GroupPolicy: Group Policy on Chrome detected <======= ATTENTION C:\ProgramData\boostwebapp S2 imhmypneta; C:\ProgramData\boostwebapp\1.1.0.31\gefwucu.exe [202736 2015-05-03] () S3 Juanenodra; C:\ProgramData\boostwebapp\1.1.0.31\Juanenodra.exe [2771968 2015-05-03] () S2 jylvirmid; C:\ProgramData\boostwebapp\1.1.0.31\gefaucu.exe [499696 2015-05-03] () S2 mikikycu; C:\Users\isaiah\AppData\Roaming\4C4C4544-1430715185-5A10-8058-C8C04F4C5031\nsu9557.tmp [117248 2015-05-08] () C:\Users\isaiah\AppData\Roaming\4C4C4544-1430715185-5A10-8058-C8C04F4C5031 S2 QumbaFyvu; C:\ProgramData\boostwebapp\1.1.0.31\XebbaEwyn.exe [266736 2015-05-03] () S2 wyzicyjy; C:\Users\isaiah\AppData\Roaming\4C4C4544-1430715185-5A10-8058-C8C04F4C5031\jnsm42CF.tmp [224768 2015-05-03] () S1 tammgF119; C:\windows\system32\Drivers\tammgF119.sys [34952 2015-05-03] () C:\windows\system32\Drivers\tammgF119.sys S1 tammgR119; C:\windows\system32\Drivers\tammgR119.sys [37000 2015-05-03] () C:\windows\system32\Drivers\tammgR119.sys 2015-05-08 20:46 - 2015-05-03 21:53 - 00037000 _____ () C:\Windows\System32\Drivers\tammgR119.sys 2015-05-08 20:45 - 2015-05-03 21:53 - 00034952 _____ () C:\Windows\System32\Drivers\tammgF119.sys 2015-05-03 22:07 - 2015-05-03 22:07 - 00000000 ____D () C:\Users\isaiah\AppData\Local\SearchProtect 2015-05-03 22:00 - 2015-05-03 22:00 - 00003464 _____ () C:\Windows\System32\Tasks\ProPCCleaner_Popup 2015-05-03 22:00 - 2015-05-03 22:00 - 00003200 _____ () C:\Windows\System32\Tasks\ProPCCleaner_Start 2015-05-03 21:59 - 2015-05-03 22:05 - 00000000 ____D () C:\Users\isaiah\AppData\Local\4C4C4544-1430690388-5A10-8058-C8C04F4C5031 2015-05-03 21:59 - 2015-05-03 21:59 - 00000000 ____D () C:\Users\isaiah\AppData\Local\Pro_PC_Cleaner 2015-05-03 21:53 - 2015-05-10 20:51 - 00004816 _____ () C:\Windows\SysWOW64\Juanenodra.ini 2015-05-03 21:53 - 2015-05-10 20:51 - 00002720 _____ () C:\Windows\SysWOW64\JuanenodraOff.ini 2015-05-03 21:53 - 2015-05-10 20:51 - 00002720 _____ () C:\Windows\System32\JuanenodraOff.ini 2015-05-03 21:53 - 2015-05-08 20:37 - 00000000 ____D () C:\Users\isaiah\AppData\Roaming\4C4C4544-1430715185-5A10-8058-C8C04F4C5031 2015-05-03 21:53 - 2015-05-03 21:53 - 00000000 ____D () C:\ProgramData\boostwebapp 2015-05-03 21:53 - 2015-05-03 17:13 - 00398336 _____ () C:\Windows\System32\Juanenodra64.dll 2015-05-03 21:53 - 2015-05-03 17:12 - 00329216 _____ () C:\Windows\SysWOW64\Juanenodra.dll C:\Users\isaiah\AppData\Local\Temp\2100.exe C:\Users\isaiah\AppData\Local\Temp\226380_199177.exe C:\Users\isaiah\AppData\Local\Temp\3faig5ns.dll C:\Users\isaiah\AppData\Local\Temp\4c2459bebc146bfd821d90e28a2411ab.dll C:\Users\isaiah\AppData\Local\Temp\6_Offer_12.exe C:\Users\isaiah\AppData\Local\Temp\81c992b.exe C:\Users\isaiah\AppData\Local\Temp\83929-92631-microsoft-office-2010.exe C:\Users\isaiah\AppData\Local\Temp\a15154fd9009bc6f9bea0d0659312534.dll C:\Users\isaiah\AppData\Local\Temp\bitool.dll C:\Users\isaiah\AppData\Local\Temp\bpygdfsv.dll C:\Users\isaiah\AppData\Local\Temp\CheatEngine62Clean.exe C:\Users\isaiah\AppData\Local\Temp\conduitinstaller.exe C:\Users\isaiah\AppData\Local\Temp\couponamazing.exe C:\Users\isaiah\AppData\Local\Temp\cvtres.exe C:\Users\isaiah\AppData\Local\Temp\DM1394570410.exe C:\Users\isaiah\AppData\Local\Temp\fbyho1hu.dll C:\Users\isaiah\AppData\Local\Temp\i4jdel0.exe C:\Users\isaiah\AppData\Local\Temp\ICReinstall_donkey-kong.exe C:\Users\isaiah\AppData\Local\Temp\IminentSetup.exe C:\Users\isaiah\AppData\Local\Temp\instloffer.exe C:\Users\isaiah\AppData\Local\Temp\InternetTurboSetup__1814_i1675065_il1537.exe C:\Users\isaiah\AppData\Local\Temp\lnd15xiv.dll C:\Users\isaiah\AppData\Local\Temp\nsb4CAB.tmp.exe C:\Users\isaiah\AppData\Local\Temp\oi_{74E8797E-56B6-42A9-8C89-469757A0DC67}.exe C:\Users\isaiah\AppData\Local\Temp\PCFixSpeedSetup.exe C:\Users\isaiah\AppData\Local\Temp\photostage_1.0.0.50_1.5.0.130_update_all.exe C:\Users\isaiah\AppData\Local\Temp\safeguard.exe C:\Users\isaiah\AppData\Local\Temp\somoto_HD CODEC_1.0.exe C:\Users\isaiah\AppData\Local\Temp\SpOrder.dll C:\Users\isaiah\AppData\Local\Temp\supoptsetup.exe C:\Users\isaiah\AppData\Local\Temp\tbcpa0.dll C:\Users\isaiah\AppData\Local\Temp\UNINSTALL.EXE C:\Users\isaiah\AppData\Local\Temp\Updater.exe C:\Users\isaiah\AppData\Local\Temp\utt88CD.tmp.exe C:\Users\isaiah\AppData\Local\Temp\winziprosetup-WZRO6_20130221.exe