Jump to content

Welcome to Geeks to Go
Geeks to Go Welcome
Create Account Login to Account
Photo

Removal instructions for Youndoo-Elex

- - - - -
Started by Metallica , Aug 12 2016 06:10 AM

  • Please log in to reply
No replies to this topic

#1
Metallica
Posted 12 August 2016 - 06:10 AM

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 33,101 posts
Content is republished with permission from Malwarebytes.

What is Youndoo-Elex?

The Malwarebytes research team has determined that Youndoo-Elex is a browser hijacker. These so-called "hijackers" alter your startpage or searchscopes so that the effected browser visits their site or one of their choice. This one also displays advertisements.

How do I know if my computer is affected by Youndoo-Elex?

This is how the start- and search-page looks:

main.png

And you may see this change in the properties of the shortcuts for Chrome and Firefox on your desktop:

warning1.png

pointing to these batch files in the ProgramData folder:

warning2.png
Note the strange Unicode characters in the filenames

With a content similar to this:

warning3.png

and this entry in your list of installed programs:

warning4.png

The pinned shortcuts in the taskbar for Chrome and Firefox were rendered useless:

icons.png

How did Youndoo-Elex get on my computer?

Browser hijackers use different methods for distributing themselves. This particular one was bundled with other software.

How do I remove Youndoo-Elex?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted program.
  • Please download Malwarebytes Anti-Malware to your desktop.
  • Double-click mbam-setup-{version}.exe and follow the prompts to install the program.
  • At the end, be sure a check-mark is placed next to:
    Launch Malwarebytes Anti-Malware
  • Then click Finish.
  • Once the program has loaded, select Scan Now. Or select the Threat Scan from the Scan menu.
  • If an update is available, it will be implemented before the rest of the scanning procedure.
  • When the scan is complete, make sure that all Threats are selected, and click Remove Selected.
  • Restart your computer when prompted to do so.
Is there anything else I need to do to get rid of Youndoo-Elex?
  • No, Malwarebytes' Anti-Malware removes Youndoo-Elex completely.
  • The hijacker alters the shortcuts for Chrome and FireFox. here you can read how to create new, clean shortcuts.
How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the Youndoo-Elex hijacker. It would have warned you before the rogue could install itself, giving you a chance to stop it before it became too late.


protection1.png

Technical details for experts

Signs in a FRST logs:

 (TODO: <Company name>) C:\Program Files (x86)\SoEasySvc\SoEasySvc.exe
 ShellIconOverlayIdentifiers: [MyOverlayIcon] -> {B41B3408-923F-4B8B-85F2-146C509FA18C} => C:\Program Files (x86)\Cokcultprasitain\Erwutionphutesy\Zohitain.dll [2016-08-12] ()
 S3 Erwutionphutesy Update; C:\Program Files (x86)\Cokcultprasitain\Erwutionphutesy\ErwutionphutesyUpdatevrl.exe [291520 2016-08-12] ()
 R2 SoEasySvc; C:\Program Files (x86)\SoEasySvc\SoEasySvc.exe [110776 2016-08-04] (TODO: <Company name>)
 C:\Program Files (x86)\SoEasySvc
 C:\Users\{username}\AppData\Local\Lutilyantersy
 C:\Program Files (x86)\Cokcultprasitain

youndoo - Uninstall (HKLM-x32\...\{63A8C5F6-99CA-4244-A0FC-5856F62A293F}) (Version:  - )

Shortcut: C:\Users\Public\Desktop\Ｇooｇle Ｃhroｍe.lnk -> C:\ProgramData\Ｇooｇle Ｃhroｍe.lnk.bat ()
Shortcut: C:\Users\Public\Desktop\Ｍozilla Ｆireｆox.lnk -> C:\ProgramData\Ｍozilla Ｆireｆox.lnk.bat ()
Alterations made by the installer:


