbleDock.A, C:\Users\Amy\AppData\Local\Temp\31122014220235\Uninstall Bubble Dock.exe, , [c49d75f4f98345f1f06c92c822dfca36],
PUP.Optional.Popcornew.A, C:\Windows\Installer\92672.msi, , [65fc09601e5e6bcb3730f9bff5104fb1],
PUP.Optional.Bubbledock.A, C:\Users\Amy\AppData\Roaming\Bubble Dock.boostrap.log, , [f76aaabfc8b48bab5decdd86d330b34d],
PUP.Optional.Bubbledock.A, C:\Users\Amy\AppData\Roaming\Bubble Dock.installation.log, , [b6ab80e95d1f75c1fc4d560ddc272dd3],
PUP.Optional.BoostSaves.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.boostsaves.com_0.localstorage, , [83de4227d4a89a9c87d7fb682fd4619f],
PUP.Optional.BoostSaves.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.boostsaves.com_0.localstorage-journal, , [a2bfef7a0b71f442302e5d068c7745bb],
PUP.Optional.NorthernThemesService.A, C:\Users\Amy\AppData\NTSFile\db.ini, , [fd64cd9c6616f64083dace96c73c27d9],
PUP.Optional.NorthernThemesService.A, C:\Users\Amy\AppData\NTSFile\helper.dll, , [fd64cd9c6616f64083dace96c73c27d9],
PUP.Optional.NorthernThemesService.A, C:\Users\Amy\AppData\NTSFile\uninst.exe, , [fd64cd9c6616f64083dace96c73c27d9],
PUP.Optional.Popcornew.A, C:\Windows\System32\Tasks\PopcornewUpdateTaskMachineCore, , [89d82e3bb7c54aecd69faebbe61d847c],
PUP.Optional.Popcornew.A, C:\Windows\System32\Tasks\PopcornewUpdateTaskMachineUA, , [90d1214817652c0a4e27a6c341c206fa],
PUP.Optional.Popcornew.A, C:\Windows\Tasks\PopcornewUpdateTaskMachineCore.job, , [233ea1c8522a5cda680e1158778cf907],
PUP.Optional.Popcornew.A, C:\Windows\Tasks\PopcornewUpdateTaskMachineUA.job, , [7ee399d01d5fb383373f0564d42f1de3],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\94d0ada4-e366-4d52-a827-402a16954e74-1, , [431e2b3ea5d7270fb519423ba85beb15],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\94d0ada4-e366-4d52-a827-402a16954e74-2, , [01607beecdafb08611bd572620e39b65],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\94d0ada4-e366-4d52-a827-402a16954e74-3, , [afb25b0e2656ba7c7c52d9a48e75728e],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\94d0ada4-e366-4d52-a827-402a16954e74-4, , [451cd7925428e6500fbf3944887be21e],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\94d0ada4-e366-4d52-a827-402a16954e74-5, , [c0a1afbab6c6e551e5e983fa38cb6f91],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\94d0ada4-e366-4d52-a827-402a16954e74-5_user, , [540d501938443df923ab1766788b3ec2],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\94d0ada4-e366-4d52-a827-402a16954e74-6, , [bba6beabacd0a39378560d70897ab050],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\94d0ada4-e366-4d52-a827-402a16954e74-7, , [29386efb97e5bb7be1ed7a03d72c1ce4],
PUP.Optional.V9.A, C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8xda7k1i.default\searchplugins\v9.xml, , [2938ea7f0775d95de9aec7bd55ae748c],
PUP.Optional.ShoppingGate.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_inst.shoppingate.info_0.localstorage, , [7fe254153a424aec3690107c778cd12f],
PUP.Optional.ShoppingGate.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_inst.shoppingate.info_0.localstorage-journal, , [97cabbae2e4ee1557650a2eafd06ed13],
PUP.Optional.V9.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.v9.com_0.localstorage, , [b5ac4722c1bb58deb47ea8e64db65da3],
PUP.Optional.V9.A, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.v9.com_0.localstorage-journal, , [8cd521486c1055e16bc785095ea5c937],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\94d0ada4-e366-4d52-a827-402a16954e74-1.job, , [6ef36603205cc07624396576ec18f10f],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\94d0ada4-e366-4d52-a827-402a16954e74-2.job, , [342da2c7f884d363e875ca1135cfd030],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\94d0ada4-e366-4d52-a827-402a16954e74-3.job, , [eb7696d3f488b284134ae0fb867eee12],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\94d0ada4-e366-4d52-a827-402a16954e74-4.job, , [530eed7c681414225ffe4c8f1ce8b24e],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\94d0ada4-e366-4d52-a827-402a16954e74-5.job, , [2140d792a9d3ed49104d1bc0cb39817f],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\94d0ada4-e366-4d52-a827-402a16954e74-5_user.job, , [b0b1de8b0a7234023f1e83585aaaa858],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\94d0ada4-e366-4d52-a827-402a16954e74-6.job, , [fc65cd9ca7d554e24617e0fb1de7bc44],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\94d0ada4-e366-4d52-a827-402a16954e74-7.job, , [e77aa6c3255776c0f6677764c83cb64a],
PUP.Optional.GlobalUpdate.A, C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job, , [045db2b76c10d36393e0c01bcd379a66],

PART1 due to character limit:


snadge

  • Guest
Re: just sent this to EaseUS back up - virus infections
« Reply #1 on: 01 January 2015, 15:40:13 »
Quote
Hello Paul,

Do you refer to EaseUS Todo Backup Free or EaseUS Partition Master Free?

