Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Optimizer Pro infection - Please Help [Closed]

Started by redleader74 , Jul 22 2014 11:34 AM

  • This topic is locked This topic is locked

#1
redleader74
Posted 22 July 2014 - 11:34 AM

redleader74

    Member

  • Member
  • PipPipPip
  • 195 posts

I recently had Optimizer Pro show up on my computer. Along with this came a bunch of other things that go installed.  I suspect this happened during a Java update (I've always been very suspicious of these prompts to update java, but that's a separate discussion).  So after Optimizer Pro was installed, I started getting all sorts of pop ups and other software showing up.  It became impossible to open browsers or even log on to GeeksToGo.  I used another computer to download AdwCleaner, Malwarebytes, and OTL.  After running AdwCleaner, I found that the unwanted software was gone, but I was unable to get onto the internet via IE or Firefox (although my internet connection is fine, it appears to be a problem with the proxy).  Next I ran Malwarebytes, here are the two logs:

 

# AdwCleaner v3.216 - Report created 22/07/2014 at 09:36:53
# Updated 17/07/2014 by Xplode
# Operating System : Windows 7 Professional Service Pack 1 (64 bits)
# Username : Kwong - KWONGCHANG-PC
# Running from : C:\Users\Kwong\Desktop\AdwCleaner.exe
# Option : Clean

***** [ Services ] *****

Service Deleted : 70e6ca8c
Service Deleted : CltMngSvc
Service Deleted : servervo
[#] Service Deleted : Update HulaToo

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\optimizer pro v3.2
Folder Deleted : C:\Program Files (x86)\AnyProtectEx
Folder Deleted : C:\Program Files (x86)\Browsersafeguard
Folder Deleted : C:\Program Files (x86)\File Type Helper
Folder Deleted : C:\Program Files (x86)\HulaToo
Folder Deleted : C:\Program Files (x86)\Optimizer Pro
Folder Deleted : C:\Program Files (x86)\SearchProtect
Folder Deleted : C:\Program Files (x86)\Common Files\Software Update Utility
Folder Deleted : C:\Users\Kwong\AppData\Local\PackageAware
Folder Deleted : C:\Users\Kwong\AppData\Local\SearchProtect
Folder Deleted : C:\Users\Kwong\AppData\Local\Wajam
Folder Deleted : C:\Users\Kwong\AppData\Local\Temp\HulaToo
Folder Deleted : C:\Users\Kwong\AppData\Roaming\Optimizer Pro
Folder Deleted : C:\Users\Kwong\AppData\Roaming\VOPackage
Folder Deleted : C:\Users\Kwong\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AnyProtect PC Backup
Folder Deleted : C:\Users\Kwong\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VOPackage
Folder Deleted : C:\Users\Kwong\Documents\Optimizer Pro
File Deleted : C:\END
File Deleted : C:\Users\Kwong\AppData\Local\AnyProtectScannerSetup.exe
File Deleted : C:\Users\Kwong\AppData\Roaming\aps.scan.quick.results
File Deleted : C:\Users\Kwong\AppData\Roaming\aps.scan.results
File Deleted : C:\Users\Kwong\AppData\Roaming\aps.uninstall.scan.results
File Deleted : C:\Users\Kwong\Desktop\AnyProtect.lnk
File Deleted : C:\Users\Kwong\Desktop\Continue VuuPC Installation.lnk
File Deleted : C:\Users\Kwong\Desktop\Optimizer Pro.lnk
File Deleted : C:\Users\Kwong\AppData\Roaming\Mozilla\Firefox\Profiles\mz1g0hz2.default\searchplugins\trovi-search.xml
File Deleted : C:\Users\Kwong\AppData\Roaming\Mozilla\Firefox\Profiles\mz1g0hz2.default\user.js
File Deleted : C:\Windows\Tasks\AmiUpdXp.job
File Deleted : C:\Windows\System32\Tasks\AmiUpdXp
File Deleted : C:\Windows\Tasks\APSnotifierPP1.job
File Deleted : C:\Windows\System32\Tasks\APSnotifierPP1
File Deleted : C:\Windows\Tasks\APSnotifierPP2.job
File Deleted : C:\Windows\System32\Tasks\APSnotifierPP2
File Deleted : C:\Windows\Tasks\APSnotifierPP3.job
File Deleted : C:\Windows\System32\Tasks\APSnotifierPP3
File Deleted : C:\Windows\System32\Tasks\BrowserSafeguard Update Task