File system details [View: All details] (Selection)
---------------------------------------------------
    Adds the folder C:\Program Files (x86)\Cokcultprasitain
       Adds the file Plgaghtatumusyhlp.dll"="8/12/2016 8:41 AM, 249344 bytes, A
       Adds the file SoEasy.exe"="8/12/2016 8:41 AM, 803472 bytes, A
       Adds the file SpyProDll.dll"="8/12/2016 8:41 AM, 134656 bytes, A
       Adds the file vovuther.exex5v"="8/12/2016 8:41 AM, 36 bytes, A
    Adds the folder C:\Program Files (x86)\Cokcultprasitain\Erwutionphutesy
       Adds the file ErwutionphutesyUpdatevrl.exe"="8/12/2016 8:41 AM, 291520 bytes, A
       Adds the file Zohitain.dll"="8/12/2016 8:41 AM, 139264 bytes, A
    In the existing folder C:\Program Files (x86)\Google\Chrome\Application
       Adds the file wtsapi32.dll"="8/12/2016 8:41 AM, 129024 bytes, A
    In the existing folder C:\Program Files (x86)\Mozilla Firefox
       Adds the file wtsapi32.dll"="8/12/2016 8:41 AM, 129024 bytes, A
    Adds the folder C:\Program Files (x86)\SoEasySvc
       Adds the file iCmnBase.dll"="8/4/2016 5:20 AM, 149688 bytes, A
       Adds the file msvcp110.dll"="11/5/2012 7:20 PM, 535008 bytes, A
       Adds the file msvcr110.dll"="11/5/2012 7:20 PM, 875472 bytes, A
       Adds the file SoEasySvc.exe"="8/4/2016 5:20 AM, 110776 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\Lutilyantersy
       Adds the file First Run"="2/10/2016 11:38 AM, 0 bytes, A
       Adds the file Local State"="8/12/2016 8:41 AM, 94855 bytes, A
       Adds the file Safe Browsing Bloom"="3/3/2016 10:12 AM, 7747876 bytes, A
       Adds the file Safe Browsing Bloom Prefix Set"="3/3/2016 10:12 AM, 1131836 bytes, A
       Adds the file Safe Browsing Channel IDs"="8/5/2016 10:51 AM, 5120 bytes, A
       Adds the file Safe Browsing Channel IDs-journal"="8/5/2016 10:51 AM, 0 bytes, A
       Adds the file Safe Browsing Cookies"="3/3/2016 10:14 AM, 7168 bytes, A
       Adds the file Safe Browsing Cookies-journal"="3/3/2016 10:14 AM, 0 bytes, A
       Adds the file Safe Browsing Csd Whitelist"="3/3/2016 10:12 AM, 126632 bytes, A
       Adds the file Safe Browsing Download"="3/3/2016 10:12 AM, 248256 bytes, A
       Adds the file Safe Browsing Download Whitelist"="3/3/2016 10:12 AM, 17008 bytes, A
       Adds the file Safe Browsing Extension Blacklist"="3/3/2016 10:12 AM, 58236 bytes, A
       Adds the file Safe Browsing IP Blacklist"="3/3/2016 10:12 AM, 160 bytes, A
       Adds the file Safe Browsing UwS List"="3/3/2016 10:12 AM, 1328884 bytes, A
       Adds the file Safe Browsing UwS List Prefix Set"="3/3/2016 10:12 AM, 311876 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\Lutilyantersy\Caps
    Adds the folder C:\Users\{username}\AppData\Local\Lutilyantersy\CertificateTransparency
    Adds the folder C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData
    Adds the folder C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\data_reduction_proxy_leveldb
    Adds the folder C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\databases
    Adds the folder C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extension Rules
    Adds the folder C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extension State
    Adds the folder C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0
       Adds the file icon_128.png"="2/10/2016 11:39 AM, 3372 bytes, A
       Adds the file icon_16.png"="2/10/2016 11:39 AM, 160 bytes, A
       Adds the file main.html"="2/3/2015 2:09 PM, 92 bytes, A
       Adds the file main.js"="2/3/2015 2:09 PM, 95 bytes, A
       Adds the file manifest.json"="2/10/2016 11:39 AM, 725 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales
    Adds the folder C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0
    Adds the folder C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0
    Adds the folder C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0
    Adds the folder C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0
    Adds the folder C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.1_0
    Adds the folder C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_0
    Adds the folder C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0
    Adds the folder C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0
    Adds the folder C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5216.530.0.10_0
    Adds the folder C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\IndexedDB\https_www.google.nl_0.indexeddb.leveldb
    Adds the folder C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\JumpListIcons
    Adds the folder C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\JumpListIconsOld
    Adds the folder C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Local Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi
    Adds the folder C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Local Storage
    Adds the folder C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Service Worker\CacheStorage\ae6425408f2239a8c4458f791990c1e6dacbcee7
    Adds the folder C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Service Worker\Database
    Adds the folder C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Service Worker\ScriptCache
    Adds the folder C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Service Worker\ScriptCache\index-dir
    Adds the folder C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Session Storage
    Adds the folder C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Storage\ext\chrome-signin\def
    Adds the folder C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm
    Adds the folder C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Web Applications\_crx_aohghmighlieiainnegkcijnfilokake
    Adds the folder C:\Users\{username}\AppData\Local\Lutilyantersy\Crashpad
    Adds the folder C:\Users\{username}\AppData\Local\Lutilyantersy\Crashpad\reports
    Adds the folder C:\Users\{username}\AppData\Local\Lutilyantersy\EVWhitelist
    Adds the folder C:\Users\{username}\AppData\Local\Lutilyantersy\FileTypePolicies
    Adds the folder C:\Users\{username}\AppData\Local\Lutilyantersy\OriginTrials
    Adds the folder C:\Users\{username}\AppData\Local\Lutilyantersy\PepperFlash
    Adds the folder C:\Users\{username}\AppData\Local\Lutilyantersy\pnacl
    Adds the folder C:\Users\{username}\AppData\Local\Lutilyantersy\ShaderCache
    Adds the folder C:\Users\{username}\AppData\Local\Lutilyantersy\SwiftShader
    Adds the folder C:\Users\{username}\AppData\Local\Lutilyantersy\SwReporter
    Adds the folder C:\Users\{username}\AppData\Local\Lutilyantersy\WidevineCDM
    Adds the folder C:\Users\{username}\AppData\Roaming\Profiles\Viberk.default