Sincerely,

Ted
EaseUS Customer Service Department
http://www.easeus.com/support.htm


Hi Ted

it was backup as that’s what is was trying to do - backup a partition to another drive

There was tons of stuff installed along with it, browser hijacking, 3rd party software and some real nasty stuff too, I had to use Mbam to clean most the stuff off but now were having to take the laptop to PC world to get it cleaned at the cost of £50 cos the amount of stuff MBAM found was unreal, ive scanned with Norton and Kaspersky but im still not happy that its clean

Paul

-----Original Message-----
From: EaseUS Customer Service Department [mailto:support@partition-tool.com]
Sent: 01 January 2015 07:45
To: snadge@live.com
Subject: Re: Fwd: terrible software



snadge

  • Guest
Re: just sent this to EaseUS back up - virus infections
« Reply #2 on: 02 January 2015, 07:40:23 »
check it out:

Quote
Hello Paul,

We are sorry to what you have suffered. However, we don't think this can happen to EaseUS Todo Backup. EaseUS Partition Master Free will recommend two products when you install it, but EaseUS Todo Backup doesn't.

Sincerely,

Ted
EaseUS Customer Service Department


EASUS BACKUP DOESN’T DO IT HE SAYS: Wrong, I have screenshots of easus Backup on tech radar website where I got it...for obvious reasons ive removed the software but have the scanning log which reveals the many 1000's items installed as PUP's/MALWARE , is this the kind of software you deal with?....browser hijackers ,  PUP installers, some install without permission? 16 in total..so if you click "express" and trust your company you end up with and infected machine, it just installed a whole LOAD of stuff and over took my browser

- tell u what I will reinstall it in VMware win 8.1 and see what happens eh?- ive got the exact same copy I got from you

Firstly (in win 7 x64):
a screenshot of the program you say couldn't use to get this from , I got it from the location a i said http://i.imgur.com/fWOIUCT.jpg and http://i.imgur.com/8xu05zf.jpg

Secondly:
I REALLY THINK YOU SHOULD TAKE A READ OF THIS:
http://www.herdprotect.com/download-easeus-todo-backup.exe-853114261ede6cfe9e1de412fcd2630fa700697b.aspx

Thirdly:
Norton saying it is unsafe and has been removed before I could even use it:
http://i.imgur.com/d2DgOtO.jpg

so I disabled Norton and ran win8.1 in VMware, I have screenshots of FIFTEEN  items your program has put on this machine, this is unreal http://i.imgur.com/QSysTSf.jpg and http://i.imgur.com/R70Ep7b.jpg http://i.imgur.com/IW4FjYm.jpg http://i.imgur.com/ebftdeu.jpg http://i.imgur.com/Khvl6mS.jpg http://i.imgur.com/yL8z1LQ.jpg <- bubbledock and knctr overtaking my computer and can only be uninstalled with MBAM http://i.imgur.com/SIVjKJl.jpg http://i.imgur.com/KmF4O2e.jpg http://i.imgur.com/z2iz62V.jpg http://i.imgur.com/Ied4Ihw.jpg http://i.imgur.com/mHdJNFR.jpg http://i.imgur.com/L1ZTplp.jpg http://i.imgur.com/GMfM6UP.jpg http://i.imgur.com/lmEhFwb.jpg  V9 browser hijack http://i.imgur.com/uFM0qID.jpg after supposedly uninstalled!!!  Requiring anti-malware to remove also http://i.imgur.com/1yenygG.jpg http://i.imgur.com/NooS7KZ.jpg

http://i.imgur.com/9VT5Nip.jpg

http://i.imgur.com/PbF7QR5.jpg

you will see plenty of detections there!

is this the kind of product you sell/give to people that severely infect a computer, whos going to pay the £50 fee to get my GF's laptop fixed?  You?

I will be taking this to OFCOM and any other official body I can find as I think its a disgrace

Regards

Paul


-----Original Message-----
From: EaseUS Customer Service Department [mailto:support@partition-tool.com]
Sent: 02 January 2015 01:57
To: Paul Bartley
Subject: Re: Fwd: terrible software



snadge

  • Guest
Re: just sent this to EaseUS back up - virus infections ADMITS FAULT
« Reply #3 on: 04 January 2015, 08:12:50 »
i got a reply saying:

Quote
Hi Paul,

We apologize sincerely for the trouble cause to you.
First, if you download any product from our website, we can confirm it is safe, we strong suggest you download our product from our website http://www.easeus.com/download.htm in the future.

The product which you download is from another web site, it is http://dlgweu.blob.core....., you can see it in following screenshot:

 (this was one of 20 or so screenshots i sent them)


We did not add our product to this site and we don't have any cooperation with this site. EaseUS is a reputable company, we are working hard on solving issue for our customer instead of damage customer's computer.

We hope you can download product from its official website in the future for any product.

Sincerely,

Jason
EaseUS Customer Service Department

SO

I REPLIED:


Quote
That was the source from the page I used at tech radar – so that’s the
 server THEY must be using – I can guarantee I downloaded it from tech
 radar – just cost they use a different server to host files on then
 that’s not my problem now is it?


 There you go, enough evidence I think!  An Absolute joke that you let
someone like Tech Radar pile on loads of malware onto your software
 and then let people download them thinking it is a trustworthy site
And … then claim to me I didn’t even download it from there!  What a  farce and WILL BE TAKING THIS FURTHER I have more evidence that proves
 this but refuse to disclose at this time!

TO WHICH THEY IMMEDIATELY REPLIED:

Quote
Hi Paul,

We are contacting the website and will make solemn representations about the issue.

Please don't download any of our products from this website in current.

Thanks for your feedback information again!

Sincerely,

Paul
EaseUS Customer Service Department
http://www.easeus.com/support.htm

 

Powered by EzPortal