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp
Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Optimizer Pro]
Key Deleted : HKLM\SOFTWARE\Classes\AppID\dnu.EXE
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdate
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUIBrowser
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUIBrowser.1
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUpdController
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUpdController.1
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\App24x7Help_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\App24x7Help_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\BingBar_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\optimizerpro_rasapi32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\optimizerpro_rasmancs
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\optprostart_rasapi32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\optprostart_rasmancs
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\wajamupdater_rasapi32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\wajamupdater_rasmancs
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [AnyProtect Scanner]
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_renamer_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_renamer_RASMANCS
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{6C259840-5BA8-46E6-8ED1-EF3BA47D8BA1}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AB65CAF0-FC3B-40F8-8B88-6D096A48F659}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E15A9BFD-D16D-496D-8222-44CADF316E70}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{065C1A21-97F8-45FB-A9F0-861B60FACEC8}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3204358F-5904-46A6-841F-D6B5BE3EF4E3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3AE67737-0E3E-44AA-AA5E-46A68BF017FF}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3EE5B726-044A-48D2-AA7B-049BD9A0F62A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{60FBBE03-57FF-49D8-B38E-053D3F489825}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6A5182F1-C0B8-42B8-96CC-7F329CD46913}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6C153418-8E4D-4FAF-AF27-5201E38463A7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A26A2F05-AC4D-4A1E-9531-9125F7309B78}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CC5D6240-7DF0-435D-9B9B-F8586A99DE86}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F343045E-E20A-46E1-82D8-9962C43EFC9E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FBB360DC-CB6C-4D6A-808A-2C773151BFFF}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FFD7DDAC-EC28-42A5-8D39-917B9078604B}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{32C53681-8E69-4659-8320-7422685BD486}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{660E6F4F-840D-436D-B668-433D9591BAC5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E7435878-65B9-44D1-A443-81754E5DFC90}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{596EAA89-F3D2-4174-9BD9-F7D79C744CDA}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{92380354-381A-471F-BE2E-DD9ACD9777EA}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AB65CAF0-FC3B-40F8-8B88-6D096A48F659}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AB65CAF0-FC3B-40F8-8B88-6D096A48F659}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AB65CAF0-FC3B-40F8-8B88-6D096A48F659}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{32C53681-8E69-4659-8320-7422685BD486}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{660E6F4F-840D-436D-B668-433D9591BAC5}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{E7435878-65B9-44D1-A443-81754E5DFC90}
Key Deleted : HKCU\Software\AnyProtect
Key Deleted : HKCU\Software\BrowserSafeguardInstalled
Key Deleted : HKCU\Software\Cr_Installer
Key Deleted : HKCU\Software\HulaToo
Key Deleted : HKCU\Software\Optimizer Pro
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
Key Deleted : HKLM\Software\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Deleted : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Deleted : HKLM\Software\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Key Deleted : HKLM\Software\BrowserSafeGuard
Key Deleted : HKLM\Software\HulaToo
Key Deleted : HKLM\Software\SearchProtect
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AnyProtect
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BrowserSafeGuard
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdUtility
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VOPackage
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HulaToo
Data Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll
Data Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll

***** [ Browsers ] *****

-\\ Internet Explorer v9.0.8112.16457

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]

-\\ Mozilla Firefox v22.0 (en-US)

[ File : C:\Users\Kwong\AppData\Roaming\Mozilla\Firefox\Profiles\mz1g0hz2.default\prefs.js ]

Line Deleted : user_pref("browser.newtab.url", "hxxp://www.trovi.com/?gd=&ctid=CT3330390&octid=EB_ORIGINAL_CTID&ISID=M33ACB83C-D0C7-493A-858C-23E0FA204475&SearchSource=69&CUI=&SSPV=&Lay=1&UM=6&UP=SPFC2B0FB6-C7A6-4CB[...]
Line Deleted : user_pref("browser.search.defaultenginename", "Trovi search");
Line Deleted : user_pref("browser.search.selectedEngine", "Trovi search");
Line Deleted : user_pref("browser.startup.homepage", "hxxp://www.trovi.com/?gd=&ctid=CT3330390&octid=EB_ORIGINAL_CTID&ISID=M33ACB83C-D0C7-493A-858C-23E0FA204475&SearchSource=55&CUI=&UM=6&UP=SPFC2B0FB6-C7A6-4CB8-9E5F[...]

-\\ Google Chrome v

[ File : C:\Users\Kwong\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [10690 octets] - [22/07/2014 09:35:59]
AdwCleaner[S0].txt - [10268 octets] - [22/07/2014 09:36:53]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [10329 octets] ##########
 

 

Here is the Malbwarebytes log:

 

<?xml version="1.0" encoding="UTF-16"?>

-<mbam-log>


-<header>

<date>2014/07/22 09:49:47 -0700</date>

<logfile>mbam-log-2014-07-22 (09-49-45).xml</logfile>

<isadmin>yes</isadmin>

</header>


-<engine>

<version>2.00.2.1012</version>

<malware-database>v2014.07.22.06</malware-database>

<rootkit-database>v2014.07.17.01</rootkit-database>

<license>free</license>

<file-protection>disabled</file-protection>

<web-protection>disabled</web-protection>

<self-protection>disabled</self-protection>

</engine>


-<system>

<osversion>Windows 7 Service Pack 1</osversion>

<arch>x64</arch>

<username>Kwong</username>

<filesys>NTFS</filesys>

</system>


-<summary>

<type>threat</type>

<result>completed</result>

<objects>403787</objects>

<time>1888</time>

<processes>6</processes>

<modules>0</modules>

<keys>30</keys>

<values>3</values>

<datas>0</datas>

<folders>15</folders>

<files>145</files>

<sectors>0</sectors>

</summary>


-<options>

<memory>enabled</memory>

<startup>enabled</startup>

<filesystem>enabled</filesystem>

<archives>enabled</archives>

<rootkits>disabled</rootkits>

<deeprootkit>disabled</deeprootkit>

<heuristics>enabled</heuristics>

<pup>enabled</pup>

<pum>enabled</pum>

</options>


-<items>


-<process>

<path>C:\Program Files (x86)\B021CBBD-E38E-4F8C-8E93-6624B0597A23\skwdldhvtp64.exe</path>