Registry details [View: All details] (Selection)
------------------------------------------------
    [HKEY_LOCAL_MACHINE\SOFTWARE\b`nl{y]
       "day"="REG_SZ", "20160812"
       "upday"="REG_SZ", "20160812"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{B38A71EA-343E-4D69-8FD6-67A57A0AEF61}]
       "(Default)"="REG_SZ", "OverlayIcon"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\OverlayIcon.DLL]
       "AppID"="REG_SZ", "{B38A71EA-343E-4D69-8FD6-67A57A0AEF61}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B41B3408-923F-4B8B-85F2-146C509FA18C}]
       "(Default)"="REG_SZ", "MyOverlayIcon Class"
       "AppID"="REG_SZ", "{B38A71EA-343E-4D69-8FD6-67A57A0AEF61}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B41B3408-923F-4B8B-85F2-146C509FA18C}\InprocServer32]
       "(Default)"="REG_SZ", "C:\Program Files (x86)\Cokcultprasitain\Erwutionphutesy\Zohitain.dll"
       "ThreadingModel"="REG_SZ", "Apartment"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B41B3408-923F-4B8B-85F2-146C509FA18C}\ProgID]
       "(Default)"="REG_SZ", "OverlayIcon.MyOverlayIcon.1"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B41B3408-923F-4B8B-85F2-146C509FA18C}\Programmable]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B41B3408-923F-4B8B-85F2-146C509FA18C}\TypeLib]
       "(Default)"="REG_SZ", "{ADF1FA2A-6EAA-4A97-A55F-3C8B92843EF5}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B41B3408-923F-4B8B-85F2-146C509FA18C}\VersionIndependentProgID]
       "(Default)"="REG_SZ", "OverlayIcon.MyOverlayIcon"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7BCA6879-A9F8-47DE-AE05-F5CE7EA3A474}]
       "(Default)"="REG_SZ", "IMyOverlayIcon"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7BCA6879-A9F8-47DE-AE05-F5CE7EA3A474}\ProxyStubClsid32]
       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7BCA6879-A9F8-47DE-AE05-F5CE7EA3A474}\TypeLib]
       "(Default)"="REG_SZ", "{ADF1FA2A-6EAA-4A97-A55F-3C8B92843EF5}"
       "Version"="REG_SZ", "1.0"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\OverlayIcon.MyOverlayIcon]
       "(Default)"="REG_SZ", "MyOverlayIcon Class"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\OverlayIcon.MyOverlayIcon\CLSID]
       "(Default)"="REG_SZ", "{B41B3408-923F-4B8B-85F2-146C509FA18C}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\OverlayIcon.MyOverlayIcon\CurVer]
       "(Default)"="REG_SZ", "OverlayIcon.MyOverlayIcon.1"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\OverlayIcon.MyOverlayIcon.1]
       "(Default)"="REG_SZ", "MyOverlayIcon Class"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\OverlayIcon.MyOverlayIcon.1\CLSID]
       "(Default)"="REG_SZ", "{B41B3408-923F-4B8B-85F2-146C509FA18C}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{ADF1FA2A-6EAA-4A97-A55F-3C8B92843EF5}\1.0]
       "(Default)"="REG_SZ", "OverlayIcon 1.0 Type Library"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{ADF1FA2A-6EAA-4A97-A55F-3C8B92843EF5}\1.0\0\win64]
       "(Default)"="REG_SZ", "C:\Program Files (x86)\Cokcultprasitain\Erwutionphutesy\Zohitain.dll"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{ADF1FA2A-6EAA-4A97-A55F-3C8B92843EF5}\1.0\FLAGS]
       "(Default)"="REG_SZ", "0"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{ADF1FA2A-6EAA-4A97-A55F-3C8B92843EF5}\1.0\HELPDIR]
       "(Default)"="REG_SZ", "C:\Program Files (x86)\Cokcultprasitain\Erwutionphutesy"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{7BCA6879-A9F8-47DE-AE05-F5CE7EA3A474}]
