What is FastSearch?
The Malwarebytes research team has determined that FastSearch is adware. These adware applications display advertisements not originating from the sites you are browsing.
How do I know if my computer is affected by FastSearch?
You may see this entry in your list of installed programs:
and this warning during install:
and this Scheduled Task :
How did FastSearch get on my computer?
Adware applications use different methods for distributing themselves. This particular one was bundled with other software.
How do I remove FastSearch?
Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted program.
- Please download Malwarebytes Anti-Malware to your desktop.
- Double-click mbam-setup-version.exe and follow the prompts to install the program.
- At the end, be sure a check-mark is placed next to the following:
- Enable free trial of Malwarebytes Anti-Malware Premium
- Launch Malwarebytes Anti-Malware
- Then click Finish.
- If an update is found, you will be prompted to download and install the latest version.
- Once the program has loaded, select Scan now. Or select the Threat Scan from the Scan menu.
- When the scan is complete , make sure that everything is set to "Quarantine", and click Apply Actions.
- Reboot your computer if prompted.
- This PUP creates a scheduled task. You can read here how to check for and, if necessary, remove Scheduled Tasks.
- You may be prompted twice to reboot after removal. Malwarebytes Anti-Malware needs to restore your connection after removing this LSP-hijacker.
We hope our application and this guide have helped you eradicate this hijacker.
As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the FastSearch adware. It would have warned you before the rogue could install itself, giving you a chance to stop it before it became too late.
Technical details for experts
You will see these signs in a HijackThis log:
O10 - Unknown file in Winsock LSP: c:\windows\system32\abengine.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\abengine.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\abengine.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\abengine.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\abengine.dll O23 - Service: abengine - Abengine - C:\Program Files (x86)\FastSearch\abengine.exe
You may see these signs in FRST logs:
(Abengine) C:\Program Files (x86)\FastSearch\abengine.exe Winsock: Catalog9 01 C:\Windows\SysWOW64\abengine.dll [342192 2015-06-30] (Abengine) Winsock: Catalog9 02 C:\Windows\SysWOW64\abengine.dll [342192 2015-06-30] (Abengine) Winsock: Catalog9 03 C:\Windows\SysWOW64\abengine.dll [342192 2015-06-30] (Abengine) Winsock: Catalog9 04 C:\Windows\SysWOW64\abengine.dll [342192 2015-06-30] (Abengine) Winsock: Catalog9 15 C:\Windows\SysWOW64\abengine.dll [342192 2015-06-30] (Abengine) Winsock: Catalog9-x64 01 C:\Windows\system32\abengine64.dll [408456 2015-06-30] (Abengine) Winsock: Catalog9-x64 02 C:\Windows\system32\abengine64.dll [408456 2015-06-30] (Abengine) Winsock: Catalog9-x64 03 C:\Windows\system32\abengine64.dll [408456 2015-06-30] (Abengine) Winsock: Catalog9-x64 04 C:\Windows\system32\abengine64.dll [408456 2015-06-30] (Abengine) Winsock: Catalog9-x64 15 C:\Windows\system32\abengine64.dll [408456 2015-06-30] (Abengine) R2 abengine; C:\Program Files (x86)\FastSearch\abengine.exe [1926632 2015-06-23] (Abengine) [File not signed] C:\Windows\SysWOW64\abengineOff.ini C:\Windows\system32\abengineOff.ini C:\Windows\System32\Tasks\tet3008 C:\Program Files (x86)\FastSearch (Abengine) C:\Windows\system32\abengine64.dll (Abengine) C:\Windows\SysWOW64\abengine.dll FastSearch (HKLM-x32\...\FastSearch) (Version: 3.0.0.8 - FastSearch) Task: {C1D892F0-F999-49A1-A182-1EAE53DCDE1A} - System32\Tasks\tet3008 => C:\Program Files (x86)\FastSearch\tet3008.exe [2015-06-23] () HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\abengine => ""="service"
Alterations made by the installer:
File system details [View: All details] (Selection) --------------------------------------------------- Adds the folder C:\Program Files (x86)\FastSearch Adds the file ABDLL.dll"="23/06/2015 22:58, 183400 bytes, A Adds the file ABDLL64.dll"="23/06/2015 22:58, 218576 bytes, A Adds the file ABDLL64.exe"="23/06/2015 22:58, 176568 bytes, A Adds the file abengine.dll"="23/06/2015 22:58, 342192 bytes, A Adds the file abengine.exe"="23/06/2015 22:58, 1926632 bytes, A Adds the file abengine.tlb"="23/06/2015 22:58, 49048 bytes, A Adds the file abengine64.dll"="23/06/2015 22:58, 408456 bytes, A Adds the file abenginecert.dll"="23/06/2015 22:57, 368568 bytes, A Adds the file abenginep.exe"="23/06/2015 22:58, 450448 bytes, A Adds the file abenginew.exe"="23/06/2015 22:58, 398584 bytes, A Adds the file abenginewd.dll"="23/06/2015 22:58, 285224 bytes, A Adds the file freebl3.dll"="30/08/2013 12:11, 303104 bytes, A Adds the file lengine.exe"="23/06/2015 22:57, 387128 bytes, A Adds the file lengine.ini"="19/07/2013 16:58, 116 bytes, A Adds the file lengine64.exe"="23/06/2015 22:57, 341528 bytes, A Adds the file libnspr4.dll"="30/08/2013 12:11, 295424 bytes, A Adds the file libplc4.dll"="30/08/2013 12:11, 48640 bytes, A Adds the file libplds4.dll"="30/08/2013 12:11, 46080 bytes, A Adds the file nss3.dll"="30/08/2013 12:11, 854528 bytes, A Adds the file nssckbi.dll"="30/08/2013 12:11, 417280 bytes, A Adds the file nssdbm3.dll"="30/08/2013 12:11, 164352 bytes, A Adds the file nssutil3.dll"="30/08/2013 12:11, 135680 bytes, A Adds the file slite.exe"="11/07/2013 16:58, 465408 bytes, A Adds the file smime3.dll"="30/08/2013 12:11, 132608 bytes, A Adds the file softokn3.dll"="30/08/2013 12:11, 230400 bytes, A Adds the file sqlite3.dll"="30/08/2013 12:11, 455168 bytes, A Adds the file ssl3.dll"="30/08/2013 12:11, 228352 bytes, A Adds the file term.txt"="20/11/2014 22:09, 0 bytes, A Adds the file tet3008.exe"="23/06/2015 23:53, 60017 bytes, A Adds the file uninstall.exe"="30/06/2015 13:10, 64991 bytes, A In the existing folder C:\Windows\System32 Adds the file abengine64.dll"="23/06/2015 22:58, 408456 bytes, A Adds the file abengineOff.ini"="30/06/2015 13:10, 8432 bytes, A In the existing folder C:\Windows\System32\Tasks Adds the file tet3008"="30/06/2015 13:10, 3096 bytes, A In the existing folder C:\Windows\SysWOW64 Adds the file abengine.dll"="23/06/2015 22:58, 342192 bytes, A Adds the file abengineOff.ini"="30/06/2015 13:10, 8432 bytes, A Adds the folder C:\Windows\SysWOW64\config\systemprofile\AppData\Local\abengine Adds the file abengine.ini"="30/06/2015 13:10, 10547 bytes, A Registry details [View: All details] (Selection) ------------------------------------------------ [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.DataContainer] "(Default)"="REG_SZ", "DataContainer Class" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.DataContainer\CLSID] "(Default)"="REG_SZ", "{879F721E-7F23-4B7F-B65B-F5A8F518864A}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.DataContainer\CurVer] "(Default)"="REG_SZ", "abengineLib.DataContainer.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.DataContainer.1] "(Default)"="REG_SZ", "DataContainer Class" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.DataContainer.1\CLSID] "(Default)"="REG_SZ", "{879F721E-7F23-4B7F-B65B-F5A8F518864A}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.DataController] "(Default)"="REG_SZ", "DataController Class" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.DataController\CLSID] "(Default)"="REG_SZ", "{51F7DE65-A990-4213-BDB9-C2657FA7F3F4}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.DataController\CurVer] "(Default)"="REG_SZ", "abengineLib.DataController.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.DataController.1] "(Default)"="REG_SZ", "DataController Class" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.DataController.1\CLSID] "(Default)"="REG_SZ", "{51F7DE65-A990-4213-BDB9-C2657FA7F3F4}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.DataTable] "(Default)"="REG_SZ", "DataTable Class" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.DataTable\CLSID] "(Default)"="REG_SZ", "{B9EE49F9-62A3-408D-858F-4ED9A23BAA24}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.DataTable\CurVer] "(Default)"="REG_SZ", "abengineLib.DataTable.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.DataTable.1] "(Default)"="REG_SZ", "DataTable Class" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.DataTable.1\CLSID] "(Default)"="REG_SZ", "{B9EE49F9-62A3-408D-858F-4ED9A23BAA24}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.DataTableFields "(Default)"="REG_SZ", "DataTableFields Class" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.DataTableFields\CLSID] "(Default)"="REG_SZ", "{A5544F7B-C413-4CAC-8DB4-9A8D1986DD86}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.DataTableFields\CurVer] "(Default)"="REG_SZ", "abengineLib.DataTableFields.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.DataTableFields.1] "(Default)"="REG_SZ", "DataTableFields Class" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.DataTableFields.1\CLSID] "(Default)"="REG_SZ", "{A5544F7B-C413-4CAC-8DB4-9A8D1986DD86}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.DataTableHolder] "(Default)"="REG_SZ", "DataTableHolder Class" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.DataTableHolder\CLSID] "(Default)"="REG_SZ", "{028F96B8-C73A-4C60-B82F-3944A19B046E}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.DataTableHolder\CurVer] "(Default)"="REG_SZ", "abengineLib.DataTableHolder.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.DataTableHolder.1] "(Default)"="REG_SZ", "DataTableHolder Class" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.DataTableHolder.1\CLSID] "(Default)"="REG_SZ", "{028F96B8-C73A-4C60-B82F-3944A19B046E}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.LSPLogic] "(Default)"="REG_SZ", "LSPLogic Class" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.LSPLogic\CLSID] "(Default)"="REG_SZ", "{BF6D8439-BAC1-4E73-94FE-9910D098AE00}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.LSPLogic\CurVer] "(Default)"="REG_SZ", "abengineLib.LSPLogic.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.LSPLogic.1] "(Default)"="REG_SZ", "LSPLogic Class" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.LSPLogic.1\CLSID] "(Default)"="REG_SZ", "{BF6D8439-BAC1-4E73-94FE-9910D098AE00}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.ReadOnlyManager] "(Default)"="REG_SZ", "ReadOnlyManager Class" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.ReadOnlyManager\CLSID] "(Default)"="REG_SZ", "{D4F14684-336F-44FC-8D9E-8A73DAE003EC}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.ReadOnlyManager\CurVer] "(Default)"="REG_SZ", "abengineLib.ReadOnlyManager.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.ReadOnlyManager.1] "(Default)"="REG_SZ", "ReadOnlyManager Class" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.ReadOnlyManager.1\CLSID] "(Default)"="REG_SZ", "{D4F14684-336F-44FC-8D9E-8A73DAE003EC}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{D1AACF27-6B3D-47D7-AF24-5D48828C0953}] "(Default)"="REG_SZ", "abengine" "InstallingUser"="REG_SZ", "bQBlAHQAYQBsAGwAaQBjAGEALQBwAGMAXABtAGUAdABhAGwAbABpAGMAYQAAAA==" "kp1"="REG_DWORD", 0 "LaunchPermission"="REG_BINARY, ..L.\...0................................. ....... ... "LocalService"="REG_SZ", "abengine" "ServiceParameters"="REG_SZ", "-Service" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\abengine.EXE] "AppID"="REG_SZ", "{D1AACF27-6B3D-47D7-AF24-5D48828C0953}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{025EEF9C-90F5-417E-9196-09FA4AAB4C92}] "(Default)"="REG_SZ", "IDataTableFields" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{025EEF9C-90F5-417E-9196-09FA4AAB4C92}\ProxyStubClsid32] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{025EEF9C-90F5-417E-9196-09FA4AAB4C92}\TypeLib] "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}" "Version"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{03F13205-38FF-4361-BECE-EE939A002FA2}] "(Default)"="REG_SZ", "IWFPController" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{03F13205-38FF-4361-BECE-EE939A002FA2}\ProxyStubClsid32] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{03F13205-38FF-4361-BECE-EE939A002FA2}\TypeLib] "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}" "Version"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1FAAF6AB-B931-4D05-BA12-B0ECCCCE2D0F}] "(Default)"="REG_SZ", "ISSHController" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1FAAF6AB-B931-4D05-BA12-B0ECCCCE2D0F}\ProxyStubClsid32] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1FAAF6AB-B931-4D05-BA12-B0ECCCCE2D0F}\TypeLib] "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}" "Version"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{4AEC2270-2E5F-40C8-BE5A-E5A5264714C0}] "(Default)"="REG_SZ", "IDataStatistics" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{4AEC2270-2E5F-40C8-BE5A-E5A5264714C0}\ProxyStubClsid32] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{4AEC2270-2E5F-40C8-BE5A-E5A5264714C0}\TypeLib] "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}" "Version"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{52E8E39B-2773-448F-BC20-547CD8DA4685}] "(Default)"="REG_SZ", "IParentalControlController" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{52E8E39B-2773-448F-BC20-547CD8DA4685}\ProxyStubClsid32] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{52E8E39B-2773-448F-BC20-547CD8DA4685}\TypeLib] "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}" "Version"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{62163814-0C94-4DC3-BA99-5E9E2420C914}] "(Default)"="REG_SZ", "IDataController" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{62163814-0C94-4DC3-BA99-5E9E2420C914}\ProxyStubClsid32] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{62163814-0C94-4DC3-BA99-5E9E2420C914}\TypeLib] "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}" "Version"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{68AEA825-D48B-4A56-87F0-6FCE988A2C48}] "(Default)"="REG_SZ", "IDataContainer" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{68AEA825-D48B-4A56-87F0-6FCE988A2C48}\ProxyStubClsid32] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{68AEA825-D48B-4A56-87F0-6FCE988A2C48}\TypeLib] "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}" "Version"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6A0F07D3-F28E-4F45-8D4C-BBF8000F5BB8}] "(Default)"="REG_SZ", "IReadOnlyManager" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6A0F07D3-F28E-4F45-8D4C-BBF8000F5BB8}\ProxyStubClsid32] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6A0F07D3-F28E-4F45-8D4C-BBF8000F5BB8}\TypeLib] "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}" "Version"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7AF435BC-80A9-466E-938B-32E4482EBD65}] "(Default)"="REG_SZ", "ILSPLogic" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7AF435BC-80A9-466E-938B-32E4482EBD65}\ProxyStubClsid32] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7AF435BC-80A9-466E-938B-32E4482EBD65}\TypeLib] "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}" "Version"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{85CEBABD-A775-41E2-8B67-FE06104F06ED}] "(Default)"="REG_SZ", "IWatchDog" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{85CEBABD-A775-41E2-8B67-FE06104F06ED}\ProxyStubClsid32] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{85CEBABD-A775-41E2-8B67-FE06104F06ED}\TypeLib] "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}" "Version"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{AE92A5AB-E575-4487-BCC0-96D333E5346C}] "(Default)"="REG_SZ", "IDataTableHolder" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{AE92A5AB-E575-4487-BCC0-96D333E5346C}\ProxyStubClsid32] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{AE92A5AB-E575-4487-BCC0-96D333E5346C}\TypeLib] "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}" "Version"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{C622315B-3049-43D4-9B41-D4B2DC2CD706}] "(Default)"="REG_SZ", "IParentalControl" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{C622315B-3049-43D4-9B41-D4B2DC2CD706}\ProxyStubClsid32] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{C622315B-3049-43D4-9B41-D4B2DC2CD706}\TypeLib] "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}" "Version"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{CDB85458-AE08-4106-B699-B946FF4A61CD}] "(Default)"="REG_SZ", "IDataTable" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{CDB85458-AE08-4106-B699-B946FF4A61CD}\ProxyStubClsid32] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{CDB85458-AE08-4106-B699-B946FF4A61CD}\TypeLib] "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}" "Version"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}\1.0] "(Default)"="REG_SZ", "abengine 1.0 Type Library" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}\1.0\0\win32] "(Default)"="REG_SZ", "C:\Program Files (x86)\FastSearch\abengine.tlb" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}\1.0\FLAGS] "(Default)"="REG_SZ", "0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}\1.0\HELPDIR] "(Default)"="REG_SZ", "C:\Program Files (x86)\FastSearch" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{028F96B8-C73A-4C60-B82F-3944A19B046E}] "(Default)"="REG_SZ", "DataTableHolder Class" "AppID"="REG_SZ", "{D1AACF27-6B3D-47D7-AF24-5D48828C0953}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{028F96B8-C73A-4C60-B82F-3944A19B046E}\LocalServer32] "(Default)"="REG_SZ", ""C:\Program Files (x86)\FastSearch\abengine.exe"" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{028F96B8-C73A-4C60-B82F-3944A19B046E}\ProgID] "(Default)"="REG_SZ", "abengineLib.DataTableHolder.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{028F96B8-C73A-4C60-B82F-3944A19B046E}\Programmable] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{028F96B8-C73A-4C60-B82F-3944A19B046E}\TypeLib] "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{028F96B8-C73A-4C60-B82F-3944A19B046E}\VersionIndependentProgID] "(Default)"="REG_SZ", "abengineLib.DataTableHolder" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{51F7DE65-A990-4213-BDB9-C2657FA7F3F4}] "(Default)"="REG_SZ", "DataController Class" "AppID"="REG_SZ", "{D1AACF27-6B3D-47D7-AF24-5D48828C0953}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{51F7DE65-A990-4213-BDB9-C2657FA7F3F4}\LocalServer32] "(Default)"="REG_SZ", ""C:\Program Files (x86)\FastSearch\abengine.exe"" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{51F7DE65-A990-4213-BDB9-C2657FA7F3F4}\ProgID] "(Default)"="REG_SZ", "abengineLib.DataController.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{51F7DE65-A990-4213-BDB9-C2657FA7F3F4}\Programmable] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{51F7DE65-A990-4213-BDB9-C2657FA7F3F4}\TypeLib] "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{51F7DE65-A990-4213-BDB9-C2657FA7F3F4}\VersionIndependentProgID] "(Default)"="REG_SZ", "abengineLib.DataController" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{879F721E-7F23-4B7F-B65B-F5A8F518864A}] "(Default)"="REG_SZ", "DataContainer Class" "AppID"="REG_SZ", "{D1AACF27-6B3D-47D7-AF24-5D48828C0953}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{879F721E-7F23-4B7F-B65B-F5A8F518864A}\LocalServer32] "(Default)"="REG_SZ", ""C:\Program Files (x86)\FastSearch\abengine.exe"" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{879F721E-7F23-4B7F-B65B-F5A8F518864A}\ProgID] "(Default)"="REG_SZ", "abengineLib.DataContainer.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{879F721E-7F23-4B7F-B65B-F5A8F518864A}\Programmable] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{879F721E-7F23-4B7F-B65B-F5A8F518864A}\TypeLib] "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{879F721E-7F23-4B7F-B65B-F5A8F518864A}\VersionIndependentProgID] "(Default)"="REG_SZ", "abengineLib.DataContainer" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A5544F7B-C413-4CAC-8DB4-9A8D1986DD86}] "(Default)"="REG_SZ", "DataTableFields Class" "AppID"="REG_SZ", "{D1AACF27-6B3D-47D7-AF24-5D48828C0953}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A5544F7B-C413-4CAC-8DB4-9A8D1986DD86}\LocalServer32] "(Default)"="REG_SZ", ""C:\Program Files (x86)\FastSearch\abengine.exe"" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A5544F7B-C413-4CAC-8DB4-9A8D1986DD86}\ProgID] "(Default)"="REG_SZ", "abengineLib.DataTableFields.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A5544F7B-C413-4CAC-8DB4-9A8D1986DD86}\Programmable] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A5544F7B-C413-4CAC-8DB4-9A8D1986DD86}\TypeLib] "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A5544F7B-C413-4CAC-8DB4-9A8D1986DD86}\VersionIndependentProgID] "(Default)"="REG_SZ", "abengineLib.DataTableFields" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B9EE49F9-62A3-408D-858F-4ED9A23BAA24}] "(Default)"="REG_SZ", "DataTable Class" "AppID"="REG_SZ", "{D1AACF27-6B3D-47D7-AF24-5D48828C0953}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B9EE49F9-62A3-408D-858F-4ED9A23BAA24}\LocalServer32] "(Default)"="REG_SZ", ""C:\Program Files (x86)\FastSearch\abengine.exe"" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B9EE49F9-62A3-408D-858F-4ED9A23BAA24}\ProgID] "(Default)"="REG_SZ", "abengineLib.DataTable.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B9EE49F9-62A3-408D-858F-4ED9A23BAA24}\Programmable] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B9EE49F9-62A3-408D-858F-4ED9A23BAA24}\TypeLib] "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B9EE49F9-62A3-408D-858F-4ED9A23BAA24}\VersionIndependentProgID] "(Default)"="REG_SZ", "abengineLib.DataTable" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{BF6D8439-BAC1-4E73-94FE-9910D098AE00}] "(Default)"="REG_SZ", "LSPLogic Class" "AppID"="REG_SZ", "{D1AACF27-6B3D-47D7-AF24-5D48828C0953}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{BF6D8439-BAC1-4E73-94FE-9910D098AE00}\LocalServer32] "(Default)"="REG_SZ", ""C:\Program Files (x86)\FastSearch\abengine.exe"" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{BF6D8439-BAC1-4E73-94FE-9910D098AE00}\ProgID] "(Default)"="REG_SZ", "abengineLib.LSPLogic.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{BF6D8439-BAC1-4E73-94FE-9910D098AE00}\Programmable] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{BF6D8439-BAC1-4E73-94FE-9910D098AE00}\TypeLib] "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{BF6D8439-BAC1-4E73-94FE-9910D098AE00}\VersionIndependentProgID] "(Default)"="REG_SZ", "abengineLib.LSPLogic" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4F14684-336F-44FC-8D9E-8A73DAE003EC}] "(Default)"="REG_SZ", "ReadOnlyManager Class" "AppID"="REG_SZ", "{D1AACF27-6B3D-47D7-AF24-5D48828C0953}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4F14684-336F-44FC-8D9E-8A73DAE003EC}\LocalServer32] "(Default)"="REG_SZ", ""C:\Program Files (x86)\FastSearch\abengine.exe"" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4F14684-336F-44FC-8D9E-8A73DAE003EC}\ProgID] "(Default)"="REG_SZ", "abengineLib.ReadOnlyManager.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4F14684-336F-44FC-8D9E-8A73DAE003EC}\Programmable] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4F14684-336F-44FC-8D9E-8A73DAE003EC}\TypeLib] "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4F14684-336F-44FC-8D9E-8A73DAE003EC}\VersionIndependentProgID] "(Default)"="REG_SZ", "abengineLib.ReadOnlyManager" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{025EEF9C-90F5-417E-9196-09FA4AAB4C92}] "(Default)"="REG_SZ", "IDataTableFields" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{025EEF9C-90F5-417E-9196-09FA4AAB4C92}\ProxyStubClsid32] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{025EEF9C-90F5-417E-9196-09FA4AAB4C92}\TypeLib] "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}" "Version"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{03F13205-38FF-4361-BECE-EE939A002FA2}] "(Default)"="REG_SZ", "IWFPController" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{03F13205-38FF-4361-BECE-EE939A002FA2}\ProxyStubClsid32] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{03F13205-38FF-4361-BECE-EE939A002FA2}\TypeLib] "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}" "Version"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1FAAF6AB-B931-4D05-BA12-B0ECCCCE2D0F}] "(Default)"="REG_SZ", "ISSHController" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1FAAF6AB-B931-4D05-BA12-B0ECCCCE2D0F}\ProxyStubClsid32] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1FAAF6AB-B931-4D05-BA12-B0ECCCCE2D0F}\TypeLib] "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}" "Version"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{4AEC2270-2E5F-40C8-BE5A-E5A5264714C0}] "(Default)"="REG_SZ", "IDataStatistics" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{4AEC2270-2E5F-40C8-BE5A-E5A5264714C0}\ProxyStubClsid32] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{4AEC2270-2E5F-40C8-BE5A-E5A5264714C0}\TypeLib] "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}" "Version"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{52E8E39B-2773-448F-BC20-547CD8DA4685}] "(Default)"="REG_SZ", "IParentalControlController" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{52E8E39B-2773-448F-BC20-547CD8DA4685}\ProxyStubClsid32] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{52E8E39B-2773-448F-BC20-547CD8DA4685}\TypeLib] "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}" "Version"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{62163814-0C94-4DC3-BA99-5E9E2420C914}] "(Default)"="REG_SZ", "IDataController" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{62163814-0C94-4DC3-BA99-5E9E2420C914}\ProxyStubClsid32] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{62163814-0C94-4DC3-BA99-5E9E2420C914}\TypeLib] "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}" "Version"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{68AEA825-D48B-4A56-87F0-6FCE988A2C48}] "(Default)"="REG_SZ", "IDataContainer" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{68AEA825-D48B-4A56-87F0-6FCE988A2C48}\ProxyStubClsid32] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{68AEA825-D48B-4A56-87F0-6FCE988A2C48}\TypeLib] "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}" "Version"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6A0F07D3-F28E-4F45-8D4C-BBF8000F5BB8}] "(Default)"="REG_SZ", "IReadOnlyManager" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6A0F07D3-F28E-4F45-8D4C-BBF8000F5BB8}\ProxyStubClsid32] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6A0F07D3-F28E-4F45-8D4C-BBF8000F5BB8}\TypeLib] "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}" "Version"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{7AF435BC-80A9-466E-938B-32E4482EBD65}] "(Default)"="REG_SZ", "ILSPLogic" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{7AF435BC-80A9-466E-938B-32E4482EBD65}\ProxyStubClsid32] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{7AF435BC-80A9-466E-938B-32E4482EBD65}\TypeLib] "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}" "Version"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{85CEBABD-A775-41E2-8B67-FE06104F06ED}] "(Default)"="REG_SZ", "IWatchDog" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{85CEBABD-A775-41E2-8B67-FE06104F06ED}\ProxyStubClsid32] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{85CEBABD-A775-41E2-8B67-FE06104F06ED}\TypeLib] "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}" "Version"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{AE92A5AB-E575-4487-BCC0-96D333E5346C}] "(Default)"="REG_SZ", "IDataTableHolder" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{AE92A5AB-E575-4487-BCC0-96D333E5346C}\ProxyStubClsid32] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{AE92A5AB-E575-4487-BCC0-96D333E5346C}\TypeLib] "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}" "Version"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{C622315B-3049-43D4-9B41-D4B2DC2CD706}] "(Default)"="REG_SZ", "IParentalControl" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{C622315B-3049-43D4-9B41-D4B2DC2CD706}\ProxyStubClsid32] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{C622315B-3049-43D4-9B41-D4B2DC2CD706}\TypeLib] "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}" "Version"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{CDB85458-AE08-4106-B699-B946FF4A61CD}] "(Default)"="REG_SZ", "IDataTable" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{CDB85458-AE08-4106-B699-B946FF4A61CD}\ProxyStubClsid32] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{CDB85458-AE08-4106-B699-B946FF4A61CD}\TypeLib] "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}" "Version"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\FastSearch] "affid"="REG_SZ", "" "Path"="REG_SZ", "C:\Program Files (x86)\FastSearch" "uid"="REG_SZ", "7D5BAFA943AD43BF9BAED2823A38F2CB" "ver"="REG_SZ", "3.0.0.8" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\FastSearch\Components] "Main"="REG_SZ", "1" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\FastSearch] "DisplayIcon"="REG_SZ", "C:\Program Files (x86)\FastSearch\uninstall.exe" "DisplayName"="REG_SZ", "FastSearch" "DisplayVersion"="REG_SZ", "3.0.0.8" "NoModify"="REG_DWORD", 1 "NoRepair"="REG_DWORD", 1 "Publisher"="REG_SZ", "FastSearch" "UninstallString"="REG_SZ", "C:\Program Files (x86)\FastSearch\uninstall.exe" "URLInfoAbout"="REG_SZ", "http://www.Fast-Search.info" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\abengine] "(Default)"="REG_SZ", "service" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\abengine] "DependOnService"="REG_MULTI_SZ, "RPCSS " "Description"="REG_SZ", "AbEngine protects your browser" "DisplayName"="REG_SZ", "abengine" "ErrorControl"="REG_DWORD", 1 "FailureActions"="REG_BINARY, ...................... "ImagePath"="REG_EXPAND_SZ, "C:\Program Files (x86)\FastSearch\abengine.exe" "ObjectName"="REG_SZ", "LocalSystem" "Start"="REG_DWORD", 2 "Type"="REG_DWORD", 16 "WOW64"="REG_DWORD", 1Malwarebytes Anti-Malware log:
Malwarebytes Anti-Malware www.malwarebytes.org Scan Date: 30/06/2015 Scan Time: 13:26 Logfile: mbamFastSearch.txt Administrator: Yes Version: 2.1.8.1057 Malware Database: v2015.06.30.02 Rootkit Database: v2015.06.26.01 License: Premium Malware Protection: Enabled Malicious Website Protection: Enabled Self-protection: Disabled OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: {username} Scan Type: Threat Scan Result: Completed Objects Scanned: 332482 Time Elapsed: 4 min, 11 sec Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Enabled PUM: Enabled Processes: 1 PUP.Optional.Winsock.HijackBoot.A, C:\Program Files (x86)\FastSearch\abengine.exe, 3880, Delete-on-Reboot, [f1e901bfe1a95cdad7825a018e74fb05] Modules: 8 PUP.Optional.Winsock.HijackBoot.A, C:\Program Files (x86)\FastSearch\abenginecert.dll, Delete-on-Reboot, [0fcbb0100e7c5bdbba9faead34ce1be5], PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch\freebl3.dll, Delete-on-Reboot, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch\libnspr4.dll, Delete-on-Reboot, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch\libplc4.dll, Delete-on-Reboot, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch\libplds4.dll, Delete-on-Reboot, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch\nss3.dll, Delete-on-Reboot, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch\nssutil3.dll, Delete-on-Reboot, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch\smime3.dll, Delete-on-Reboot, [16c42d93206aae8889539205ce370cf4], Registry Keys: 76 PUP.Optional.Winsock.HijackBoot.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\abengine, Quarantined, [f1e901bfe1a95cdad7825a018e74fb05], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\TYPELIB\{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\INTERFACE\{025EEF9C-90F5-417E-9196-09FA4AAB4C92}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\INTERFACE\{03F13205-38FF-4361-BECE-EE939A002FA2}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\INTERFACE\{1FAAF6AB-B931-4D05-BA12-B0ECCCCE2D0F}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\INTERFACE\{4AEC2270-2E5F-40C8-BE5A-E5A5264714C0}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\INTERFACE\{52E8E39B-2773-448F-BC20-547CD8DA4685}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\INTERFACE\{62163814-0C94-4DC3-BA99-5E9E2420C914}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\INTERFACE\{68AEA825-D48B-4A56-87F0-6FCE988A2C48}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\INTERFACE\{6A0F07D3-F28E-4F45-8D4C-BBF8000F5BB8}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\INTERFACE\{7AF435BC-80A9-466E-938B-32E4482EBD65}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\INTERFACE\{85CEBABD-A775-41E2-8B67-FE06104F06ED}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\INTERFACE\{AE92A5AB-E575-4487-BCC0-96D333E5346C}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\INTERFACE\{C622315B-3049-43D4-9B41-D4B2DC2CD706}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\INTERFACE\{CDB85458-AE08-4106-B699-B946FF4A61CD}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{025EEF9C-90F5-417E-9196-09FA4AAB4C92}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{03F13205-38FF-4361-BECE-EE939A002FA2}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{1FAAF6AB-B931-4D05-BA12-B0ECCCCE2D0F}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{4AEC2270-2E5F-40C8-BE5A-E5A5264714C0}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{52E8E39B-2773-448F-BC20-547CD8DA4685}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{62163814-0C94-4DC3-BA99-5E9E2420C914}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{68AEA825-D48B-4A56-87F0-6FCE988A2C48}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{6A0F07D3-F28E-4F45-8D4C-BBF8000F5BB8}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{7AF435BC-80A9-466E-938B-32E4482EBD65}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{85CEBABD-A775-41E2-8B67-FE06104F06ED}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{AE92A5AB-E575-4487-BCC0-96D333E5346C}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{C622315B-3049-43D4-9B41-D4B2DC2CD706}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{CDB85458-AE08-4106-B699-B946FF4A61CD}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{025EEF9C-90F5-417E-9196-09FA4AAB4C92}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{03F13205-38FF-4361-BECE-EE939A002FA2}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{1FAAF6AB-B931-4D05-BA12-B0ECCCCE2D0F}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{4AEC2270-2E5F-40C8-BE5A-E5A5264714C0}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{52E8E39B-2773-448F-BC20-547CD8DA4685}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{62163814-0C94-4DC3-BA99-5E9E2420C914}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{68AEA825-D48B-4A56-87F0-6FCE988A2C48}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{6A0F07D3-F28E-4F45-8D4C-BBF8000F5BB8}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{7AF435BC-80A9-466E-938B-32E4482EBD65}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{85CEBABD-A775-41E2-8B67-FE06104F06ED}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{AE92A5AB-E575-4487-BCC0-96D333E5346C}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{C622315B-3049-43D4-9B41-D4B2DC2CD706}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{CDB85458-AE08-4106-B699-B946FF4A61CD}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\FastSearch, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Abengine.A, HKLM\SOFTWARE\CLASSES\abengineLib.DataContainer, Quarantined, [ba2006ba64263600446c9863cb38b64a], PUP.Optional.Abengine.A, HKLM\SOFTWARE\CLASSES\abengineLib.DataContainer.1, Quarantined, [e0fa8f3108821c1a7e32a6556c97d32d], PUP.Optional.Abengine.A, HKLM\SOFTWARE\CLASSES\abengineLib.DataController, Quarantined, [c3171da39bef82b4bff1fffc5ca73cc4], PUP.Optional.Abengine.A, HKLM\SOFTWARE\CLASSES\abengineLib.DataController.1, Quarantined, [17c3645ce8a29f97a01096658d76b64a], PUP.Optional.Abengine.A, HKLM\SOFTWARE\CLASSES\abengineLib.DataTable, Quarantined, [4793a020d8b26accbcf485766c97e21e], PUP.Optional.Abengine.A, HKLM\SOFTWARE\CLASSES\abengineLib.DataTable.1, Quarantined, [94460eb2404a290da30db04bdd26e917], PUP.Optional.Abengine.A, HKLM\SOFTWARE\CLASSES\abengineLib.DataTableFields, Quarantined, [c614f0d08109e254cde3b546db288e72], PUP.Optional.Abengine.A, HKLM\SOFTWARE\CLASSES\abengineLib.DataTableFields.1, Quarantined, [f6e4e0e0078388aeae0207f414ef7e82], PUP.Optional.Abengine.A, HKLM\SOFTWARE\CLASSES\abengineLib.DataTableHolder, Quarantined, [b02a516f8901b581892734c71ae96a96], PUP.Optional.Abengine.A, HKLM\SOFTWARE\CLASSES\abengineLib.DataTableHolder.1, Quarantined, [3aa08739adddd660555bef0c2fd4b050], PUP.Optional.Abengine.A, HKLM\SOFTWARE\CLASSES\abengineLib.LSPLogic, Quarantined, [04d6e9d75f2b072ff1bfd6258a797f81], PUP.Optional.Abengine.A, HKLM\SOFTWARE\CLASSES\abengineLib.LSPLogic.1, Quarantined, [4b8f0cb4c7c360d64a66a55605fe12ee], PUP.Optional.Abengine.A, HKLM\SOFTWARE\CLASSES\abengineLib.ReadOnlyManager, Quarantined, [835720a051396bcb991784775da62ad6], PUP.Optional.Abengine.A, HKLM\SOFTWARE\CLASSES\abengineLib.ReadOnlyManager.1, Quarantined, [9f3b338d503a3bfb6b457784649f8e72], PUP.Optional.Abengine.A, HKLM\SOFTWARE\CLASSES\APPID\abengine.EXE, Quarantined, [ac2ec0007d0d26106ea46135be47ad53], PUP.Optional.Abengine.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\abengine.EXE, Quarantined, [27b3c1ffcbbfce681101811532d340c0], PUP.Optional.Abengine.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\abengineLib.DataContainer, Quarantined, [5b7fa7196f1b59dd4c64d229c241d32d], PUP.Optional.Abengine.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\abengineLib.DataContainer.1, Quarantined, [4a907e429ceef73fcfe128d3cd36c63a], PUP.Optional.Abengine.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\abengineLib.DataController, Quarantined, [dcfec4fc6129fd39911f26d5c73c0000], PUP.Optional.Abengine.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\abengineLib.DataController.1, Quarantined, [a832cff19af0e254139d6398897af60a], PUP.Optional.Abengine.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\abengineLib.DataTable, Quarantined, [10ca80408406ad89832d78838a79be42], PUP.Optional.Abengine.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\abengineLib.DataTable.1, Quarantined, [cf0bfac683078bab9c1416e58a79f709], PUP.Optional.Abengine.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\abengineLib.DataTableFields, Quarantined, [6872e5dbb9d181b5f7b9e11aa65d08f8], PUP.Optional.Abengine.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\abengineLib.DataTableFields.1, Quarantined, [efebd3ed5b2f0c2afeb2609bad5623dd], PUP.Optional.Abengine.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\abengineLib.DataTableHolder, Quarantined, [24b64d7324662016a907a853e91acb35], PUP.Optional.Abengine.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\abengineLib.DataTableHolder.1, Quarantined, [35a5d9e7741641f5911f0eed12f156aa], PUP.Optional.Abengine.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\abengineLib.LSPLogic, Quarantined, [9149cdf37a1006305060629993704eb2], PUP.Optional.Abengine.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\abengineLib.LSPLogic.1, Quarantined, [d4069030fa90aa8cbcf467941de6e818], PUP.Optional.Abengine.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\abengineLib.ReadOnlyManager, Quarantined, [d40608b8b6d40531347cb04b5da67c84], PUP.Optional.Abengine.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\abengineLib.ReadOnlyManager.1, Quarantined, [0fcb9927e5a5e74f565a4bb052b103fd], PUP.Optional.Abengine.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\abengine.EXE, Quarantined, [d2088f31058572c49d75b6e046bf0cf4], PUP.Optional.FastSearch.A, HKLM\SOFTWARE\WOW6432NODE\FASTSEARCH, Quarantined, [f9e1239d62288babb024eea96d987789], Registry Values: 1 PUP.Optional.FastSearch.A, HKLM\SOFTWARE\WOW6432NODE\FASTSEARCH|affid, Quarantined, [f9e1239d62288babb024eea96d987789], Registry Data: 0 (No malicious items detected) Folders: 1 PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch, Delete-on-Reboot, [16c42d93206aae8889539205ce370cf4], Files: 38 PUP.Optional.Winsock.HijackBoot.A, C:\Program Files (x86)\FastSearch\abengine.exe, Delete-on-Reboot, [f1e901bfe1a95cdad7825a018e74fb05], PUP.Optional.Winsock.HijackBoot.A, C:\Program Files (x86)\FastSearch\abenginecert.dll, Delete-on-Reboot, [0fcbb0100e7c5bdbba9faead34ce1be5], PUP.Optional.Winsock.HijackBoot.A, C:\Users\{username}\Desktop\Fast Search (LSP Hijacker).exe, Quarantined, [1fbb586895f5e6501247b6a5d52df50b], PUP.Optional.Winsock.HijackBoot.A, C:\Program Files (x86)\FastSearch\ABDLL.dll, Quarantined, [f9e1f5cb7b0fba7c5603b2a944be51af], PUP.Optional.Winsock.HijackBoot.A, C:\Program Files (x86)\FastSearch\ABDLL64.dll, Quarantined, [6b6f5769e8a200368fca61fa10f246ba], PUP.Optional.Winsock.HijackBoot.A, C:\Program Files (x86)\FastSearch\ABDLL64.exe, Quarantined, [30aad5ebabdf8bab6dec3f1c4bb7c13f], PUP.Optional.Winsock.HijackBoot.A, C:\Program Files (x86)\FastSearch\abengine.dll, Quarantined, [18c2932df991a096ea6f0c4ffb07ef11], PUP.Optional.Winsock.HijackBoot.A, C:\Program Files (x86)\FastSearch\abengine64.dll, Quarantined, [b525734d266462d4a2b7da81e61ca060], PUP.Optional.Winsock.HijackBoot.A, C:\Program Files (x86)\FastSearch\abenginep.exe, Quarantined, [8d4dccf48802e452b4a59ebdc43ec33d], PUP.Optional.Winsock.HijackBoot.A, C:\Program Files (x86)\FastSearch\abenginew.exe, Quarantined, [58827050c5c562d4154479e290722ad6], PUP.Optional.Winsock.HijackBoot.A, C:\Program Files (x86)\FastSearch\abenginewd.dll, Quarantined, [b7239d23444634024613a7b414eeea16], PUP.Optional.Winsock.HijackBoot.A, C:\Windows\System32\abengine64.dll, Delete-on-Reboot, [c119bd038802c571194064f700023ec2], PUP.Optional.Winsock.HijackBoot.A, C:\Windows\SysWOW64\abengine.dll, Delete-on-Reboot, [26b4c7f97713d5612039203b738fdb25], PUP.Optional.ABEngine.A, C:\Users\{username}\AppData\Local\Temp\abengine.log, Quarantined, [d505556b52389f9725cdb75048bcca36], PUP.Optional.ABEngine.A, C:\Windows\Temp\abengine.log, Delete-on-Reboot, [86547749781289ad14ded532cd37a55b], PUP.Optional.Winsock.HijackBoot, C:\Windows\System32\abengineOff.ini, Quarantined, [c416764aed9dc175788ba4680ff557a9], PUP.Optional.Winsock.HijackBoot, C:\Windows\SysWOW64\abengineOff.ini, Quarantined, [c713ebd51575102690737993a65ea15f], PUP.Optional.Abengine.A, C:\Users\{username}\AppData\Local\Temp\lengine.ini.log, Quarantined, [ae2c9b255a3083b35a39236f778e2bd5], PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch\abengine.tlb, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch\lengine.ini, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch\freebl3.dll, Delete-on-Reboot, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch\lengine.exe, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch\lengine64.exe, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch\libnspr4.dll, Delete-on-Reboot, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch\libplc4.dll, Delete-on-Reboot, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch\libplds4.dll, Delete-on-Reboot, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch\nss3.dll, Delete-on-Reboot, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch\nssckbi.dll, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch\nssdbm3.dll, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch\nssutil3.dll, Delete-on-Reboot, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch\slite.exe, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch\smime3.dll, Delete-on-Reboot, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch\softokn3.dll, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch\sqlite3.dll, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch\ssl3.dll, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch\term.txt, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch\tet3008.exe, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch\uninstall.exe, Quarantined, [16c42d93206aae8889539205ce370cf4], Physical Sectors: 0 (No malicious items detected) (end)As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.
We use different ways of protecting your computer(s):
- Dynamically Blocks Malware Sites & Servers
- Malware Execution Prevention