<vendor>PUP.Optional.AdPeak.A</vendor>

<action>delete-on-reboot</action>

<pid>1824</pid>

<hash>ace2dbc70f6ce84edb7a2c76df25d12f</hash>

</process>


-<process>

<path>C:\Program Files (x86)\Convert Files for Free\ConvertFilesforFreeUpdt.exe</path>

<vendor>PUP.Optional.FreeFileConverter.A</vendor>

<action>delete-on-reboot</action>

<pid>2032</pid>

<hash>d6b8abf7c0bb4de963b1b48028dc8878</hash>

</process>


-<process>

<path>C:\Program Files\005\cyycfhtzro64.exe</path>

<vendor>PUP.Optional.AdPeak.A</vendor>

<action>delete-on-reboot</action>

<pid>1112</pid>

<hash>216dbfe3accf8fa7a8aec9d9bb49e719</hash>

</process>


-<process>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\SevereWeatherAlertsApp.exe</path>

<vendor>PUP.Optional.SevereWeatherAlerts.A</vendor>

<action>delete-on-reboot</action>

<pid>3384</pid>

<hash>4e40bfe3c2b95bdbf8045e001fe2946c</hash>

</process>


-<process>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\SevereWeatherAlerts.exe</path>

<vendor>PUP.Optional.SevereWeatherAlerts.A</vendor>

<action>delete-on-reboot</action>

<pid>3392</pid>

<hash>0a841e847cff082e32cb0d510001b64a</hash>

</process>


-<process>

<path>C:\Program Files (x86)\Open JDK Explorer\ywnmon32.exe</path>

<vendor>PUP.Optional.OpenJDKExplorer.A</vendor>

<action>delete-on-reboot</action>

<pid>3560</pid>

<hash>5539366c9edd3303126dd2f42ad8f10f</hash>

</process>


-<key>

<path>HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\AllDaySavingsService64</path>

<vendor>PUP.Optional.AdPeak.A</vendor>

<action>success</action>

<hash>ace2dbc70f6ce84edb7a2c76df25d12f</hash>

</key>


-<key>

<path>HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\ConvertFilesforFreeUpdt</path>

<vendor>PUP.Optional.FreeFileConverter.A</vendor>

<action>success</action>

<hash>d6b8abf7c0bb4de963b1b48028dc8878</hash>

</key>


-<key>

<path>HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\cyycfhtzro64</path>

<vendor>PUP.Optional.AdPeak.A</vendor>

<action>success</action>

<hash>216dbfe3accf8fa7a8aec9d9bb49e719</hash>

</key>


-<key>

<path>HKLM\SOFTWARE\CLASSES\CLSID\{59A062A1-5ECA-4a1a-BC44-B2A9283A8ACB}</path>

<vendor>PUP.Optional.FreeFileConverter.A</vendor>

<action>success</action>

<hash>5737d8ca90ebf83eae51106347ba5ca4</hash>

</key>


-<key>

<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{59A062A1-5ECA-4a1a-BC44-B2A9283A8ACB}</path>

<vendor>PUP.Optional.FreeFileConverter.A</vendor>

<action>success</action>

<hash>5737d8ca90ebf83eae51106347ba5ca4</hash>

</key>


-<key>

<path>HKLM\SOFTWARE\CLASSES\TYPELIB\{22B58425-A384-436c-A334-BB9255664D10}</path>

<vendor>PUP.Optional.FreeFileConverter.A</vendor>

<action>success</action>

<hash>5737d8ca90ebf83eae51106347ba5ca4</hash>

</key>


-<key>

<path>HKLM\SOFTWARE\CLASSES\INTERFACE\{951F4658-6461-46AD-AB13-F73E7FCBE6DB}</path>

<vendor>PUP.Optional.FreeFileConverter.A</vendor>

<action>success</action>

<hash>5737d8ca90ebf83eae51106347ba5ca4</hash>

</key>


-<key>

<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{951F4658-6461-46AD-AB13-F73E7FCBE6DB}</path>

<vendor>PUP.Optional.FreeFileConverter.A</vendor>

<action>success</action>

<hash>5737d8ca90ebf83eae51106347ba5ca4</hash>

</key>


-<key>

<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{22B58425-A384-436c-A334-BB9255664D10}</path>

