No replies to this topic

[Metallica]

Content is republished with permission from Malwarebytes.

What is FileTour bundler?

The Malwarebytes research team has determined that FileTour bundler is a browser hijacker. These so-called "hijackers" manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice.
This one changes your startpage, your seach provider and it also displays advertisements.

How do I know if my computer is affected by FileTour bundler?

You may see these warnings during install:





these browser add-ons:







these Scheduled Tasks:



and you will see these icons in your startmenu, your taskbar, and on your desktop:



and these changed settings:



How did FileTour bundler get on my computer?

Browser hijackers use different methods for distributing themselves. This particular one was bundled with other software.

How do I remove FileTour bundler?

Our program Malwarebytes can detect and remove this potentially unwanted program.

• Please download Malwarebytes to your desktop.
• Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program.
• Then click Finish.
• Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu.
• If another update of the definitions is available, it will be implemented before the rest of the scanning procedure.
• When the scan is complete, make sure that all Threats are selected, and click Remove Selected.
• Restart your computer when prompted to do so.

Is there anything else I need to do to get rid of FileTour bundler?

• No, Malwarebytes removes FileTour bundler completely.
• This PUP creates some scheduled tasks. You can read here how to check for and, if necessary, remove Scheduled Tasks.
• You can remove the orphaned shortcuts from your desktop and taskbar.

How would the full version of Malwarebytes help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes would have protected you against the FileTour bundler hijacker. It would have warned you before the application could install itself, giving you a chance to stop it before it became too late.

Technical details for experts

Possible signs in FRST logs:

 Internet Explorer Version 11 (Default browser: "C:\Users\{username}\AppData\Local\Amigo\Application\amigo.exe" -- "%1")
 (Mail.Ru) C:\Users\{username}\AppData\Local\Mail.Ru\MailRuUpdater.exe
 (Mail.Ru) C:\Program Files (x86)\Mail.Ru\MailRuUpdater\MailRuUpdater.exe
 (Mail.Ru) C:\Program Files (x86)\Mail.Ru\Update Service\mrupdsrv.exe
 HKCU\...\Run: [amigo] => C:\Users\{username}\AppData\Local\Amigo\Application\amigo.exe [930280 2017-04-14] (Mail.Ru)
 HKCU\...\Run: [MailRuUpdater] => C:\Users\{username}\AppData\Local\Mail.Ru\MailRuUpdater.exe [4127960 2017-05-02] (Mail.Ru)
 SearchScopes: HKCU -> DefaultScope {FFEBBF0A-C22C-4172-89FF-45215A135AC7} URL = hxxp://go.mail.ru/distib/ep/?q={SearchTerms}&product_id=%7BC6C7DDCB-CC6B-4EE8-8E8A-E167FC9126F6%7D&gp=811041
 SearchScopes: HKCU -> {FFEBBF0A-C22C-4172-89FF-45215A135AC7} URL = hxxp://go.mail.ru/distib/ep/?q={SearchTerms}&product_id=%7BC6C7DDCB-CC6B-4EE8-8E8A-E167FC9126F6%7D&gp=811041
 BHO-x32: Ïîèñê@Mail.Ru -> {8E8F97CD-60B5-456F-A201-73065652D099} -> C:\Users\{username}\AppData\Local\Mail.Ru\Sputnik\IESearchPlugin.dll [2017-05-16] (Mail.Ru)
 FF DefaultSearchEngine: Поиск@Mail.Ru
 FF SelectedSearchEngine: Поиск@Mail.Ru
 FF Homepage: hxxps://mail.ru/cnt/11956636?fr=ffhp1.0.3&gp=800000
 FF Keyword.URL: hxxp://go.mail.ru/distib/ep/?product_id=%7B2E33D386-CDC8-43DB-9E30-5D1031D66797%7D&gp=811037
 FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi [2017-04-24] [not signed]
 FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\{username}\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2016-05-08] (Unity Technologies ApS)
 FF SearchPlugin: C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\searchplugins\mailru.xml [2017-05-16]
 FF Extension: Визуальные закладки @Mail.Ru - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7} [2017-05-16]
 FF Extension: Домашняя страница Mail.Ru - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\Extensions\[email protected] [2017-05-16]
 FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi [2017-05-16] [not signed]
 CHR HomePage: Default -> mail.ru
 CHR StartupUrls: Default -> "hxxp://mail.ru/cnt/10445?gp=811040"
 CHR DefaultSearchURL: Default -> hxxp://go.mail.ru/distib/ep/?q={searchTerms}&product_id=%7BFB77DBBC-BA9F-4637-BCBB-EF4B7DC102E1%7D&gp=811041
 CHR DefaultSearchKeyword: Default -> mail.ru
 CHR DefaultSuggestURL: Default -> hxxp://suggests.go.mail.ru/ff3?q={searchTerms}
 CHR Extension: (Mail.Ru) - C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhjhnafpiilpffhglajcaepjbnbjemci [2017-05-16]
 CHR Extension: (Tampermonkey) - C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2017-05-16]
 CHR Extension: (Визуальные Закладки Mail.Ru) - C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\epgjfmblhacacphaljkdcjllkomdcjpc [2017-05-16]
 CHR Extension: (Домашняя страница Mail.Ru) - C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hcadgijmedbfgciegjomfpjcdchlhnif [2017-05-16]
 CHR HKLM-x32\...\Chrome\Extension: [bhjhnafpiilpffhglajcaepjbnbjemci] - hxxps://clients2.google.com/service/update2/crx
 CHR HKLM-x32\...\Chrome\Extension: [epgjfmblhacacphaljkdcjllkomdcjpc] - hxxps://clients2.google.com/service/update2/crx
 CHR HKLM-x32\...\Chrome\Extension: [hcadgijmedbfgciegjomfpjcdchlhnif] - hxxps://clients2.google.com/service/update2/crx
 OPR Extension: (Tampermonkey) - C:\Users\{username}\AppData\Roaming\Opera Software\Opera Stable\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2017-05-16]
 R2 mrupdsrv; C:\Program Files (x86)\Mail.Ru\Update Service\mrupdsrv.exe [2187992 2017-05-02] (Mail.Ru)
 R2 Updater.Mail.Ru; C:\Program Files (x86)\Mail.Ru\MailRuUpdater\MailRuUpdater.exe [4127960 2017-05-02] (Mail.Ru)
 C:\Windows\System32\Tasks\MailRuUpdater
 C:\Users\{username}\AppData\LocalLow\Unity
 C:\Users\{username}\AppData\Local\Unity
 C:\Program Files (x86)\Mail.Ru
 C:\Users\{username}\AppData\Local\Amigo
 C:\Users\{username}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Одноклассники.lnk
 C:\Users\{username}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ВКонтакте.lnk
 C:\Users\{username}\Desktop\Одноклассники.lnk
 C:\Users\{username}\Desktop\ВКонтакте.lnk
 C:\Users\{username}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amigo.lnk
 C:\Users\{username}\Desktop\Amigo.lnk
 C:\Users\{username}\AppData\Local\Mail.Ru
 C:\Windows\System32\Tasks\myblognewsorggasdsm
 C:\Users\{username}\Desktop\Искать в Интернете.url
 C:\ProgramData\Mail.Ru

Amigo (HKCU\...\Amigo) (Version: 56.0.2924.180 - Mail.Ru)
Unity Web Player (HKCU\...\UnityWebPlayer) (Version: 5.3.5f1 - Unity Technologies ApS)
Служба автоматического обновления программ (HKCU\...\MailRuUpdater) (Version:  - Mail.Ru)
Task: {9ED6C944-AF3E-49BC-B4AD-A0F000F1B665} - System32\Tasks\MailRuUpdater => C:\Users\{username}\AppData\Local\Mail.Ru\MailRuUpdater.exe [2017-05-02] (Mail.Ru)
Task: {B87AB81E-E396-4085-9579-71574BD845EF} - System32\Tasks\myblognewsorggasdsm => Firefox.exe myblognews.org/gasdsm
ShortcutWithArgument: C:\Users\{username}\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mail.Ru.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> url,FileProtocolHandler "hxxp://www.mail.ru/cnt/20775012?gp=811035"
ShortcutWithArgument: C:\Users\{username}\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mail.Ru.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> url,FileProtocolHandler "hxxp://www.mail.ru/cnt/20775012?gp=811035"
FirewallRules: [{18D232AA-DB92-4287-B179-241A8283A45B}] => (Allow) C:\Users\{username}\AppData\Local\Amigo\Application\amigo.exe

Malwarebytes log:

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 5/16/17
Scan Time: 8:50 AM
Logfile: mbamFileTour.txt
Administrator: Yes

-Software Information-
Version: 3.0.6.1469
Components Version: 1.0.103
Update Package Version: 1.0.1950
License: Premium

-System Information-
OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: {computername}\{username}

-Scan Summary-
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 331325
Time Elapsed: 3 min, 29 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

-Scan Details-
Process: 3
PUP.Optional.MailRu, C:\Program Files (x86)\Mail.Ru\MailRuUpdater\MailRuUpdater.exe, Quarantined, [989], [384138],1.0.1950
PUP.Optional.MailRu, C:\Program Files (x86)\Mail.Ru\Update Service\mrupdsrv.exe, Quarantined, [989], [384138],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Local\Mail.Ru\MailRuUpdater.exe, Quarantined, [989], [382901],1.0.1950

Module: 3
PUP.Optional.MailRu, C:\Program Files (x86)\Mail.Ru\MailRuUpdater\MailRuUpdater.exe, Quarantined, [989], [384138],1.0.1950
PUP.Optional.MailRu, C:\Program Files (x86)\Mail.Ru\Update Service\mrupdsrv.exe, Quarantined, [989], [384138],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Local\Mail.Ru\MailRuUpdater.exe, Quarantined, [989], [382901],1.0.1950

Registry Key: 31
PUP.Optional.MailRu, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Updater.Mail.Ru, Delete-on-Reboot, [989], [384138],1.0.1950
PUP.Optional.MailRu, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\mrupdsrv, Delete-on-Reboot, [989], [384138],1.0.1950
PUP.Optional.MailRu, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{8E8F97CD-60B5-456F-A201-73065652D099}, Delete-on-Reboot, [989], [382901],1.0.1950
PUP.Optional.MailRu, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{8E8F97CD-60B5-456F-A201-73065652D099}, Delete-on-Reboot, [989], [382901],1.0.1950
PUP.Optional.MailRu, HKLM\SOFTWARE\CLASSES\IESearchPlugin.MailRuBHO, Delete-on-Reboot, [989], [382901],1.0.1950
PUP.Optional.MailRu, HKLM\SOFTWARE\CLASSES\IESearchPlugin.MailRuBHO.1, Delete-on-Reboot, [989], [382901],1.0.1950
PUP.Optional.MailRu, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{8E8F97CD-60B5-456F-A201-73065652D099}, Delete-on-Reboot, [989], [382901],1.0.1950
PUP.Optional.MailRu, HKLM\SOFTWARE\CLASSES\TYPELIB\{C69276F0-9BC1-404F-8566-FCB14D0ED4B8}, Delete-on-Reboot, [989], [382901],1.0.1950
PUP.Optional.MailRu, HKLM\SOFTWARE\CLASSES\INTERFACE\{2170BCBA-E35C-42A5-9CDB-691334845FA4}, Delete-on-Reboot, [989], [382901],1.0.1950
PUP.Optional.MailRu, HKLM\SOFTWARE\CLASSES\INTERFACE\{23B8D468-7358-408C-B1AC-8BAE2A610C41}, Delete-on-Reboot, [989], [382901],1.0.1950
PUP.Optional.MailRu, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{2170BCBA-E35C-42A5-9CDB-691334845FA4}, Delete-on-Reboot, [989], [382901],1.0.1950
PUP.Optional.MailRu, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{23B8D468-7358-408C-B1AC-8BAE2A610C41}, Delete-on-Reboot, [989], [382901],1.0.1950
PUP.Optional.MailRu, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{2170BCBA-E35C-42A5-9CDB-691334845FA4}, Delete-on-Reboot, [989], [382901],1.0.1950
PUP.Optional.MailRu, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{23B8D468-7358-408C-B1AC-8BAE2A610C41}, Delete-on-Reboot, [989], [382901],1.0.1950
PUP.Optional.MailRu, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{C69276F0-9BC1-404F-8566-FCB14D0ED4B8}, Delete-on-Reboot, [989], [382901],1.0.1950
PUP.Optional.MailRu, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{C69276F0-9BC1-404F-8566-FCB14D0ED4B8}, Delete-on-Reboot, [989], [382901],1.0.1950
PUP.Optional.MailRu, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{8E8F97CD-60B5-456F-A201-73065652D099}, Delete-on-Reboot, [989], [382901],1.0.1950
PUP.Optional.MailRu, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{8E8F97CD-60B5-456F-A201-73065652D099}, Delete-on-Reboot, [989], [382901],1.0.1950
PUP.Optional.MailRu, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{8E8F97CD-60B5-456F-A201-73065652D099}\InprocServer32, Delete-on-Reboot, [989], [382901],1.0.1950
PUP.Optional.MailRu, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{8E8F97CD-60B5-456F-A201-73065652D099}\InprocServer32, Delete-on-Reboot, [989], [382901],1.0.1950
PUP.Optional.MailRu, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\MailRuUpdater, Delete-on-Reboot, [989], [382901],1.0.1950
PUP.Optional.Amigo, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Amigo, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.MailRu, HKLM\SOFTWARE\WOW6432NODE\Mail.Ru, Delete-on-Reboot, [989], [386185],1.0.1950
PUP.Optional.Amigo, HKCU_Classes\AmigoHTML.W2HDI6XWEU6JI5QBIEKK3NDI2A, Delete-on-Reboot, [5010], [397071],1.0.1950
PUP.Optional.Amigo, HKCU\SOFTWARE\AMIGO, Delete-on-Reboot, [5010], [386187],1.0.1950
PUP.Optional.StartPage, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\myblognewsorggasdsm, Delete-on-Reboot, [58], [377576],1.0.1950
PUP.Optional.MailRu, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{FFEBBF0A-C22C-4172-89FF-45215A135AC7}, Delete-on-Reboot, [989], [382913],1.0.1950
PUP.Optional.MailRu, HKCU\SOFTWARE\Mail.Ru, Delete-on-Reboot, [989], [387290],1.0.1950
PUP.Optional.Amigo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\MEDIAPLAYER\SHIMINCLUSIONLIST\amigo.exe, Delete-on-Reboot, [5010], [386186],1.0.1950
PUP.Optional.MailRu, HKCU\SOFTWARE\APPDATALOW\SOFTWARE\Mail.Ru, Delete-on-Reboot, [989], [389765],1.0.1950
PUP.Optional.StartPage, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{B87AB81E-E396-4085-9579-71574BD845EF}, Delete-on-Reboot, [58], [377575],1.0.1950

Registry Value: 7
PUP.Optional.MailRu, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|MailRuUpdater, Delete-on-Reboot, [989], [382901],1.0.1950
PUP.Optional.Amigo, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|amigo, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, HKCU\SOFTWARE\AMIGO|NAME, Delete-on-Reboot, [5010], [386187],1.0.1950
PUP.Optional.MailRu, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{FFEBBF0A-C22C-4172-89FF-45215A135AC7}|URL, Delete-on-Reboot, [989], [382913],1.0.1950
PUP.Optional.MailRu, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{FFEBBF0A-C22C-4172-89FF-45215A135AC7}|FAVICONURLFALLBACK, Delete-on-Reboot, [989], [382913],1.0.1950
PUP.Optional.MailRu, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{FFEBBF0A-C22C-4172-89FF-45215A135AC7}|SUGGESTIONSURL, Delete-on-Reboot, [989], [382913],1.0.1950
PUP.Optional.StartPage, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{B87AB81E-E396-4085-9579-71574BD845EF}|PATH, Delete-on-Reboot, [58], [377575],1.0.1950

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 62
PUP.Optional.MailRu, C:\PROGRAMDATA\Mail.Ru, Delete-on-Reboot, [989], [384139],1.0.1950
PUP.Optional.MailRu, C:\Program Files (x86)\Mail.Ru\Update Service, Delete-on-Reboot, [989], [384138],1.0.1950
PUP.Optional.MailRu, C:\Program Files (x86)\Mail.Ru\MailRuUpdater, Delete-on-Reboot, [989], [384138],1.0.1950
PUP.Optional.MailRu, C:\PROGRAM FILES (X86)\Mail.Ru, Delete-on-Reboot, [989], [384138],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Local\Mail.Ru\GoChromiumNativeHost, Delete-on-Reboot, [989], [382901],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Local\Mail.Ru\Sputnik\ptls, Delete-on-Reboot, [989], [382901],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Local\Mail.Ru\Sputnik, Delete-on-Reboot, [989], [382901],1.0.1950
PUP.Optional.MailRu, C:\USERS\{username}\APPDATA\LOCAL\Mail.Ru, Delete-on-Reboot, [989], [382901],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\[email protected]\META-INF, Delete-on-Reboot, [989], [382902],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\[email protected]\content, Delete-on-Reboot, [989], [382902],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\[email protected]\skin, Delete-on-Reboot, [989], [382902],1.0.1950
PUP.Optional.MailRu, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\EXTENSIONS\[email protected], Delete-on-Reboot, [989], [382902],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\informers\exchange, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\informers\traffic, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\informers\weather, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\slide__control, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\preview, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\modules\bookmarks, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\application_core, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\menu__item, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\thumbnails, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\informers, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\weather, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\dialog, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\background, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\modules, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\sandbox, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\config, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\proto, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\utils, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\libs, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\css, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\locale\ru-RU, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\locale, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\skin, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\META-INF, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\lib, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\EXTENSIONS\{A38384B3-2D1D-4F36-BC22-0F7AE402BCD7}, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\WidevineCdm\_platform_specific\win_x86, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\WidevineCdm\_platform_specific, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\VisualElements, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\PepperFlash, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\WidevineCdm, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Extensions, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Installer, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Locales, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\User Data\ShaderCache\GPUCache, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\User Data\Crashpad\reports, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\SetupMetrics, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\User Data\ShaderCache, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\User Data\amigo_safe, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\User Data\Crashpad, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\User Data, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\USERS\{username}\APPDATA\LOCAL\AMIGO, Delete-on-Reboot, [5010], [386181],1.0.1950

File: 300
PUP.Optional.MailRu, C:\ProgramData\Mail.Ru\Id, Delete-on-Reboot, [989], [384139],1.0.1950
PUP.Optional.MailRu, C:\Program Files (x86)\Mail.Ru\MailRuUpdater\MailRuUpdater.exe, Delete-on-Reboot, [989], [384138],1.0.1950
PUP.Optional.MailRu, C:\Program Files (x86)\Mail.Ru\Update Service\mrupdsrv.exe, Delete-on-Reboot, [989], [384138],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Local\Mail.Ru\GoChromiumNativeHost\manifest.json, Delete-on-Reboot, [989], [382901],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Local\Mail.Ru\GoChromiumNativeHost\native_host_app.exe, Delete-on-Reboot, [989], [382901],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Local\Mail.Ru\Sputnik\IESearchPlugin.dll, Delete-on-Reboot, [989], [382901],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Local\Mail.Ru\Sputnik\MailRu.ico, Delete-on-Reboot, [989], [382901],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Local\Mail.Ru\GoMailRu.ico, Delete-on-Reboot, [989], [382901],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Local\Mail.Ru\MailRuUpdater.exe, Delete-on-Reboot, [989], [382901],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Local\Mail.Ru\mrkeeper.exe, Delete-on-Reboot, [989], [382901],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\[email protected]\content\fx-metrics.js, Delete-on-Reboot, [989], [382902],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\[email protected]\content\loader.js, Delete-on-Reboot, [989], [382902],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\[email protected]\META-INF\manifest.mf, Delete-on-Reboot, [989], [382902],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\[email protected]\META-INF\mozilla.rsa, Delete-on-Reboot, [989], [382902],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\[email protected]\META-INF\mozilla.sf, Delete-on-Reboot, [989], [382902],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\[email protected]\skin\mail48.png, Delete-on-Reboot, [989], [382902],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\[email protected]\bootstrap.js, Delete-on-Reboot, [989], [382902],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\[email protected]\chrome.manifest, Delete-on-Reboot, [989], [382902],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\[email protected]\install.rdf, Delete-on-Reboot, [989], [382902],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\background\background.html, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\background\background.js, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\background\modules.js, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\css\customScrollbar.css, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\css\dialog.css, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\css\general.css, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\css\grid.css, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\css\informers.css, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\css\menu.css, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\css\news.css, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\css\searchbar.css, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\css\slide.css, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\css\splash.css, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\css\suggests.css, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\css\tabs.css, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\css\themes.css, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\dialog\close.v2.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\informers\exchange\exchange-1.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\informers\exchange\exchange-2.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\informers\exchange\exchange-3.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\informers\traffic\informers__traffic-jam.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\informers\weather\01.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\informers\weather\02.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\informers\weather\03.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\informers\weather\04.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\informers\weather\05.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\informers\weather\06.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\informers\weather\07.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\informers\weather\08.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\informers\weather\09.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\informers\weather\10.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\informers\weather\11.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\menu__item\menu__item-1.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\menu__item\menu__item-2.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\menu__item\menu__item-3.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\menu__item\menu__item-4.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\slide__control\slide__control-delete-hover.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\slide__control\slide__control-delete.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\slide__control\slide__control-edit-hover.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\slide__control\slide__control-edit.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\preview\body__bg-1.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\preview\body__bg-10.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\preview\body__bg-11.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\preview\body__bg-13.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\preview\body__bg-3.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\preview\body__bg-4.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\preview\body__bg-5.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\preview\body__bg-6.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\preview\body__bg-7.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\preview\body__bg-8.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\preview\body__bg-9.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\preview\leather.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\preview\wood.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\preview\wood_2.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\preview\_cookies.jpg, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\preview\_fabric.jpg, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\preview\_flax.jpg, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\preview\_mosaic.jpg, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\preview\_wall.jpg, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\body__bg-1.jpg, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\body__bg-10.jpg, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\body__bg-11.jpg, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\body__bg-13.jpg, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\body__bg-3.jpg, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\body__bg-4.jpg, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\body__bg-5.jpg, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\body__bg-6.jpg, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\body__bg-7.jpg, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\body__bg-8.jpg, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\body__bg-9.jpg, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\cookies.jpg, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\fabric.jpg, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\flax.jpg, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\leather.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\mosaic.jpg, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\themes__arrow-left.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\themes__arrow-right.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\themes__theme-fade-ok.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\themes__theme-fade-wrong.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\wall.jpg, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\wood.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\wood_2.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\thumbnails\calendar.mail.ru.jpeg, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\thumbnails\games.mail.ru.jpeg, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\thumbnails\mail.ru.jpeg, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\thumbnails\news.mail.ru.jpeg, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\thumbnails\torg.mail.ru.jpeg, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\thumbnails\travel.mail.ru.jpeg, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\weather\01.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\weather\02.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\weather\03.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\weather\04.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\weather\05.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\weather\06.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\weather\07.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\weather\08.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\weather\09.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\weather\10.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\weather\11.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\loading.gif, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\128x128.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\16x16.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\48x48.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\add_button.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\ajax_loader_mc.gif, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\clock.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\close.v2.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\cross.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\favicon.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\leftright.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\loader.gif, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\logo.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\logo_bg.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\multiauth.gif, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\no_photo.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\p-main_sub__gradient.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\pane-arrow.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\reg1.bg.v2.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\searchbar.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\searchbar__button.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\search_bg.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\sgmus.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\slider-arrow.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\application_core\file-system.js, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\application_core\jquery-core.js, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\application_core\sqliteStorage.js, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\application_core\visibleTab.js, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\config\config.js, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\libs\jquery-ui.js, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\libs\jquery.js, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\libs\knockout-2.2.1.js, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\libs\suggests.js, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\modules\bookmarks\drag_drop.js, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\modules\bookmarks\edit-dialog.js, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\modules\bookmarks\layout.js, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\modules\bookmarks\remove-dialog.js, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\modules\bookmarks\updates.js, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\modules\currency.js, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\modules\geo-monitoring.js, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\modules\mail-counter.js, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\modules\news.js, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\modules\odnoklassniki-counter.js, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\modules\searchbar.js, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\modules\themes.js, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\modules\traffic.js, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\modules\weather.js, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\proto\informer.js, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\proto\pane.js, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\proto\slider.js, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\proto\tab-strip.js, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\sandbox\facade.js, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\utils\utils.js, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\google-analytics.js, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\main.js, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\manifest.json, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\visual-bookmarks.html, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\fx-metrics.js, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\loader.js, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\main.js, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\newtabhomepage.js, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\overlay.xul, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\Utils.js, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\locale\ru-RU\vbmail.dtd, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\locale\ru-RU\vbmail.properties, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\skin\overlay.css, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\skin\vb-logo.png, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\lib\version.js, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\META-INF\manifest.mf, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\META-INF\mozilla.rsa, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\META-INF\mozilla.sf, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome.manifest, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\install.rdf, Delete-on-Reboot, [989], [382903],1.0.1950
PUP.Optional.MailRu, C:\USERS\{username}\APPDATA\ROAMING\MICROSOFT\INTERNET EXPLORER\QUICK LAUNCH\MAIL.RU.LNK, Delete-on-Reboot, [989], [384473],1.0.1950
PUP.Optional.MailRu, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [989], [382917],1.0.1950
PUP.Optional.MailRu, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [989], [382918],1.0.1950
PUP.Optional.Amigo, C:\USERS\{username}\APPDATA\ROAMING\MICROSOFT\INTERNET EXPLORER\QUICK LAUNCH\AMIGO.LNK, Delete-on-Reboot, [5010], [386182],1.0.1950
PUP.Optional.Amigo, C:\USERS\{username}\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\AMIGO.LNK, Delete-on-Reboot, [5010], [386183],1.0.1950
Adware.FileTour, C:\USERS\{username}\DESKTOP\INSTALL.EXE, Delete-on-Reboot, [240], [398852],1.0.1950
PUP.Optional.Amigo, C:\USERS\{username}\DESKTOP\AMIGO.LNK, Delete-on-Reboot, [5010], [386184],1.0.1950
PUP.Optional.Amigo, C:\USERS\{username}\APPDATA\LOCAL\AMIGO\APPLICATION\MAIL.ICO, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Extensions\external_extensions.json, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Installer\chrome.7z, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Installer\setup.exe, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Locales\hi.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Locales\am.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Locales\ar.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Locales\bg.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Locales\bn.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Locales\ca.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Locales\cs.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Locales\da.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Locales\de.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Locales\el.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Locales\en-GB.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Locales\en-US.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Locales\es-419.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Locales\es.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Locales\et.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Locales\fa.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Locales\fi.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Locales\fil.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Locales\fr.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Locales\gu.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Locales\he.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Locales\hr.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Locales\hu.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Locales\id.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Locales\it.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Locales\ja.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Locales\kn.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Locales\ko.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Locales\lt.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Locales\lv.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Locales\ml.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Locales\mr.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Locales\ms.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Locales\nb.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Locales\nl.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Locales\pl.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Locales\pt-BR.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Locales\pt-PT.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Locales\ro.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Locales\ru.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Locales\sk.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Locales\sl.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Locales\sr.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Locales\sv.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Locales\sw.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Locales\ta.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Locales\te.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Locales\th.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Locales\tr.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Locales\uk.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Locales\vi.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Locales\zh-CN.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\Locales\zh-TW.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\PepperFlash\manifest.json, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\PepperFlash\pepflashplayer.dll, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\VisualElements\logo.png, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\VisualElements\smalllogo.png, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\WidevineCdm\_platform_specific\win_x86\widevinecdm.dll, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\WidevineCdm\_platform_specific\win_x86\widevinecdmadapter.dll, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\WidevineCdm\manifest.json, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\56.0.2924.180.manifest, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\amigo_resources.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\chrome.dll, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\chrome_100_percent.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\chrome_200_percent.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\chrome_child.dll, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\chrome_elf.dll, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\chrome_watcher.dll, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\d3dcompiler_47.dll, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\icudtl.dat, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\libegl.dll, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\libglesv2.dll, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\nacl64.exe, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\nacl_irt_x86_32.nexe, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\nacl_irt_x86_64.nexe, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\natives_blob.bin, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\resources.pak, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\56.0.2924.180\snapshot_blob.bin, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\SetupMetrics\20170516083700.pma, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\amigo.exe, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\amigo.VisualElementsManifest.xml, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\mg.ico, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\mm.ico, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\music.ico, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\ok.ico, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\Application\vk.ico, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\User Data\Crashpad\metadata, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\User Data\Crashpad\settings.dat, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\User Data\ShaderCache\GPUCache\data_0, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\User Data\ShaderCache\GPUCache\data_1, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\User Data\ShaderCache\GPUCache\data_2, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\User Data\ShaderCache\GPUCache\data_3, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\User Data\ShaderCache\GPUCache\index, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\User Data\CrashpadMetrics.pma, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.Amigo, C:\Users\{username}\AppData\Local\Amigo\User Data\Local State, Delete-on-Reboot, [5010], [386181],1.0.1950
PUP.Optional.StartPage, C:\WINDOWS\SYSTEM32\TASKS\myblognewsorggasdsm, Delete-on-Reboot, [58], [380721],1.0.1950
PUP.Optional.MailRu, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\SEARCHPLUGINS\MAILRU.XML, Delete-on-Reboot, [989], [384856],1.0.1950
PUP.Optional.MailRu.Generic, C:\USERS\{username}\APPDATA\ROAMING\MICROSOFT\INTERNET EXPLORER\QUICK LAUNCH\USER PINNED\TASKBAR\MAIL.RU.LNK, Delete-on-Reboot, [9048], [385023],1.0.1950

Physical Sector: 0
(No malicious items detected)


(end)

As mentioned before the full version of Malwarebytes could have protected your computer against this threat.
We use different ways of protecting your computer(s):

• Dynamically Blocks Malware Sites & Servers
• Malware Execution Prevention

Save yourself the hassle and get protected.