       "(Default)"="REG_SZ", "IMyOverlayIcon"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{7BCA6879-A9F8-47DE-AE05-F5CE7EA3A474}\ProxyStubClsid32]
       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{7BCA6879-A9F8-47DE-AE05-F5CE7EA3A474}\TypeLib]
       "(Default)"="REG_SZ", "{ADF1FA2A-6EAA-4A97-A55F-3C8B92843EF5}"
       "Version"="REG_SZ", "1.0"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\MyOverlayIcon]
       "(Default)"="REG_SZ", "{B41B3408-923F-4B8B-85F2-146C509FA18C}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\b`nl{y]
       "day"="REG_SZ", "20160812"
       "upday"="REG_SZ", "20160812"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\CB75DF05542D4707119BC449A5FA9A4A]
       "(Default)"="REG_SZ", "{EFD519A3-DC49-498A-8DD4-AD1DA8F97FCD}"
       "{EFD519A3-DC49-498A-8DD4-AD1DA8F97FCD}"="REG_BINARY, ..............................................................................................K.............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{63A8C5F6-99CA-4244-A0FC-5856F62A293F}]
       "DisplayName"="REG_SZ", "youndoo - Uninstall"
       "UninstallString"="REG_SZ", "rundll32.exe "C:\Program Files (x86)\Cokcultprasitain\Plgaghtatumusyhlp.dll",DllUninstall "/k={63A8C5F6-99CA-4244-A0FC-5856F62A293F}""
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\youndooSoftware\youndoohp]
       "oem"="REG_SZ", "amz"
       "Time"="REG_DWORD", 1470984111
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Erwutionphutesy Update]
       "DisplayName"="REG_SZ", "Erwutionphutesy Update"
       "ErrorControl"="REG_DWORD", 1
       "ImagePath"="REG_EXPAND_SZ, ""C:\Program Files (x86)\Cokcultprasitain\Erwutionphutesy\ErwutionphutesyUpdatevrl.exe" {511AFE50-C2D8-48D5-87EB-B2BCFEC5572C}"
       "ObjectName"="REG_SZ", "LocalSystem"
       "Start"="REG_DWORD", 3
       "Type"="REG_DWORD", 272
       "WOW64"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Erwutionphutesy Update\Security]
       "Security"="REG_BINARY, ..d.p...0................4.................... ...............
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SoEasySvc]
       "Description"="REG_SZ", "The SoEasy service that aims to offer search easlisy"
       "DisplayName"="REG_SZ", "SoEasySvc"
       "ErrorControl"="REG_DWORD", 1
       "FailureActions"="REG_BINARY, ......................
       "ImagePath"="REG_EXPAND_SZ, ""C:\Program Files (x86)\SoEasySvc\SoEasySvc.exe" {8DE54EC4-2DF3-4F56-9F19-EBC2BDF2FF59}"
       "ObjectName"="REG_SZ", "LocalSystem"
       "Start"="REG_DWORD", 2
       "Type"="REG_DWORD", 272
       "WOW64"="REG_DWORD", 1
    [HKEY_USERS\.DEFAULT\Software\b`nl{y]
       "day"="REG_SZ", "20160812"
       "upday"="REG_SZ", "20160812"
    [HKEY_USERS\.DEFAULT\Software\CB75DF05542D4707119BC449A5FA9A4A]
       "c"="REG_DWORD", 1
       "d"="REG_SZ", "20160812"
       "o"="REG_DWORD", 1
    [HKEY_CURRENT_USER\Software\CB75DF05542D4707119BC449A5FA9A4A]
       "c"="REG_DWORD", 1
       "d"="REG_SZ", "20160812"
       "o"="REG_DWORD", 1
    [HKEY_CURRENT_USER\Software\LiveUpdate]
       "cd"="REG_SZ", "C:\Users\{username}\AppData\Local\Lutilyantersy"
       "fd"="REG_SZ", "C:\Users\{username}\AppData\Roaming\Profiles\Viberk.default"
       "hp"="REG_SZ", "http://www.youndoo.com/?z=0f21fa0d78a75257335848bgez5m6eet6b4z1eab2t&from=amz&uid=VBOXXHARDDISK_VB3361b1e7-85c503b7&type=hp"
Excerpt of the Malwarebytes Anti-Malware log (full log available on request):

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 8/12/2016
Scan Time: 9:36 AM
Logfile: mbamYoundoo2.txt
Administrator: Yes

Version: 2.2.1.1043
Malware Database: v2016.08.12.03
Rootkit Database: v2016.08.09.01
License: Premium
Malware Protection: Disabled
Malicious Website Protection: Enabled
Self-protection: Enabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: {username}

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 317648
Time Elapsed: 10 min, 57 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 1
PUP.Optional.SoEasySvc, C:\Program Files (x86)\SoEasySvc\SoEasySvc.exe, 3476, Delete-on-Reboot, [65cee961534789ad737719b1a3617c84]

Modules: 3
PUP.Optional.SoEasySvc, C:\Program Files (x86)\SoEasySvc\iCmnBase.dll, Delete-on-Reboot, [65cee961534789ad737719b1a3617c84], 
PUP.Optional.SoEasySvc, C:\Program Files (x86)\SoEasySvc\msvcp110.dll, Delete-on-Reboot, [65cee961534789ad737719b1a3617c84], 
PUP.Optional.SoEasySvc, C:\Program Files (x86)\SoEasySvc\msvcr110.dll, Delete-on-Reboot, [65cee961534789ad737719b1a3617c84], 

Registry Keys: 11
PUP.Optional.Elex, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Erwutionphutesy Update, Quarantined, [3cf7cb7f009ac670e63b1eae0afa53ad], 
PUP.Optional.Elex, HKLM\SOFTWARE\CLASSES\CLSID\{B41B3408-923F-4B8B-85F2-146C509FA18C}, Quarantined, [d95af05a98023006f23e943840c4c53b], 
PUP.Optional.Elex, HKLM\SOFTWARE\CLASSES\OverlayIcon.MyOverlayIcon, Quarantined, [5bd859f162382d0932fea8241aea05fb], 
PUP.Optional.Elex, HKLM\SOFTWARE\CLASSES\OverlayIcon.MyOverlayIcon.1, Quarantined, [260d4cfe24769d9920109933db2954ac], 
PUP.Optional.Elex, HKLM\SOFTWARE\WOW6432NODE\CLASSES\OverlayIcon.MyOverlayIcon, Quarantined, [f43f6fdb5a40fe38e947b418ab59d42c], 
PUP.Optional.Elex, HKLM\SOFTWARE\WOW6432NODE\CLASSES\OverlayIcon.MyOverlayIcon.1, Quarantined, [c46f004a039740f6f83809c36e96aa56], 
PUP.Optional.Elex, HKLM\SOFTWARE\CLASSES\WOW6432NODE\OverlayIcon.MyOverlayIcon, Quarantined, [151eea60ff9b072f919fc7058381b749], 
PUP.Optional.Elex, HKLM\SOFTWARE\CLASSES\WOW6432NODE\OverlayIcon.MyOverlayIcon.1, Quarantined, [b57e65e5e9b152e4f63a04c87094867a], 
PUP.Optional.Elex, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{63A8C5F6-99CA-4244-A0FC-5856F62A293F}, Quarantined, [b1823d0dacee87affb27d2fab252ef11], 
PUP.Optional.SoEasySvc, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SoEasySvc, Quarantined, [65cee961534789ad737719b1a3617c84], 
PUP.Optional.Youndoo, HKLM\SOFTWARE\WOW6432NODE\youndooSoftware, Quarantined, [90a38cbe98028da97a6ad0f9cd35b44c], 

Registry Values: 1
PUP.Optional.Youndoo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{63A8C5F6-99CA-4244-A0FC-5856F62A293F}|DisplayName, youndoo - Uninstall, Quarantined, [ff34f6545347b284e33f5377927009f7]

Registry Data: 0
(No malicious items detected)

Folders: 520
PUP.Optional.SoEasySvc, C:\Program Files (x86)\SoEasySvc, Delete-on-Reboot, [65cee961534789ad737719b1a3617c84], 
PUP.Optional.Elex, C:\Program Files (x86)\Cokcultprasitain, Quarantined, [59da61e971290a2c45e545879074c838], 
PUP.Optional.Elex, C:\Program Files (x86)\Cokcultprasitain\Erwutionphutesy, Quarantined, [59da61e971290a2c45e545879074c838], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\Caps, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\CertificateTransparency, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\databases, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\data_reduction_proxy_leveldb, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extension Rules, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extension State, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\aapocclcgogkmnckokdopfmhonfmgoek, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_metadata, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\aohghmighlieiainnegkcijnfilokake, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_metadata, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_metadata, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_metadata, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\coobgpohoikkiipiblmjeljniedjpjpf, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_metadata, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\felcaaldnbdncclmgdcncolpebgiejap, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.1_0, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.1_0\_locales, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.1_0\_metadata, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_0, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_0\_locales, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_0\_metadata, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\nmmhkkegccagdldgiimedpiccmgmieda, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\css, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\html, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\images, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_metadata, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\pjkljhegncpnkpknbcohdijeoejaedia, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_metadata, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5216.530.0.10_0, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5216.530.0.10_0\cast_setup, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5216.530.0.10_0\cloud_route_details, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5216.530.0.10_0\_locales, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5216.530.0.10_0\_metadata, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\IndexedDB, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\IndexedDB\https_www.google.nl_0.indexeddb.leveldb, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\JumpListIcons, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\JumpListIconsOld, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Local Extension Settings, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Local Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Local Storage, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Service Worker, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Service Worker\CacheStorage, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Service Worker\CacheStorage\ae6425408f2239a8c4458f791990c1e6dacbcee7, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Service Worker\CacheStorage\ae6425408f2239a8c4458f791990c1e6dacbcee7\55d184d2-4756-4d62-bf02-b860787bba16, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Service Worker\CacheStorage\ae6425408f2239a8c4458f791990c1e6dacbcee7\55d184d2-4756-4d62-bf02-b860787bba16\index-dir, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Service Worker\Database, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Service Worker\ScriptCache, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Service Worker\ScriptCache\index-dir, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Session Storage, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Storage, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Storage\ext, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Storage\ext\chrome-signin, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Storage\ext\chrome-signin\def, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Sync Extension Settings, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Web Applications, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Web Applications\_crx_aohghmighlieiainnegkcijnfilokake, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\Crashpad, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\Crashpad\reports, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\EVWhitelist, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\FileTypePolicies, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\OriginTrials, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\PepperFlash, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\pnacl, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ShaderCache, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\SwiftShader, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\SwReporter, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\WidevineCDM, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 

Files: 649
PUP.Optional.Elex, C:\Program Files (x86)\Cokcultprasitain\Erwutionphutesy\ErwutionphutesyUpdatevrl.exe, Quarantined, [3cf7cb7f009ac670e63b1eae0afa53ad], 
PUP.Optional.Elex, C:\Program Files (x86)\Cokcultprasitain\Plgaghtatumusyhlp.dll, Quarantined, [b1823d0dacee87affb27d2fab252ef11], 
PUP.Optional.Elex, C:\Program Files (x86)\Cokcultprasitain\SoEasy.exe, Quarantined, [ec476edc2a703006998e8745b252a759], 
PUP.Optional.Elex, C:\Program Files (x86)\Cokcultprasitain\SpyProDll.dll, Quarantined, [d360103a2f6b41f5bf66eddfdb296c94], 
PUP.Optional.Elex, C:\Program Files (x86)\Mozilla Firefox\wtsapi32.dll, Quarantined, [2c07a3a70d8d3105fcebf9d1f70dfd03], 
PUP.Optional.Elex, C:\Program Files (x86)\Google\Chrome\Application\wtsapi32.dll, Quarantined, [082b66e4316966d05d8bbd0d8f75bd43], 
PUP.Optional.SoEasySvc, C:\Program Files (x86)\SoEasySvc\SoEasySvc.exe, Delete-on-Reboot, [65cee961534789ad737719b1a3617c84], 
PUP.Optional.SoEasySvc, C:\Program Files (x86)\SoEasySvc\iCmnBase.dll, Delete-on-Reboot, [65cee961534789ad737719b1a3617c84], 
PUP.Optional.SoEasySvc, C:\Program Files (x86)\SoEasySvc\msvcp110.dll, Delete-on-Reboot, [65cee961534789ad737719b1a3617c84], 
PUP.Optional.SoEasySvc, C:\Program Files (x86)\SoEasySvc\msvcr110.dll, Delete-on-Reboot, [65cee961534789ad737719b1a3617c84], 
PUP.Optional.Elex, C:\Program Files (x86)\Cokcultprasitain\vovuther.exex5v, Quarantined, [59da61e971290a2c45e545879074c838], 
PUP.Optional.Elex, C:\Program Files (x86)\Cokcultprasitain\Erwutionphutesy\Zohitain.dll, Quarantined, [59da61e971290a2c45e545879074c838], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\First Run, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\Local State, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\Safe Browsing Bloom, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\Safe Browsing Bloom Prefix Set, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\Safe Browsing Channel IDs, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\Safe Browsing Channel IDs-journal, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\Safe Browsing Cookies, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\Safe Browsing Cookies-journal, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\Safe Browsing Csd Whitelist, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\Safe Browsing Download, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\Safe Browsing Download Whitelist, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\Safe Browsing Extension Blacklist, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\Safe Browsing IP Blacklist, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\Safe Browsing UwS List, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\Safe Browsing UwS List Prefix Set, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Cookies, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Cookies-journal, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Current Session, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Current Tabs, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extension Cookies, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extension Cookies-journal, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Favicons, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Favicons-journal, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Google Profile.ico, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\History, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\History Provider Cache, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\History-journal, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Last Tabs, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Login Data, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Login Data-journal, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Network Action Predictor, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Network Action Predictor-journal, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Network Persistent State, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Origin Bound Certs-journal, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Preferences, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\QuotaManager, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\QuotaManager-journal, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\README, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Secure Preferences, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Shortcuts, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Shortcuts-journal, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Top Sites, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Top Sites-journal, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\TransportSecurity, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Visited Links, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Web Data, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Web Data-journal, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Last Session, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Origin Bound Certs, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\databases\Databases.db, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\databases\Databases.db-journal, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\data_reduction_proxy_leveldb\000003.log, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\data_reduction_proxy_leveldb\CURRENT, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\data_reduction_proxy_leveldb\LOCK, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\data_reduction_proxy_leveldb\LOG, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\data_reduction_proxy_leveldb\LOG.old, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\data_reduction_proxy_leveldb\MANIFEST-000001, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extension Rules\000003.log, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extension Rules\CURRENT, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extension Rules\LOCK, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extension Rules\LOG, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extension Rules\MANIFEST-000001, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extension State\000003.log, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extension State\CURRENT, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extension State\LOCK, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extension State\LOG, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extension State\LOG.old, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extension State\MANIFEST-000001, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\icon_128.png, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\icon_16.png, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\main.html, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\main.js, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\manifest.json, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\icon_128.png, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\icon_16.png, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\main.html, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\main.js, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\manifest.json, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\128.png, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\manifest.json, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\128.png, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\manifest.json, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\128.png, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\16.png, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\32.png, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\48.png, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\manifest.json, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.1_0\icon_128.png, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.1_0\icon_16.png, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.1_0\main.html, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.1_0\main.js, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.1_0\manifest.json, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_0\128.png, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_0\contentscript_bin_prod.js, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_0\dasherSettingSchema.json, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_0\eventpage_bin_prod.js, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_0\manifest.json, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_0\page_embed_script.js, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\craw_background.js, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\craw_window.js, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\manifest.json, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\css\craw_window.css, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\html\craw_window.html, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\images\flapper.gif, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\images\icon_128.png, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\images\icon_16.png, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\images\topbar_floating_button.png, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\images\topbar_floating_button_close.png, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\images\topbar_floating_button_hover.png, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\images\topbar_floating_button_maximize.png, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\images\topbar_floating_button_pressed.png, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\128.png, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\manifest.json, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5216.530.0.10_0\angular.js, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5216.530.0.10_0\background_script.js, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5216.530.0.10_0\cast_game_sender.js, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5216.530.0.10_0\cast_route_details.html, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5216.530.0.10_0\cast_route_details.js, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5216.530.0.10_0\cast_sender.js, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5216.530.0.10_0\common.js, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5216.530.0.10_0\feedback.css, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5216.530.0.10_0\feedback.html, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5216.530.0.10_0\feedback_script.js, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5216.530.0.10_0\manifest.json, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5216.530.0.10_0\material_css_min.css, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5216.530.0.10_0\mirroring_common.js, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5216.530.0.10_0\mirroring_hangouts.js, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5216.530.0.10_0\cast_setup\cast_app.css, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5216.530.0.10_0\cast_setup\cast_app.js, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5216.530.0.10_0\cast_setup\cast_app_redirect.js, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5216.530.0.10_0\cast_setup\chromecast_logo_grey.png, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5216.530.0.10_0\cast_setup\devices.html, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5216.530.0.10_0\cast_setup\index.html, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5216.530.0.10_0\cast_setup\offers.html, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5216.530.0.10_0\cast_setup\setup.html, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5216.530.0.10_0\cloud_route_details\view.html, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5216.530.0.10_0\cloud_route_details\view.js, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\IndexedDB\https_www.google.nl_0.indexeddb.leveldb\000003.log, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\IndexedDB\https_www.google.nl_0.indexeddb.leveldb\CURRENT, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\IndexedDB\https_www.google.nl_0.indexeddb.leveldb\LOCK, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\IndexedDB\https_www.google.nl_0.indexeddb.leveldb\LOG, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\IndexedDB\https_www.google.nl_0.indexeddb.leveldb\MANIFEST-000001, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\JumpListIcons\B7FF.tmp, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\JumpListIcons\B800.tmp, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\JumpListIconsOld\4879.tmp, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\JumpListIconsOld\487A.tmp, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Local Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\000003.log, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Local Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Local Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\LOCK, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Local Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\LOG, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Local Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\LOG.old, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Local Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Local Storage\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Local Storage\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Local Storage\https_consent.google.nl_0.localstorage, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Local Storage\https_consent.google.nl_0.localstorage-journal, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Local Storage\https_www.google.nl_0.localstorage, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Local Storage\https_www.google.nl_0.localstorage-journal, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Local Storage\https_www.youtube.com_0.localstorage, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Local Storage\https_www.youtube.com_0.localstorage-journal, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Service Worker\CacheStorage\ae6425408f2239a8c4458f791990c1e6dacbcee7\index.txt, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Service Worker\CacheStorage\ae6425408f2239a8c4458f791990c1e6dacbcee7\55d184d2-4756-4d62-bf02-b860787bba16\06566ff9c80a8014_0, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Service Worker\CacheStorage\ae6425408f2239a8c4458f791990c1e6dacbcee7\55d184d2-4756-4d62-bf02-b860787bba16\907bb0d163666c5b_0, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Service Worker\CacheStorage\ae6425408f2239a8c4458f791990c1e6dacbcee7\55d184d2-4756-4d62-bf02-b860787bba16\b2821ab637f16106_0, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Service Worker\CacheStorage\ae6425408f2239a8c4458f791990c1e6dacbcee7\55d184d2-4756-4d62-bf02-b860787bba16\fdf2cfeb8ad0eeac_0, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Service Worker\CacheStorage\ae6425408f2239a8c4458f791990c1e6dacbcee7\55d184d2-4756-4d62-bf02-b860787bba16\index, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Service Worker\CacheStorage\ae6425408f2239a8c4458f791990c1e6dacbcee7\55d184d2-4756-4d62-bf02-b860787bba16\index-dir\the-real-index, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Service Worker\Database\000003.log, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Service Worker\Database\CURRENT, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Service Worker\Database\LOCK, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Service Worker\Database\LOG, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Service Worker\Database\LOG.old, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Service Worker\Database\MANIFEST-000001, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Service Worker\ScriptCache\2cc80dabc69f58b6_0, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Service Worker\ScriptCache\2cc80dabc69f58b6_1, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Service Worker\ScriptCache\index, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Service Worker\ScriptCache\index-dir\the-real-index, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Session Storage\000004.log, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Session Storage\000005.ldb, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Session Storage\CURRENT, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Session Storage\LOCK, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Session Storage\LOG, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Session Storage\LOG.old, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Session Storage\MANIFEST-000001, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm\000003.log, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm\CURRENT, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm\LOCK, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm\LOG, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm\LOG.old, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm\MANIFEST-000001, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Web Applications\_crx_aohghmighlieiainnegkcijnfilokake\Google Docs.ico, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\ChromeDefaultData\Web Applications\_crx_aohghmighlieiainnegkcijnfilokake\Google Docs.ico.md5, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\Crashpad\metadata, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 
PUP.Optional.Elex, C:\Users\{username}\AppData\Local\Lutilyantersy\Crashpad\settings.dat, Quarantined, [47ec66e4c5d5ec4a79b4f5d7e12353ad], 

Physical Sectors: 0
(No malicious items detected)


(end)
As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.
We use different ways of protecting your computer(s):
  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
  • Save yourself the hassle and get protected.

  • 0

Advertisements

Back to Malware Removal Guides and Tutorials


0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. Geeks to Go Community
  2. → Security
  3. → Malware Removal Guides and Tutorials

As Featured On:

featured
Malware Removal How to Guides Windows 7 System Building Download Files Register welcome

Never used a forum? Learn how.