<vendor>PUP.Optional.FreeFileConverter.A</vendor>

<action>success</action>

<hash>5737d8ca90ebf83eae51106347ba5ca4</hash>

</key>


-<key>

<path>HKLM\SOFTWARE\CLASSES\ConvertFilesforFree.1</path>

<vendor>PUP.Optional.FreeFileConverter.A</vendor>

<action>success</action>

<hash>5737d8ca90ebf83eae51106347ba5ca4</hash>

</key>


-<key>

<path>HKLM\SOFTWARE\CLASSES\ConvertFilesforFree</path>

<vendor>PUP.Optional.FreeFileConverter.A</vendor>

<action>success</action>

<hash>5737d8ca90ebf83eae51106347ba5ca4</hash>

</key>


-<key>

<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\ConvertFilesforFree</path>

<vendor>PUP.Optional.FreeFileConverter.A</vendor>

<action>success</action>

<hash>5737d8ca90ebf83eae51106347ba5ca4</hash>

</key>


-<key>

<path>HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{59A062A1-5ECA-4A1A-BC44-B2A9283A8ACB}</path>

<vendor>PUP.Optional.FreeFileConverter.A</vendor>

<action>success</action>

<hash>5737d8ca90ebf83eae51106347ba5ca4</hash>

</key>


-<key>

<path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{59A062A1-5ECA-4A1A-BC44-B2A9283A8ACB}</path>

<vendor>PUP.Optional.FreeFileConverter.A</vendor>

<action>success</action>

<hash>5737d8ca90ebf83eae51106347ba5ca4</hash>

</key>


-<key>

<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\ConvertFilesforFree.1</path>

<vendor>PUP.Optional.FreeFileConverter.A</vendor>

<action>success</action>

<hash>5737d8ca90ebf83eae51106347ba5ca4</hash>

</key>


-<key>

<path>HKU\S-1-5-21-2726765177-3793255156-395904341-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{59A062A1-5ECA-4A1A-BC44-B2A9283A8ACB}</path>

<vendor>PUP.Optional.FreeFileConverter.A</vendor>

<action>success</action>

<hash>5737d8ca90ebf83eae51106347ba5ca4</hash>

</key>


-<key>

<path>HKU\S-1-5-21-2726765177-3793255156-395904341-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{59A062A1-5ECA-4A1A-BC44-B2A9283A8ACB}</path>

<vendor>PUP.Optional.FreeFileConverter.A</vendor>

<action>success</action>

<hash>5737d8ca90ebf83eae51106347ba5ca4</hash>

</key>


-<key>

<path>HKLM\SOFTWARE\CLASSES\CLSID\{59A062A1-5ECA-4A1A-BC44-B2A9283A8ACB}\INPROCSERVER32</path>

<vendor>PUP.Optional.FreeFileConverter.A</vendor>

<action>success</action>

<hash>5737d8ca90ebf83eae51106347ba5ca4</hash>

</key>


-<key>

<path>HKLM\SOFTWARE\CLASSES\TYPELIB\{D8184571-6BB1-403C-9D20-69210006A5F6}</path>

<vendor>PUP.Optional.Downloader</vendor>

<action>success</action>

<hash>800e1c863e3dd165b9797628e0214fb1</hash>

</key>


-<key>

<path>HKLM\SOFTWARE\CLASSES\INTERFACE\{5D6AC336-C442-4414-ACBC-19C3743B9120}</path>

<vendor>PUP.Optional.Downloader</vendor>

<action>success</action>

<hash>800e1c863e3dd165b9797628e0214fb1</hash>

</key>


-<key>

<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{5D6AC336-C442-4414-ACBC-19C3743B9120}</path>

<vendor>PUP.Optional.Downloader</vendor>

<action>success</action>

<hash>800e1c863e3dd165b9797628e0214fb1</hash>

</key>


-<key>

<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{D8184571-6BB1-403C-9D20-69210006A5F6}</path>

<vendor>PUP.Optional.Downloader</vendor>

<action>success</action>

<hash>800e1c863e3dd165b9797628e0214fb1</hash>

</key>


-<key>

<path>HKU\S-1-5-21-2726765177-3793255156-395904341-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Severe Weather Alerts</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>16783f63f78491a581fb5ac98f7101ff</hash>

</key>


-<key>

<path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Convert Files for Free</path>

<vendor>PUP.Optional.FreeFileConverter.A</vendor>

<action>success</action>

<hash>0a8431714d2e2f076e5f0fd132d047b9</hash>

</key>


-<key>

<path>HKLM\SOFTWARE\allday savings</path>

<vendor>PUP.Optional.Adpeak.A</vendor>

<action>success</action>

<hash>7e10257d4f2ccf67b6b210b452b0fd03</hash>

</key>


-<key>

<path>HKLM\SOFTWARE\AllDaySavings</path>

<vendor>PUP.Optional.Adpeak.A</vendor>

<action>success</action>

<hash>dfafd1d16c0f16205f73d6ee32d0629e</hash>

</key>


-<key>

<path>HKLM\SOFTWARE\WOW6432NODE\AllDaySavings</path>

<vendor>PUP.Optional.Adpeak.A</vendor>

<action>success</action>

<hash>4f3f4a58bdbea78f5c76279d31d111ef</hash>

</key>


-<key>

<path>HKLM\SOFTWARE\WOW6432NODE\ZUPDATER\ConvertFilesforFreeUpdt.exe</path>

<vendor>PUP.Optional.FreeFileConverter.A</vendor>

<action>success</action>

<hash>3658aaf8700b9d99953aebf52fd3768a</hash>

</key>


-<key>

<path>HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\netfilter64</path>

<vendor>PUP.Optional.AdPeak</vendor>

<action>success</action>

<hash>1777752d5c1f45f1cfe1a51e7b87eb15</hash>

</key>


-<key>

<path>HKU\S-1-5-21-2726765177-3793255156-395904341-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\SevereWeatherAlerts.exe</path>

<vendor>PUP.Optional.SevereWeatherAlerts.A</vendor>

<action>success</action>

<hash>e8a63b673e3d53e30e1edf3dcd3749b7</hash>

</key>


-<value>

<path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN</path>

<valuename>Windows YWN Monitor</valuename>

<vendor>PUP.Optional.OpenJDKExplorer.A</vendor>

<action>success</action>

<valuedata>C:\Program Files (x86)\Open JDK Explorer\ywnmon32.exe</valuedata>

<hash>5539366c9edd3303126dd2f42ad8f10f</hash>

</value>


-<value>

<path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN</path>

<valuename>ywnmon32</valuename>

<vendor>PUP.Optional.OpenJDKExplorer.A</vendor>

<action>success</action>

<valuedata>C:\Program Files (x86)\Open JDK Explorer\ywnmon32.exe</valuedata>

<hash>5539366c9edd3303126dd2f42ad8f10f</hash>

</value>


-<value>

<path>HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS</path>

<valuename>extension@Convert_Files_for_Free.com</valuename>

<vendor>PUP.Optional.FreeFileConverter.A</vendor>

<action>success</action>

<valuedata>C:\Program Files (x86)\Convert Files for Free\extension@Convert_Files_for_Free.com</valuedata>

<hash>117d841ea2d9ee484d8120c026dcce32</hash>

</value>


-<folder>

<path>C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Open JDK Explorer</path>

<vendor>PUP.Optional.OpenJDKExplorer.A</vendor>

<action>success</action>

<hash>93fbb3efd1aada5c2d599531fc061fe1</hash>

</folder>


-<folder>

<path>C:\Program Files (x86)\Convert Files for Free</path>

<vendor>PUP.Optional.FreeFileConverter.A</vendor>

<action>delete-on-reboot</action>

<hash>0a8431714d2e2f076e5f0fd132d047b9</hash>

</folder>


-<folder>

<path>C:\Program Files (x86)\Convert Files for Free\extension@Convert_Files_for_Free.com</path>

<vendor>PUP.Optional.FreeFileConverter.A</vendor>

<action>success</action>

<hash>0a8431714d2e2f076e5f0fd132d047b9</hash>

</folder>


-<folder>

<path>C:\Program Files (x86)\Convert Files for Free\extension@Convert_Files_for_Free.com\content</path>

<vendor>PUP.Optional.FreeFileConverter.A</vendor>

<action>success</action>

<hash>0a8431714d2e2f076e5f0fd132d047b9</hash>

</folder>


-<folder>

<path>C:\Program Files (x86)\Convert Files for Free\extension@Convert_Files_for_Free.com\defaults</path>

<vendor>PUP.Optional.FreeFileConverter.A</vendor>

<action>success</action>

<hash>0a8431714d2e2f076e5f0fd132d047b9</hash>

</folder>


-<folder>

<path>C:\Program Files (x86)\Convert Files for Free\extension@Convert_Files_for_Free.com\defaults\preferences</path>

<vendor>PUP.Optional.FreeFileConverter.A</vendor>

<action>success</action>

<hash>0a8431714d2e2f076e5f0fd132d047b9</hash>

</folder>


-<folder>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>delete-on-reboot</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</folder>


-<folder>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</folder>


-<folder>

<path>C:\Users\Kwong\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Severe Weather Alerts</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>048ac0e2d1aa91a556cc49c08d7717e9</hash>

</folder>


-<folder>

<path>C:\Users\Kwong\AppData\Local\Weather_Notifications,_LL</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>c2ccd5cdb2c9e2547e40bce96e94ea16</hash>

</folder>


-<folder>

<path>C:\Users\Kwong\AppData\Local\Weather_Notifications,_LL\SevereWeatherAlerts.exe_Url_dcolzrgv2y11lfcphnaeyzl4bujf2bj1</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>c2ccd5cdb2c9e2547e40bce96e94ea16</hash>

</folder>


-<folder>

<path>C:\Users\Kwong\AppData\Local\Weather_Notifications,_LL\SevereWeatherAlerts.exe_Url_dcolzrgv2y11lfcphnaeyzl4bujf2bj1\1.21.0.0</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>c2ccd5cdb2c9e2547e40bce96e94ea16</hash>

</folder>


-<folder>

<path>C:\Program Files (x86)\Open JDK Explorer</path>

<vendor>PUP.Optional.OpenJDKExplorer.A</vendor>

<action>delete-on-reboot</action>

<hash>dab482206a11c175eb7ecef14bb73dc3</hash>

</folder>


-<folder>

<path>C:\Program Files\AllDaySavings</path>

<vendor>PUP.Optional.Adpeak.A</vendor>

<action>success</action>

<hash>58361e84bebd73c3f44007bace34b050</hash>

</folder>


-<folder>

<path>C:\Program Files\AllDaySavings\SSL</path>

<vendor>PUP.Optional.Adpeak.A</vendor>

<action>success</action>

<hash>58361e84bebd73c3f44007bace34b050</hash>

</folder>


-<file>

<path>C:\Program Files (x86)\B021CBBD-E38E-4F8C-8E93-6624B0597A23\skwdldhvtp64.exe</path>

<vendor>PUP.Optional.AdPeak.A</vendor>

<action>delete-on-reboot</action>

<hash>ace2dbc70f6ce84edb7a2c76df25d12f</hash>

</file>


-<file>

<path>C:\Program Files (x86)\Convert Files for Free\ConvertFilesforFreeUpdt.exe</path>

<vendor>PUP.Optional.FreeFileConverter.A</vendor>

<action>delete-on-reboot</action>

<hash>d6b8abf7c0bb4de963b1b48028dc8878</hash>

</file>


-<file>

<path>C:\Program Files\005\cyycfhtzro64.exe</path>

<vendor>PUP.Optional.AdPeak.A</vendor>

<action>delete-on-reboot</action>

<hash>216dbfe3accf8fa7a8aec9d9bb49e719</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\SevereWeatherAlertsApp.exe</path>

<vendor>PUP.Optional.SevereWeatherAlerts.A</vendor>

<action>delete-on-reboot</action>

<hash>4e40bfe3c2b95bdbf8045e001fe2946c</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\SevereWeatherAlerts.exe</path>

<vendor>PUP.Optional.SevereWeatherAlerts.A</vendor>

<action>delete-on-reboot</action>

<hash>0a841e847cff082e32cb0d510001b64a</hash>

</file>


-<file>

<path>C:\Program Files (x86)\Convert Files for Free\ConvertFilesforFree_x64.dll</path>

<vendor>PUP.Optional.FreeFileConverter.A</vendor>

<action>success</action>

<hash>5737d8ca90ebf83eae51106347ba5ca4</hash>

</file>


-<file>

<path>C:\Program Files (x86)\Convert Files for Free\ConvertFilesforFree.dll</path>

<vendor>PUP.Optional.FreeFileConverter.A</vendor>

<action>success</action>

<hash>5737d8ca90ebf83eae51106347ba5ca4</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\Temp\nsdB6F2.tmp</path>

<vendor>PUP.Optional.SearchProtect.A</vendor>

<action>success</action>

<hash>d9b52d757a01eb4b149e088cb051ba46</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\Temp\nsiD5D9.exe</path>

<vendor>PUP.Optional.Conduit.A</vendor>

<action>success</action>

<hash>18767e24017ae155b3dafe8c7e833ec2</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\Temp\nsoD202.exe</path>

<vendor>PUP.Optional.Conduit.A</vendor>

<action>success</action>

<hash>513d7032f3881422078642484bb6f20e</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\Temp\nst63F.exe</path>

<vendor>PUP.Optional.Conduit.A</vendor>

<action>success</action>

<hash>e6a8356d0477f93da3eaaae0986927d9</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\Temp\nstA84.exe</path>

<vendor>PUP.Optional.Conduit.A</vendor>

<action>success</action>

<hash>286672306b10f244c6c7ee9c01003bc5</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\Temp\7XS1yLPK.exe.part</path>

<vendor>PUP.Optional.Softonic.A</vendor>

<action>success</action>

<hash>840aefb3d0ab95a1f875c365857c768a</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\Temp\setup__9491.exe</path>

<vendor>PUP.Optional.Downloader</vendor>

<action>success</action>

<hash>800e1c863e3dd165b9797628e0214fb1</hash>

</file>


-<file>

<path>C:\Windows\Temp\B021CBBD-E38E-4F8C-8E93-6624B0597A23n.exe</path>

<vendor>PUP.Optional.AdPeak.A</vendor>

<action>success</action>

<hash>99f5aff3433843f366ef465c848007f9</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\2844\a2451.exe</path>

<vendor>PUP.Optional.Amonetize</vendor>

<action>success</action>

<hash>701e455d3f3c0036d64f4a55738eed13</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\uninstall.exe</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>16783f63f78491a581fb5ac98f7101ff</hash>

</file>


-<file>

<path>C:\Windows\System32\Tasks\BrowserSafeguard</path>

<vendor>PUP.Optional.BrowserSafeGuard.A</vendor>

<action>success</action>

<hash>fb934260b3c896a0420621a5679b7e82</hash>

</file>


-<file>

<path>C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Open JDK Explorer\Open JDK Explorer.lnk</path>

<vendor>PUP.Optional.OpenJDKExplorer.A</vendor>

<action>success</action>

<hash>93fbb3efd1aada5c2d599531fc061fe1</hash>

</file>


-<file>

<path>C:\Program Files (x86)\Convert Files for Free\install.ico</path>

<vendor>PUP.Optional.FreeFileConverter.A</vendor>

<action>success</action>

<hash>0a8431714d2e2f076e5f0fd132d047b9</hash>

</file>


-<file>

<path>C:\Program Files (x86)\Convert Files for Free\uninstall.exe</path>

<vendor>PUP.Optional.FreeFileConverter.A</vendor>

<action>success</action>

<hash>0a8431714d2e2f076e5f0fd132d047b9</hash>

</file>


-<file>

<path>C:\Program Files (x86)\Convert Files for Free\extension@Convert_Files_for_Free.com\chrome.manifest</path>

<vendor>PUP.Optional.FreeFileConverter.A</vendor>

<action>success</action>

<hash>0a8431714d2e2f076e5f0fd132d047b9</hash>

</file>


-<file>

<path>C:\Program Files (x86)\Convert Files for Free\extension@Convert_Files_for_Free.com\install.rdf</path>

<vendor>PUP.Optional.FreeFileConverter.A</vendor>

<action>success</action>

<hash>0a8431714d2e2f076e5f0fd132d047b9</hash>

</file>


-<file>

<path>C:\Program Files (x86)\Convert Files for Free\extension@Convert_Files_for_Free.com\content\browserOverlay.js</path>

<vendor>PUP.Optional.FreeFileConverter.A</vendor>

<action>success</action>

<hash>0a8431714d2e2f076e5f0fd132d047b9</hash>

</file>


-<file>

<path>C:\Program Files (x86)\Convert Files for Free\extension@Convert_Files_for_Free.com\content\browserOverlay.xul</path>

<vendor>PUP.Optional.FreeFileConverter.A</vendor>

<action>success</action>

<hash>0a8431714d2e2f076e5f0fd132d047b9</hash>

</file>


-<file>

<path>C:\Program Files (x86)\Convert Files for Free\extension@Convert_Files_for_Free.com\defaults\preferences\defaults.js</path>

<vendor>PUP.Optional.FreeFileConverter.A</vendor>

<action>success</action>

<hash>0a8431714d2e2f076e5f0fd132d047b9</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\SevereWeatherAlerts.exe.config</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\ICSharpCode.SharpZipLib.dll</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\mod.SevereWeatherAlertsApp0.dat</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\SevereWeatherAlertsApp0.dat</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\SevereWeatherAlertsAppAPI.dll</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>delete-on-reboot</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\SevereWeatherAlertsBrowser.exe</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\SevereWeatherAlertsK.dat.U.dat</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\SevereWeatherAlertsU.dat</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\SWAUpdater.exe</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.0.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.1.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.10.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.100.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.11.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.12.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.13.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.14.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.15.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.16.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.17.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.18.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.19.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.2.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.20.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.21.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.22.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.23.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.24.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.25.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.27.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.28.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.29.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.3.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.30.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.31.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.32.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.33.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.34.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.35.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.36.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.37.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.38.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.39.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.4.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.40.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.41.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.42.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.43.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.26.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.44.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.62.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.80.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.45.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.46.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.47.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.48.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.49.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.5.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.50.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.51.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.52.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.53.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.54.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.55.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.56.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.57.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.58.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.59.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.6.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.60.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.61.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.63.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.64.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.65.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.66.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.67.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.68.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.69.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.7.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.70.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.71.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.72.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.73.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.74.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.75.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.76.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.77.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.78.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.79.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.8.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.81.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.82.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.83.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.84.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.85.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.86.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.87.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.88.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.89.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.9.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.90.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.91.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.92.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.93.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.94.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.95.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.96.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.97.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.98.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\SevereWeatherAlerts\0722091042\3823.99.tmp</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>8a04752d6714b680988949c038cc33cd</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Severe Weather Alerts\Severe Weather Alerts.lnk</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>048ac0e2d1aa91a556cc49c08d7717e9</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Severe Weather Alerts App.lnk</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>75191e8488f359dd859e0efbe61eb34d</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Severe Weather Alerts.lnk</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>345a1b871665d85e041fd930659f926e</hash>

</file>


-<file>

<path>C:\Program Files (x86)\Open JDK Explorer\ywnmon32.exe</path>

<vendor>PUP.Optional.OpenJDKExplorer.A</vendor>

<action>delete-on-reboot</action>

<hash>5539366c9edd3303126dd2f42ad8f10f</hash>

</file>


-<file>

<path>C:\Windows\System32\drivers\netfilter64.sys</path>

<vendor>PUP.Optional.AdPeak</vendor>

<action>success</action>

<hash>1777752d5c1f45f1cfe1a51e7b87eb15</hash>

</file>


-<file>

<path>C:\Users\Kwong\AppData\Local\Weather_Notifications,_LL\SevereWeatherAlerts.exe_Url_dcolzrgv2y11lfcphnaeyzl4bujf2bj1\1.21.0.0\user.config</path>

<vendor>PUP.Optional.SevereWeatherAlerts</vendor>

<action>success</action>

<hash>c2ccd5cdb2c9e2547e40bce96e94ea16</hash>

</file>


-<file>

<path>C:\Program Files (x86)\Open JDK Explorer\jdkcheck.exe</path>

<vendor>PUP.Optional.OpenJDKExplorer.A</vendor>

<action>success</action>

<hash>dab482206a11c175eb7ecef14bb73dc3</hash>

</file>


-<file>

<path>C:\Program Files (x86)\Open JDK Explorer\serviceio.exe</path>

<vendor>PUP.Optional.OpenJDKExplorer.A</vendor>

<action>success</action>

<hash>dab482206a11c175eb7ecef14bb73dc3</hash>

</file>


-<file>

<path>C:\Program Files (x86)\Open JDK Explorer\sqlite3.dll</path>

<vendor>PUP.Optional.OpenJDKExplorer.A</vendor>

<action>success</action>

<hash>dab482206a11c175eb7ecef14bb73dc3</hash>

</file>

</items>

</mbam-log>

 


  • 0

Advertisements

#2
gringo_pr
Posted 25 July 2014 - 07:10 PM

gringo_pr

    Trusted Helper

  • Malware Removal
  • 7,268 posts




Hello redleader74

I would like to welcome you to the Malware Removal section of the forum.

Around here they call me Gringo and I will be glad to help you with your malware problems.

Very Important --> Please read this post completely, I have spent my time to put together somethings for you to keep in mind while I am helping you to make things go easier, faster and smoother for both of us!

  • Please do not run any tools unless instructed to do so.
    • We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.
  • Please do not attach logs or use code boxes, just copy and paste the text.
    • Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.
  • Please read every post completely before doing anything.
    • Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.
  • Please provide feedback about your experience as we go.
    • A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.
NOTE: At the top of your post, click on the "Follow This Topic" Button, make sure that the "Receive notification" box is checked and that it is set to "Instantly" - This will send you an e-mail as soon as I reply to your topic, allowing us to resolve the issue faster.

NOTE: Backup any files that cannot be replaced. Removing malware can be unpredictable and this step can save a lot of heartaches if things don't go as planed. You can put them on a CD/DVD, external drive or a pen drive, anywhere except on the computer.

NOTE: It is good practice to copy and paste the instructions into notepad and print them in case it is necessary for you to go offline during the cleanup process. To open notepad, navigate to Start Menu > All Programs > Accessories > Notepad. Please remember to copy the entire post so you do not miss any instructions.

I would like you to run this program for me.

Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
  • Double-click to run it. When the tool opens click Yes to disclaimer.
  • Press Scan button.
  • It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
  • The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.
Gringo
  • 0

#3
gringo_pr
Posted 29 July 2014 - 03:41 AM

gringo_pr

    Trusted Helper

  • Malware Removal
  • 7,268 posts

Greetings


I have not heard from you in a couple of days so I am coming by to check on you to see if you are having problems or you just need some more time.

Also to remind you that it is very important that we finish the process completely so as to not get reinfected. I will let you know when we are complete and I will ask to remove our tools




Gringo
  • 0

#4
redleader74
Posted 29 July 2014 - 10:21 AM

redleader74

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 195 posts

Hi Gringo, thanks for following up.  I will try to run the tests/tools today or tomorrow and let you know how it goes.  Thanks again!


  • 0

#5
gringo_pr
Posted 01 August 2014 - 03:41 PM

gringo_pr

    Trusted Helper

  • Malware Removal
  • 7,268 posts
just checking ion on you

gringo
  • 0

#6
gringo_pr
Posted 04 August 2014 - 02:53 AM

gringo_pr

    Trusted Helper

  • Malware Removal
  • 7,268 posts

Greetings


I have not heard from you in a couple of days so I am coming by to check on you to see if you are having problems or you just need some more time.

Also to remind you that it is very important that we finish the process completely so as to not get reinfected. I will let you know when we are complete and I will ask to remove our tools




Gringo
  • 0

#7
gringo_pr
Posted 08 August 2014 - 05:47 AM

gringo_pr

    Trusted Helper

  • Malware Removal
  • 7,268 posts


Hello

48 Hour bump

It has been more than 48 hours since my last post.
  • do you still need help with this?
  • do you need more time?
  • are you having problems following my instructions?
  • if after 48hrs you have not replied to this thread then it will have to be closed!
Gringo
  • 0

#8
gringo_pr
Posted 11 August 2014 - 06:04 AM

gringo_pr

    Trusted Helper

  • Malware Removal
  • 7,268 posts
Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.
  • 0
Back to Virus, Spyware, Malware Removal · Next Unread Topic →




Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. Geeks to Go Community
  2. → Security
  3. → Virus, Spyware, Malware Removal

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP