[christian keyston]

For the last several days, I've been getting lots of random pop-up ads in Microsoft Edge. Some of the sites the tabs to go are clkrev.com, wonderlandads.com, terraclicks.com, isanalyze.com and various .ru domains. Thank you for any help you can provide.

 

I have run scans with the following tools, many of which found and removed multiple malicious and suspicious programs, registry entries, etc, but the pop-ups still persist:

- adwcleaner (Removed Mail.Ru, YSearchUtil, and Babylon)

- Malwarebytes (Removed PCKeeper)

- HitmanPro (Log included below FRST logs below)

- HerdProtect (Removed files sintf32.dll and sintfnt.dll; along with Babylon installer)

- Zemana (Nothing found)

- JRT (Nothing found)

 

I have also deleted Microsoft Edge and reinstalled it via Powershell.

 

Here is the FRST.txt log:

 

 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 22-01-2017
Ran by chris (administrator) on BASEMENT-PC (22-01-2017 14:36:45)
Running from C:\Users\chris\Desktop
Loaded Profiles: chris (Available Profiles: ronke_000 & chris)
Platform: Windows 10 Pro Version 1607 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Edge)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Electronic Arts) D:\Origin\OriginWebHelperService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Zemana Ltd.) C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft) C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\SkypeApp.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Zemana Ltd.) C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe
(MY.COM B.V.) C:\Users\chris\AppData\Local\MyComGames\MyComGames.exe
() C:\Users\chris\AppData\Local\Gaijin\Program Files (x86)\NetAgent\gjagent.exe
() C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Valve Corporation) D:\Steam\Steam.exe
(Valve Corporation) D:\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Intel Corporation) C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
(Microsoft Corporation) C:\Windows\System32\cmd.exe
(Oracle Corporation) C:\Program Files\Java\jre1.8.0_101\bin\java.exe
(Valve Corporation) D:\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
() C:\Program Files\ATI Technologies\ATI.ACE\a4\AdaptiveSleepService.exe
(www.Bandisoft.com) C:\Program Files (x86)\Bandicam\bdcam.exe
(Valve Corporation) D:\Steam\bin\cef\cef.win7\steamwebhelper.exe
(www.Bandisoft.com) C:\Program Files (x86)\Bandicam\bdcam64.bin
(Intel Corporation) C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgent.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgentUserBroker.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Farbar) C:\Users\chris\Desktop\FRST64 (1).exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13885696 2015-06-24] (Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe [287592 2014-05-28] (Intel Corporation)
HKLM\...\Run: [StartCN] => C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe [8027016 2016-09-16] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2016-09-06] (Microsoft Corporation)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2776528 2016-12-14] (Malwarebytes)
HKLM\...\Run: [ZAM] => C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe [14122736 2017-01-18] (Zemana Ltd.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [598552 2016-06-22] (Oracle Corporation)
HKU\S-1-5-21-1127713466-721098113-725960913-1014\...\Run: [MyComGames] => C:\Users\chris\AppData\Local\MyComGames\MyComGames.exe [4998032 2016-12-08] (MY.COM B.V.)
HKU\S-1-5-21-1127713466-721098113-725960913-1014\...\Run: [Gaijin.Net Agent] => C:\Users\chris\AppData\Local\Gaijin\Program Files (x86)\NetAgent\gjagent.exe [1798664 2017-01-03] ()
HKU\S-1-5-21-1127713466-721098113-725960913-1014\...\RunOnce: [Uninstall C:\Users\chris\AppData\Local\Microsoft\OneDrive\17.3.6390.0509_1\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\chris\AppData\Local\Microsoft\OneDrive\17.3.6390.0509_1\amd64"
HKU\S-1-5-21-1127713466-721098113-725960913-1014\...\MountPoints2: {843f9f1d-10e1-11e5-beb7-806e6f6e6963} - "E:\LaunchEAWG.exe"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TP-LINK Wireless Configuration Utility.lnk [2015-03-19]
ShortcutTarget: TP-LINK Wireless Configuration Utility.lnk -> C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe ()
GroupPolicy: Restriction - Chrome <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 10.1.5.1
Tcpip\..\Interfaces\{754b830b-9426-47a7-992a-a87514813b87}: [DhcpNameServer] 10.1.5.1

Internet Explorer:
==================
BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_101\bin\ssv.dll [2016-09-25] (Oracle Corporation)
BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-09-25] (Oracle Corporation)
DPF: HKLM-x32 {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
DPF: HKLM-x32 {82774781-8F4E-11D1-AB1C-0000F8773BF0} hxxps://transfers.ds.microsoft.com/FTM/TransferSource/grTransferCtrl.cab

FireFox:
========
FF DefaultProfile: 7vemt281.default
FF ProfilePath: C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default [2017-01-21]
FF DefaultSearchEngine.US: Mozilla\Firefox\Profiles\7vemt281.default -> Bing
FF Homepage: Mozilla\Firefox\Profiles\7vemt281.default -> www.warthunder.com
FF Extension: (HTTPS-Everywhere) - C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\Extensions\[email protected] [2016-06-13]
FF Extension: (uBlock Origin) - C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\Extensions\[email protected] [2016-05-03]
FF Extension: (WOT) - C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2015-12-15]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_24_0_0_194.dll [2017-01-10] ()
FF Plugin: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-09-25] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-09-25] (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWoW64\Macromed\Flash\NPSWF32_24_0_0_194.dll [2017-01-10] ()
FF Plugin HKU\S-1-5-21-1127713466-721098113-725960913-1014: @my.com/Games -> C:\Users\chris\AppData\Local\MyComGames\NPMyComDetector.dll [2016-09-13] (MY.COM B.V.)

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdaptiveSleepService; C:\Program Files\ATI Technologies\ATI.ACE\A4\AdaptiveSleepService.exe [155016 2016-09-16] ()
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1445384 2016-10-21] ()
S3 EasyAntiCheat; C:\WINDOWS\SysWOW64\EasyAntiCheat.exe [245544 2016-05-04] (EasyAntiCheat Ltd)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-05-28] (Intel Corporation)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4317648 2016-12-14] (Malwarebytes)
S3 Origin Client Service; D:\Origin\OriginClientService.exe [2119176 2017-01-13] (Electronic Arts)
R2 Origin Web Helper Service; D:\Origin\OriginWebHelperService.exe [2181648 2017-01-13] (Electronic Arts)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2889896 2016-09-15] (Microsoft Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)
R2 ZAMSvc; C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe [14122736 2017-01-18] (Zemana Ltd.)
S2 RtkAudioService; "C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe" [X]

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S0 amdkmafd; C:\WINDOWS\System32\drivers\amdkmafd.sys [31992 2015-06-03] (Advanced Micro Devices, Inc.)
R3 amdkmdag; C:\WINDOWS\System32\DriverStore\FileRepository\c0307259.inf_amd64_e75a0a5e82450920\atikmdag.sys [26568856 2016-10-26] (Advanced Micro Devices, Inc.)
R3 amdkmdap; C:\WINDOWS\System32\DriverStore\FileRepository\c0307259.inf_amd64_e75a0a5e82450920\atikmpag.sys [536592 2016-10-26] (Advanced Micro Devices, Inc.)
R3 athur; C:\WINDOWS\System32\drivers\athuw8x.sys [2919936 2013-06-02] (Qualcomm Atheros Communications, Inc.)
R3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWT6.sys [102912 2015-07-21] (Advanced Micro Devices)
R3 debutfilter; C:\WINDOWS\system32\DRIVERS\debutfilterx64.sys [34512 2017-01-20] ()
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [77416 2016-12-14] ()
R3 ISCT; C:\WINDOWS\System32\drivers\ISCTD64.sys [47008 2013-07-30] ()
R2 MBAMChameleon; C:\WINDOWS\system32\drivers\MBAMChameleon.sys [176064 2017-01-20] (Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\system32\drivers\farflt.sys [102856 2017-01-22] (Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\drivers\mbam.sys [43968 2017-01-22] (Malwarebytes)
R0 MBAMSwissArmy; C:\WINDOWS\System32\drivers\MBAMSwissArmy.sys [250816 2017-01-22] (Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\drivers\mwac.sys [91584 2017-01-22] (Malwarebytes)
R3 MEIx64; C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys [129312 2014-09-30] (Intel Corporation)
S3 MTsensor; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [17280 2013-05-17] ()
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R1 VBoxNetAdp; C:\WINDOWS\system32\DRIVERS\VBoxNetAdp6.sys [132120 2016-10-18] (Oracle Corporation)
R1 VBoxNetLwf; C:\WINDOWS\system32\DRIVERS\VBoxNetLwf.sys [206416 2016-10-18] (Oracle Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
R1 ZAM; C:\WINDOWS\System32\drivers\zam64.sys [203680 2017-01-21] (Zemana Ltd.)
R1 ZAM_Guard; C:\WINDOWS\System32\drivers\zamguard64.sys [203680 2017-01-21] (Zemana Ltd.)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-01-22 14:36 - 2017-01-22 14:37 - 00012869 _____ C:\Users\chris\Desktop\FRST.txt
2017-01-22 14:36 - 2017-01-22 14:36 - 00000000 ____D C:\FRST
2017-01-22 14:32 - 2017-01-22 14:36 - 02420736 _____ (Farbar) C:\Users\chris\Desktop\FRST64 (1).exe
2017-01-22 14:02 - 2017-01-22 14:02 - 00000625 _____ C:\Users\chris\Desktop\JRT.txt
2017-01-22 13:34 - 2017-01-22 13:34 - 06771840 _____ (ESET spol. s r.o.) C:\Users\chris\Downloads\esetonlinescanner_enu.exe
2017-01-22 13:34 - 2017-01-22 13:34 - 00000000 ____D C:\Users\chris\AppData\Local\ESET
2017-01-21 13:48 - 2017-01-21 17:59 - 00000000 ____D C:\Users\chris\Documents\Bandicam
2017-01-21 13:48 - 2017-01-21 13:48 - 00000000 ____D C:\Users\chris\AppData\Roaming\BANDISOFT
2017-01-21 13:47 - 2017-01-21 13:47 - 00001057 _____ C:\Users\Public\Desktop\Bandicam.lnk
2017-01-21 13:47 - 2017-01-21 13:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bandicam
2017-01-21 13:47 - 2017-01-21 13:47 - 00000000 ____D C:\Program Files (x86)\BandiMPEG1
2017-01-21 13:47 - 2017-01-21 13:47 - 00000000 ____D C:\Program Files (x86)\Bandicam
2017-01-21 13:46 - 2017-01-21 13:46 - 17175976 _____ (Bandisoft) C:\Users\chris\Downloads\bdcamsetup.exe
2017-01-21 10:24 - 2017-01-21 10:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\herdProtect
2017-01-21 10:24 - 2017-01-21 10:24 - 00000000 ____D C:\Program Files\Reason
2017-01-21 10:20 - 2017-01-22 14:36 - 00069963 _____ C:\WINDOWS\ZAM.krnl.trace
2017-01-21 10:20 - 2017-01-22 14:36 - 00035503 _____ C:\WINDOWS\ZAM_Guard.krnl.trace
2017-01-21 10:20 - 2017-01-21 10:20 - 00203680 _____ (Zemana Ltd.) C:\WINDOWS\system32\Drivers\zamguard64.sys
2017-01-21 10:20 - 2017-01-21 10:20 - 00203680 _____ (Zemana Ltd.) C:\WINDOWS\system32\Drivers\zam64.sys
2017-01-21 10:19 - 2017-01-21 10:20 - 00000000 ____D C:\Program Files (x86)\Zemana AntiMalware
2017-01-21 10:19 - 2017-01-21 10:19 - 00000000 ____D C:\Users\chris\AppData\Local\Zemana
2017-01-21 10:19 - 2017-01-21 10:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zemana AntiMalware
2017-01-21 10:13 - 2017-01-21 10:18 - 00000000 ____D C:\ProgramData\HitmanPro
2017-01-21 10:00 - 2017-01-22 13:30 - 00000000 ____D C:\AdwCleaner
2017-01-21 09:57 - 2017-01-22 14:01 - 00000000 ____D C:\Users\chris\Desktop\Tools
2017-01-21 09:54 - 2017-01-21 09:54 - 00291606 _____ C:\Users\chris\Downloads\TCPView.zip
2017-01-21 09:53 - 2017-01-21 09:53 - 01932769 _____ C:\Users\chris\Downloads\ProcessExplorer.zip
2017-01-20 20:50 - 2017-01-20 20:51 - 00083992 _____ C:\Users\chris\AppData\Roaming\Debut.dmp
2017-01-20 20:37 - 2017-01-20 20:37 - 00001167 _____ C:\Users\chris\AppData\Roaming\trace_FilterInstaller.txt
2017-01-20 20:37 - 2017-01-20 20:37 - 00000000 _____ C:\Users\chris\AppData\Roaming\trace_FilterInstaller.txt-CRT.txt
2017-01-20 19:44 - 2017-01-20 20:36 - 00000000 ____D C:\WINDOWS\System32\Tasks\NCH Software
2017-01-20 19:44 - 2017-01-20 19:50 - 00000000 ____D C:\Users\chris\AppData\Roaming\NCH Software
2017-01-20 19:44 - 2017-01-20 19:44 - 00034512 _____ C:\WINDOWS\system32\Drivers\debutfilterx64.sys
2017-01-20 19:44 - 2017-01-20 19:44 - 00002281 _____ C:\Users\chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NCH Suite.lnk
2017-01-20 19:44 - 2017-01-20 19:44 - 00002073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Suite.lnk
2017-01-20 19:44 - 2017-01-20 19:44 - 00001195 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Debut Video Capture Software.lnk
2017-01-20 19:44 - 2017-01-20 19:44 - 00000000 ____D C:\ProgramData\NCH Software
2017-01-20 19:44 - 2017-01-20 19:44 - 00000000 ____D C:\Program Files (x86)\NCH Software
2017-01-20 19:43 - 2017-01-20 19:44 - 01681656 _____ (NCH Software) C:\Users\chris\Downloads\debutpsetup (1).exe
2017-01-20 19:19 - 2017-01-20 19:19 - 01681656 _____ (NCH Software) C:\Users\chris\Downloads\debutpsetup.exe
2017-01-20 19:16 - 2017-01-22 14:15 - 00250816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2017-01-20 19:16 - 2017-01-22 14:15 - 00102856 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2017-01-20 19:16 - 2017-01-22 14:15 - 00091584 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2017-01-20 19:16 - 2017-01-22 14:15 - 00043968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2017-01-20 19:16 - 2017-01-20 19:16 - 00176064 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMChameleon.sys
2017-01-20 19:15 - 2017-01-20 19:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-01-20 19:15 - 2017-01-20 19:15 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-01-20 19:15 - 2017-01-20 19:15 - 00000000 ____D C:\Program Files\Malwarebytes
2017-01-20 19:15 - 2016-12-14 12:55 - 00077416 _____ C:\WINDOWS\system32\Drivers\mbae64.sys
2017-01-20 19:14 - 2017-01-20 19:15 - 54199488 _____ (Malwarebytes ) C:\Users\chris\Downloads\mb3-setup-consumer-3.0.5.1299.exe
2017-01-19 14:34 - 2017-01-22 14:35 - 00000000 ____D C:\Users\chris\Desktop\tem
2017-01-19 14:26 - 2017-01-19 14:26 - 00000000 ____D C:\Users\chris\AppData\Roaming\Blender Foundation
2017-01-19 14:24 - 2017-01-19 14:34 - 00000000 ____D C:\Users\chris\Downloads\Star Wars Intro byLeyve
2017-01-19 14:23 - 2017-01-19 14:23 - 103607966 _____ C:\Users\chris\Downloads\Star Wars Intro byLeyve.rar
2017-01-19 14:18 - 2017-01-19 14:18 - 00003642 _____ C:\WINDOWS\System32\Tasks\hptop
2017-01-19 14:17 - 2017-01-19 14:17 - 00000068 _____ C:\Users\chris\Downloads\Download_Template.url
2017-01-19 14:16 - 2017-01-19 14:17 - 00000000 ____D C:\Users\chris\Downloads\Download_Template
2017-01-13 21:15 - 2017-01-13 21:15 - 00000000 ____D C:\Users\chris\Desktop\oldwest
2017-01-13 10:17 - 2017-01-13 10:17 - 00000000 ____D C:\WINDOWS\system32\55ffc3c7a45a063807a935c5e6eed..bin
2017-01-10 13:39 - 2016-12-21 01:08 - 00245600 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll
2017-01-10 13:39 - 2016-12-21 01:08 - 00136032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ImplatSetup.dll
2017-01-10 13:39 - 2016-12-21 01:04 - 07816032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-01-10 13:39 - 2016-12-21 00:49 - 00328008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2017-01-10 13:39 - 2016-12-21 00:46 - 00624048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2017-01-10 13:39 - 2016-12-21 00:43 - 04130440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2017-01-10 13:39 - 2016-12-21 00:43 - 01454504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2017-01-10 13:39 - 2016-12-21 00:43 - 01071736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2017-01-10 13:39 - 2016-12-21 00:43 - 00092512 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2017-01-10 13:39 - 2016-12-21 00:42 - 22224480 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-01-10 13:39 - 2016-12-21 00:42 - 01988560 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-01-10 13:39 - 2016-12-21 00:42 - 01702392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2017-01-10 13:39 - 2016-12-21 00:42 - 01300600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2017-01-10 13:39 - 2016-12-21 00:42 - 00241504 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2017-01-10 13:39 - 2016-12-21 00:41 - 01600632 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2017-01-10 13:39 - 2016-12-21 00:37 - 00455520 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2017-01-10 13:39 - 2016-12-21 00:15 - 22563840 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-01-10 13:39 - 2016-12-21 00:14 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2017-01-10 13:39 - 2016-12-21 00:13 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2017-01-10 13:39 - 2016-12-21 00:12 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2017-01-10 13:39 - 2016-12-21 00:10 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2017-01-10 13:39 - 2016-12-21 00:09 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneBackupHandler.dll
2017-01-10 13:39 - 2016-12-21 00:09 - 00363520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2017-01-10 13:39 - 2016-12-21 00:08 - 01292288 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll
2017-01-10 13:39 - 2016-12-21 00:08 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2017-01-10 13:39 - 2016-12-21 00:08 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2017-01-10 13:39 - 2016-12-21 00:08 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2017-01-10 13:39 - 2016-12-21 00:08 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll
2017-01-10 13:39 - 2016-12-21 00:08 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2017-01-10 13:39 - 2016-12-21 00:07 - 00748544 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2017-01-10 13:39 - 2016-12-21 00:06 - 06285312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2017-01-10 13:39 - 2016-12-21 00:06 - 00310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncSettings.dll
2017-01-10 13:39 - 2016-12-21 00:06 - 00260608 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
2017-01-10 13:39 - 2016-12-21 00:06 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2017-01-10 13:39 - 2016-12-21 00:05 - 00425984 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2017-01-10 13:39 - 2016-12-21 00:05 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll
2017-01-10 13:39 - 2016-12-21 00:05 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2017-01-10 13:39 - 2016-12-21 00:01 - 09131008 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2017-01-10 13:39 - 2016-12-21 00:00 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcfg.dll
2017-01-10 13:39 - 2016-12-20 23:59 - 01908224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-01-10 13:39 - 2016-12-20 23:59 - 00883712 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2017-01-10 13:39 - 2016-12-20 23:58 - 23678464 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-01-10 13:39 - 2016-12-20 23:57 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsettingsprovider.dll
2017-01-10 13:39 - 2016-12-20 23:56 - 00947712 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVP9DEC.dll
2017-01-10 13:39 - 2016-12-20 23:56 - 00936960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
2017-01-10 13:39 - 2016-12-20 23:55 - 08129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-01-10 13:39 - 2016-12-20 23:55 - 04749312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-01-10 13:39 - 2016-12-20 23:54 - 05511680 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2017-01-10 13:39 - 2016-12-20 23:53 - 06664192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
2017-01-10 13:39 - 2016-12-20 23:53 - 04474368 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2017-01-10 13:39 - 2016-12-20 23:53 - 01692672 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-01-10 13:39 - 2016-12-20 23:51 - 08075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2017-01-10 13:39 - 2016-12-20 23:51 - 05611008 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2017-01-10 13:39 - 2016-12-20 23:51 - 02275840 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-01-10 13:39 - 2016-12-20 23:50 - 01490432 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2017-01-10 13:39 - 2016-12-20 23:49 - 04149248 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2017-01-10 13:39 - 2016-12-20 23:49 - 02691072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2017-01-10 13:39 - 2016-12-20 23:49 - 01062912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2017-01-10 13:39 - 2016-12-20 23:47 - 01121280 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2017-01-10 13:39 - 2016-12-20 22:59 - 00218976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinesam.dll
2017-01-10 13:39 - 2016-12-20 22:09 - 00263472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll
2017-01-10 13:39 - 2016-12-20 22:02 - 03892864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2017-01-10 13:39 - 2016-12-20 22:02 - 01852720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2017-01-10 13:39 - 2016-12-20 22:02 - 01360464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2017-01-10 13:39 - 2016-12-20 22:02 - 01277344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2017-01-10 13:39 - 2016-12-20 22:02 - 01201872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2017-01-10 13:39 - 2016-12-20 22:02 - 00980832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2017-01-10 13:39 - 2016-12-20 22:01 - 20969928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2017-01-10 13:39 - 2016-12-20 21:46 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2017-01-10 13:39 - 2016-12-20 21:43 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BlockedShutdown.dll
2017-01-10 13:39 - 2016-12-20 21:41 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BioFeedback.dll
2017-01-10 13:39 - 2016-12-20 21:41 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2017-01-10 13:39 - 2016-12-20 21:40 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2017-01-10 13:39 - 2016-12-20 21:40 - 00318976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2017-01-10 13:39 - 2016-12-20 21:40 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncSettings.dll
2017-01-10 13:39 - 2016-12-20 21:40 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2017-01-10 13:39 - 2016-12-20 21:39 - 01300480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
2017-01-10 13:39 - 2016-12-20 21:39 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe
2017-01-10 13:39 - 2016-12-20 21:38 - 00866816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Cred.dll
2017-01-10 13:39 - 2016-12-20 21:35 - 04612608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2017-01-10 13:39 - 2016-12-20 21:35 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\indexeddbserver.dll
2017-01-10 13:39 - 2016-12-20 21:34 - 07626752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2017-01-10 13:39 - 2016-12-20 21:33 - 19413504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-01-10 13:39 - 2016-12-20 21:32 - 19417600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-01-10 13:39 - 2016-12-20 21:30 - 05398016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll
2017-01-10 13:39 - 2016-12-20 21:30 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2017-01-10 13:39 - 2016-12-20 21:27 - 00640000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll
2017-01-10 13:39 - 2016-12-20 21:26 - 01155072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVP9DEC.dll
2017-01-10 13:39 - 2016-12-20 21:25 - 07469056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2017-01-10 13:39 - 2016-12-20 21:25 - 06474752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe
2017-01-10 13:39 - 2016-12-20 21:24 - 06044160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-01-10 13:39 - 2016-12-20 21:24 - 05061120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2017-01-10 13:39 - 2016-12-20 21:24 - 03733504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2017-01-10 13:39 - 2016-12-20 21:24 - 00886272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2017-01-10 13:39 - 2016-12-20 21:22 - 01883648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2017-01-10 13:39 - 2016-12-20 21:22 - 00860672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2017-01-10 13:39 - 2016-12-13 22:41 - 01235296 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2017-01-10 13:39 - 2016-12-13 22:41 - 00590960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2017-01-10 13:39 - 2016-12-13 22:34 - 02482280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2017-01-10 13:39 - 2016-12-13 22:33 - 02169184 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystems64.dll
2017-01-10 13:39 - 2016-12-13 22:33 - 01669984 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVIntegration.dll
2017-01-10 13:39 - 2016-12-13 22:33 - 01400160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystemController.dll
2017-01-10 13:39 - 2016-12-13 22:33 - 01356864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2017-01-10 13:39 - 2016-12-13 22:33 - 01054048 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPolicy.dll
2017-01-10 13:39 - 2016-12-13 22:33 - 00992096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVManifest.dll
2017-01-10 13:39 - 2016-12-13 22:33 - 00822624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVClient.exe
2017-01-10 13:39 - 2016-12-13 22:33 - 00813408 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntStreamingManager.dll
2017-01-10 13:39 - 2016-12-13 22:33 - 00779616 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVReporting.dll
2017-01-10 13:39 - 2016-12-13 22:33 - 00752992 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVOrchestration.dll
2017-01-10 13:39 - 2016-12-13 22:33 - 00704352 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntVirtualization.dll
2017-01-10 13:39 - 2016-12-13 22:33 - 00696160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPublishing.dll
2017-01-10 13:39 - 2016-12-13 22:33 - 00571744 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVCatalog.dll
2017-01-10 13:39 - 2016-12-13 22:33 - 00513376 _____ (Microsoft Corporation) C:\WINDOWS\system32\TransportDSA.dll
2017-01-10 13:39 - 2016-12-13 22:33 - 00406368 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVScripting.dll
2017-01-10 13:39 - 2016-12-13 22:33 - 00241504 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVShNotify.exe
2017-01-10 13:39 - 2016-12-13 22:33 - 00190816 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVDllSurrogate.exe
2017-01-10 13:39 - 2016-12-13 22:26 - 01469792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppVEntSubsystems32.dll
2017-01-10 13:39 - 2016-12-13 22:23 - 00404832 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2017-01-10 13:39 - 2016-12-13 22:21 - 02206496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2017-01-10 13:39 - 2016-12-13 22:19 - 00584544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2017-01-10 13:39 - 2016-12-13 22:18 - 00715104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2017-01-10 13:39 - 2016-12-13 22:18 - 00335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2017-01-10 13:39 - 2016-12-13 22:17 - 00319288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2017-01-10 13:39 - 2016-12-13 22:14 - 01694712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2017-01-10 13:39 - 2016-12-13 22:14 - 00418952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2017-01-10 13:39 - 2016-12-13 22:14 - 00089416 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2017-01-10 13:39 - 2016-12-13 22:08 - 00341344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2017-01-10 13:39 - 2016-12-13 22:06 - 00509792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2017-01-10 13:39 - 2016-12-13 22:01 - 01557808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2017-01-10 13:39 - 2016-12-13 22:01 - 00382784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2017-01-10 13:39 - 2016-12-13 22:01 - 00076984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2017-01-10 13:39 - 2016-12-13 21:48 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-01-10 13:39 - 2016-12-13 21:46 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2017-01-10 13:39 - 2016-12-13 21:46 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2017-01-10 13:39 - 2016-12-13 21:45 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
2017-01-10 13:39 - 2016-12-13 21:43 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ScDeviceEnum.dll
2017-01-10 13:39 - 2016-12-13 21:42 - 00352768 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2017-01-10 13:39 - 2016-12-13 21:42 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSCard.dll
2017-01-10 13:39 - 2016-12-13 21:42 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.UI.Logon.ProxyStub.dll
2017-01-10 13:39 - 2016-12-13 21:42 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSCard.dll
2017-01-10 13:39 - 2016-12-13 21:41 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2017-01-10 13:39 - 2016-12-13 21:40 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2017-01-10 13:39 - 2016-12-13 21:40 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsoleLogon.dll
2017-01-10 13:39 - 2016-12-13 21:40 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudBackupSettings.dll
2017-01-10 13:39 - 2016-12-13 21:40 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\certprop.dll
2017-01-10 13:39 - 2016-12-13 21:40 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.UI.Logon.ProxyStub.dll
2017-01-10 13:39 - 2016-12-13 21:39 - 00837632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2017-01-10 13:39 - 2016-12-13 21:39 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2017-01-10 13:39 - 2016-12-13 21:39 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.CredDialogController.dll
2017-01-10 13:39 - 2016-12-13 21:38 - 17188864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-01-10 13:39 - 2016-12-13 21:38 - 13869056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2017-01-10 13:39 - 2016-12-13 21:38 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudBackupSettings.dll
2017-01-10 13:39 - 2016-12-13 21:38 - 00213504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.CredDialogController.dll
2017-01-10 13:39 - 2016-12-13 21:37 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2017-01-10 13:39 - 2016-12-13 21:36 - 01002496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2017-01-10 13:39 - 2016-12-13 21:36 - 00539648 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2017-01-10 13:39 - 2016-12-13 21:36 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2017-01-10 13:39 - 2016-12-13 21:35 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2017-01-10 13:39 - 2016-12-13 21:35 - 00712192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2017-01-10 13:39 - 2016-12-13 21:35 - 00600576 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptui.dll
2017-01-10 13:39 - 2016-12-13 21:35 - 00553984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptui.dll
2017-01-10 13:39 - 2016-12-13 21:32 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll
2017-01-10 13:39 - 2016-12-13 21:32 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2017-01-10 13:39 - 2016-12-13 21:26 - 00932864 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2017-01-10 13:39 - 2016-12-13 21:26 - 00869888 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2017-01-10 13:39 - 2016-12-13 21:25 - 02009600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2017-01-10 13:39 - 2016-12-13 21:24 - 01005568 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
2017-01-10 13:39 - 2016-12-13 21:24 - 00673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2017-01-10 13:39 - 2016-12-13 21:23 - 03134976 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll
2017-01-10 13:39 - 2016-12-13 21:23 - 01231872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2017-01-10 13:39 - 2016-12-13 21:22 - 02998272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2017-01-10 13:39 - 2016-12-13 21:22 - 02748416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll
2017-01-10 13:39 - 2016-12-13 21:22 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-01-10 13:39 - 2016-12-13 21:22 - 01513472 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-01-10 13:39 - 2016-12-13 21:22 - 00707584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2017-01-10 13:39 - 2016-12-13 21:22 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-01-10 13:39 - 2016-12-13 21:21 - 03616768 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-01-10 13:39 - 2016-11-02 05:01 - 00484584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2017-01-10 13:39 - 2016-11-02 04:00 - 00534096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2017-01-10 13:39 - 2016-11-02 03:28 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2017-01-10 13:39 - 2016-11-02 03:22 - 00337920 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2017-01-10 13:39 - 2016-11-02 03:21 - 00942080 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2017-01-10 13:39 - 2016-08-01 21:30 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2017-01-01 12:21 - 2017-01-01 12:21 - 00000201 _____ C:\Users\chris\Desktop\Mount & Blade Warband.url
2016-12-31 10:47 - 2016-12-31 10:47 - 00000000 ____D C:\Users\chris\Documents\Banished
2016-12-31 09:48 - 2016-12-31 09:48 - 00000202 _____ C:\Users\chris\Desktop\Banished.url
2016-12-29 21:07 - 2016-12-29 21:07 - 00642712 _____ (Microsoft Corporation) C:\Users\chris\Downloads\gfwlivesetup.exe
2016-12-29 16:48 - 2016-12-29 16:48 - 00000000 ____D C:\Users\chris\Documents\Battlestations-Pacific
2016-12-29 16:47 - 2016-12-29 16:47 - 00000000 ____D C:\Users\chris\Documents\Games for Windows - LIVE Demos
2016-12-28 17:48 - 2016-12-28 17:48 - 00000000 ____D C:\Users\chris\Documents\Paradox Interactive
2016-12-28 17:40 - 2016-12-28 17:40 - 00000202 _____ C:\Users\chris\Desktop\Hearts of Iron IV.url
2016-12-25 13:23 - 2016-12-25 13:23 - 00000000 ____D C:\Users\chris\AppData\Local\CrashReportClient
2016-12-24 17:37 - 2016-12-24 17:37 - 00000000 ____D C:\Users\chris\AppData\Local\Astro
2016-12-24 17:34 - 2016-12-24 17:34 - 00000202 _____ C:\Users\chris\Desktop\ASTRONEER.url

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-01-22 14:20 - 2016-07-16 04:47 - 00000000 ___HD C:\Program Files\WindowsApps
2017-01-22 14:20 - 2016-07-16 04:47 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-01-22 14:20 - 2015-08-01 17:57 - 01658700 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-01-22 14:17 - 2016-08-13 20:40 - 00000000 ____D C:\Users\chris
2017-01-22 14:15 - 2016-04-11 15:02 - 00000000 ____D C:\Users\chris\AppData\Local\MyComGames
2017-01-22 14:14 - 2016-08-13 20:43 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-01-22 14:14 - 2016-08-13 20:38 - 00065536 _____ C:\WINDOWS\system32\spu_storage.bin
2017-01-22 14:14 - 2016-07-15 23:04 - 01048576 _____ C:\WINDOWS\system32\config\BBI
2017-01-22 14:07 - 2015-08-02 16:00 - 00000000 ____D C:\Users\chris\AppData\Local\Packages
2017-01-22 13:52 - 2016-08-13 20:37 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-01-21 17:48 - 2015-09-27 11:21 - 00001136 _____ C:\Users\chris\Desktop\nativelog.txt
2017-01-21 16:25 - 2016-07-16 04:47 - 00000000 ____D C:\WINDOWS\system32\AppLocker
2017-01-21 13:59 - 2015-08-22 13:23 - 00000000 ____D C:\Users\chris\AppData\Roaming\.minecraft
2017-01-21 09:51 - 2015-08-14 09:29 - 00000000 ____D C:\Users\chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2017-01-20 20:52 - 2016-07-16 04:47 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2017-01-20 20:51 - 2016-07-16 04:45 - 00000000 ____D C:\WINDOWS\INF
2017-01-20 20:38 - 2015-06-05 15:20 - 00000000 __RHD C:\Users\Public\AccountPictures
2017-01-20 19:24 - 2015-07-22 13:38 - 00000000 ____D C:\ProgramData\Origin
2017-01-20 19:19 - 2015-08-02 16:34 - 00000000 ____D C:\Users\chris\AppData\Roaming\Origin
2017-01-20 11:47 - 2015-11-17 13:26 - 00001000 _____ C:\Users\Public\Desktop\STAR WARS Battlefront.lnk
2017-01-19 14:32 - 2016-05-10 11:53 - 00000000 ____D C:\tmp
2017-01-19 14:18 - 2016-07-16 04:47 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2017-01-19 14:18 - 2013-08-22 08:36 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy
2017-01-18 15:57 - 2016-12-13 15:56 - 00003282 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2
2017-01-18 15:57 - 2015-08-02 16:01 - 00002404 _____ C:\Users\chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-01-18 15:57 - 2015-08-02 16:01 - 00000000 ___RD C:\Users\chris\OneDrive
2017-01-11 21:18 - 2016-07-16 04:47 - 00000000 ____D C:\WINDOWS\rescache
2017-01-10 18:27 - 2016-08-13 20:37 - 00203376 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-01-10 18:27 - 2016-07-16 04:47 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-01-10 18:27 - 2016-07-16 04:47 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2017-01-10 18:27 - 2016-07-16 04:47 - 00000000 ____D C:\WINDOWS\system32\oobe
2017-01-10 18:27 - 2016-07-16 04:47 - 00000000 ____D C:\WINDOWS\ShellExperiences
2017-01-10 18:27 - 2016-07-16 04:47 - 00000000 ____D C:\WINDOWS\Provisioning
2017-01-10 18:27 - 2016-07-16 04:47 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2017-01-10 18:27 - 2015-08-01 11:30 - 00000830 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2017-01-10 18:25 - 2016-07-16 04:36 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-01-10 18:22 - 2015-03-19 21:08 - 00000000 ____D C:\WINDOWS\system32\MRT
2017-01-10 18:21 - 2015-03-19 21:08 - 135657872 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-01-10 02:21 - 2016-07-16 04:47 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2017-01-10 02:21 - 2016-07-16 04:47 - 00000000 ____D C:\WINDOWS\system32\Macromed
2017-01-05 20:14 - 2016-05-04 19:30 - 00563960 _____ C:\WINDOWS\system32\Drivers\EasyAntiCheat.sys
2017-01-01 13:15 - 2015-08-27 15:32 - 00000000 ____D C:\Users\chris\Documents\Mount&Blade Warband Savegames
2016-12-31 14:34 - 2016-03-01 19:56 - 00000000 ____D C:\Users\chris\Desktop\minecraft_server
2016-12-31 14:27 - 2016-08-13 20:40 - 00524288 ___SH C:\Users\chris\NTUSER.DAT{c279ba0a-61d8-11e6-b915-8be4a007404b}.TMContainer00000000000000000002.regtrans-ms
2016-12-29 16:47 - 2016-08-13 20:40 - 00000000 ____D C:\Users\chris\AppData\Local\Microsoft
2016-12-29 16:47 - 2016-07-16 04:47 - 00000000 ___SD C:\ProgramData\Microsoft
2016-12-29 16:47 - 2016-07-16 04:47 - 00000000 ____D C:\WINDOWS\system32\NDF
2016-12-29 16:47 - 2015-08-02 16:36 - 00000000 ____D C:\Users\chris\AppData\Local\Diagnostics
2016-12-29 16:47 - 2014-02-23 20:19 - 00251201 _____ C:\WINDOWS\DirectX.log
2016-12-29 16:42 - 2016-07-16 04:47 - 00000000 __RSD C:\WINDOWS\assembly
2016-12-28 14:16 - 2013-02-24 15:37 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-12-28 14:14 - 2014-03-02 13:52 - 00000000 ____D C:\Program Files (x86)\LucasArts
2016-12-24 17:37 - 2015-12-24 14:49 - 00000000 ____D C:\Users\chris\AppData\Local\UnrealEngine

==================== Files in the root of some directories =======

2017-01-20 20:50 - 2017-01-20 20:51 - 0083992 _____ () C:\Users\chris\AppData\Roaming\Debut.dmp
2017-01-20 20:37 - 2017-01-20 20:37 - 0001167 _____ () C:\Users\chris\AppData\Roaming\trace_FilterInstaller.txt
2017-01-20 20:37 - 2017-01-20 20:37 - 0000000 _____ () C:\Users\chris\AppData\Roaming\trace_FilterInstaller.txt-CRT.txt
2014-03-02 13:50 - 2006-01-20 12:06 - 4489216 _____ () C:\ProgramData\EAW Deathstar.scr
2014-03-04 19:09 - 2006-01-20 11:20 - 1028096 _____ () C:\ProgramData\EAW Vehicles.scr

Some files in TEMP:
====================
2013-08-04 23:15 - 2013-08-04 23:15 - 4292136 _____ (www.Bandisoft.com) C:\Users\chris\AppData\Local\Temp\bdfilters.dll
2017-01-21 10:43 - 2017-01-21 10:43 - 0019968 _____ (Red Hat®, Inc.) C:\Users\chris\AppData\Local\Temp\jansi-64-git-Bukkit-67b2424-1878795799796374101.dll
2017-01-22 14:16 - 2017-01-22 14:16 - 0019968 _____ (Red Hat®, Inc.) C:\Users\chris\AppData\Local\Temp\jansi-64-git-Bukkit-67b2424-740604415620245011.dll
2016-08-27 15:24 - 2016-08-27 15:24 - 0017408 ____N (Red Hat®, Inc.) C:\Users\ronke_000\AppData\Local\Temp\jansi-32-git-Bukkit-67b2424-8566737310073182276.dll

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-01-19 22:44

==================== End of FRST.txt ============================

 

And here is the Addition.txt log:

 

 

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 22-01-2017
Ran by chris (22-01-2017 14:37:18)
Running from C:\Users\chris\Desktop
Windows 10 Pro Version 1607 (X64) (2016-08-14 03:45:20)
Boot Mode: Normal
==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-1127713466-721098113-725960913-500 - Administrator - Disabled)
chris (S-1-5-21-1127713466-721098113-725960913-1014 - Administrator - Enabled) => C:\Users\chris
DefaultAccount (S-1-5-21-1127713466-721098113-725960913-503 - Limited - Disabled)
Guest (S-1-5-21-1127713466-721098113-725960913-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1127713466-721098113-725960913-1004 - Limited - Enabled)
ronke_000 (S-1-5-21-1127713466-721098113-725960913-1006 - Administrator - Enabled) => C:\Users\ronke_000

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 16.04 (x64) (HKLM\...\7-Zip) (Version: 16.04 - Igor Pavlov)
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Flash Player 24 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 24.0.0.194 - Adobe Systems Incorporated)
Age of Empires III (HKLM-x32\...\InstallShield_{70F8B183-99EB-4304-BA35-080E2DFFD2A3}) (Version: 1.00.0000 - Microsoft Game Studios)
Age of Empires III (x32 Version: 1.00.0000 - Microsoft Game Studios) Hidden
AMD Catalyst Install Manager (HKLM\...\{66AFB595-BC05-2913-7696-6D58F9B733E1}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
AMD Settings (HKLM\...\WUCCCApp) (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.)
Armored Warfare MyCom (HKU\S-1-5-21-1127713466-721098113-725960913-1014\...\Armored Warfare MyCom) (Version: 1.80 - My.com B.V.)
ASTRONEER (HKLM\...\Steam App 361420) (Version:  - System Era Softworks)
Bandicam (HKLM-x32\...\Bandicam) (Version: 3.3.0.1175 - Bandisoft.com)
Bandisoft MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version:  - Bandisoft.com)
Banished (HKLM\...\Steam App 242920) (Version:  - Shining Rock Software LLC)
BeamNG.drive (HKLM-x32\...\Steam App 284160) (Version:  - BeamNG)
Blender 2.77 (HKLM\...\Steam App 365670) (Version:  - Blender Foundation)
Catalyst Control Center Next Localization BR (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization BR (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization BR (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Civilization III (HKLM-x32\...\{0AD84416-63A4-4CF3-BDDF-8FA866711FB0}) (Version:  - )
Civilization: Call To Power (HKLM-x32\...\Activision_CivCTPUninstallKey) (Version:  - )
Debut Video Capture Software (HKLM-x32\...\Debut) (Version: 3.07 - NCH Software)
Elite Dangerous (HKLM-x32\...\Steam App 359320) (Version:  - Frontier Developments)
Empire Earth - The Art of Conquest (HKLM-x32\...\{B49C924C-A651-4378-94F6-5D9BF44A959F}) (Version:  - )
Empire Earth (HKLM-x32\...\{2447500B-22D7-47BD-9B13-1A927F43A267}) (Version:  - )
Empire: Total War (HKLM-x32\...\Steam App 10500) (Version:  - The Creative Assembly)
Endless Sky (HKLM-x32\...\Steam App 404410) (Version:  - Michael Zahniser)
Fractured Space (HKLM-x32\...\Steam App 310380) (Version:  - Edge Case Games Ltd.)
Gear Up (HKLM-x32\...\Steam App 214420) (Version:  - Doctor Entertainment AB)
Hearts of Iron IV (HKLM\...\Steam App 394360) (Version:  - Paradox Development Studio)
herdProtect Anti-Malware Scanner (HKLM-x32\...\herdProtectScan) (Version: 1.0 - Reason Company Software Inc.)
Homeworld Remastered Collection (HKLM\...\Steam App 244160) (Version:  - Gearbox Software)
Intel® Chipset Device Software (x32 Version: 10.0.13 - Intel® Corporation) Hidden
Intel® Network Connections 19.0.27.0 (HKLM\...\PROSetDX) (Version: 19.0.27.0 - Intel)
Intel® Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 13.1.0.1058 - Intel Corporation)
Java 8 Update 101 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)
Kerbal Space Program (HKLM-x32\...\Steam App 220200) (Version:  - Squad)
King's Quest Collection™ (HKLM-x32\...\{29BB5153-133B-4C82-AF51-BF303F2BFD63}) (Version: 1.00.0000 - Sierra)
King's Quest I: Quest for the Crown (4.1c) (HKLM-x32\...\{486CC64F-030A-4C9A-8716-87E26D28FKQ1}_is1) (Version: 4.1 - AGD Interactive, LLC)
King's Quest II: Romancing the Stones (3.1c) (HKLM-x32\...\{486CC64F-030A-4C9A-8716-87E26D28FKQ2}_is1) (Version: 3.1 - AGD Interactive, LLC)
King's Quest III Redux: To Heir is Human (1.1) (HKLM-x32\...\{486CC64F-030A-4C9A-8716-87E26D28FKQ3REDUX}_is1) (Version: 1.1 - AGD Interactive, LLC)
LAV Filters 0.63.0 (HKLM-x32\...\lavfilters_is1) (Version: 0.63.0 - Hendrik Leppkes)
Malwarebytes version 3.0.5.1299 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.0.5.1299 - Malwarebytes)
MechWarrior Online (HKLM\...\Steam App 342200) (Version:  - Piranha Games Inc.)
Microsoft Age of Empires II (HKLM-x32\...\Age of Empires 2.0) (Version:  - )
Microsoft Age of Empires II: The Conquerors Expansion (HKLM-x32\...\Age of Empires II: The Conquerors Expansion 1.0) (Version:  - )
Microsoft OneDrive (HKU\S-1-5-21-1127713466-721098113-725960913-1014\...\OneDriveSetup.exe) (Version: 17.3.6743.1212 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24210 (HKLM-x32\...\{f144e08f-9cbe-4f09-9a8c-f2b858b7ee7f}) (Version: 14.0.24210.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24210 (HKLM-x32\...\{23658c02-145e-483d-ba6b-1eb82c580529}) (Version: 14.0.24210.0 - Microsoft Corporation)
Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang)
Moonbase Alpha (HKLM-x32\...\Steam App 39000) (Version:  - Virtual Heroes)
Mount & Blade: Warband (HKLM\...\Steam App 48700) (Version:  - TaleWorlds Entertainment)
Mozilla Firefox 47.0 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 47.0 (x86 en-US)) (Version: 47.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 47.0.0.5999 - Mozilla)
My.com Game Center (HKU\S-1-5-21-1127713466-721098113-725960913-1014\...\MyComGames) (Version: 3.176 - My.com B.V.)
NVIDIA PhysX (HKLM-x32\...\{DEA314C4-0929-4250-BC92-98E4C105F28D}) (Version: 9.10.0129 - NVIDIA Corporation)
Offworld Trading Company (HKLM-x32\...\Steam App 271240) (Version:  - Mohawk Games)
Oracle VM VirtualBox 5.1.8 (HKLM\...\{65402252-5DA1-4360-A144-E09BB16AC7A9}) (Version: 5.1.8 - Oracle Corporation)
Order of War (HKLM\...\Steam App 34600) (Version:  - Wargaming.net)
Origin (HKLM-x32\...\Origin) (Version: 10.3.5.6379 - Electronic Arts, Inc.)
Outpost 2 (HKLM-x32\...\Outpost 2) (Version:  - )
PlanetSide 2 (HKLM\...\Steam App 218230) (Version:  - Daybreak Game Company)
PlanetSide 2 (HKU\S-1-5-21-1127713466-721098113-725960913-1014\...\DG0-PlanetSide 2) (Version:  - Sony Online Entertainment)
Portal 2 (HKLM\...\Steam App 620) (Version:  - Valve)
Quest for Glory II: Trial by Fire (2.0) (HKLM-x32\...\{486CC64F-030A-4C9A-8716-87E26D28FQFG2VGA}_is1) (Version: 2.0 - AGD Interactive, LLC)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.)
Robocraft (HKLM\...\Steam App 301520) (Version:  - Freejam)
RollerCoaster Tycoon 3 (HKLM-x32\...\{907B4640-266B-4A21-92FB-CD1A86CD0F63}) (Version: 1.00.000 - )
Rome: Total War (HKLM-x32\...\Steam App 4760) (Version:  - The Creative Assembly)
Sid Meier's Civilization V (HKLM-x32\...\Steam App 8930) (Version:  - 2K Games, Inc.)
Sid Meier's Civilization V SDK (HKLM-x32\...\Steam App 16830) (Version:  - Firaxis Games)
Sid Meier's Civilization: Beyond Earth (HKLM-x32\...\Steam App 65980) (Version:  - Firaxis Games)
Sid Meier's Civilization: Beyond Earth SDK (HKLM-x32\...\Steam App 312800) (Version:  - )
Sid Meier's SimGolf (HKLM-x32\...\{8C4504A1-9280-11D5-9F7E-00902712427E}) (Version:  - )
SimCity 4 Deluxe (HKLM-x32\...\{A7A34FC9-DF24-4A36-00AD-D4EFE94CC116}) (Version:  - )
SimCity™ (HKLM-x32\...\{F70FDE4B-8F86-4eb6-8C8E-636EC89F6419}) (Version: 4.0.97.4382 - Electronic Arts)
SNOW (HKLM-x32\...\Steam App 244930) (Version:  - Poppermost Productions)
Space Engineers (HKLM-x32\...\Steam App 244850) (Version:  - Keen Software House)
Star Swarm Stress Test (HKLM-x32\...\Steam App 267130) (Version:  - Oxide Games)
Star Trek Online (HKLM\...\Steam App 9900) (Version:  - Cryptic Studios)
Star Wars Empire at War (HKLM-x32\...\{99AE7207-8612-4DBA-A8F8-BAE5C633390D}) (Version: 1.0 - LucasArts)
Star Wars Empire at War Forces of Corruption (HKLM-x32\...\{6592FDEC-2C1A-413A-9985-25FEC2F0848D}) (Version: 1.0 - LucasArts)
STAR WARS™ Battlefront™ (HKLM-x32\...\{E402D891-4E45-4ce9-B41F-DD35864EF170}) (Version: 1.0.7.64833 - Electronic Arts)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
SteamVR Performance Test (HKLM\...\Steam App 323910) (Version:  - Valve)
Supreme Commander 2 (HKLM-x32\...\Steam App 40100) (Version:  - Gas Powered Games)
The Silver Lining (HKLM-x32\...\{26ED4308-E0A5-4AE2-A1BC-7A55BC7DD32F}) (Version: 4.0.0 - Phoenix Online)
Total War: Arena (HKLM-x32\...\Steam App 227520) (Version:  - Creative Assembly)
TP-LINK TL-WN721N_TL-WN722N Driver (HKLM-x32\...\{86A7EED0-02D0-4D91-8183-8D2F23F5E6AE}) (Version: 1.3.1 - TP-LINK)
TP-LINK Wireless Configuration Utility (HKLM-x32\...\{319D91C6-3D44-436C-9F79-36C0D22372DC}) (Version: 1.3.1 - TP-LINK)
Transformers: Fall of Cybertron (HKLM\...\Steam App 213120) (Version:  - Mercenary Technologies)
Transformers: War for Cybertron (HKLM\...\Steam App 42650) (Version:  - High Moon Studios)
UE4 Prerequisites (x64) (Version: 1.0.10.0 - Epic Games, Inc.) Hidden
UE4 Prerequisites (x64) (x32 Version: 1.0.12.0 - Epic Games, Inc.) Hidden
War Thunder (HKLM-x32\...\Steam App 236390) (Version:  - Gaijin Entertainment)
War Thunder CDK 0.1 (HKLM-x32\...\{ed8deea4-29fe-1932-9612-e2122d8a62d9}}_is1) (Version:  - Gaijin Entertainment)
War Thunder Launcher 1.0.1.502 (HKLM-x32\...\{ed8deea4-29fa-3932-9612-e2122d8a62d9}}_is1) (Version:  - Gaijin Entertainment)
WinDirStat 1.1.2 (HKU\S-1-5-21-1127713466-721098113-725960913-1014\...\WinDirStat) (Version:  - )
World of Warships (HKU\S-1-5-21-1127713466-721098113-725960913-1014\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C814na}_is1) (Version:  - Wargaming.net)
Zemana AntiMalware (HKLM-x32\...\{8F0CD7D1-42F3-4195-95CD-833578D45057}_is1) (Version: 2.70.576 - Zemana Ltd.)
Zero G Arena (HKLM\...\Steam App 467820) (Version:  - Jonathan Wood)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0525D4F9-96C2-4C23-A2E2-BE1F85C5ACAA} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)
Task: {10FD9049-53FE-47A0-84D6-C86502B08DDC} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)
Task: {12317A79-39C4-4118-B89F-00D6E5C44D38} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {19AE4171-A0E7-45DE-9986-8C69588F59A3} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {2385EF8E-4D05-4B25-BFF1-ED23A55B262C} - \WPD\SqmUpload_S-1-5-21-1127713466-721098113-725960913-1006 -> No File <==== ATTENTION
Task: {300B5839-6D61-4110-9B25-6C22D74E0077} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {3059E708-1548-40A2-97A4-20361A5565AB} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\WINDOWS\System32\AutoWorkplace.exe
Task: {3B0CD19E-C8CC-49CE-8626-7C5F22982B59} - \WPD\SqmUpload_S-1-5-21-1127713466-721098113-725960913-1001 -> No File <==== ATTENTION
Task: {40C6AD26-A7CE-4EBE-A280-E606F1CEEB96} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {51126B5D-1223-4832-8204-1CAC435B3BB5} - System32\Tasks\hptop => launchwinapp.exe hxxp://hptop.ru/magicm
Task: {5D90976E-58D9-41F8-AED6-E1D773498D6F} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-01-10] (Adobe Systems Incorporated)
Task: {5FE59B87-FC36-4934-93A3-6C3170BF4128} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2017-01-10] (Microsoft Corporation)
Task: {6F08334C-485B-45DD-BD21-E8548997C495} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {765A0B50-E62A-494C-8B60-D6FBC5568A70} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)
Task: {9AA3A99C-2AC2-49B1-B131-CF266ED838FE} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {A2D32272-6528-4A46-AE39-D33B79469CA2} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {A5A84739-1D8B-4449-9671-81FA17A3773A} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> No File <==== ATTENTION
Task: {AB457DEE-1E33-42CC-BD30-BED186F3B8F5} - \WPD\SqmUpload_S-1-5-21-1127713466-721098113-725960913-1005 -> No File <==== ATTENTION
Task: {B0BCE576-E4BD-4890-957A-BAC04FAF333B} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {CF4F077A-AB6E-4D6D-8627-DF29123FC892} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {EB7D9A78-76DB-4270-B258-45C3E086412C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

Shortcut: C:\Users\chris\Favorites\NCH Software Download Site.lnk -> hxxp://www.nchsoftware.com/index.htm

==================== Loaded Modules (Whitelisted) ==============

2016-07-16 04:42 - 2016-07-16 04:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-12-13 15:53 - 2016-12-09 03:29 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2017-01-20 19:15 - 2016-12-14 12:55 - 02259232 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\PoliciesControllerImpl.dll
2017-01-20 19:15 - 2016-12-14 12:55 - 02247632 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll
2017-01-20 19:15 - 2016-12-14 12:55 - 02813904 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\arwlib.dll
2016-12-13 15:53 - 2016-12-09 03:29 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
2017-01-21 10:20 - 2017-01-21 10:20 - 00152944 _____ () C:\Program Files (x86)\Zemana AntiMalware\ZAMShellExt64.dll
2016-09-13 14:45 - 2016-09-06 21:56 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2017-01-10 13:39 - 2016-12-21 00:09 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2017-01-10 13:39 - 2016-12-21 00:08 - 00693248 _____ () C:\Windows\ShellExperiences\MtcUvc.dll
2017-01-10 13:39 - 2016-12-20 23:54 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-01-10 13:39 - 2016-12-20 23:48 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-01-10 13:39 - 2016-12-20 23:48 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2017-01-10 13:39 - 2016-12-20 23:48 - 01033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2017-01-10 13:39 - 2016-12-20 23:48 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2017-01-10 13:39 - 2016-12-20 23:53 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-12-14 09:40 - 2016-12-14 09:40 - 00072192 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2016-12-14 09:40 - 2016-12-14 09:40 - 00179712 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2016-12-14 09:40 - 2016-12-14 09:40 - 42130432 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2016-12-14 09:40 - 2016-12-14 09:40 - 02216448 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\roottools.dll
2016-12-14 09:40 - 2016-12-14 09:40 - 00123904 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\SkypeHost.Proxies.dll
2016-12-14 09:40 - 2016-12-14 09:40 - 00181248 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\Microsoft.Skype.ImageTool.dll
2016-12-14 09:40 - 2016-12-14 09:40 - 00040960 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\TraceProvider.dll
2016-12-14 09:40 - 2016-12-14 09:40 - 00796672 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\VideoN.dll
2015-06-25 16:34 - 2015-06-25 16:34 - 00014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick.2\qtquick2plugin.dll
2015-06-25 16:37 - 2015-06-25 16:37 - 00739840 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Controls\qtquickcontrolsplugin.dll
2015-06-25 16:35 - 2015-06-25 16:35 - 00014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Window.2\windowplugin.dll
2015-06-25 16:38 - 2015-06-25 16:38 - 00071168 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Layouts\qquicklayoutsplugin.dll
2016-09-13 01:01 - 2016-09-13 01:01 - 00011776 _____ () C:\Program Files\AMD\CNext\CNext\libEGL.dll
2016-09-13 01:01 - 2016-09-13 01:01 - 02013696 _____ () C:\Program Files\AMD\CNext\CNext\libGLESv2.dll
2016-12-18 15:16 - 2017-01-03 15:00 - 01798664 _____ () C:\Users\chris\AppData\Local\Gaijin\Program Files (x86)\NetAgent\gjagent.exe
2015-03-19 15:26 - 2013-10-21 10:00 - 00847360 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe
2016-09-16 14:38 - 2016-09-16 14:38 - 00155016 _____ () C:\Program Files\ATI Technologies\ATI.ACE\A4\AdaptiveSleepService.exe
2016-09-19 19:59 - 2017-01-13 12:00 - 02493440 _____ () D:\Origin\libGLESv2.dll
2016-04-11 15:02 - 2016-04-19 10:11 - 00144896 _____ () C:\Users\chris\AppData\Local\MyComGames\zlib1.dll
2016-04-11 15:02 - 2016-09-13 04:55 - 00076176 _____ () C:\Users\chris\AppData\Local\MyComGames\pxd.dll
2016-04-11 15:02 - 2016-09-13 04:55 - 00186256 _____ () C:\Users\chris\AppData\Local\MyComGames\LightUpdate.dll
2016-04-11 15:02 - 2016-09-13 04:55 - 02318224 _____ () C:\Users\chris\AppData\Local\MyComGames\BigUp2.dll
2016-05-23 11:36 - 2016-05-23 11:36 - 48962048 _____ () C:\Users\chris\AppData\Local\MyComGames\Chrome\3.2623.1401\libcef.dll
2015-03-19 15:26 - 2013-06-28 13:50 - 01411072 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\nicLan.dll
2015-03-19 15:26 - 2013-06-28 13:48 - 00193024 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\DC_WFF.dll
2015-03-19 15:26 - 2013-06-28 13:48 - 00138752 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\WJWF\WJWF.dll
2015-03-19 15:26 - 2013-06-28 13:48 - 00115712 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\WJWF\WJWF_WPS_WIN7.DLL
2015-05-25 15:46 - 2016-12-23 11:28 - 00657184 _____ () D:\Steam\SDL2.dll
2015-05-25 15:46 - 2016-08-31 18:02 - 04969248 _____ () D:\Steam\v8.dll
2015-05-25 15:46 - 2017-01-18 18:30 - 02327840 _____ () D:\Steam\video.dll
2015-05-25 15:46 - 2016-08-31 18:02 - 01195296 _____ () D:\Steam\icuuc.dll
2015-05-25 15:46 - 2016-08-31 18:02 - 01563936 _____ () D:\Steam\icui18n.dll
2015-05-25 15:46 - 2016-01-27 00:49 - 02549760 _____ () D:\Steam\libavcodec-56.dll
2015-05-25 15:46 - 2016-01-27 00:49 - 00491008 _____ () D:\Steam\libavformat-56.dll
2015-05-25 15:46 - 2016-01-27 00:49 - 00332800 _____ () D:\Steam\libavresample-2.dll
2015-05-25 15:46 - 2016-01-27 00:49 - 00442880 _____ () D:\Steam\libavutil-54.dll
2015-05-25 15:46 - 2016-01-27 00:49 - 00485888 _____ () D:\Steam\libswscale-3.dll
2015-05-25 15:46 - 2017-01-18 18:30 - 00838432 _____ () D:\Steam\bin\chromehtml.DLL
2016-03-09 13:53 - 2016-07-04 15:17 - 00266560 _____ () D:\Steam\openvr_api.dll
2016-12-12 21:17 - 2017-01-04 20:12 - 68813088 _____ () D:\Steam\bin\cef\cef.win7\libcef.dll
2015-05-25 15:46 - 2017-01-18 18:30 - 00383776 _____ () D:\Steam\steam.dll
2015-05-25 15:46 - 2015-09-24 16:52 - 00119208 _____ () D:\Steam\winh264.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Users\Boys\Cookies:gs5sys [2816]
AlternateDataStreams: C:\Users\Boys\AppData\Local\History:gs5sys [2816]
AlternateDataStreams: C:\Users\chris\Cookies:gs5sys [2816]
AlternateDataStreams: C:\Users\chris\Desktop\desktop.ini:gs5sys [2816]
AlternateDataStreams: C:\Users\chris\AppData\Local\History:gs5sys [2816]
AlternateDataStreams: C:\Users\chris\Documents\desktop.ini:gs5sys [2816]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 06:25 - 2013-08-22 06:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1127713466-721098113-725960913-1014\Control Panel\Desktop\\Wallpaper -> C:\Users\chris\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
DNS Servers: 10.1.5.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [vm-monitoring-nb-session] => LPort=139
FirewallRules: [{FFDC66C0-DBD2-44DF-9E49-DED9F86E147A}] => D:\Steam\steamapps\common\Zero G Arena\Sta.exe
FirewallRules: [{41F26E95-6775-4E93-AE20-7513E813E0F1}] => D:\Steam\steamapps\common\Zero G Arena\Sta.exe
FirewallRules: [UDP Query User{18D3B6EA-19AC-4D21-A5E9-E856C9FA8BFE}D:\steam\steamapps\common\zero g arena\sta\binaries\win64\sta.exe] => D:\steam\steamapps\common\zero g arena\sta\binaries\win64\sta.exe
FirewallRules: [TCP Query User{09F5B542-4D78-4841-8364-C730461657CD}D:\steam\steamapps\common\zero g arena\sta\binaries\win64\sta.exe] => D:\steam\steamapps\common\zero g arena\sta\binaries\win64\sta.exe
FirewallRules: [{60CCCE77-5C92-4F84-AF04-3646ECEA093A}] => D:\Steam\steamapps\common\Transformers Fall of Cybertron\Binaries\TFOC.exe
FirewallRules: [{25D0F209-5E29-46CD-B1D6-A41D23452A2F}] => D:\Steam\steamapps\common\Transformers Fall of Cybertron\Binaries\TFOC.exe
FirewallRules: [{C76ECC3D-2A6F-480C-B818-862B12953261}] => D:\Steam\steamapps\common\Order of War\oow_final_dx10.exe
FirewallRules: [{11C77020-4CD0-4DC3-BD36-56D4E0A226EC}] => D:\Steam\steamapps\common\Order of War\oow_final_dx10.exe
FirewallRules: [{F9E0F0C6-D1FE-4BDC-B6A9-F6C0D687F94A}] => D:\Steam\steamapps\common\Order of War\oow_report.exe
FirewallRules: [{844D7922-1F4A-4E28-81E4-E3C716164DDE}] => D:\Steam\steamapps\common\Order of War\oow_report.exe
FirewallRules: [{B5EB2C2A-CD8C-4A2A-AA48-D79751BEE9E7}] => D:\Steam\steamapps\common\Order of War\oow_final_dx9.exe
FirewallRules: [{9088F3D0-4719-44F4-B684-0ECF50F4637F}] => D:\Steam\steamapps\common\Order of War\oow_final_dx9.exe
FirewallRules: [{EBF0DAB0-8DD0-408F-90E1-5A9BEA321549}] => D:\Steam\steamapps\common\Order of War\oow_final.exe
FirewallRules: [{A6EDF67D-DCBD-494C-8599-C63781BD575B}] => D:\Steam\steamapps\common\Order of War\oow_final.exe
FirewallRules: [{B92C70B7-2046-4423-950C-F4C33DE4487F}] => D:\Steam\steamapps\common\Portal 2\portal2.exe
FirewallRules: [{A5C5B866-C86E-48F0-9248-D490EC1C69E0}] => D:\Steam\steamapps\common\Portal 2\portal2.exe
FirewallRules: [{2AEB4D89-C550-4F76-A964-9D436BE2BD46}] => D:\Steam\steamapps\common\Homeworld\HWLauncher\Launcher.exe
FirewallRules: [{4897EDDF-63FE-4F35-B99B-4199D742D22E}] => D:\Steam\steamapps\common\Homeworld\HWLauncher\Launcher.exe
FirewallRules: [{A399D83E-91BA-4053-BD64-F12F9A76C33F}] => D:\Steam\steamapps\common\Rise of Flight 2.0\bin_game\release\ROF.exe
FirewallRules: [{97A17F97-945A-4FBC-8BAA-432DA987ECB9}] => D:\Steam\steamapps\common\Rise of Flight 2.0\bin_game\release\ROF.exe
FirewallRules: [{947CAE77-C9AF-4E9B-B862-12C8EEAEC9AD}] => D:\Steam\steamapps\common\MechWarrior Online\Bin64\MWOClient.exe
FirewallRules: [{206BFF7D-BDC7-4F75-8405-49BED521B18B}] => D:\Steam\steamapps\common\MechWarrior Online\Bin64\MWOClient.exe
FirewallRules: [{09EDC6A9-7B70-47C9-86AC-09D4D910C6F1}] => D:\Steam\steamapps\common\Blender\blender.exe
FirewallRules: [{997F938A-30FC-463A-99E0-BC3E60A4E510}] => D:\Steam\steamapps\common\Blender\blender.exe
FirewallRules: [{EC0C9B18-3749-4695-B2F3-D0D507EF7376}] => D:\Steam\steamapps\common\Robocraft\Robocraft.exe
FirewallRules: [{1F28D618-28FB-4340-A8E1-F1E0101268B0}] => D:\Steam\steamapps\common\Robocraft\Robocraft.exe
FirewallRules: [{8CD1215C-14B0-4C78-88F7-CC83F6BDD022}] => D:\Steam\steamapps\common\Transformers War for Cybertron\Binaries\TWFC.exe
FirewallRules: [{BA6D8535-9DFB-4170-B931-C8E7088DCDCC}] => D:\Steam\steamapps\common\Transformers War for Cybertron\Binaries\TWFC.exe
FirewallRules: [{8C8D2F2B-6C82-48A6-A94F-177BC4922A28}] => D:\Steam\steamapps\common\Transformers War for Cybertron\Binaries\TWFC.exe
FirewallRules: [{F80BF5D3-27ED-4154-AF76-81A308E8B233}] => D:\Steam\steamapps\common\Kerbal Space Program\KSP_x64.exe
FirewallRules: [{87D15C39-AFC2-4F16-9C0F-AEAC67E9E89B}] => D:\Steam\steamapps\common\Kerbal Space Program\KSP_x64.exe
FirewallRules: [UDP Query User{64A575C7-C9BA-496C-980A-A717B0CAD806}D:\mygames\armored warfare mycom\bin64\armoredwarfare.exe] => D:\mygames\armored warfare mycom\bin64\armoredwarfare.exe
FirewallRules: [TCP Query User{49CC8805-C9FE-4A8F-B09E-9B43E1216240}D:\mygames\armored warfare mycom\bin64\armoredwarfare.exe] => D:\mygames\armored warfare mycom\bin64\armoredwarfare.exe
FirewallRules: [UDP Query User{69E93E6D-72F2-4FB5-9FFE-C59BD1A74586}C:\users\chris\appdata\local\mycomgames\mycomgames.exe] => C:\users\chris\appdata\local\mycomgames\mycomgames.exe
FirewallRules: [TCP Query User{54CD4969-53D6-4EF3-B31E-912F876B7E72}C:\users\chris\appdata\local\mycomgames\mycomgames.exe] => C:\users\chris\appdata\local\mycomgames\mycomgames.exe
FirewallRules: [{BB711D95-8DC6-410D-B264-79727ED0DE7A}] => D:\Program Files (x86)\Origin Games\STAR WARS Battlefront\starwarsbattlefront.exe
FirewallRules: [{B349D886-E725-4F1D-BCEB-334B5DCA25EA}] => D:\Program Files (x86)\Origin Games\STAR WARS Battlefront\starwarsbattlefront.exe
FirewallRules: [{6BC54F8B-1DE5-4F66-99C5-037BBB922391}] => D:\Steam\steamapps\common\Elite Dangerous\EDLaunch.exe
FirewallRules: [{803508BD-E5D3-4ADA-9710-817D5A39CD99}] => D:\Steam\steamapps\common\Elite Dangerous\EDLaunch.exe
FirewallRules: [{38013245-E0E4-4375-9510-8C5AFAB10812}] => LPort=25565
FirewallRules: [{594B095B-EBDB-4835-8287-638B2A5B00F1}] => LPort=25565
FirewallRules: [UDP Query User{232E7547-9FA5-4FFA-ADF2-0E8A16E36161}C:\program files (x86)\java\jre1.8.0_60\bin\javaw.exe] => C:\program files (x86)\java\jre1.8.0_60\bin\javaw.exe
FirewallRules: [TCP Query User{6E6E8A58-7097-4569-9A40-48092D17DAB2}C:\program files (x86)\java\jre1.8.0_60\bin\javaw.exe] => C:\program files (x86)\java\jre1.8.0_60\bin\javaw.exe
FirewallRules: [{3C355F1A-D88C-4E61-BEB2-0EBB79FF5E98}] => D:\Steam\steamapps\common\Total War Arena\launcher\launcher.exe
FirewallRules: [{0E7DEBDA-B481-4469-8A14-81207564184D}] => D:\Steam\steamapps\common\Total War Arena\launcher\launcher.exe
FirewallRules: [{8CFCA6C3-E460-489F-8EA5-118F55201D7F}] => D:\Steam\steamapps\common\Kerbal Space Program\KSP.exe
FirewallRules: [{4BE2FAC9-493B-430D-AF80-2727A59B7F93}] => D:\Steam\steamapps\common\Kerbal Space Program\KSP.exe
FirewallRules: [UDP Query User{429EDCFC-4953-407E-A936-599B7A235F4C}D:\steam\steamapps\common\beamng.drive\bin64\beamng.drive.x64.exe] => D:\steam\steamapps\common\beamng.drive\bin64\beamng.drive.x64.exe
FirewallRules: [TCP Query User{AEAC5566-B76A-4210-BCAA-6345A96E4FE3}D:\steam\steamapps\common\beamng.drive\bin64\beamng.drive.x64.exe] => D:\steam\steamapps\common\beamng.drive\bin64\beamng.drive.x64.exe
FirewallRules: [{AAD18D51-1FF3-45B8-AA19-D0A905778BB5}] => D:\Steam\steamapps\common\BeamNG.drive\BeamNG.drive.exe
FirewallRules: [{233E39E8-CBBD-46B0-AE6F-BAD76BD935F2}] => D:\Steam\steamapps\common\BeamNG.drive\BeamNG.drive.exe
FirewallRules: [{C231F817-3844-4C80-846D-636F57BA5CB4}] => D:\Steam\steamapps\common\Star Swarm Benchmark\StarSwarmLauncher.exe
FirewallRules: [{22D9F7AF-A460-42A9-BC67-55EBA5257A2F}] => D:\Steam\steamapps\common\Star Swarm Benchmark\StarSwarmLauncher.exe
FirewallRules: [{A0EF8CD1-6BB1-40C1-B7AD-66772A5C5372}] => D:\Steam\steamapps\common\Supreme Commander 2\bin\SupremeCommander2.exe
FirewallRules: [{1EEE0197-E12E-467E-B23A-CF12C22321C6}] => D:\Steam\steamapps\common\Supreme Commander 2\bin\SupremeCommander2.exe
FirewallRules: [UDP Query User{082E727B-D630-4548-851E-0E84D5B90B92}D:\steam\steamapps\common\space\spacegame\binaries\win64\spserver.exe] => D:\steam\steamapps\common\space\spacegame\binaries\win64\spserver.exe
FirewallRules: [TCP Query User{8259E063-4B22-475C-8934-1C50A06A7CE3}D:\steam\steamapps\common\space\spacegame\binaries\win64\spserver.exe] => D:\steam\steamapps\common\space\spacegame\binaries\win64\spserver.exe
FirewallRules: [{07AA8A0A-A2CF-437F-8B1C-FC902E585A68}] => D:\Steam\steamapps\common\Offworld Trading Company\Offworld.exe
FirewallRules: [{E7024120-6642-481C-8EAB-8A8E5B727076}] => D:\Steam\steamapps\common\Offworld Trading Company\Offworld.exe
FirewallRules: [{669815FB-2935-4219-B0D4-0ECE3588EF90}] => D:\Steam\steamapps\common\Sid Meier's Civilization Beyond Earth\CivilizationBE_Mantle.exe
FirewallRules: [{64105C96-4330-4CD4-9C4A-11BC547A5FCB}] => D:\Steam\steamapps\common\Sid Meier's Civilization Beyond Earth\CivilizationBE_Mantle.exe
FirewallRules: [{7E46632F-6AEE-4EA8-AF09-0DD29B2675C4}] => D:\Steam\steamapps\common\Sid Meier's Civilization Beyond Earth\CivilizationBE_DX11.exe
FirewallRules: [{086F4855-9B82-4A11-A0C1-2AC6A91C65C4}] => D:\Steam\steamapps\common\Sid Meier's Civilization Beyond Earth\CivilizationBE_DX11.exe
FirewallRules: [UDP Query User{BA8E3C38-D77C-4806-8D02-4FA211D817DC}D:\steam\steamapps\common\war thunder\win64\aces.exe] => D:\steam\steamapps\common\war thunder\win64\aces.exe
FirewallRules: [TCP Query User{C2D074FA-063E-4D47-9AAA-B78A57C551C0}D:\steam\steamapps\common\war thunder\win64\aces.exe] => D:\steam\steamapps\common\war thunder\win64\aces.exe
FirewallRules: [UDP Query User{E55D6E36-1D21-43E6-835D-5A17C7154169}C:\users\boys\appdata\roaming\gameranger\gameranger\gameranger.exe] => C:\users\boys\appdata\roaming\gameranger\gameranger\gameranger.exe
FirewallRules: [TCP Query User{5F7DF6DC-A214-4BA5-AEF4-93C95E036AE1}C:\users\boys\appdata\roaming\gameranger\gameranger\gameranger.exe] => C:\users\boys\appdata\roaming\gameranger\gameranger\gameranger.exe
FirewallRules: [{1AFC2627-6156-4AD2-A383-86A2FABF6A29}] => D:\Steam\steamapps\common\Sid Meier's Civilization V SDK\Sid Meier's Civilization V SDK.exe
FirewallRules: [{410BE202-E56C-4552-BFB3-05112FFCB61B}] => D:\Steam\steamapps\common\Sid Meier's Civilization V SDK\Sid Meier's Civilization V SDK.exe
FirewallRules: [UDP Query User{B7AC8D79-C8F9-4980-B64C-A3AE99B58C80}D:\steam\steamapps\common\war thunder\aces.exe] => D:\steam\steamapps\common\war thunder\aces.exe
FirewallRules: [TCP Query User{F9EA9EFF-C91E-4CE8-A698-45DDDA53E615}D:\steam\steamapps\common\war thunder\aces.exe] => D:\steam\steamapps\common\war thunder\aces.exe
FirewallRules: [{67B829C4-FAE0-489B-97D4-367A79BAE9D9}] => D:\Steam\steamapps\common\War Thunder\launcher.exe
FirewallRules: [{18E112B2-B5F6-4769-BCD6-26D45F957E1C}] => D:\Steam\steamapps\common\War Thunder\launcher.exe
FirewallRules: [{5E9A4BEF-562A-4C2F-A5E1-4E87C779B6E4}] => D:\Steam\steamapps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [{22EC0E6D-D982-4821-B69A-A3001CCB28A4}] => D:\Steam\steamapps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [{A11B0C44-A144-42AC-8186-58C7EABDDFE4}] => D:\Steam\steamapps\common\GearUp\bin\Traktor.Amalgam.App.exe
FirewallRules: [{6E8D5DCA-A4C3-42AA-9D3F-5F72F9978FD9}] => D:\Steam\steamapps\common\GearUp\bin\Traktor.Amalgam.App.exe
FirewallRules: [{394E9BD0-D3DF-4A54-AFF2-5D0A6EC1BD3A}] => D:\Steam\steamapps\common\SpaceEngineers\Bin64\SpaceEngineers.exe
FirewallRules: [{0CF6BDF7-88E1-4FA3-A9AD-B902343D54A8}] => D:\Steam\steamapps\common\SpaceEngineers\Bin64\SpaceEngineers.exe
FirewallRules: [UDP Query User{CF475F89-60CF-4C99-A3E6-108E8667E58E}C:\program files (x86)\lucasarts\star wars battlefront ii\gamedata\battlefrontii.exe] => C:\program files (x86)\lucasarts\star wars battlefront ii\gamedata\battlefrontii.exe
FirewallRules: [TCP Query User{4262A477-8822-4D43-907C-97C2D3F080DA}C:\program files (x86)\lucasarts\star wars battlefront ii\gamedata\battlefrontii.exe] => C:\program files (x86)\lucasarts\star wars battlefront ii\gamedata\battlefrontii.exe
FirewallRules: [UDP Query User{5C838933-7BE4-4225-B4E9-799D5B0B15A7}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [TCP Query User{9F8DA947-5BD7-4BB9-9DC2-08CFC489A7C6}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{7CA6A49C-3394-4513-AD84-90C97B3DDF10}] => LPort=5986
FirewallRules: [UDP Query User{85D80EAA-28CD-490C-8C5F-FF96A4EBECDA}D:\sierra\empire earth - the art of conquest\ee-aoc.exe] => D:\sierra\empire earth - the art of conquest\ee-aoc.exe
FirewallRules: [TCP Query User{3392712F-290E-443E-954C-B2F008AF493F}D:\sierra\empire earth - the art of conquest\ee-aoc.exe] => D:\sierra\empire earth - the art of conquest\ee-aoc.exe
FirewallRules: [UDP Query User{71AB9283-9924-46F3-90DB-DFF2ED482D79}D:\sierra\empire earth\empire earth.exe] => D:\sierra\empire earth\empire earth.exe
FirewallRules: [TCP Query User{DBF4E498-79BB-4139-B726-467F266C6A74}D:\sierra\empire earth\empire earth.exe] => D:\sierra\empire earth\empire earth.exe
FirewallRules: [{491F0601-CBA4-41C9-836A-E7719CF20ACD}] => D:\Steam\steamapps\common\Rome Total War Gold\RomeTW-BI.exe
FirewallRules: [{B0299828-1FCA-45BA-8CA0-CC9FC6F44866}] => D:\Steam\steamapps\common\Rome Total War Gold\RomeTW-BI.exe
FirewallRules: [{37E3E02B-3E00-43E7-8576-D934978F3D56}] => D:\Steam\steamapps\common\Rome Total War Gold\RomeTW.exe
FirewallRules: [{0B06EA95-9871-43EB-9E1E-A030AAB4E577}] => D:\Steam\steamapps\common\Rome Total War Gold\RomeTW.exe
FirewallRules: [{E0E6C8FF-534D-4300-9115-8FCA5A35632B}] => D:\Steam\steamapps\common\Empire Total War\Empire.exe
FirewallRules: [{EFF2C91D-F7A0-4903-B061-156B47F5C7F5}] => D:\Steam\steamapps\common\Empire Total War\Empire.exe
FirewallRules: [{C5DC92D6-9CF5-4690-BD4F-A082FB6967DE}] => D:\Steam\bin\steamwebhelper.exe
FirewallRules: [{5765DF7C-C1CE-424F-9935-1990037591FD}] => D:\Steam\bin\steamwebhelper.exe
FirewallRules: [{98E36C3A-040A-4665-9EB7-67A56409527E}] => D:\Steam\Steam.exe
FirewallRules: [{5662B527-816A-4822-9A63-589E2C6AC186}] => D:\Steam\Steam.exe
FirewallRules: [{312A6B27-E8A4-4473-8BDE-BF72210FC20B}] => C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{ADC7D884-D158-4F96-8BAA-2D93DAC46C52}] => C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [UDP Query User{A76DB7A0-7873-4E84-9570-34864B133C0B}C:\program files (x86)\lucasarts\star wars empire at war\gamedata\sweaw.exe] => C:\program files (x86)\lucasarts\star wars empire at war\gamedata\sweaw.exe
FirewallRules: [TCP Query User{57BC8D14-22A2-473E-93BE-373B0A471522}C:\program files (x86)\lucasarts\star wars empire at war\gamedata\sweaw.exe] => C:\program files (x86)\lucasarts\star wars empire at war\gamedata\sweaw.exe
FirewallRules: [UDP Query User{EA05A334-9E5E-4896-AE31-D3C849937F85}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [TCP Query User{B5C8329A-0FE0-45E2-A082-9FC059116BCA}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{EC19FA11-E49F-4524-BC02-F52A084DC7A4}C:\program files (x86)\microsoft games\age of empires iii\age3.exe] => C:\program files (x86)\microsoft games\age of empires iii\age3.exe
FirewallRules: [TCP Query User{8CD7A764-2F1A-4C37-8A4D-8BAC418BB9C0}C:\program files (x86)\microsoft games\age of empires iii\age3.exe] => C:\program files (x86)\microsoft games\age of empires iii\age3.exe
FirewallRules: [UDP Query User{D17D17AA-3E16-4A0D-ABF5-31275560FA20}C:\warthunder\launcher.exe] => C:\warthunder\launcher.exe
FirewallRules: [TCP Query User{B9BCE46B-EED0-404B-9DAF-F2FF69185DD4}C:\warthunder\launcher.exe] => C:\warthunder\launcher.exe
FirewallRules: [UDP Query User{2CB64064-8A17-4BEE-83CA-712D3DFFF5BF}C:\warthunder\aces.exe] => C:\warthunder\aces.exe
FirewallRules: [TCP Query User{A1C940BC-1E62-40EC-8A30-084551E050E7}C:\warthunder\aces.exe] => C:\warthunder\aces.exe
FirewallRules: [{DE5EB669-90BD-4025-A592-F61C9E777D1C}] => C:\Program Files (x86)\Microsoft Games\Age of Empires III\age3.exe
FirewallRules: [{238EE600-BBA1-4C5F-9440-847FCC5A2210}] => C:\Program Files (x86)\Microsoft Games\Age of Empires III\age3.exe
FirewallRules: [TCP Query User{648AE4B4-4FF3-45BA-A75A-0E87567D6474}C:\program files (x86)\taldren\starfleet command ii - demo\starfleet2.exe] => C:\program files (x86)\taldren\starfleet command ii - demo\starfleet2.exe
FirewallRules: [UDP Query User{D147F28B-30AF-4DE4-B146-7AE4B1305C7C}C:\program files (x86)\taldren\starfleet command ii - demo\starfleet2.exe] => C:\program files (x86)\taldren\starfleet command ii - demo\starfleet2.exe
FirewallRules: [TCP Query User{C8F29648-F857-4484-AC17-3DE468D60018}C:\windows\syswow64\dplaysvr.exe] => C:\windows\syswow64\dplaysvr.exe
FirewallRules: [UDP Query User{B14AB546-38D9-4339-AD85-D5C308523669}C:\windows\syswow64\dplaysvr.exe] => C:\windows\syswow64\dplaysvr.exe
FirewallRules: [TCP Query User{7F34DE4E-2A71-44A6-B024-548EBCFDB798}C:\games\interplay\starfleet command demo\starfleetdemo.exe] => C:\games\interplay\starfleet command demo\starfleetdemo.exe
FirewallRules: [UDP Query User{DD61A032-6BCD-45C4-98C1-7850A71DBD3B}C:\games\interplay\starfleet command demo\starfleetdemo.exe] => C:\games\interplay\starfleet command demo\starfleetdemo.exe
FirewallRules: [TCP Query User{6E177D92-C8CB-45E7-AB7B-AC25882B889F}C:\program files (x86)\microsoft games\age of empires ii\age2_x1\age2_x1.icd] => C:\program files (x86)\microsoft games\age of empires ii\age2_x1\age2_x1.icd
FirewallRules: [UDP Query User{6CF1CEF5-F0A9-4273-A979-E6A2F53A6F8D}C:\program files (x86)\microsoft games\age of empires ii\age2_x1\age2_x1.icd] => C:\program files (x86)\microsoft games\age of empires ii\age2_x1\age2_x1.icd
FirewallRules: [TCP Query User{DE57A7B1-00EC-4E0E-897E-A65D622375BC}C:\program files (x86)\microsoft games\age of empires ii\empires2.icd] => C:\program files (x86)\microsoft games\age of empires ii\empires2.icd
FirewallRules: [UDP Query User{D33803F0-605C-4895-8FE6-8896842F6330}C:\program files (x86)\microsoft games\age of empires ii\empires2.icd] => C:\program files (x86)\microsoft games\age of empires ii\empires2.icd
FirewallRules: [{E3D48E58-88D2-42CF-A583-BC20C4D1EF18}] => C:\Program Files (x86)\LucasArts\Star Wars Empire at War\GameData\sweaw.exe
FirewallRules: [{C40B6F34-4A0B-4B3C-8A5D-F8708B9933F2}] => C:\Program Files (x86)\LucasArts\Star Wars Empire at War\GameData\sweaw.exe
FirewallRules: [{115E15F9-969E-44CF-B213-2AA9CCE03160}] => C:\WarThunder\launcher.exe
FirewallRules: [{947B9C11-1ED9-447E-931B-6C4D78A82DFD}] => C:\WarThunder\launcher.exe
FirewallRules: [{79FE634B-3FF7-4EAD-82F3-D8D0CBE2A910}] => C:\WarThunder\bpreport.exe
FirewallRules: [{4D162E9D-D2F7-4381-896B-0A603B324FF9}] => C:\WarThunder\bpreport.exe
FirewallRules: [{0A7E2EA3-8BBF-4824-853C-E4A39EE5ABE2}] => LPort=80
FirewallRules: [{649C3AE5-BE0D-4F31-80E3-75F558F50ABB}] => LPort=443
FirewallRules: [{BCE888CE-B716-4CB2-B0D3-39474ADF9CD7}] => LPort=20010
FirewallRules: [{199207F2-97B4-4F22-8638-90501A660201}] => LPort=3478
FirewallRules: [{CF1BB3CF-3A3C-4BE7-B1CB-749E7E0A7473}] => LPort=7850
FirewallRules: [{BA471F21-A415-4CE6-AABB-59B2CF612CB2}] => LPort=7852
FirewallRules: [{B66D1A34-D396-48F3-A9FA-310D47F4F334}] => LPort=7853
FirewallRules: [{09F874C4-DFD4-4F28-A2E6-2BFBF339E87F}] => LPort=27022
FirewallRules: [{08CB1F7F-0B65-4088-BCF9-770E10B9FA68}] => LPort=6881
FirewallRules: [{BAD66533-9CCF-49B7-AD37-820EF079821E}] => LPort=33333
FirewallRules: [{182849F8-CDEF-4F1B-A39D-D3B2D07071E7}] => LPort=20443
FirewallRules: [{5C9EE404-EFCF-4966-B602-AD5C9F23919A}] => LPort=8090
FirewallRules: [{52D9F2B4-3F14-44A7-BE3F-68A8FEF6B5DB}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{82347A25-0C75-4F63-8B70-5FB4CCA0D78B}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [TCP Query User{D685599B-1DA0-4755-B4ED-2822C2F6929A}C:\warthunder\aces.exe] => C:\warthunder\aces.exe
FirewallRules: [UDP Query User{87CD3D8C-CF82-4C31-A115-FD42A263AD56}C:\warthunder\aces.exe] => C:\warthunder\aces.exe
FirewallRules: [{8A9823BA-CFB9-4CD4-90C1-5CE204FF9654}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{54FC0125-297A-4A12-993C-D3039A0106A2}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{230F1E0F-6D81-4CF3-831C-EA84F7BA3A02}C:\program files (x86)\mozilla firefox\firefox.exe] => C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{B2FC3808-BC4D-49E1-9254-DFDDDA6117F8}C:\program files (x86)\mozilla firefox\firefox.exe] => C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [TCP Query User{CAFBC441-7F78-405A-9BFF-C3243D01FF68}C:\users\chris\appdata\roaming\gameranger\gameranger\gameranger.exe] => C:\users\chris\appdata\roaming\gameranger\gameranger\gameranger.exe
FirewallRules: [UDP Query User{2ECEB0C7-3D36-4C7C-981C-69D4E6011AB4}C:\users\chris\appdata\roaming\gameranger\gameranger\gameranger.exe] => C:\users\chris\appdata\roaming\gameranger\gameranger\gameranger.exe
FirewallRules: [{15319CD5-5A93-4E6E-B9BC-C027C28A613A}] => D:\Steam\steamapps\common\Sid Meier's Civilization Beyond Earth SDK\Sid Meier's Civilization Beyond Earth SDK.exe
FirewallRules: [{46D7E00B-8858-4CFD-90A8-44A08B9A1579}] => D:\Steam\steamapps\common\Sid Meier's Civilization Beyond Earth SDK\Sid Meier's Civilization Beyond Earth SDK.exe
FirewallRules: [TCP Query User{666DF764-3665-4C83-8A55-094461BC6F99}C:\games\world_of_warships\wowslauncher.exe] => C:\games\world_of_warships\wowslauncher.exe
FirewallRules: [UDP Query User{D7956348-E78C-4144-80BA-5C28A2F92743}C:\games\world_of_warships\wowslauncher.exe] => C:\games\world_of_warships\wowslauncher.exe
FirewallRules: [TCP Query User{70B7B034-5A4F-45B1-A4CC-75A01DF1AB74}D:\games\world_of_warships\wowslauncher.exe] => D:\games\world_of_warships\wowslauncher.exe
FirewallRules: [UDP Query User{D2424CDD-9C0C-416B-9580-9EBED1EC1D0D}D:\games\world_of_warships\wowslauncher.exe] => D:\games\world_of_warships\wowslauncher.exe
FirewallRules: [TCP Query User{C2D4DB85-27A2-4D1B-8934-E4AC8398C330}D:\sierra\empire earth\empire earth.exe] => D:\sierra\empire earth\empire earth.exe
FirewallRules: [UDP Query User{A9EBE749-7826-4289-9927-60856E309608}D:\sierra\empire earth\empire earth.exe] => D:\sierra\empire earth\empire earth.exe
FirewallRules: [{12DD341D-BCFB-4F1D-9E6E-3224F6DCD721}] => D:\Steam\steamapps\common\Moon Base Alpha\Binaries\Win32\MoonBaseAlphaGame.exe
FirewallRules: [{69FFF643-2727-40C8-A91F-0604F7A25599}] => D:\Steam\steamapps\common\Moon Base Alpha\Binaries\Win32\MoonBaseAlphaGame.exe
FirewallRules: [TCP Query User{56D741F4-1204-4A0D-8175-3EE0B1705F4E}D:\steam\steamapps\common\war thunder\win64\aces64.exe] => D:\steam\steamapps\common\war thunder\win64\aces64.exe
FirewallRules: [UDP Query User{3111022F-6666-424D-AF4F-CE72B5F44D3F}D:\steam\steamapps\common\war thunder\win64\aces64.exe] => D:\steam\steamapps\common\war thunder\win64\aces64.exe
FirewallRules: [{01289BDC-FAF5-4FFC-ACB5-D052FB360D91}] => D:\Steam\steamapps\common\Endless Sky\EndlessSky.exe
FirewallRules: [{B0E44A31-4ABE-4B14-9DAE-D37FF18E7081}] => D:\Steam\steamapps\common\Endless Sky\EndlessSky.exe
FirewallRules: [{601F907E-DCC3-446A-82FA-DF4F149CA0B6}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{42ACC533-C871-4C55-84C2-46E264FD5EEA}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{BB64C09D-BF03-4C22-AFAA-4E848DEA1F3C}D:\steam\steamapps\common\total war arena\arena.exe] => D:\steam\steamapps\common\total war arena\arena.exe
FirewallRules: [UDP Query User{C9DEE80F-4300-44BA-8CC9-A9B2CC5DA374}D:\steam\steamapps\common\total war arena\arena.exe] => D:\steam\steamapps\common\total war arena\arena.exe
FirewallRules: [{8D7440B9-6728-46F8-B00D-8F4B50D19151}] => D:\Steam\steamapps\common\SteamVRPerformanceTest\bin\win64\vr.exe
FirewallRules: [{BB30C447-0473-4150-8582-17FE303049A4}] => D:\Steam\steamapps\common\SteamVRPerformanceTest\bin\win64\vr.exe
FirewallRules: [{A38633CD-7AA1-4E56-BB03-63122FD54E61}] => D:\Steam\steamapps\common\PlanetSide 2\LaunchPad.exe
FirewallRules: [{909C3999-1DCD-4315-AEAC-5990B91CF697}] => D:\Steam\steamapps\common\PlanetSide 2\LaunchPad.exe
FirewallRules: [TCP Query User{84C10E36-68C3-4263-9B7B-5339B173B06F}D:\steam\steamapps\common\planetside 2\planetside2_x64.exe] => D:\steam\steamapps\common\planetside 2\planetside2_x64.exe
FirewallRules: [UDP Query User{72BDDB71-A070-4CC3-A32E-D47CB4A48B24}D:\steam\steamapps\common\planetside 2\planetside2_x64.exe] => D:\steam\steamapps\common\planetside 2\planetside2_x64.exe
FirewallRules: [{2BB661F8-600F-4E7D-9805-C61CFC294161}] => D:\Steam\steamapps\common\Star Trek Online\Star Trek Online.exe
FirewallRules: [{B18DF86E-FD33-4298-9850-1FCE5521FC5B}] => D:\Steam\steamapps\common\Star Trek Online\Star Trek Online.exe
FirewallRules: [TCP Query User{7AB8B750-A73B-45DD-A973-8A09086676B4}D:\steam\steamapps\common\star trek online\star trek online\live\gameclient.exe] => D:\steam\steamapps\common\star trek online\star trek online\live\gameclient.exe
FirewallRules: [UDP Query User{B2F80BD1-7736-447A-A84D-8EE81A5355E2}D:\steam\steamapps\common\star trek online\star trek online\live\gameclient.exe] => D:\steam\steamapps\common\star trek online\star trek online\live\gameclient.exe
FirewallRules: [{7712FF3A-AC08-47E0-B279-C8F85F79AC82}] => D:\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{486F8E25-5A93-4C46-A3EB-D9362561FF48}] => D:\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{2859A3D9-4E6F-4506-983C-930FF78661D9}] => D:\Steam\steamapps\common\SNOW\Bin64\playSNOW.exe
FirewallRules: [{A86C6B0E-66D7-4950-A2EA-CF5C76A23D9C}] => D:\Steam\steamapps\common\SNOW\Bin64\playSNOW.exe
FirewallRules: [{66C54C76-0A52-4F90-AE06-277E519AC493}] => D:\Program Files (x86)\Origin Games\SimCity\SimCity\SimCity.exe
FirewallRules: [{24068677-90F2-40AC-B361-6365F6DDE3FD}] => D:\Program Files (x86)\Origin Games\SimCity\SimCity\SimCity.exe
FirewallRules: [{13300C16-BD63-463E-91AA-B6B2E9822109}] => D:\Steam\steamapps\common\Offworld Trading Company\StardockLauncher.exe
FirewallRules: [{9C117448-F698-48A6-AAAB-E90D61DA5001}] => D:\Steam\steamapps\common\Offworld Trading Company\StardockLauncher.exe
FirewallRules: [{5BA2803C-366C-4126-A68F-C81C76A25611}] => D:\Steam\steamapps\common\ASTRONEER Early Access\Astro.exe
FirewallRules: [{164C0306-015B-40E4-998A-B15BDEF5AEBF}] => D:\Steam\steamapps\common\ASTRONEER Early Access\Astro.exe
FirewallRules: [TCP Query User{94A5A5C9-F28F-4AAC-8AC2-07130352F6F8}D:\steam\steamapps\common\astroneer early access\astro\binaries\win64\astro-win64-shipping.exe] => D:\steam\steamapps\common\astroneer early access\astro\binaries\win64\astro-win64-shipping.exe
FirewallRules: [UDP Query User{58FF30EE-EE2C-463F-90BE-9733681A3BFA}D:\steam\steamapps\common\astroneer early access\astro\binaries\win64\astro-win64-shipping.exe] => D:\steam\steamapps\common\astroneer early access\astro\binaries\win64\astro-win64-shipping.exe
FirewallRules: [{55C9D716-4EE3-4FC4-8129-413B0C500DCA}] => D:\Games\New folder\swfoc.exe
FirewallRules: [{1877E2A3-D887-4568-B3F3-A5DB6815506C}] => D:\Games\New folder\swfoc.exe
FirewallRules: [{B0E90BCB-FF2A-4B5E-A3DC-527014491BE2}] => D:\Steam\steamapps\common\Hearts of Iron IV\hoi4.exe
FirewallRules: [{AEFA8530-6429-4981-B66D-1B90146A828B}] => D:\Steam\steamapps\common\Hearts of Iron IV\hoi4.exe
FirewallRules: [TCP Query User{60E2FB98-60D9-47E4-8181-8FDC84D287C4}D:\steam\steamapps\common\battlestations pacific\bsp.exe] => D:\steam\steamapps\common\battlestations pacific\bsp.exe
FirewallRules: [UDP Query User{96579F5E-0E4F-4E8B-B17C-095E75D3FD09}D:\steam\steamapps\common\battlestations pacific\bsp.exe] => D:\steam\steamapps\common\battlestations pacific\bsp.exe
FirewallRules: [{4B0D8474-D7C9-485F-99D3-7A88ECE94B26}] => D:\Steam\steamapps\common\Banished\Application-steam-x64.exe
FirewallRules: [{45BD6747-D18C-4E9B-943C-59270E40E16A}] => D:\Steam\steamapps\common\Banished\Application-steam-x64.exe
FirewallRules: [{F933A18B-9C81-4030-87E4-2144AD7BF4A4}] => D:\Steam\steamapps\common\MountBlade Warband\mb_warband.exe
FirewallRules: [{5CBFB972-7BE5-485A-9728-9FC4E5172FF8}] => D:\Steam\steamapps\common\MountBlade Warband\mb_warband.exe
FirewallRules: [{7A023CAC-6A01-4C7C-B95E-2366876D2FA4}] => D:\Steam\steamapps\common\Space\spacegame\Binaries\Win64\Fractured Space.exe
FirewallRules: [{3B0201FF-9B25-48B6-A3AB-4DC06EE3B76E}] => D:\Steam\steamapps\common\Space\spacegame\Binaries\Win64\Fractured Space.exe

==================== Restore Points =========================

ATTENTION: System Restore is disabled

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:
==================
Error: (01/22/2017 02:25:27 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: microsoftedgecp.exe, version: 11.0.14393.82, time stamp: 0x57a55786
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000604
Fault offset: 0x0000000000000000
Faulting process id: 0x19b8
Faulting application start time: 0x01d274f56d34ee2a
Faulting application path: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Faulting module path: unknown
Report Id: bf6754b6-adcc-4000-9397-11c538cca7d8
Faulting package full name: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Faulting package-relative application ID: MicrosoftEdge

Error: (01/22/2017 02:25:27 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: microsoftedgecp.exe, version: 11.0.14393.82, time stamp: 0x57a55786
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000604
Fault offset: 0x0000000000000000
Faulting process id: 0x19b8
Faulting application start time: 0x01d274f56d34ee2a
Faulting application path: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Faulting module path: unknown
Report Id: fbb9a392-ba66-489b-ba42-8e831c586ed1
Faulting package full name: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Faulting package-relative application ID: MicrosoftEdge

Error: (01/22/2017 02:21:09 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: microsoftedgecp.exe, version: 11.0.14393.82, time stamp: 0x57a55786
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000604
Fault offset: 0x0000000000000000
Faulting process id: 0x19b8
Faulting application start time: 0x01d274f56d34ee2a
Faulting application path: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Faulting module path: unknown
Report Id: 1f6c20a9-3676-4774-a8a9-2db986a809a1
Faulting package full name: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Faulting package-relative application ID: MicrosoftEdge

Error: (01/22/2017 02:21:08 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: microsoftedgecp.exe, version: 11.0.14393.82, time stamp: 0x57a55786
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000604
Fault offset: 0x0000000000000000
Faulting process id: 0x19b8
Faulting application start time: 0x01d274f56d34ee2a
Faulting application path: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Faulting module path: unknown
Report Id: 46c44718-03ed-428b-a191-0369c4c6a9c0
Faulting package full name: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Faulting package-relative application ID: MicrosoftEdge

Error: (01/22/2017 02:21:07 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: microsoftedgecp.exe, version: 11.0.14393.82, time stamp: 0x57a55786
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000604
Fault offset: 0x0000000000000000
Faulting process id: 0x19b8
Faulting application start time: 0x01d274f56d34ee2a
Faulting application path: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Faulting module path: unknown
Report Id: 170025b0-9ede-4fee-94bf-90ce85c117c2
Faulting package full name: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Faulting package-relative application ID: MicrosoftEdge

Error: (01/22/2017 02:21:06 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: microsoftedgecp.exe, version: 11.0.14393.82, time stamp: 0x57a55786
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000604
Fault offset: 0x0000000000000000
Faulting process id: 0x19b8
Faulting application start time: 0x01d274f56d34ee2a
Faulting application path: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Faulting module path: unknown
Report Id: c2c384c4-39ab-4332-ba57-a316ad7d3780
Faulting package full name: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Faulting package-relative application ID: MicrosoftEdge

Error: (01/22/2017 02:21:06 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: microsoftedgecp.exe, version: 11.0.14393.82, time stamp: 0x57a55786
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000604
Fault offset: 0x0000000000000000
Faulting process id: 0x19b8
Faulting application start time: 0x01d274f56d34ee2a
Faulting application path: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Faulting module path: unknown
Report Id: 12e525de-4409-4f1b-a713-295e7ed6dd68
Faulting package full name: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Faulting package-relative application ID: MicrosoftEdge

Error: (01/22/2017 02:21:05 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: microsoftedgecp.exe, version: 11.0.14393.82, time stamp: 0x57a55786
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000604
Fault offset: 0x0000000000000000
Faulting process id: 0x19b8
Faulting application start time: 0x01d274f56d34ee2a
Faulting application path: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Faulting module path: unknown
Report Id: 3851aa31-15c9-4ff8-9849-06437c610a7b
Faulting package full name: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Faulting package-relative application ID: MicrosoftEdge

Error: (01/22/2017 02:21:04 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: microsoftedgecp.exe, version: 11.0.14393.82, time stamp: 0x57a55786
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000604
Fault offset: 0x0000000000000000
Faulting process id: 0x19b8
Faulting application start time: 0x01d274f56d34ee2a
Faulting application path: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Faulting module path: unknown
Report Id: 768fa5dc-9879-4c92-a624-39bf3c363866
Faulting package full name: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Faulting package-relative application ID: MicrosoftEdge

Error: (01/22/2017 02:21:03 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: microsoftedgecp.exe, version: 11.0.14393.82, time stamp: 0x57a55786
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000604
Fault offset: 0x0000000000000000
Faulting process id: 0x19b8
Faulting application start time: 0x01d274f56d34ee2a
Faulting application path: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Faulting module path: unknown
Report Id: 09927b87-06ee-4661-a9b8-1d3108762752
Faulting package full name: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Faulting package-relative application ID: MicrosoftEdge

System errors:
=============
Error: (01/22/2017 02:30:27 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (01/22/2017 02:21:03 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80073d02: Skype Preview.

Error: (01/22/2017 02:18:11 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (01/22/2017 02:15:17 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
 and APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (01/22/2017 02:14:57 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The RtkAudioService service failed to start due to the following error:
The system cannot find the file specified.

Error: (01/22/2017 02:14:26 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (01/22/2017 02:07:55 PM) (Source: DCOM) (EventID: 10016) (User: BASEMENT-PC)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{9E175B6D-F52A-11D8-B9A5-505054503030}
 and APPID
{9E175B9C-F52A-11D8-B9A5-505054503030}
 to the user Basement-PC\chris SID (S-1-5-21-1127713466-721098113-725960913-1014) from address LocalHost (Using LRPC) running in the application container Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe SID (S-1-15-2-3624051433-2125758914-1423191267-1740899205-1073925389-3782572162-737981194). This security permission can be modified using the Component Services administrative tool.

Error: (01/22/2017 02:01:43 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The ZAM Controller Service service terminated unexpectedly.  It has done this 1 time(s).

Error: (01/22/2017 01:48:24 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (01/22/2017 01:42:11 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The eapihdrv service failed to start due to the following error:
This driver has been blocked from loading

CodeIntegrity:
===================================
  Date: 2017-01-20 19:16:12.576
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

==================== Memory info ===========================

Processor: Intel® Core™ i3-4370 CPU @ 3.80GHz
Percentage of memory in use: 47%
Total physical RAM: 8127.14 MB
Available physical RAM: 4295.22 MB
Total Virtual: 12991.14 MB
Available Virtual: 6526.19 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:73.75 GB) (Free:14.32 GB) NTFS
Drive d: (Mass Storage) (Fixed) (Total:1397.26 GB) (Free:1010.58 GB) NTFS
Drive e: (EAWG_1EF) (CDROM) (Total:2.9 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 74.5 GB) (Disk ID: AB28F450)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=73.7 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=450 MB) - (Type=27)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1397.3 GB) (Disk ID: C9B2809F)
Partition 1: (Not Active) - (Size=1397.3 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================

 

Hitman Pro Log:

HitmanPro 3.7.15.281
www.hitmanpro.com

   Computer name . . . . : BASEMENT-PC
   Windows . . . . . . . : 10.0.0.14393.X64/4
   User name . . . . . . : BASEMENT-PC\chris
   UAC . . . . . . . . . : Enabled
   License . . . . . . . : Free

   Scan date . . . . . . : 2017-01-21 10:15:58
   Scan mode . . . . . . : Normal
   Scan duration . . . . : 1m 39s
   Disk access mode  . . : Direct disk access (SRB)
   Cloud . . . . . . . . : Internet
   Reboot  . . . . . . . : No

   Threats . . . . . . . : 0
   Traces  . . . . . . . : 388

   Objects scanned . . . : 1,937,996
   Files scanned . . . . : 97,557
   Remnants scanned  . . : 610,294 files / 1,230,145 keys

Suspicious files ____________________________________________________________

   C:\Users\chris\AppData\Local\Temp\insF4EF.tmp
      Size . . . . . . . : 473,933 bytes
      Age  . . . . . . . : 12.6 days (2017-01-08 19:24:56)
      Entropy  . . . . . : 7.9
      SHA-256  . . . . . : A89B7D720A749721E280B1ADEFE1A241D25B128AAAD6EE10B88B9B4DB431ABE4
      Product  . . . . . : Protection Stub
      Publisher  . . . . : Smarte Solutions, Inc.
      Description  . . . : Protection Stub
      Version  . . . . . : 3.0.0.0
      LanguageID . . . . : 2057
      Fuzzy  . . . . . . : 33.0
         The .reloc (relocation) section in this program contains code. This is an indication of malware infection.
         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
         The file name extension of this program is not common.
         The Entry Point of this file lies in a resource section. This is an indication of malware infection.
         Program contains PE structure anomalies. This is not typical for most programs.
         Time indicates that the file appeared recently on this computer.

Cookies _____________________________________________________________________

   C:\Users\chris\AppData\Local\Microsoft\Windows\INetCookies\36N4896R.cookie
   C:\Users\chris\AppData\Local\Microsoft\Windows\INetCookies\5G3NDQ9M.cookie
   C:\Users\chris\AppData\Local\Microsoft\Windows\INetCookies\60T0PPJ8.cookie
   C:\Users\chris\AppData\Local\Microsoft\Windows\INetCookies\6SOZ5B4H.cookie
   C:\Users\chris\AppData\Local\Microsoft\Windows\INetCookies\7XR85GQN.cookie
   C:\Users\chris\AppData\Local\Microsoft\Windows\INetCookies\7ZA2RKKX.cookie
   C:\Users\chris\AppData\Local\Microsoft\Windows\INetCookies\EID66A2T.cookie
   C:\Users\chris\AppData\Local\Microsoft\Windows\INetCookies\FTRFCMO4.cookie
   C:\Users\chris\AppData\Local\Microsoft\Windows\INetCookies\GAJWE55O.cookie
   C:\Users\chris\AppData\Local\Microsoft\Windows\INetCookies\GUC94KI0.cookie
   C:\Users\chris\AppData\Local\Microsoft\Windows\INetCookies\HAHE7M80.cookie
   C:\Users\chris\AppData\Local\Microsoft\Windows\INetCookies\Low\SEJMOQE3.txt
   C:\Users\chris\AppData\Local\Microsoft\Windows\INetCookies\Low\YF9VR7N8.cookie
   C:\Users\chris\AppData\Local\Microsoft\Windows\INetCookies\NME2HHEJ.cookie
   C:\Users\chris\AppData\Local\Microsoft\Windows\INetCookies\Q5W3401Z.cookie
   C:\Users\chris\AppData\Local\Microsoft\Windows\INetCookies\SC4SZBA1.cookie
   C:\Users\chris\AppData\Local\Microsoft\Windows\INetCookies\TY2LK32K.cookie
   C:\Users\chris\AppData\Local\Microsoft\Windows\INetCookies\VLKHKMX8.cookie
   C:\Users\chris\AppData\Local\Microsoft\Windows\INetCookies\WAJZKH8O.cookie
   C:\Users\chris\AppData\Local\Microsoft\Windows\INetCookies\XAPQ7LUH.cookie
   C:\Users\chris\AppData\Local\Microsoft\Windows\INetCookies\XBQ1ZIQ7.cookie
   C:\Users\chris\AppData\Local\Microsoft\Windows\INetCookies\YFQ6MXXY.cookie
   C:\Users\chris\AppData\Local\Microsoft\Windows\INetCookies\ZQ4CHJH2.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\028JKWZK.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\0TRXCXHJ.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\105T2463.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\1CO72KTE.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\1FKEB0W3.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\1J224RJA.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\1NU2Q1KX.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\1PBIA0IS.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\1TYF5K35.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\1VIVKU3B.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\20377ON4.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\20Q115SD.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\24TWP9O9.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\2CLOEAWE.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\2EPL6ZGI.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\2IFPN2N7.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\2RDR1XOC.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\2XNCEHMQ.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\31LS3LQ3.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\35U2Z6HH.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\38CEKRUQ.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\3AAGTMYH.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\3C2WIRLM.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\44HG90CR.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\4BCOI31M.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\4GBXF057.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\4IOEOGRV.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\4ITI74HR.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\4MOK3KGL.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\4X9CT8EX.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\4XW6G6NQ.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\52K42ED7.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\54055MI9.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\55EBBP6O.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\5E3TUB86.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\5L5ZE2O3.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\5PIK3DB8.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\5WXFJP40.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\5ZB1H42E.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\5ZNETBCX.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\5ZO50LAG.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\6EPW91NP.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\6GYX2TZB.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\6I1AQQU1.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\6L9UMRCF.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\7184I56I.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\726OSFY0.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\7404B7JU.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\75X6D08E.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\7CBZ2ODV.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\7HFWT60B.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\7JV4HW9D.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\7RERWTB8.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\7SKEUU2X.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\7VOXPKYK.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\7ZBV7XDT.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\863IB965.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\89ZCUHGY.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\8K84NPFW.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\8TBTJTPT.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\8UGJKN0U.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\8WW9K0WA.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\9000LXPM.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\995BWRGE.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\9C52O1N0.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\9JPSMKLX.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\9Q8IDJ05.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\A66CZ1UM.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\A6IKQXQK.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\A6WMV1RV.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\AM43K041.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\ATENF7SZ.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\AULVE8UK.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\AWF9CB1M.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\AY16L5M1.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\AYGJEJ09.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\B83G7CGS.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\B8NB5GN5.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\B9MAIKSR.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\BEV9B1IS.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\BIXJYOCZ.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\BKI77AS3.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\BKXCLBH7.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\BLQ0ZEEH.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\C8KVQI3E.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\C9F0S252.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\CH5GMU9T.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\CV4V27RC.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\DEU7233N.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\DJSRC02G.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\DZINDIFX.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\E6D7C10H.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\E9IH2641.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\EBYLGB5T.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\EUB9J6GI.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\F0VSP93E.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\F1KNZYYL.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\F3PIH2DU.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\FKBW2XCX.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\G6777SA9.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\G91RXZVC.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\GDQQGC77.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\GK4PJNQG.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\GROQQ0F8.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\GU5LOQT6.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\GY0MFS1H.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\H76VWLWI.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\H9UAIQ12.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\HH57SWN0.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\HNP6DI9U.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\HSN07JPV.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\I02866G0.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\I4YG9K2D.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\I5G7C0A1.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\I7P2M32Y.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\IDM6FZY3.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\IDXXINXX.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\IDYYJKR9.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\ILRIBVTO.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\INN7TGPH.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\IP2QTELN.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\IRY9HF0F.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\IZ3MRV7E.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\J533JM80.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\JD340FN1.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\JLNNX0KW.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\JPIXN82M.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\K08U9KZG.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\K3A9L3IX.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\K54RCO6R.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\K65HO6Y7.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\K71Y5SUU.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\K92N8UGW.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\KHNHID0F.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\KU2U30KJ.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\KWJPTDXG.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\L4HU1X54.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\LOSL4F5L.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\LP6G0KQV.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\LPSIB7LD.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\LWSO5IAJ.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\M4OILDA9.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\M53D4K30.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\MAMSV0T0.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\MP23GWYH.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\ND412105.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\NDOM3NYZ.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\NLU40KZ2.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\NM8IO77L.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\NQ8X0BTG.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\NXE6WT61.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\O47345RA.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\O9E0QXLO.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\O9RML21O.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\OMCGBLFP.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\OYGS7IEL.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\P101VAKH.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\P3T4R75V.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\P52AKYNI.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\PA1RXPKR.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\PFS097NB.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\PLLOE5WG.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\Q6AUOGUZ.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\QAUESUQK.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\QFZO7NSQ.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\QOG5UPQF.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\QP1A94W2.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\QQ6X6Y2J.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\QSRAQE70.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\QUAM8LJQ.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\R8NFAFL1.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\R9U6WWZL.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\RICYOOMF.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\RLDTK24L.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\RO87YIHL.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\RTGRBI9M.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\RZXR74L7.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\SDYDONXF.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\SRT1P7CH.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\SSDN3ZOL.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\SSU1BK3T.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\T3LD29SX.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\T7WG6K75.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\TBYLJQRU.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\TO8XPA6L.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\TOWNBR33.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\TT9HYB95.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\TVKJLI9X.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\TW3T4T6U.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\U1T2YSYY.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\U254HH1R.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\UDG577E4.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\UL4XN80L.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\V4ID6YOY.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\V5LFY2I6.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\V64JH3WE.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\V8MZV1J5.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\VP5BWP25.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\VYKC5BI2.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\W6HAVRVY.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\WINLV9TW.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\WL3F07GB.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\WQ2NFYCB.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\WQ9ON6K4.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\WWL2T0J8.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\WYTEEA42.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\XFT15RJ6.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\XKWRCTXZ.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\XVP5PHIV.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\Y82VE261.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\Y9ADOHHI.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\YEU3G9EV.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\YJZC1NBV.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\YTH21EB8.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\YV8S8E30.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\YW56LX5J.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\Z7BY5T4Y.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\ZAYIYR9A.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\ZMH2Z199.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\ZOWHYMB0.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\ZU48R343.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\ZY241XSQ.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\MicrosoftEdge\Cookies\0NWR2FQ5.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\MicrosoftEdge\Cookies\1TE6FSP9.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\MicrosoftEdge\Cookies\5FJ1ADKO.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\MicrosoftEdge\Cookies\5H4BYJHB.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\MicrosoftEdge\Cookies\7M5F0S3P.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\MicrosoftEdge\Cookies\8JB12Z6Q.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\MicrosoftEdge\Cookies\8V0KO0VS.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\MicrosoftEdge\Cookies\DJG89GU7.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\MicrosoftEdge\Cookies\E4OIR9EQ.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\MicrosoftEdge\Cookies\HQ28R2GD.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\MicrosoftEdge\Cookies\IL9BIK4Q.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\MicrosoftEdge\Cookies\MG9OQ9Y8.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\MicrosoftEdge\Cookies\O0ZNZYZK.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\MicrosoftEdge\Cookies\PRIC8CPO.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\MicrosoftEdge\Cookies\PYT5LV3D.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\MicrosoftEdge\Cookies\UHKQQIE5.cookie
   C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\MicrosoftEdge\Cookies\YE0MY09D.cookie
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:246059135.log.optimizely.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:acuityplatform.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:ad.360yield.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:adadvisor.net
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:adaptv.advertising.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:adbrn.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:addthis.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:adfarm1.adition.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:adform.net
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:adgrx.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:adingo.jp
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:adnxs.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:ads.deliverimp.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:ads.kiosked.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:ads.pointroll.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:ads.servebom.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:adsrvr.org
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:adsymptotic.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:adtech.de
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:adtechjp.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:adtechus.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:advertising.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:agkn.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:altfarm.mediaplex.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:amgdgt.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:at.atwola.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:atdmt.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:atemda.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:audienceiq.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:basebanner.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:bidr.io
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:bidswitch.net
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:bluekai.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:casalemedia.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:chango.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:collective-media.net
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:connexity.net
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:contextweb.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:crwdcntrl.net
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:demdex.net
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:domdex.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:dotomi.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:doubleclick.net
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:dpclk.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:dpm.demdex.net
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:everesttech.net
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:eyereturn.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:eyeviewads.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:fastclick.net
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:flashtalking.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:genieessp.jp
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:genieesspv.jp
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:gssprt.jp
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:gwallet.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:href.asia
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:ib.mookie1.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:imrworldwide.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:korrelate.net
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:krxd.net
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:lijit.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:liverail.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:match.rundsp.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:mathtag.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:media6degrees.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:mookie1.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:mxptint.net
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:nexac.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:openx.net
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:owneriq.net
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:pixel-a.sitescout.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:pixel.rubiconproject.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:pixel.sitescout.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:pubmatic.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:revsci.net
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:rfihub.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:rhythmxchange.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:rlcdn.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:ru4.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:rubiconproject.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:scorecardresearch.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:server.cpmstar.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:serving-sys.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:simpli.fi
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:sitescout.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:skimresources.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:smartadserver.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:swid.switchads.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:sxp.smartclip.net
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:taboola.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:tap.rubiconproject.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:tap2-cdn.rubiconproject.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:tapad.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:tidaltv.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:track.rtb-media.me
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:tribalfusion.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:tubemogul.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:turn.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:vindicosuite.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:virool.com
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:w55c.net
   C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:wtp101.com
   C:\Users\ronke_000\AppData\Roaming\Mozilla\Firefox\Profiles\zujvltn3.default\cookies.sqlite:246059135.log.optimizely.com
   C:\Users\ronke_000\AppData\Roaming\Mozilla\Firefox\Profiles\zujvltn3.default\cookies.sqlite:abmr.net
   C:\Users\ronke_000\AppData\Roaming\Mozilla\Firefox\Profiles\zujvltn3.default\cookies.sqlite:addthis.com
   C:\Users\ronke_000\AppData\Roaming\Mozilla\Firefox\Profiles\zujvltn3.default\cookies.sqlite:adnxs.com
   C:\Users\ronke_000\AppData\Roaming\Mozilla\Firefox\Profiles\zujvltn3.default\cookies.sqlite:adsrvr.org
   C:\Users\ronke_000\AppData\Roaming\Mozilla\Firefox\Profiles\zujvltn3.default\cookies.sqlite:bluekai.com
   C:\Users\ronke_000\AppData\Roaming\Mozilla\Firefox\Profiles\zujvltn3.default\cookies.sqlite:chango.com
   C:\Users\ronke_000\AppData\Roaming\Mozilla\Firefox\Profiles\zujvltn3.default\cookies.sqlite:crwdcntrl.net
   C:\Users\ronke_000\AppData\Roaming\Mozilla\Firefox\Profiles\zujvltn3.default\cookies.sqlite:demdex.net
   C:\Users\ronke_000\AppData\Roaming\Mozilla\Firefox\Profiles\zujvltn3.default\cookies.sqlite:doubleclick.net
   C:\Users\ronke_000\AppData\Roaming\Mozilla\Firefox\Profiles\zujvltn3.default\cookies.sqlite:dpm.demdex.net
   C:\Users\ronke_000\AppData\Roaming\Mozilla\Firefox\Profiles\zujvltn3.default\cookies.sqlite:mathtag.com
   C:\Users\ronke_000\AppData\Roaming\Mozilla\Firefox\Profiles\zujvltn3.default\cookies.sqlite:media6degrees.com
   C:\Users\ronke_000\AppData\Roaming\Mozilla\Firefox\Profiles\zujvltn3.default\cookies.sqlite:mookie1.com
   C:\Users\ronke_000\AppData\Roaming\Mozilla\Firefox\Profiles\zujvltn3.default\cookies.sqlite:openx.net
   C:\Users\ronke_000\AppData\Roaming\Mozilla\Firefox\Profiles\zujvltn3.default\cookies.sqlite:oracle.112.2o7.net
   C:\Users\ronke_000\AppData\Roaming\Mozilla\Firefox\Profiles\zujvltn3.default\cookies.sqlite:pixel.rubiconproject.com
   C:\Users\ronke_000\AppData\Roaming\Mozilla\Firefox\Profiles\zujvltn3.default\cookies.sqlite:pubmatic.com
   C:\Users\ronke_000\AppData\Roaming\Mozilla\Firefox\Profiles\zujvltn3.default\cookies.sqlite:rfihub.com
   C:\Users\ronke_000\AppData\Roaming\Mozilla\Firefox\Profiles\zujvltn3.default\cookies.sqlite:rubiconproject.com
   C:\Users\ronke_000\AppData\Roaming\Mozilla\Firefox\Profiles\zujvltn3.default\cookies.sqlite:scorecardresearch.com
   C:\Users\ronke_000\AppData\Roaming\Mozilla\Firefox\Profiles\zujvltn3.default\cookies.sqlite:track.rtb-media.me
   C:\Users\ronke_000\AppData\Roaming\Mozilla\Firefox\Profiles\zujvltn3.default\cookies.sqlite:tubemogul.com
   C:\Users\ronke_000\AppData\Roaming\Mozilla\Firefox\Profiles\zujvltn3.default\cookies.sqlite:turn.com

 

[Advertisements]

Hi christian keyston,

Welcome to . My name is Jr0x and I'll be helping you with your problem.

Before we get started, there are a few things I need you to take note of.

• Please read through the instructions before attempting to follow those procedures. I would recommend printing them out as some of the instructions would requires you to be in safe mode / offline.
• If there is anything you are unclear of, please ask before you start the fix.
• Do not run any scripts / tools on your own, unsupervised usage may cause more harm than good.
• Please stay with me on this thread, do not start another thread in here (Geeks To Go) or any other forum until I've declared you clean and good to go.
• There may be delayed response to you as we may live in different timezone.
• Inform me of anything that happens unexpectedly during the fix at any point of time.
• As much as we like to make this a easy process for you. Malware removal is a complex multi-step process, and things may happen such as data loss or render your machine unbootable. I would recommend that you backup your personal data before we proceed.
• Posts that are not replied to in four (4) days will result in the topic being closed. We have not forgotten you; this is just an effort to keep the boards organized and flowing. To continue on your closed topic, please PM me or any Moderator to have the topic reactivated. If, at any time during our working together, I have not responded to you in 2 days (48 hours), then please PM me.
• Please do not attach any log files to your replies unless I specifically ask you. Instead please copy and paste so as to include the log in your reply. You can do this in separate posts if it's easier for you.
• As we go along please tell me how the computer is running now. Please be as descriptive as possible e.g. I'm still getting web redirects, I am unable to access the internet etc.

Let's get started.

It is extremely important that you do not run these tools (AdwCleaner, JRT, etc) by yourself unsupervised as it could cause more harm than good if you unknowingly removed the genuine files.

I am currently analysing your log, and will get back to you soon.

[Jr0x]

Hi christian keyston,

Welcome to . My name is Jr0x and I'll be helping you with your problem.

Before we get started, there are a few things I need you to take note of.

• Please read through the instructions before attempting to follow those procedures. I would recommend printing them out as some of the instructions would requires you to be in safe mode / offline.
• If there is anything you are unclear of, please ask before you start the fix.
• Do not run any scripts / tools on your own, unsupervised usage may cause more harm than good.
• Please stay with me on this thread, do not start another thread in here (Geeks To Go) or any other forum until I've declared you clean and good to go.
• There may be delayed response to you as we may live in different timezone.
• Inform me of anything that happens unexpectedly during the fix at any point of time.
• As much as we like to make this a easy process for you. Malware removal is a complex multi-step process, and things may happen such as data loss or render your machine unbootable. I would recommend that you backup your personal data before we proceed.
• Posts that are not replied to in four (4) days will result in the topic being closed. We have not forgotten you; this is just an effort to keep the boards organized and flowing. To continue on your closed topic, please PM me or any Moderator to have the topic reactivated. If, at any time during our working together, I have not responded to you in 2 days (48 hours), then please PM me.
• Please do not attach any log files to your replies unless I specifically ask you. Instead please copy and paste so as to include the log in your reply. You can do this in separate posts if it's easier for you.
• As we go along please tell me how the computer is running now. Please be as descriptive as possible e.g. I'm still getting web redirects, I am unable to access the internet etc.

Let's get started.

It is extremely important that you do not run these tools (AdwCleaner, JRT, etc) by yourself unsupervised as it could cause more harm than good if you unknowingly removed the genuine files.

I am currently analysing your log, and will get back to you soon.

[Jr0x]

Hi christian keyston,

Are you aware of the other Administrator account on your machine named ronke_000?

Fix with FRST

• Open notepad (Start =>All Programs => Accessories => Notepad). Please copy the entire contents of the code box below. To do this highlight the contents of the box, right click on it and select copy.
• Right-click in the open notepad and select Paste.
• Save it on the desktop as fixlist.txt

NOTE. It's important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work.

Start
CreateRestorePoint:
CloseProcesses:

HKU\S-1-5-21-1127713466-721098113-725960913-1014\...\MountPoints2: {843f9f1d-10e1-11e5-beb7-806e6f6e6963} - "E:\LaunchEAWG.exe"
GroupPolicy: Restriction - Chrome <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
S2 RtkAudioService; "C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe" [X]
2017-01-19 14:18 - 2017-01-19 14:18 - 00003642 _____ C:\WINDOWS\System32\Tasks\hptop
Task: {12317A79-39C4-4118-B89F-00D6E5C44D38} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {19AE4171-A0E7-45DE-9986-8C69588F59A3} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {2385EF8E-4D05-4B25-BFF1-ED23A55B262C} - \WPD\SqmUpload_S-1-5-21-1127713466-721098113-725960913-1006 -> No File <==== ATTENTION
Task: {300B5839-6D61-4110-9B25-6C22D74E0077} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {3059E708-1548-40A2-97A4-20361A5565AB} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {3B0CD19E-C8CC-49CE-8626-7C5F22982B59} - \WPD\SqmUpload_S-1-5-21-1127713466-721098113-725960913-1001 -> No File <==== ATTENTION
Task: {40C6AD26-A7CE-4EBE-A280-E606F1CEEB96} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {51126B5D-1223-4832-8204-1CAC435B3BB5} - System32\Tasks\hptop => launchwinapp.exe hxxp://hptop.ru/magicm
Task: {6F08334C-485B-45DD-BD21-E8548997C495} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {9AA3A99C-2AC2-49B1-B131-CF266ED838FE} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {A2D32272-6528-4A46-AE39-D33B79469CA2} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {A5A84739-1D8B-4449-9671-81FA17A3773A} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> No File <==== ATTENTION
Task: {AB457DEE-1E33-42CC-BD30-BED186F3B8F5} - \WPD\SqmUpload_S-1-5-21-1127713466-721098113-725960913-1005 -> No File <==== ATTENTION
Task: {B0BCE576-E4BD-4890-957A-BAC04FAF333B} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {CF4F077A-AB6E-4D6D-8627-DF29123FC892} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
AlternateDataStreams: C:\Users\Boys\Cookies:gs5sys [2816]
AlternateDataStreams: C:\Users\Boys\AppData\Local\History:gs5sys [2816]
AlternateDataStreams: C:\Users\chris\Cookies:gs5sys [2816]
AlternateDataStreams: C:\Users\chris\Desktop\desktop.ini:gs5sys [2816]
AlternateDataStreams: C:\Users\chris\AppData\Local\History:gs5sys [2816]
AlternateDataStreams: C:\Users\chris\Documents\desktop.ini:gs5sys [2816]

Emptytemp:
Hosts:
End

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system.

Run FRST and press the Fix button just once and wait. The tool will make a log on the desktop (Fixlog.txt) please post it in your next reply.

Note: Your machine will reboot after the fix.

In your next reply, please include the following:

• FRST fixlog
• All logs that you ran previously
  • AdwCleaner (Located in C:\AdwCleaner\AdwCleaner[C?].txt where ? refers to the latest numeric number you see)
  • JRT (Located in C:\Users\chris\Desktop\JRT.txt)
  • MalwareBytes (See below for instruction)

Launch MalwareBytes

• Launch MalwareBytes from your Desktop.
• Go to Reports, select the latest Scan Log.
• Click View Report, then click Export then click Copy to Clipboard.
• Paste (CTRL+V) the log into your next reply.

[christian keyston]

Thank you for your help. The ronke_000 is my dad's profile. It's legitimate.

 

After running the FRST fix and rebooting, my profile wouldn't load. It gave the error "We can't sign onto your profile" and logged me in with a temporary profile. I tried signing out and back in and also tried rebooting, but it wouldn't sign in properly. My dad fixed that issue by creating a new profile and then copying my files and appdata back into the new profile. I just wanted to let you know since you said to inform you if anything unusual happened.

 

Here are the logs you requested:

 

FRST Fixlog

 

Fix result of Farbar Recovery Scan Tool (x64) Version: 22-01-2017
Ran by chris (23-01-2017 19:43:08) Run:1
Running from C:\Users\chris\Desktop
Loaded Profiles: chris (Available Profiles: ronke_000 & chris)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CreateRestorePoint:
CloseProcesses:

HKU\S-1-5-21-1127713466-721098113-725960913-1014\...\MountPoints2: {843f9f1d-10e1-11e5-beb7-806e6f6e6963} - "E:\LaunchEAWG.exe"
GroupPolicy: Restriction - Chrome <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
S2 RtkAudioService; "C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe" [X]
2017-01-19 14:18 - 2017-01-19 14:18 - 00003642 _____ C:\WINDOWS\System32\Tasks\hptop
Task: {12317A79-39C4-4118-B89F-00D6E5C44D38} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {19AE4171-A0E7-45DE-9986-8C69588F59A3} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {2385EF8E-4D05-4B25-BFF1-ED23A55B262C} - \WPD\SqmUpload_S-1-5-21-1127713466-721098113-725960913-1006 -> No File <==== ATTENTION
Task: {300B5839-6D61-4110-9B25-6C22D74E0077} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {3059E708-1548-40A2-97A4-20361A5565AB} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {3B0CD19E-C8CC-49CE-8626-7C5F22982B59} - \WPD\SqmUpload_S-1-5-21-1127713466-721098113-725960913-1001 -> No File <==== ATTENTION
Task: {40C6AD26-A7CE-4EBE-A280-E606F1CEEB96} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {51126B5D-1223-4832-8204-1CAC435B3BB5} - System32\Tasks\hptop => launchwinapp.exe hxxp://hptop.ru/magicm
Task: {6F08334C-485B-45DD-BD21-E8548997C495} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {9AA3A99C-2AC2-49B1-B131-CF266ED838FE} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {A2D32272-6528-4A46-AE39-D33B79469CA2} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {A5A84739-1D8B-4449-9671-81FA17A3773A} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> No File <==== ATTENTION
Task: {AB457DEE-1E33-42CC-BD30-BED186F3B8F5} - \WPD\SqmUpload_S-1-5-21-1127713466-721098113-725960913-1005 -> No File <==== ATTENTION
Task: {B0BCE576-E4BD-4890-957A-BAC04FAF333B} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {CF4F077A-AB6E-4D6D-8627-DF29123FC892} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
AlternateDataStreams: C:\Users\Boys\Cookies:gs5sys [2816]
AlternateDataStreams: C:\Users\Boys\AppData\Local\History:gs5sys [2816]
AlternateDataStreams: C:\Users\chris\Cookies:gs5sys [2816]
AlternateDataStreams: C:\Users\chris\Desktop\desktop.ini:gs5sys [2816]
AlternateDataStreams: C:\Users\chris\AppData\Local\History:gs5sys [2816]
AlternateDataStreams: C:\Users\chris\Documents\desktop.ini:gs5sys [2816]

Emptytemp:
Hosts:
End
*****************

Error: (0) Failed to create a restore point.
Processes closed successfully.
HKU\S-1-5-21-1127713466-721098113-725960913-1014\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{843f9f1d-10e1-11e5-beb7-806e6f6e6963} => key removed successfully
HKCR\CLSID\{843f9f1d-10e1-11e5-beb7-806e6f6e6963} => key not found.
C:\WINDOWS\system32\GroupPolicy\Machine => moved successfully
C:\WINDOWS\system32\GroupPolicy\GPT.ini => moved successfully
C:\WINDOWS\SysWOW64\GroupPolicy\GPT.ini => moved successfully
HKLM\SOFTWARE\Policies\Google => key removed successfully
HKLM\System\CurrentControlSet\Services\RtkAudioService => key removed successfully
RtkAudioService => service removed successfully
C:\WINDOWS\System32\Tasks\hptop => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{12317A79-39C4-4118-B89F-00D6E5C44D38} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{12317A79-39C4-4118-B89F-00D6E5C44D38} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxcontent => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{19AE4171-A0E7-45DE-9986-8C69588F59A3} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{19AE4171-A0E7-45DE-9986-8C69588F59A3} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{2385EF8E-4D05-4B25-BFF1-ED23A55B262C} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2385EF8E-4D05-4B25-BFF1-ED23A55B262C} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WPD\SqmUpload_S-1-5-21-1127713466-721098113-725960913-1006 => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{300B5839-6D61-4110-9B25-6C22D74E0077} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{300B5839-6D61-4110-9B25-6C22D74E0077} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfig => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3059E708-1548-40A2-97A4-20361A5565AB} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3059E708-1548-40A2-97A4-20361A5565AB} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3B0CD19E-C8CC-49CE-8626-7C5F22982B59} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3B0CD19E-C8CC-49CE-8626-7C5F22982B59} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WPD\SqmUpload_S-1-5-21-1127713466-721098113-725960913-1001 => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{40C6AD26-A7CE-4EBE-A280-E606F1CEEB96} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{40C6AD26-A7CE-4EBE-A280-E606F1CEEB96} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{51126B5D-1223-4832-8204-1CAC435B3BB5} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{51126B5D-1223-4832-8204-1CAC435B3BB5} => key removed successfully
C:\WINDOWS\System32\Tasks\hptop => not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\hptop => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{6F08334C-485B-45DD-BD21-E8548997C495} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6F08334C-485B-45DD-BD21-E8548997C495} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Logon-5d => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{9AA3A99C-2AC2-49B1-B131-CF266ED838FE} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9AA3A99C-2AC2-49B1-B131-CF266ED838FE} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\launchtrayprocess => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A2D32272-6528-4A46-AE39-D33B79469CA2} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A2D32272-6528-4A46-AE39-D33B79469CA2} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Time-5d => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A5A84739-1D8B-4449-9671-81FA17A3773A} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A5A84739-1D8B-4449-9671-81FA17A3773A} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{AB457DEE-1E33-42CC-BD30-BED186F3B8F5} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AB457DEE-1E33-42CC-BD30-BED186F3B8F5} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WPD\SqmUpload_S-1-5-21-1127713466-721098113-725960913-1005 => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B0BCE576-E4BD-4890-957A-BAC04FAF333B} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B0BCE576-E4BD-4890-957A-BAC04FAF333B} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{CF4F077A-AB6E-4D6D-8627-DF29123FC892} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CF4F077A-AB6E-4D6D-8627-DF29123FC892} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => key removed successfully
C:\Users\Boys\Cookies => ":gs5sys" ADS removed successfully.
C:\Users\Boys\AppData\Local\History => ":gs5sys" ADS removed successfully.
"C:\Users\chris\Cookies" => ":gs5sys" ADS not found.
C:\Users\chris\Desktop\desktop.ini => ":gs5sys" ADS removed successfully.
"C:\Users\chris\AppData\Local\History" => ":gs5sys" ADS not found.
C:\Users\chris\Documents\desktop.ini => ":gs5sys" ADS removed successfully.
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.

=========== EmptyTemp: ==========

BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 188923479 B
Java, Flash, Steam htmlcache => 620370346 B
Windows/system/drivers => 40524 B
Edge => 25844877 B
Chrome => 0 B
Firefox => 15987887 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 7680 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 327848 B
NetworkService => 72720 B
ronke_000 => 32180424 B
chris => 34946428 B

RecycleBin => 2233977778 B
EmptyTemp: => 2.9 GB temporary data Removed.

================================

The system needed a reboot.

==== End of Fixlog 19:44:06 ====

 

ADWCleaner Log

 

# AdwCleaner v6.042 - Logfile created 21/01/2017 at 10:02:44
# Updated on 06/01/2017 by Malwarebytes
# Database : 2017-01-21.1 [Server]
# Operating System : Windows 10 Pro  (X64)
# Username : chris - BASEMENT-PC
# Running from : C:\Users\chris\Desktop\Tools\adwcleaner_6.042.exe
# Mode: Clean
# Support : https://www.malwarebytes.com/support

 

***** [ Services ] *****

 

***** [ Folders ] *****

[-] Folder deleted: C:\Users\ronke_000\AppData\Local\YSearchUtil
[-] Folder deleted: C:\Users\chris\AppData\Local\Mail.Ru
[-] Folder deleted: C:\Users\chris\AppData\Local\YSearchUtil
[-] Folder deleted: C:\Program Files\Babylon
[-] Folder deleted: C:\ProgramData\Mail.Ru
[#] Folder deleted on reboot: C:\ProgramData\Application Data\Mail.Ru
[-] Folder deleted: C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\extensions\[email protected]
[-] Folder deleted: C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\extensions\[email protected]

***** [ Files ] *****

[-] File deleted: C:\Users\chris\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mail.Ru.lnk
[-] File deleted: C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\searchplugins\mailru.xml

***** [ DLL ] *****

 

***** [ WMI ] *****

 

***** [ Shortcuts ] *****

[!] Shortcut not deleted: C:\Users\chris\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mail.Ru.lnk

***** [ Scheduled Tasks ] *****

 

***** [ Registry ] *****

[-] Key deleted: HKLM\SOFTWARE\Classes\AppID\{6536801B-F50C-449B-9476-093DFD3789E3}
[-] Key deleted: HKLM\SOFTWARE\Classes\AppID\{BAB04997-93AD-4C13-805A-0409199700BB}
[-] Key deleted: HKLM\SOFTWARE\Classes\AppID\{56AD7EEE-D6C0-410E-8A7B-811DEA764554}
[-] Key deleted: HKLM\SOFTWARE\Classes\AppID\{E8EB2F1F-661E-4A7F-8F9A-77DEB757A906}
[-] Key deleted: HKLM\SOFTWARE\Classes\AppID\{AF85DB83-06F2-4ECF-97CF-C46EDB06BE29}
[-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
[-] Key deleted: HKU\S-1-5-21-1127713466-721098113-725960913-1014\Software\Essentware
[-] Key deleted: HKU\S-1-5-21-1127713466-721098113-725960913-1014\Software\Mail.Ru
[-] Key deleted: HKU\S-1-5-21-1127713466-721098113-725960913-1014\Software\Spark
[-] Key deleted: HKU\S-1-5-21-1127713466-721098113-725960913-1014\Software\AppDataLow\Software\Mail.Ru
[#] Key deleted on reboot: HKCU\Software\Essentware
[#] Key deleted on reboot: HKCU\Software\Mail.Ru
[#] Key deleted on reboot: HKCU\Software\Spark
[#] Key deleted on reboot: HKCU\Software\AppDataLow\Software\Mail.Ru
[-] Key deleted: HKLM\SOFTWARE\StormWatchApp
[-] Key deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{730E03E4-350E-48E5-9D3E-4329903D454D}
[#] Key deleted on reboot: [x64] HKCU\Software\Essentware
[#] Key deleted on reboot: [x64] HKCU\Software\Mail.Ru
[#] Key deleted on reboot: [x64] HKCU\Software\Spark
[#] Key deleted on reboot: [x64] HKCU\Software\AppDataLow\Software\Mail.Ru
[-] Key deleted: [x64] HKLM\SOFTWARE\Essentware
[-] Key deleted: HKLM\SOFTWARE\Classes\Installer\Features\4E30E037E0535E84D9E3349209D354D4
[-] Key deleted: HKLM\SOFTWARE\Classes\Installer\Products\4E30E037E0535E84D9E3349209D354D4
[-] Key deleted: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\4E30E037E0535E84D9E3349209D354D4
[#] Key deleted on reboot: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\4E30E037E0535E84D9E3349209D354D4
[#] Key deleted on reboot: [x64] HKLM\SOFTWARE\Classes\Installer\Features\4E30E037E0535E84D9E3349209D354D4
[#] Key deleted on reboot: [x64] HKLM\SOFTWARE\Classes\Installer\Products\4E30E037E0535E84D9E3349209D354D4
[-] Key deleted: HKU\S-1-5-21-1127713466-721098113-725960913-1014\Software\Microsoft\Internet Explorer\SearchScopes\{FFEBBF0A-C22C-4172-89FF-45215A135AC7}
[#] Key deleted on reboot: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{FFEBBF0A-C22C-4172-89FF-45215A135AC7}
[#] Key deleted on reboot: [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{FFEBBF0A-C22C-4172-89FF-45215A135AC7}
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\babylon-software.com
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\craftbukkit.en.softonic.com
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\dotomi.com
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\sjc-usadmm.dotomi.com
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\softonic.com
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\translation.babylon-software.com
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\www.babylon-software.com
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\babylon-software.com
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\craftbukkit.en.softonic.com
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\dotomi.com
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\sjc-usadmm.dotomi.com
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\softonic.com
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\translation.babylon-software.com
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\www.babylon-software.com
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\babylon-software.com
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\craftbukkit.en.softonic.com
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\dotomi.com
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\sjc-usadmm.dotomi.com
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\softonic.com
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\translation.babylon-software.com
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\www.babylon-software.com
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\babylon-software.com
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\craftbukkit.en.softonic.com
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\dotomi.com
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\sjc-usadmm.dotomi.com
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\softonic.com
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\translation.babylon-software.com
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\www.babylon-software.com
[-] Value deleted: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32 [Babylon Client]
[-] Value deleted: HKU\S-1-5-21-1127713466-721098113-725960913-1014\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run [PCKeeper Antivirus]
[-] Value deleted: HKU\S-1-5-21-1127713466-721098113-725960913-1014\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run [PCKeeperLive]
[-] Key deleted: HKLM\SOFTWARE\Classes\AppID\BabylonHelper.EXE

***** [ Web browsers ] *****

 

*************************

:: "Tracing" keys deleted
:: Winsock settings cleared

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [11141 Bytes] - [21/01/2017 10:02:44]
C:\AdwCleaner\AdwCleaner[S0].txt - [10792 Bytes] - [21/01/2017 10:02:01]

########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [11289 Bytes] ##########

 

JRT Log

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.0 (12.05.2016)
Operating System: Windows 10 Pro x64
Ran by chris (Administrator) on Sun 01/22/2017 at 14:01:36.89
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

File System: 1

Successfully deleted: C:\Users\chris\AppData\Local\crashrpt (Folder)

 

Registry: 0

 

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Sun 01/22/2017 at 14:02:38.16
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

Malwarebytes Log

 

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 1/20/17
Scan Time: 7:16 PM
Logfile:
Administrator: Yes

-Software Information-
Version: 3.0.5.1299
Components Version: 1.0.43
Update Package Version: 1.0.1068
License: Trial

-System Information-
OS: Windows 10
CPU: x64
File System: NTFS
User: BASEMENT-PC\chris

-Scan Summary-
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 473451
Time Elapsed: 4 min, 11 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 15
PUP.Optional.BrowseFox, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\{dec6f88c-7a9e-4cc3-bf67-f2cb1ad3fe02}Gw64, Quarantined, [2077], [299543],1.0.1068
PUP.Optional.BrowseFox, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\{6ed44528-f859-4ac0-b14f-f62a9503489b}Gw64, Quarantined, [2077], [299543],1.0.1068
PUP.Optional.BrowseFox, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\{dec6f88c-7a9e-4cc3-bf67-f2cb1ad3fe02}w64, Quarantined, [2077], [299543],1.0.1068
PUP.Optional.PCKeeper, HKLM\SOFTWARE\MICROSOFT\TRACING\PCKeeper_RASAPI32, Quarantined, [1060], [241577],1.0.1068
PUP.Optional.PCKeeper, HKLM\SOFTWARE\MICROSOFT\TRACING\PCKeeper_RASMANCS, Quarantined, [1060], [241577],1.0.1068
PUP.Optional.PCKeeper, HKU\S-1-5-21-1127713466-721098113-725960913-1014\SOFTWARE\ESSENTWARE\PCKeeper, Quarantined, [1060], [260410],1.0.1068
PUP.Optional.StormWarnings, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{4D6A5312-AB4D-41AA-8BED-0E019B87CA11}, Quarantined, [9471], [243582],1.0.1068
PUP.Optional.StormWarnings, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\{4D6A5312-AB4D-41AA-8BED-0E019B87CA11}, Quarantined, [9471], [243582],1.0.1068
PUP.Optional.StormWarnings, HKLM\SOFTWARE\CLASSES\APPID\{4D6A5312-AB4D-41AA-8BED-0E019B87CA11}, Quarantined, [9471], [243582],1.0.1068
PUP.Optional.ProPCCleaner, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\ProPCCleaner_Popup, Quarantined, [439], [242069],1.0.1068
PUP.Optional.ProPCCleaner, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\ProPCCleaner_Start, Quarantined, [439], [242069],1.0.1068
PUP.Optional.PCKeeper, HKLM\SOFTWARE\ESSENTWARE\PCKeeper, Quarantined, [1060], [260412],1.0.1068
PUP.Optional.PCKeeper, HKU\S-1-5-21-1127713466-721098113-725960913-1014\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOWREGISTRY\AUDIO\POLICYCONFIG\PROPERTYSTORE\357c41cb_0, Quarantined, [1060], [260411],1.0.1068
PUP.Optional.ProPCCleaner, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{9481037B-517C-49CA-AE70-7459EC1E65C2}, Quarantined, [439], [258471],1.0.1068
PUP.Optional.ProPCCleaner, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{DD6F67EC-C26A-4001-9C66-05BEFAA85B86}, Quarantined, [439], [258471],1.0.1068

Registry Value: 7
PUP.Optional.Taplika, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY|APPPATH, Quarantined, [3703], [243962],1.0.1068
PUP.Optional.PCKeeper, HKU\S-1-5-21-1127713466-721098113-725960913-1014\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|PCKEEPERLIVE, Quarantined, [1060], [260399],1.0.1068
PUP.Optional.PCKeeper, HKU\S-1-5-21-1127713466-721098113-725960913-1014\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|PCKEEPER ANTIVIRUS, Quarantined, [1060], [260399],1.0.1068
PUP.Optional.ProPCCleaner, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{9481037B-517C-49CA-AE70-7459EC1E65C2}|PATH, Quarantined, [439], [258471],1.0.1068
PUP.Optional.ProPCCleaner, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{DD6F67EC-C26A-4001-9C66-05BEFAA85B86}|PATH, Quarantined, [439], [258471],1.0.1068
PUP.Optional.PCKeeper, HKU\S-1-5-21-1127713466-721098113-725960913-1006\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|PCKEEPERLIVE, Quarantined, [1060], [260399],1.0.1068
PUP.Optional.PCKeeper, HKU\S-1-5-21-1127713466-721098113-725960913-1006\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|PCKEEPER ANTIVIRUS, Quarantined, [1060], [260399],1.0.1068

Data Stream: 0
(No malicious items detected)

Folder: 303
PUP.Optional.PCKeeper, C:\ProgramData\Essentware\PCKeeper\ProblemFinder, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.PCKeeper, C:\ProgramData\Essentware\PCKeeper\Minidumps, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.PCKeeper, C:\ProgramData\Essentware\PCKAV\Qurantine, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.PCKeeper, C:\ProgramData\Essentware\AccountService, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.PCKeeper, C:\ProgramData\Essentware\Installer, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.PCKeeper, C:\ProgramData\Essentware\PCKeeper, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.PCKeeper, C:\ProgramData\Essentware\PCKAV, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.PCKeeper, C:\PROGRAMDATA\ESSENTWARE, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.ProPCCleaner, C:\Users\Boys\AppData\Local\Pro_PC_Cleaner\ProPCCleaner.exe_Url_twd2ze3eaqaiwzlxig5riiby3fd4fyue\2.5.5.0, Quarantined, [439], [179053],1.0.1068
PUP.Optional.ProPCCleaner, C:\Users\Boys\AppData\Local\Pro_PC_Cleaner\ProPCCleaner.exe_Url_twd2ze3eaqaiwzlxig5riiby3fd4fyue, Quarantined, [439], [179053],1.0.1068
PUP.Optional.ProPCCleaner, C:\USERS\BOYS\APPDATA\LOCAL\Pro_PC_Cleaner, Quarantined, [439], [179053],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\facebook\images\carousel\screenshots, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\blackfriday, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\facebook\images\carousel, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\IndexedDB\chrome-extension_ecmgfadhlfnnjeldifpnbohpkbbgonfd_0.indexeddb.leveldb, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\facebook\images, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\weather\images, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\data, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\mountains, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\icons\pageAction, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\review-gifs\cat, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\planets, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\fishing, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\buttons, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\bubbles, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\facebook, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\sunset, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\strips, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\forest, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\es_419, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\notifications, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\weather, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\pt_PT, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\zh_CN, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\zh_TW, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\image-upload, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\en_GB, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\clean, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\disco, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\space, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\pt_BR, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\review-gifs, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\city, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\fil, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\_locales\pt_BR, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\sea, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\nl, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\nb, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\ca, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\lv, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\lt, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\ko, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\bg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\it, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\id, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\ja, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\fi, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\discovery, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\fr, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\el, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\hi, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\hr, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\hu, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\en, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\da, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\cs, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\et, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\favorites, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\ro, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\ru, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\sk, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\de, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\sr, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\sv, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\th, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\tr, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\uk, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\vi, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\pl, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\es, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\sl, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\momemhkbinelldlcgiinalblpbmlbpop\0.0.3_0\js\external, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\dilnpplfaapaocilphkfmkjloddlkhpd\0.0.3_0\js\external, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\dnelakbncfopielkcjcknfghbplkichk\0.0.1_0\js\external, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\loaders, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\_locales\ar, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\_locales\de, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\_locales\en, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\_locales\es, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\_locales\fr, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\_locales\he, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\_locales\it, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\_locales\ja, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\_locales\nl, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\_locales\pl, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\_locales\ru, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_metadata, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ojjlapahjhmecodonapdmllhjcpljaol\0.0.3_0\js\external, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\_locales\tr, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\search, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\icons, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\clean, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\about, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\ftue, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\apps, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\_locales, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\images, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\user, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\locales, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\html, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\css, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\css, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\lib, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\dnelakbncfopielkcjcknfghbplkichk\0.0.1_0\js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\dilnpplfaapaocilphkfmkjloddlkhpd\0.0.3_0\js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\momemhkbinelldlcgiinalblpbmlbpop\0.0.3_0\js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ojjlapahjhmecodonapdmllhjcpljaol\0.0.3_0\js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\dnelakbncfopielkcjcknfghbplkichk\0.0.1_0, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\dilnpplfaapaocilphkfmkjloddlkhpd\0.0.3_0, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\momemhkbinelldlcgiinalblpbmlbpop\0.0.3_0, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ojjlapahjhmecodonapdmllhjcpljaol\0.0.3_0, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\dnelakbncfopielkcjcknfghbplkichk, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\momemhkbinelldlcgiinalblpbmlbpop, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ojjlapahjhmecodonapdmllhjcpljaol, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\dilnpplfaapaocilphkfmkjloddlkhpd, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\User StyleSheets, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\JumpListIconsOld, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extension State, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Session Storage, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extension Rules, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\JumpListIcons, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Local Storage, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\databases, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\IndexedDB, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\GPUCache, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Cache, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\pnacl, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\USERS\BOYS\APPDATA\LOCAL\Taplika, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.PCKeeper, C:\Users\chris\AppData\Local\Essentware\DefaultDomain_Path_bxxzefytm003jjejxjupxndgjnsjt1ye\1.1.1057.0, Quarantined, [1060], [182318],1.0.1068
PUP.Optional.PCKeeper, C:\Users\chris\AppData\Local\Essentware\DefaultDomain_Path_bxxzefytm003jjejxjupxndgjnsjt1ye\2.2.2243.0, Quarantined, [1060], [182318],1.0.1068
PUP.Optional.PCKeeper, C:\Users\chris\AppData\Local\Essentware\DefaultDomain_Path_xseuterajdw5fywvmojz5uax4dukfyo4\2.2.2243.0, Quarantined, [1060], [182318],1.0.1068
PUP.Optional.PCKeeper, C:\Users\chris\AppData\Local\Essentware\DefaultDomain_Path_bxxzefytm003jjejxjupxndgjnsjt1ye, Quarantined, [1060], [182318],1.0.1068
PUP.Optional.PCKeeper, C:\Users\chris\AppData\Local\Essentware\DefaultDomain_Path_xseuterajdw5fywvmojz5uax4dukfyo4, Quarantined, [1060], [182318],1.0.1068
PUP.Optional.PCKeeper, C:\USERS\CHRIS\APPDATA\LOCAL\Essentware, Quarantined, [1060], [182318],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\facebook\images\carousel\screenshots, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\blackfriday, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\facebook\images\carousel, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\IndexedDB\chrome-extension_ecmgfadhlfnnjeldifpnbohpkbbgonfd_0.indexeddb.leveldb, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\facebook\images, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\weather\images, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\data, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\mountains, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\icons\pageAction, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\review-gifs\cat, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\planets, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\fishing, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\buttons, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\bubbles, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\facebook, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\sunset, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\strips, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\forest, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\es_419, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\notifications, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\weather, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\pt_PT, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\zh_CN, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\zh_TW, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\image-upload, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\en_GB, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\clean, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\disco, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\space, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\pt_BR, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\review-gifs, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\city, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\fil, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\_locales\pt_BR, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\sea, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\nl, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\nb, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\ca, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\lv, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\lt, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\ko, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\bg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\it, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\id, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\ja, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\fi, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\discovery, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\fr, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\el, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\hi, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\hr, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\hu, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\en, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\da, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\cs, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\et, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\favorites, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\ro, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\ru, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\sk, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\de, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\sr, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\sv, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\th, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\tr, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\uk, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\vi, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\pl, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\es, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\sl, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\momemhkbinelldlcgiinalblpbmlbpop\0.0.3_0\js\external, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\dilnpplfaapaocilphkfmkjloddlkhpd\0.0.3_0\js\external, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\dnelakbncfopielkcjcknfghbplkichk\0.0.1_0\js\external, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\loaders, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\_locales\ar, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\_locales\de, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\_locales\en, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\_locales\es, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\_locales\fr, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\_locales\he, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\_locales\it, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\_locales\ja, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\_locales\nl, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\_locales\pl, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\_locales\ru, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_metadata, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ojjlapahjhmecodonapdmllhjcpljaol\0.0.3_0\js\external, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\_locales\tr, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\search, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\icons, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\clean, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\about, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\ftue, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\apps, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\_locales, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\images, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\user, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\locales, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\html, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\css, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\css, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\lib, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\dnelakbncfopielkcjcknfghbplkichk\0.0.1_0\js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\dilnpplfaapaocilphkfmkjloddlkhpd\0.0.3_0\js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\momemhkbinelldlcgiinalblpbmlbpop\0.0.3_0\js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ojjlapahjhmecodonapdmllhjcpljaol\0.0.3_0\js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\dnelakbncfopielkcjcknfghbplkichk\0.0.1_0, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\dilnpplfaapaocilphkfmkjloddlkhpd\0.0.3_0, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\momemhkbinelldlcgiinalblpbmlbpop\0.0.3_0, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ojjlapahjhmecodonapdmllhjcpljaol\0.0.3_0, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\dnelakbncfopielkcjcknfghbplkichk, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\momemhkbinelldlcgiinalblpbmlbpop, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ojjlapahjhmecodonapdmllhjcpljaol, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\dilnpplfaapaocilphkfmkjloddlkhpd, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\JumpListIconsOld, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\User StyleSheets, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extension State, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extension Rules, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Session Storage, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Local Storage, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\JumpListIcons, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\databases, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\IndexedDB, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\GPUCache, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Cache, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\pnacl, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\USERS\CHRIS\APPDATA\LOCAL\Taplika, Quarantined, [3703], [180006],1.0.1068

File: 1236
PUP.Optional.BrowseFox, C:\WINDOWS\SYSTEM32\DRIVERS\{DEC6F88C-7A9E-4CC3-BF67-F2CB1AD3FE02}GW64.SYS, Quarantined, [2077], [299543],1.0.1068
PUP.Optional.BrowseFox, C:\WINDOWS\SYSTEM32\DRIVERS\{6ED44528-F859-4AC0-B14F-F62A9503489B}GW64.SYS, Quarantined, [2077], [299543],1.0.1068
PUP.Optional.BrowseFox, C:\WINDOWS\SYSTEM32\DRIVERS\{DEC6F88C-7A9E-4CC3-BF67-F2CB1AD3FE02}W64.SYS, Quarantined, [2077], [299543],1.0.1068
PUP.Optional.PCKeeper, C:\PROGRAMDATA\ESSENTWARE\INSTALLER.EXE, Quarantined, [1060], [299910],1.0.1068
PUP.Optional.PCKeeper, C:\PROGRAMDATA\ESSENTWARE\PCKEEPER\ONECLICKFIXSERVICE.EXE1.LLOG, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.PCKeeper, C:\ProgramData\Essentware\AccountService\AccountService.exe0.llog, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.PCKeeper, C:\ProgramData\Essentware\AccountService\AccountService.exe1.llog, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.PCKeeper, C:\ProgramData\Essentware\AccountService\AccountService.exe2.llog, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.PCKeeper, C:\ProgramData\Essentware\AccountService\AccountService.llog, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.PCKeeper, C:\ProgramData\Essentware\AccountService\CrashReportSender.llog, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.PCKeeper, C:\ProgramData\Essentware\Installer\AccSvc.log, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.PCKeeper, C:\ProgramData\Essentware\Installer\installer.exe0.llog, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.PCKeeper, C:\ProgramData\Essentware\Installer\installer.exe1.llog, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.PCKeeper, C:\ProgramData\Essentware\Installer\installer.exe2.llog, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.PCKeeper, C:\ProgramData\Essentware\Installer\installer.exe3.llog, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.PCKeeper, C:\ProgramData\Essentware\Installer\installer.exe4.llog, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.PCKeeper, C:\ProgramData\Essentware\Installer\installer0.exe0.llog, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.PCKeeper, C:\ProgramData\Essentware\Installer\PCKeeper Installer (1).exe0.llog, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.PCKeeper, C:\ProgramData\Essentware\Installer\PCKeeper Installer (1).exe1.llog, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.PCKeeper, C:\ProgramData\Essentware\Installer\PCKeeper Installer (2).exe0.llog, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.PCKeeper, C:\ProgramData\Essentware\Installer\PCKeeper Installer.exe0.llog, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.PCKeeper, C:\ProgramData\Essentware\Installer\PCKeeper Installer.exe1.llog, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.PCKeeper, C:\ProgramData\Essentware\PCKAV\AvComponent.dll0.llog, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.PCKeeper, C:\ProgramData\Essentware\PCKAV\AvComponent.dll1.llog, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.PCKeeper, C:\ProgramData\Essentware\PCKAV\AvComponent.dll2.llog, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.PCKeeper, C:\ProgramData\Essentware\PCKAV\CrashReportSender.llog, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.PCKeeper, C:\ProgramData\Essentware\PCKAV\PCKAV.exe0.llog, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.PCKeeper, C:\ProgramData\Essentware\PCKAV\PCKAV.exe1.llog, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.PCKeeper, C:\ProgramData\Essentware\PCKAV\PCKAV.llog, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.PCKeeper, C:\ProgramData\Essentware\PCKAV\PCKAVService.exe0.llog, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.PCKeeper, C:\ProgramData\Essentware\PCKAV\PCKAVService.exe1.llog, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.PCKeeper, C:\ProgramData\Essentware\PCKAV\PCKAVService.exe2.llog, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.PCKeeper, C:\ProgramData\Essentware\PCKAV\PCKAVService.exe3.llog, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.PCKeeper, C:\ProgramData\Essentware\PCKAV\PCKAVService.exe4.llog, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.PCKeeper, C:\ProgramData\Essentware\PCKAV\PCKAVService.llog, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.PCKeeper, C:\ProgramData\Essentware\PCKeeper\ProblemFinder\RegistryScan.xml, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.PCKeeper, C:\ProgramData\Essentware\PCKeeper\ProblemFinder\ScanReport.xml, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.PCKeeper, C:\ProgramData\Essentware\PCKeeper\ProblemFinder\SystemScan.xml, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.PCKeeper, C:\ProgramData\Essentware\PCKeeper\CrashReportSender.llog, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.PCKeeper, C:\ProgramData\Essentware\PCKeeper\OneClickFixService.exe0.llog, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.PCKeeper, C:\ProgramData\Essentware\PCKeeper\PCKeeper.exe0.llog, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.PCKeeper, C:\ProgramData\Essentware\PCKeeper\PCKeeper.exe1.llog, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.PCKeeper, C:\ProgramData\Essentware\PCKeeper\PCKeeper.llog, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.PCKeeper, C:\ProgramData\Essentware\PCKeeper\PCKeeperService.exe0.llog, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.PCKeeper, C:\ProgramData\Essentware\PCKeeper\PCKeeperService.exe1.llog, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.PCKeeper, C:\ProgramData\Essentware\PCKeeper\PCKeeperService.exe2.llog, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.PCKeeper, C:\ProgramData\Essentware\PCKeeper\PCKeeperService.exe3.llog, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.PCKeeper, C:\ProgramData\Essentware\PCKeeper\PCKeeperService.llog, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.PCKeeper, C:\ProgramData\Essentware\PCKeeper\RegistryCleanerComponent.dll0.llog, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.PCKeeper, C:\ProgramData\Essentware\LastReports.xml, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.PCKeeper, C:\ProgramData\Essentware\release_notes.txt, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.PCKeeper, C:\ProgramData\Essentware\Reports.xml, Quarantined, [1060], [260395],1.0.1068
PUP.Optional.ProPCCleaner, C:\Users\Boys\AppData\Local\Pro_PC_Cleaner\ProPCCleaner.exe_Url_twd2ze3eaqaiwzlxig5riiby3fd4fyue\2.5.5.0\user.config, Quarantined, [439], [179053],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Cache\data_0, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Cache\data_1, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Cache\data_2, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Cache\data_3, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Cache\f_000001, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Cache\f_000002, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Cache\f_000003, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Cache\f_000004, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Cache\f_000005, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Cache\index, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\databases\Databases.db, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\databases\Databases.db-journal, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extension Rules\000008.log, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extension Rules\CURRENT, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extension Rules\LOCK, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extension Rules\LOG, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extension Rules\LOG.old, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extension Rules\MANIFEST-000007, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extension State\000008.log, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extension State\CURRENT, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extension State\LOCK, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extension State\LOG, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extension State\LOG.old, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extension State\MANIFEST-000007, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\dilnpplfaapaocilphkfmkjloddlkhpd\0.0.3_0\js\external\jquery-1.11.1.min.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\dilnpplfaapaocilphkfmkjloddlkhpd\0.0.3_0\background.html, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\dilnpplfaapaocilphkfmkjloddlkhpd\0.0.3_0\manifest.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\dnelakbncfopielkcjcknfghbplkichk\0.0.1_0\js\external\jquery-1.11.1.min.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\dnelakbncfopielkcjcknfghbplkichk\0.0.1_0\background.html, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\dnelakbncfopielkcjcknfghbplkichk\0.0.1_0\manifest.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\facebook\images\carousel\screenshots\0-mobile.jpg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\facebook\images\carousel\screenshots\0.jpg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\facebook\images\carousel\screenshots\1-mobile.jpg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\facebook\images\carousel\screenshots\1.jpg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\facebook\images\carousel\screenshots\2-mobile.jpg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\facebook\images\carousel\screenshots\2.jpg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\facebook\images\carousel\screenshots\3-mobile.jpg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\facebook\images\carousel\screenshots\3.jpg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\facebook\images\carousel\screenshots\4-mobile.jpg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\facebook\images\carousel\screenshots\4.jpg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\facebook\images\carousel\screenshots\5-mobile.jpg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\facebook\images\carousel\screenshots\5.jpg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\facebook\images\carousel\comp.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\facebook\images\carousel\phone-frame.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\facebook\images\carousel\phone.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\data\gallery.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\blackfriday\amazon.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\blackfriday\bestbuy.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\blackfriday\kmart.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\blackfriday\newegg.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\blackfriday\overstock.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\blackfriday\samsung.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\blackfriday\target.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\blackfriday\wallmart.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\9gag.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\afterDownload.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\aim.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\aim_alt.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\aliexpress.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\amazon.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\apple.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\app_store.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\arto.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\aws.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\baidu.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\basecamp.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\bebo.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\behance.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\bing.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\blip.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\blogger.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\bnter.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\booking.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\brightkite.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\castPlatform.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\cinch.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\cloudapp.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\coroflot.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\creative_commons.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\dailybooth.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\delicious.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\designfloat.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\designmoo.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\deviantart.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\digg.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\digg_alt.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\diigo.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\dribbble.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\dropbox.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\drupal.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\dx.jpg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\dzone.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\ebay.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\ember.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\etsy.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\expedia.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\facebook.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\facebook.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\facebook_alt.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\facebook_places.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\facto.me.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\feedburner.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\flickr.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\folkd.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\formspring.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\forrst.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\foursquare.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\foxtab.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\friendfeed.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\friendster.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\funmoods.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\gameo.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\gameo.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\gdgt.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\github.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\github_alt.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\gmail.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\goodreads.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\goodWeather.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\google-drive.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\google_buzz.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\google_talk.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\gowalla.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\gowalla_alt.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\grooveshark.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\hacker_news.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\hi5.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\hype_machine.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\hyves.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\icq.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\identi.ca.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\designbump.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\evernote.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\google.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\iS-linkedin.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\livejournal.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\newsvine.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\playstation.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\whatsapp.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\installCore.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\instapaper.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\ironSource.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\iS-bizcards.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\iS-confluence.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\iS-employeeGuide.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\iS-facebook.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\iS-googleplus.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\iS-jira.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\iS-news.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\iS-presence.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\iS-signature.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\iS-twitter.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\itunes.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\jira.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\kik.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\krop.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\kudosKit.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\last.fm.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\linkedin.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\linkedin_alt.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\lovedsgn.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\meetup.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\metacafe.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\ming.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\mister_wong.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\mixx.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\mixx_alt.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\mobileCore.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\mobileme.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\msn_messenger.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\myspace.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\myspace_alt.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\netflix.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\noaa.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\nytimes.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\official.fm.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\openid.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\orkut.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\pandora.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\path.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\paypal.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\photobucket.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\picasa.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\picassa.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\pinboard.in.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\ping.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\pingchat.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\pivotal.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\plixi.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\plurk.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\podcast.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\posterous.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\qik.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\quik.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\quora.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\rdio.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\readernaut.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\reddit.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\retweet.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\robo.to.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\rss.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\salesforce.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\savefront.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\savefront.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\scribd.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\sharethis.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\simplenote.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\skype.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\slashdot.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\slideshare.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\smugmug.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\soundcloud.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\spearmintBrowser.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\spotify.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\spotsMagic.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\squarespace.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\squidoo.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\steam.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\stumbleupon.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\technorati.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\theweatherchannel.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\threewords.me.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\trello.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\tribe.net.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\tripadvisor.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\tripit.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\tumblr.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\tweaks-soft.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\twitter.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\twitter_alt.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\twitter_old.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\vcard.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\viddler.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\vimeo.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\virb.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\w3.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\weatherbug.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\wikipedia.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\windows.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\wists.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\wordpress.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\wordpress_alt.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\xing.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\yahoo!_buzz.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\yahoo!_messenger.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\yahoo.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\yelp.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\youtube.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\youtube_alt.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\zerply.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\zootool.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\zynga.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\weather\images\clock-icon-small-black.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\weather\images\clock-icon-small.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\weather\images\cloud-icon-small-black.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\weather\images\cloud-icon-small.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\weather\images\icons-black.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\weather\images\icons.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\css\jquery-ui-1.10.3.custom.min.css, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\css\newtab.css, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\css\normalize.css, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\css\opentab.css, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\css\opentab_global.css, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\about\spotsbeta.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\apps\android-white.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\apps\download.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\apps\star.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\apps\star_full.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\clean\add.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\clean\chrome_apps.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\clean\menu-icon.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\clean\profile.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\clean\recently.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\clean\search.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\clean\searchb.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\clean\sms.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\discovery\arrow-down-active.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\discovery\arrow-down.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\discovery\discovery_facebook.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\favorites\add-item-icon-black.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\favorites\add-item-icon.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\favorites\arrow-down.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\favorites\arrow-up.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\favorites\edit-item-icon.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\favorites\new-tab.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\favorites\plus-black.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\favorites\plus-white.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\favorites\remove-item-icon.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\ftue\arrow-up.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\ftue\ftue-finish-icon.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\ftue\ftue-phone.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\ftue\search-bar.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\icons\pageAction\19x19.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\icons\pageAction\19x19b.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\icons\pageAction\38x38.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\icons\pageAction\38x38b.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\icons\128.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\icons\16.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\icons\48.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\icons\arrow-down.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\icons\logo.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\icons\v-icon.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\icons\whitelogo.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\icons\x-icon.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\image-upload\computer.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\image-upload\screenshot1.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\image-upload\screenshot2.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\image-upload\screenshot3.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\image-upload\screenshot4.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\image-upload\warning.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\loaders\loader.swf, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\loaders\loader_white.swf, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\notifications\birthday-black.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\notifications\birthday.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\notifications\dismiss-icon-black.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\notifications\dismiss-icon.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\notifications\event-black.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\notifications\event.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\notifications\minimize.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\em-clean.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\!.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\android-clean.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\android.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\call-clean.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\call.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\close-chat-clean.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\close-chat.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\contact-default-clean.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\contact-default.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\contact-opacity.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\hangup-black.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\hangup-clean.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\hangup.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\phone-welcome-dismiss-icon-clean.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\phone-welcome-dismiss-icon.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\phone_icon-clean.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\phone_icon.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\phone_preview-clean.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\phone_preview.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\search-call-black.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\search-call-clean.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\search-call.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\search-clean.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\search.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\sms-black.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\sms-clean.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\sms.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\review-gifs\cat\cat_1.gif, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\review-gifs\cat\cat_2.gif, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\review-gifs\cat\cat_3.gif, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\review-gifs\cat\cat_4.gif, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\review-gifs\cat\cat_5.gif, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\review-gifs\plane.gif, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\review-gifs\rating-star.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\search\bookmark-icon-black.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\search\bookmark-icon-white.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\search\calculator-icon-black.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\search\calculator-icon-white.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\search\hangup.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\search\navigation-icon-black.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\search\navigation-icon-white.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\search\phone_preview.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\search\plus-dark-sm.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\search\remove-dark-sm.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\search\search-black.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\search\search-icon-black.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\search\search-icon-white.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\search\search.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\search\sms.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\search\web-result-icon-black.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\search\web-result-icon-white.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\bubbles\bg.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\bubbles\footer.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\bubbles\thumb.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\buttons\bg.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\buttons\footer.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\buttons\thumb.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\city\bg.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\city\footer.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\city\thumb.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\clean\thumb.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\disco\bg.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\disco\footer.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\disco\thumb.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\fishing\bg.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\fishing\footer.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\fishing\thumb.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\forest\bg.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\forest\footer.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\forest\thumb.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\mountains\bg.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\mountains\footer.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\mountains\thumb.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\planets\bg.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\planets\footer.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\planets\thumb.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\sea\bg.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\sea\footer.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\sea\thumb.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\space\bg.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\space\footer.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\space\thumb.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\strips\bg.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\strips\footer.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\strips\thumb.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\sunset\bg.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\sunset\footer.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\sunset\thumb.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\user\login.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\user\menu-icon.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\close-btn.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\close_80x80.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\default-image-grey.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\default-image.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\default-image.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\powered-by-google.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\js\background.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\js\bootstrap.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\js\newtab.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\js\opentab.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\lib\jquery.inview.min.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\lib\aes.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\lib\angular-animate.min.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\lib\angular-route.min.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\lib\angular.min.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\lib\async.min.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\lib\aws-sdk-2.0.0-rc9.min.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\lib\eventsource.min.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\lib\idbstore.min.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\lib\jquery-2.1.1.min.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\lib\jquery-ui-1.10.3.custom.min.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\lib\js-canvas-to-blob.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\lib\lodash.underscore.min.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\lib\md5.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\lib\mixins.loadash.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\lib\moment-with-langs.min.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\lib\moment.min.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\lib\phoneformat.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\lib\sortable.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\lib\TweenMax.min.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\lib\utils.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\locales\i18n_de.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\locales\i18n_en.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\locales\i18n_es.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\locales\i18n_fr.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\locales\i18n_he.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\locales\i18n_it.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\locales\i18n_ja.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\locales\i18n_nl.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\locales\i18n_pl.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\locales\i18n_pt.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\locales\i18n_ru.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\locales\i18n_tr.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\_locales\ar\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\_locales\de\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\_locales\en\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\_locales\es\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\_locales\fr\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\_locales\he\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\_locales\it\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\_locales\ja\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\_locales\nl\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\_locales\pl\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\_locales\pt_BR\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\_locales\ru\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\_locales\tr\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\background.html, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\manifest.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\newtab.html, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\opentab.html, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\momemhkbinelldlcgiinalblpbmlbpop\0.0.3_0\js\external\jquery-1.11.1.min.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\momemhkbinelldlcgiinalblpbmlbpop\0.0.3_0\background.html, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\momemhkbinelldlcgiinalblpbmlbpop\0.0.3_0\manifest.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\css\craw_window.css, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\html\craw_window.html, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\images\flapper.gif, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\images\icon_128.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\images\icon_16.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\images\topbar_floating_button.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\images\topbar_floating_button_close.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\images\topbar_floating_button_hover.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\images\topbar_floating_button_maximize.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\images\topbar_floating_button_pressed.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\bg\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\ca\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\cs\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\da\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\de\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\el\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\en\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\en_GB\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\es\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\es_419\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\et\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\fi\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\fil\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\fr\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\hi\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\hr\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\hu\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\id\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\it\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\ja\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\ko\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\lt\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\lv\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\nb\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\nl\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\pl\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\pt_BR\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\pt_PT\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\ro\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\ru\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\sk\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\sl\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\sr\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\sv\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\th\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\tr\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\uk\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\vi\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\zh_CN\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\zh_TW\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_metadata\verified_contents.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\craw_background.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\craw_window.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\manifest.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ojjlapahjhmecodonapdmllhjcpljaol\0.0.3_0\js\external\jquery-1.11.1.min.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ojjlapahjhmecodonapdmllhjcpljaol\0.0.3_0\background.html, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extensions\ojjlapahjhmecodonapdmllhjcpljaol\0.0.3_0\manifest.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Session Storage\000003.log, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Session Storage\CURRENT, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Session Storage\LOCK, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Session Storage\LOG, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Session Storage\MANIFEST-000002, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\User StyleSheets\Custom.css, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\GPUCache\data_0, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\GPUCache\data_1, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\GPUCache\data_2, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\GPUCache\data_3, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\GPUCache\index, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\IndexedDB\chrome-extension_ecmgfadhlfnnjeldifpnbohpkbbgonfd_0.indexeddb.leveldb\000005.ldb, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\IndexedDB\chrome-extension_ecmgfadhlfnnjeldifpnbohpkbbgonfd_0.indexeddb.leveldb\000008.ldb, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\IndexedDB\chrome-extension_ecmgfadhlfnnjeldifpnbohpkbbgonfd_0.indexeddb.leveldb\000009.log, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\IndexedDB\chrome-extension_ecmgfadhlfnnjeldifpnbohpkbbgonfd_0.indexeddb.leveldb\CURRENT, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\IndexedDB\chrome-extension_ecmgfadhlfnnjeldifpnbohpkbbgonfd_0.indexeddb.leveldb\LOCK, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\IndexedDB\chrome-extension_ecmgfadhlfnnjeldifpnbohpkbbgonfd_0.indexeddb.leveldb\LOG, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\IndexedDB\chrome-extension_ecmgfadhlfnnjeldifpnbohpkbbgonfd_0.indexeddb.leveldb\LOG.old, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\IndexedDB\chrome-extension_ecmgfadhlfnnjeldifpnbohpkbbgonfd_0.indexeddb.leveldb\MANIFEST-000007, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\JumpListIcons\B9F.tmp, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\JumpListIcons\BA0.tmp, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\JumpListIcons\BA1.tmp, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\JumpListIconsOld\A6DF.tmp, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\JumpListIconsOld\A6E0.tmp, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Local Storage\chrome-extension_ecmgfadhlfnnjeldifpnbohpkbbgonfd_0.localstorage, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Local Storage\chrome-extension_ecmgfadhlfnnjeldifpnbohpkbbgonfd_0.localstorage-journal, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Network Action Predictor, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Archived History, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Archived History-journal, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Cookies, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Cookies-journal, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Current Session, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Current Tabs, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extension Cookies, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Extension Cookies-journal, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Network Action Predictor-journal, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Origin Bound Certs, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Origin Bound Certs-journal, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Preferences, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\QuotaManager, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\QuotaManager-journal, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\README, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Shortcuts, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Shortcuts-journal, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Top Sites, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Top Sites-journal, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Visited Links, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Web Data, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Web Data-journal, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Favicons, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Favicons-journal, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\Google Profile.ico, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\History, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\History Provider Cache, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Default\History-journal, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Certificate Revocation Lists, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\Boys\AppData\Local\Taplika\User Data\Local State, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.PCKeeper, C:\Users\chris\AppData\Local\Essentware\DefaultDomain_Path_bxxzefytm003jjejxjupxndgjnsjt1ye\1.1.1057.0\user.config, Quarantined, [1060], [182318],1.0.1068
PUP.Optional.PCKeeper, C:\Users\chris\AppData\Local\Essentware\DefaultDomain_Path_bxxzefytm003jjejxjupxndgjnsjt1ye\2.2.2243.0\user.config, Quarantined, [1060], [182318],1.0.1068
PUP.Optional.PCKeeper, C:\Users\chris\AppData\Local\Essentware\DefaultDomain_Path_xseuterajdw5fywvmojz5uax4dukfyo4\2.2.2243.0\user.config, Quarantined, [1060], [182318],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Cache\data_0, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Cache\data_1, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Cache\data_2, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Cache\data_3, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Cache\f_000001, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Cache\f_000002, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Cache\f_000003, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Cache\f_000004, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Cache\f_000005, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Cache\index, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\databases\Databases.db, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\databases\Databases.db-journal, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extension Rules\000008.log, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extension Rules\CURRENT, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extension Rules\LOCK, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extension Rules\LOG, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extension Rules\LOG.old, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extension Rules\MANIFEST-000007, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extension State\000008.log, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extension State\CURRENT, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extension State\LOCK, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extension State\LOG, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extension State\LOG.old, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extension State\MANIFEST-000007, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\dilnpplfaapaocilphkfmkjloddlkhpd\0.0.3_0\js\external\jquery-1.11.1.min.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\dilnpplfaapaocilphkfmkjloddlkhpd\0.0.3_0\background.html, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\dilnpplfaapaocilphkfmkjloddlkhpd\0.0.3_0\manifest.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\dnelakbncfopielkcjcknfghbplkichk\0.0.1_0\js\external\jquery-1.11.1.min.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\dnelakbncfopielkcjcknfghbplkichk\0.0.1_0\background.html, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\dnelakbncfopielkcjcknfghbplkichk\0.0.1_0\manifest.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\facebook\images\carousel\screenshots\0-mobile.jpg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\facebook\images\carousel\screenshots\0.jpg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\facebook\images\carousel\screenshots\1-mobile.jpg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\facebook\images\carousel\screenshots\1.jpg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\facebook\images\carousel\screenshots\2-mobile.jpg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\facebook\images\carousel\screenshots\2.jpg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\facebook\images\carousel\screenshots\3-mobile.jpg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\facebook\images\carousel\screenshots\3.jpg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\facebook\images\carousel\screenshots\4-mobile.jpg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\facebook\images\carousel\screenshots\4.jpg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\facebook\images\carousel\screenshots\5-mobile.jpg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\facebook\images\carousel\screenshots\5.jpg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\facebook\images\carousel\comp.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\facebook\images\carousel\phone-frame.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\facebook\images\carousel\phone.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\data\gallery.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\blackfriday\amazon.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\blackfriday\bestbuy.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\blackfriday\kmart.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\blackfriday\newegg.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\blackfriday\overstock.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\blackfriday\samsung.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\blackfriday\target.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\blackfriday\wallmart.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\9gag.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\afterDownload.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\aim.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\aim_alt.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\aliexpress.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\amazon.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\apple.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\app_store.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\arto.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\aws.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\baidu.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\basecamp.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\bebo.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\behance.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\bing.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\blogger.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\bnter.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\booking.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\brightkite.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\castPlatform.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\cinch.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\cloudapp.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\coroflot.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\creative_commons.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\dailybooth.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\delicious.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\designbump.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\designmoo.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\deviantart.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\digg.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\digg_alt.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\diigo.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\dribbble.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\dropbox.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\drupal.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\dx.jpg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\dzone.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\ebay.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\ember.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\etsy.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\evernote.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\facebook.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\facebook.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\facebook_alt.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\facebook_places.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\facto.me.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\feedburner.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\flickr.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\folkd.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\formspring.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\forrst.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\foursquare.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\friendfeed.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\friendster.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\funmoods.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\gameo.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\gameo.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\gdgt.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\github.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\github_alt.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\gmail.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\goodreads.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\goodWeather.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\google-drive.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\google.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\google_talk.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\gowalla.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\gowalla_alt.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\grooveshark.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\hacker_news.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\hi5.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\hype_machine.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\hyves.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\icq.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\identi.ca.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\blip.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\designfloat.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\expedia.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\foxtab.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\google_buzz.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\installCore.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\noaa.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\savefront.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\spotify.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\tripadvisor.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\wikipedia.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\instapaper.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\ironSource.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\iS-bizcards.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\iS-confluence.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\iS-employeeGuide.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\iS-facebook.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\iS-googleplus.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\iS-jira.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\iS-linkedin.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\iS-news.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\iS-presence.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\iS-signature.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\iS-twitter.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\itunes.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\jira.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\kik.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\krop.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\kudosKit.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\last.fm.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\linkedin.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\linkedin_alt.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\livejournal.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\lovedsgn.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\meetup.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\metacafe.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\ming.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\mister_wong.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\mixx.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\mixx_alt.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\mobileCore.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\mobileme.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\msn_messenger.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\myspace.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\myspace_alt.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\netflix.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\newsvine.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\nytimes.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\official.fm.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\openid.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\orkut.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\pandora.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\path.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\paypal.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\photobucket.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\picasa.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\picassa.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\pinboard.in.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\ping.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\pingchat.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\pivotal.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\playstation.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\plixi.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\plurk.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\podcast.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\posterous.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\qik.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\quik.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\quora.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\rdio.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\readernaut.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\reddit.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\retweet.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\robo.to.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\rss.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\salesforce.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\savefront.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\scribd.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\sharethis.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\simplenote.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\skype.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\slashdot.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\slideshare.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\smugmug.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\soundcloud.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\spearmintBrowser.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\spotsMagic.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\squarespace.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\squidoo.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\steam.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\stumbleupon.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\technorati.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\theweatherchannel.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\threewords.me.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\trello.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\tribe.net.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\tripit.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\tumblr.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\tweaks-soft.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\twitter.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\twitter_alt.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\twitter_old.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\vcard.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\viddler.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\vimeo.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\virb.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\w3.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\weatherbug.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\whatsapp.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\windows.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\wists.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\wordpress.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\wordpress_alt.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\xing.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\yahoo!_buzz.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\yahoo!_messenger.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\yahoo.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\yelp.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\youtube.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\youtube_alt.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\zerply.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\zootool.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\gallery\images\zynga.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\weather\images\clock-icon-small-black.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\weather\images\clock-icon-small.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\weather\images\cloud-icon-small-black.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\weather\images\cloud-icon-small.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\weather\images\icons-black.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\app\spots\weather\images\icons.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\css\jquery-ui-1.10.3.custom.min.css, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\css\newtab.css, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\css\normalize.css, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\css\opentab.css, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\css\opentab_global.css, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\about\spotsbeta.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\apps\android-white.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\apps\download.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\apps\star.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\apps\star_full.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\clean\add.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\clean\chrome_apps.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\clean\menu-icon.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\clean\profile.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\clean\recently.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\clean\search.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\clean\searchb.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\clean\sms.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\discovery\arrow-down-active.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\discovery\arrow-down.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\discovery\discovery_facebook.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\favorites\add-item-icon-black.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\favorites\add-item-icon.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\favorites\arrow-down.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\favorites\arrow-up.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\favorites\edit-item-icon.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\favorites\new-tab.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\favorites\plus-black.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\favorites\plus-white.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\favorites\remove-item-icon.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\ftue\arrow-up.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\ftue\ftue-finish-icon.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\ftue\ftue-phone.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\ftue\search-bar.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\icons\pageAction\19x19.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\icons\pageAction\19x19b.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\icons\pageAction\38x38.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\icons\pageAction\38x38b.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\icons\128.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\icons\16.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\icons\48.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\icons\arrow-down.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\icons\logo.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\icons\v-icon.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\icons\whitelogo.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\icons\x-icon.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\image-upload\computer.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\image-upload\screenshot1.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\image-upload\screenshot2.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\image-upload\screenshot3.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\image-upload\screenshot4.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\image-upload\warning.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\loaders\loader.swf, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\loaders\loader_white.swf, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\notifications\birthday-black.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\notifications\birthday.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\notifications\dismiss-icon-black.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\notifications\dismiss-icon.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\notifications\event-black.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\notifications\event.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\notifications\minimize.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\em-clean.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\!.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\android-clean.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\android.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\call-clean.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\call.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\close-chat-clean.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\close-chat.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\contact-default-clean.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\contact-default.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\contact-opacity.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\hangup-black.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\hangup-clean.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\hangup.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\phone-welcome-dismiss-icon-clean.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\phone-welcome-dismiss-icon.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\phone_icon-clean.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\phone_icon.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\phone_preview-clean.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\phone_preview.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\search-call-black.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\search-call-clean.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\search-call.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\search-clean.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\search.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\sms-black.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\sms-clean.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\phone\sms.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\review-gifs\cat\cat_1.gif, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\review-gifs\cat\cat_2.gif, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\review-gifs\cat\cat_3.gif, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\review-gifs\cat\cat_4.gif, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\review-gifs\cat\cat_5.gif, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\review-gifs\plane.gif, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\review-gifs\rating-star.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\search\bookmark-icon-black.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\search\bookmark-icon-white.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\search\calculator-icon-black.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\search\calculator-icon-white.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\search\hangup.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\search\navigation-icon-black.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\search\navigation-icon-white.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\search\phone_preview.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\search\plus-dark-sm.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\search\remove-dark-sm.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\search\search-black.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\search\search-icon-black.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\search\search-icon-white.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\search\search.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\search\sms.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\search\web-result-icon-black.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\search\web-result-icon-white.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\bubbles\bg.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\bubbles\footer.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\bubbles\thumb.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\buttons\bg.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\buttons\footer.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\buttons\thumb.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\city\bg.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\city\footer.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\city\thumb.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\clean\thumb.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\disco\bg.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\disco\footer.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\disco\thumb.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\fishing\bg.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\fishing\footer.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\fishing\thumb.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\forest\bg.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\forest\footer.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\forest\thumb.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\mountains\bg.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\mountains\footer.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\mountains\thumb.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\planets\bg.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\planets\footer.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\planets\thumb.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\sea\bg.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\sea\footer.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\sea\thumb.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\space\bg.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\space\footer.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\space\thumb.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\strips\bg.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\strips\footer.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\strips\thumb.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\sunset\bg.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\sunset\footer.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\themes\sunset\thumb.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\user\login.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\user\menu-icon.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\close-btn.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\close_80x80.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\default-image-grey.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\default-image.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\default-image.svg, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\img\powered-by-google.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\js\background.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\js\bootstrap.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\js\newtab.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\js\opentab.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\lib\jquery.inview.min.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\lib\aes.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\lib\angular-animate.min.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\lib\angular-route.min.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\lib\angular.min.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\lib\async.min.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\lib\aws-sdk-2.0.0-rc9.min.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\lib\eventsource.min.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\lib\idbstore.min.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\lib\jquery-2.1.1.min.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\lib\jquery-ui-1.10.3.custom.min.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\lib\js-canvas-to-blob.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\lib\lodash.underscore.min.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\lib\md5.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\lib\mixins.loadash.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\lib\moment-with-langs.min.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\lib\moment.min.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\lib\phoneformat.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\lib\sortable.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\lib\TweenMax.min.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\lib\utils.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\locales\i18n_de.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\locales\i18n_en.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\locales\i18n_es.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\locales\i18n_fr.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\locales\i18n_he.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\locales\i18n_it.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\locales\i18n_ja.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\locales\i18n_nl.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\locales\i18n_pl.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\locales\i18n_pt.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\locales\i18n_ru.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\locales\i18n_tr.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\_locales\ar\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\_locales\de\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\_locales\en\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\_locales\es\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\_locales\fr\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\_locales\he\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\_locales\it\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\_locales\ja\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\_locales\nl\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\_locales\pl\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\_locales\pt_BR\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\_locales\ru\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\_locales\tr\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\background.html, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\manifest.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\newtab.html, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ecmgfadhlfnnjeldifpnbohpkbbgonfd\0.3.8_0\opentab.html, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\momemhkbinelldlcgiinalblpbmlbpop\0.0.3_0\js\external\jquery-1.11.1.min.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\momemhkbinelldlcgiinalblpbmlbpop\0.0.3_0\background.html, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\momemhkbinelldlcgiinalblpbmlbpop\0.0.3_0\manifest.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\css\craw_window.css, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\html\craw_window.html, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\images\flapper.gif, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\images\icon_128.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\images\icon_16.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\images\topbar_floating_button.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\images\topbar_floating_button_close.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\images\topbar_floating_button_hover.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\images\topbar_floating_button_maximize.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\images\topbar_floating_button_pressed.png, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\bg\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\ca\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\cs\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\da\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\de\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\el\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\en\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\en_GB\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\es\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\es_419\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\et\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\fi\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\fil\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\fr\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\hi\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\hr\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\hu\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\id\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\it\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\ja\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\ko\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\lt\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\lv\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\nb\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\nl\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\pl\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\pt_BR\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\pt_PT\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\ro\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\ru\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\sk\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\sl\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\sr\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\sv\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\th\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\tr\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\uk\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\vi\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\zh_CN\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\zh_TW\messages.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_metadata\verified_contents.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\craw_background.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\craw_window.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\manifest.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ojjlapahjhmecodonapdmllhjcpljaol\0.0.3_0\js\external\jquery-1.11.1.min.js, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ojjlapahjhmecodonapdmllhjcpljaol\0.0.3_0\background.html, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extensions\ojjlapahjhmecodonapdmllhjcpljaol\0.0.3_0\manifest.json, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\GPUCache\data_0, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\GPUCache\data_1, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\GPUCache\data_2, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\GPUCache\data_3, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\GPUCache\index, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\IndexedDB\chrome-extension_ecmgfadhlfnnjeldifpnbohpkbbgonfd_0.indexeddb.leveldb\000005.ldb, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\IndexedDB\chrome-extension_ecmgfadhlfnnjeldifpnbohpkbbgonfd_0.indexeddb.leveldb\000008.ldb, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\IndexedDB\chrome-extension_ecmgfadhlfnnjeldifpnbohpkbbgonfd_0.indexeddb.leveldb\000009.log, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\IndexedDB\chrome-extension_ecmgfadhlfnnjeldifpnbohpkbbgonfd_0.indexeddb.leveldb\CURRENT, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\IndexedDB\chrome-extension_ecmgfadhlfnnjeldifpnbohpkbbgonfd_0.indexeddb.leveldb\LOCK, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\IndexedDB\chrome-extension_ecmgfadhlfnnjeldifpnbohpkbbgonfd_0.indexeddb.leveldb\LOG, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\IndexedDB\chrome-extension_ecmgfadhlfnnjeldifpnbohpkbbgonfd_0.indexeddb.leveldb\LOG.old, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\IndexedDB\chrome-extension_ecmgfadhlfnnjeldifpnbohpkbbgonfd_0.indexeddb.leveldb\MANIFEST-000007, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\JumpListIcons\B9F.tmp, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\JumpListIcons\BA0.tmp, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\JumpListIcons\BA1.tmp, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\JumpListIconsOld\A6DF.tmp, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\JumpListIconsOld\A6E0.tmp, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Local Storage\chrome-extension_ecmgfadhlfnnjeldifpnbohpkbbgonfd_0.localstorage, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Local Storage\chrome-extension_ecmgfadhlfnnjeldifpnbohpkbbgonfd_0.localstorage-journal, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Session Storage\000003.log, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Session Storage\CURRENT, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Session Storage\LOCK, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Session Storage\LOG, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Session Storage\MANIFEST-000002, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\User StyleSheets\Custom.css, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\QuotaManager, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Archived History, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Archived History-journal, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Cookies, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Cookies-journal, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Current Session, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Current Tabs, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extension Cookies, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Extension Cookies-journal, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Favicons, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Favicons-journal, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Google Profile.ico, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\History, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\History Provider Cache, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\History-journal, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Network Action Predictor, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Network Action Predictor-journal, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Origin Bound Certs, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Origin Bound Certs-journal, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Preferences, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\QuotaManager-journal, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\README, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Shortcuts, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Shortcuts-journal, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Top Sites, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Top Sites-journal, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Visited Links, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Web Data, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Default\Web Data-journal, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Certificate Revocation Lists, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.Taplika, C:\Users\chris\AppData\Local\Taplika\User Data\Local State, Quarantined, [3703], [180006],1.0.1068
PUP.Optional.PCKeeper, C:\$RECYCLE.BIN\S-1-5-21-1127713466-721098113-725960913-1014\$RT5DODA.EXE, Quarantined, [1060], [299910],1.0.1068
PUP.Optional.PCKeeper, C:\$RECYCLE.BIN\S-1-5-21-1127713466-721098113-725960913-1014\$R7MUD4R.EXE, Quarantined, [1060], [299910],1.0.1068
PUP.Optional.PCKeeper, C:\$RECYCLE.BIN\S-1-5-21-1127713466-721098113-725960913-1014\$RCRQ67J.EXE, Quarantined, [1060], [299910],1.0.1068
PUP.Optional.Taplika, C:\USERS\BOYS\APPDATA\LOCALLOW\MICROSOFT\INTERNET EXPLORER\SERVICES\FavIcon.icoWSE_Taplika, Quarantined, [3703], [243949],1.0.1068
PUP.Optional.ProPCCleaner, C:\WINDOWS\SYSTEM32\TASKS\ProPCCleaner_Popup, Quarantined, [439], [242058],1.0.1068
PUP.Optional.ProPCCleaner, C:\WINDOWS\SYSTEM32\TASKS\ProPCCleaner_Start, Quarantined, [439], [242058],1.0.1068

Physical Sector: 0
(No malicious items detected)

(end)

Edited by christian keyston, 23 January 2017 - 09:39 PM.

[Jr0x]

Hi christian keyston,

Sounds like a corrupted profile to me, and your dad did the correct thing to resolve it.

Seem like the tools you ran have cleared up most of the items but let's see what is left of it.


Scan with ESET Online Scanner

Temporary disable your AntiVirus and AntiSpyware protection - instructions here.
Please visit ESET Online Scanner website.
Click Scan Now.

• Download esetonlinescanner_enu.exe that you'll be given link to.
• Double click esetonlinescanner_enu.exe.
• Accept the Terms of Use

To perform the scan:

• Make sure that Enable detection of potentially unwanted applications is selected.
• In the Advanced Settings dropdown menu:
  • Enable detection of potentially unsafe applications are checked.
  • Enable detection of suspicious applications are checked.
  • Enable Anti-Stealth technology are checked.
  • Scan archives is checked.
  • Make sure that Clean threats automatically is unchecked.
  • Use custom proxy settings is unchecked.
• Click Scan
• The program will begin to download it's virus database. The speed may vary depending on your Internet connection.
• When completed, the program will begin to scan. This may take several hours. Please, be patient.
• Do not do anything on your machine as it may interrupt the scan.
• When the scan is done results will be displayed. Click the Copy to clipboard.
• When completed it'll show a list of "Threats found", click beneath it on Save to text file.... and save it as ESET log.txt on your Desktop.
• Then click Do not clean. Place a checkmark at Delete application's data on close, click Finish and close the program.

Please include this logfile in your next reply.
Don't forget to re-enable previously switched-off protection software!


Re-Scan with Farbar's Recovery Scan Tool (FRST)

• Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File).
• Please ensure you place a check mark in the Addition.txt check box at the bottom of the form before running.
• Press Scan button.
• It will produce a log called FRST.txt in the same directory the tool is run from.
• Please copy and paste log back here.
• Because you selected the Addition.txt check box this log will be created as well. Please also paste that along with the FRST.txt into your reply.

 

 

In your next reply, please include the following:

• ESET log
• FRST log
• FRST Addition log
• Are you still getting pop-ups? And the sites you mentioned?

[christian keyston]

Thank you for you help.

 

ESET found no threats so no log was created. No I haven't gotten any pop ups or weird web sites for the past couple of days. 

 

FRST log

 

 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 25-01-2017 01
Ran by chris (administrator) on BASEMENT-PC (25-01-2017 22:34:38)
Running from C:\Users\chris\Desktop
Loaded Profiles: chris (Available Profiles: chris)
Platform: Windows 10 Pro Version 1607 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Edge)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Zemana Ltd.) C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe
(Intel Corporation) C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
() C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Intel Corporation) C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.152.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Valve Corporation) D:\Steam\Steam.exe
(Valve Corporation) D:\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve Corporation) D:\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) D:\Steam\bin\cef\cef.win7\steamwebhelper.exe
() C:\Users\chris\AppData\Local\Gaijin\Program Files (x86)\NetAgent\gjagent.exe
(Valve Corporation) D:\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11610.1001.25.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Electronic Arts) D:\Origin\OriginWebHelperService.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7812.42257.0_x64__8wekyb3d8bbwe\HxMail.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7812.42257.0_x64__8wekyb3d8bbwe\HxTsr.exe
() C:\Program Files\WindowsApps\Microsoft.Getstarted_4.4.11.0_x64__8wekyb3d8bbwe\WhatsNew.Store.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.16112.10221.0_x64__8wekyb3d8bbwe\Video.UI.exe
(Electronic Arts) D:\Origin\Origin.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
() D:\Origin\QtWebEngineProcess.exe
() D:\Origin\QtWebEngineProcess.exe
() C:\Program Files\ATI Technologies\ATI.ACE\a4\AdaptiveSleepService.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
() C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1701.10103.0_x64__8wekyb3d8bbwe\Time.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft) C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.152.0_x64__kzf8qxf38zg5c\SkypeApp.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13885696 2015-06-24] (Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe [287592 2014-05-28] (Intel Corporation)
HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2016-09-06] (Microsoft Corporation)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2776528 2016-12-14] (Malwarebytes)
HKLM\...\Run: [ZAM] => C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe [14122736 2017-01-18] (Zemana Ltd.)
HKLM\...\Run: [StartCN] => C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe [8027016 2016-09-16] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [598552 2016-06-22] (Oracle Corporation)
HKLM-x32\...\RunOnce: [LaunchWUApp] => C:\AMD\WU-CCC2\ccc2_install\LaunchWLApp.bat [73 2015-10-14] ()
HKU\S-1-5-21-1127713466-721098113-725960913-1006-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-01232017201548408\...\RunOnce: [Uninstall C:\Users\ronke_000\AppData\Local\Microsoft\OneDrive\17.3.5951.0827_1\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\ronke_000\AppData\Local\Microsoft\OneDrive\17.3.5951.0827_1\amd64"
HKU\S-1-5-21-1127713466-721098113-725960913-1006-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-01232017201548408\...\RunOnce: [Uninstall C:\Users\ronke_000\AppData\Local\Microsoft\OneDrive\17.3.6381.0405\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\ronke_000\AppData\Local\Microsoft\OneDrive\17.3.6381.0405\amd64"
HKU\S-1-5-21-1127713466-721098113-725960913-1006-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-01232017201548408\...\RunOnce: [Uninstall C:\Users\ronke_000\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\ronke_000\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64"
HKU\S-1-5-21-1127713466-721098113-725960913-1014\...\Run: [Gaijin.Net Agent] => C:\Users\chris\AppData\Local\Gaijin\Program Files (x86)\NetAgent\gjagent.exe [1798664 2017-01-03] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TP-LINK Wireless Configuration Utility.lnk [2015-03-19]
ShortcutTarget: TP-LINK Wireless Configuration Utility.lnk -> C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe ()

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 10.1.5.1
Tcpip\..\Interfaces\{754b830b-9426-47a7-992a-a87514813b87}: [DhcpNameServer] 10.1.5.1

Internet Explorer:
==================
SearchScopes: HKU\S-1-5-21-1127713466-721098113-725960913-1006-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-01232017201548408 -> {61357945-054A-4EA5-B249-FE3E486184E9} URL = hxxps://search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default
BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_101\bin\ssv.dll [2016-09-25] (Oracle Corporation)
BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-09-25] (Oracle Corporation)
DPF: HKLM-x32 {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
DPF: HKLM-x32 {82774781-8F4E-11D1-AB1C-0000F8773BF0} hxxps://transfers.ds.microsoft.com/FTM/TransferSource/grTransferCtrl.cab

FireFox:
========
FF DefaultProfile: 7vemt281.default
FF ProfilePath: C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default [2017-01-23]
FF DefaultSearchEngine.US: Mozilla\Firefox\Profiles\7vemt281.default -> Bing
FF Homepage: Mozilla\Firefox\Profiles\7vemt281.default -> www.warthunder.com
FF Extension: (HTTPS-Everywhere) - C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\Extensions\[email protected] [2016-06-13]
FF Extension: (uBlock Origin) - C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\Extensions\[email protected] [2016-05-03]
FF Extension: (WOT) - C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2015-12-15]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_24_0_0_194.dll [2017-01-10] ()
FF Plugin: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-09-25] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-09-25] (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWoW64\Macromed\Flash\NPSWF32_24_0_0_194.dll [2017-01-10] ()

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdaptiveSleepService; C:\Program Files\ATI Technologies\ATI.ACE\A4\AdaptiveSleepService.exe [155016 2016-11-21] ()
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1445384 2016-10-21] ()
S3 EasyAntiCheat; C:\WINDOWS\SysWOW64\EasyAntiCheat.exe [245544 2016-05-04] (EasyAntiCheat Ltd)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-05-28] (Intel Corporation)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
S2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4317648 2016-12-14] (Malwarebytes)
S3 Origin Client Service; D:\Origin\OriginClientService.exe [2121736 2017-01-23] (Electronic Arts)
R2 Origin Web Helper Service; D:\Origin\OriginWebHelperService.exe [2183696 2017-01-23] (Electronic Arts)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2889896 2016-09-15] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)
R2 ZAMSvc; C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe [14122736 2017-01-18] (Zemana Ltd.)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S0 amdkmafd; C:\WINDOWS\System32\drivers\amdkmafd.sys [31992 2015-06-03] (Advanced Micro Devices, Inc.)
R3 amdkmdag; C:\WINDOWS\System32\DriverStore\FileRepository\c0309377.inf_amd64_7ab08912e1e1da0a\atikmdag.sys [26568848 2017-01-25] (Advanced Micro Devices, Inc.)
R3 amdkmdap; C:\WINDOWS\System32\DriverStore\FileRepository\c0309377.inf_amd64_7ab08912e1e1da0a\atikmpag.sys [536600 2017-01-25] (Advanced Micro Devices, Inc.)
R3 athur; C:\WINDOWS\System32\drivers\athuw8x.sys [2919936 2013-06-02] (Qualcomm Atheros Communications, Inc.)
R3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWT6.sys [102912 2015-07-21] (Advanced Micro Devices)
R3 debutfilter; C:\WINDOWS\system32\DRIVERS\debutfilterx64.sys [34512 2017-01-20] ()
R3 ISCT; C:\WINDOWS\System32\drivers\ISCTD64.sys [47008 2013-07-30] ()
R2 MBAMChameleon; C:\WINDOWS\system32\drivers\MBAMChameleon.sys [176064 2017-01-20] (Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\drivers\mbam.sys [43968 2017-01-23] (Malwarebytes)
R3 MEIx64; C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys [129312 2014-09-30] (Intel Corporation)
S3 MTsensor; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [17280 2013-05-17] ()
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R1 VBoxNetAdp; C:\WINDOWS\system32\DRIVERS\VBoxNetAdp6.sys [132120 2016-10-18] (Oracle Corporation)
R1 VBoxNetLwf; C:\WINDOWS\system32\DRIVERS\VBoxNetLwf.sys [206416 2016-10-18] (Oracle Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
R1 ZAM; C:\WINDOWS\System32\drivers\zam64.sys [203680 2017-01-21] (Zemana Ltd.)
R1 ZAM_Guard; C:\WINDOWS\System32\drivers\zamguard64.sys [203680 2017-01-21] (Zemana Ltd.)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-01-25 22:34 - 2017-01-25 22:34 - 02420736 _____ (Farbar) C:\Users\chris\Desktop\FRST64.exe
2017-01-25 22:34 - 2017-01-25 22:34 - 00000000 ____D C:\Users\chris\Desktop\FRST-OlderVersion
2017-01-25 22:29 - 2017-01-25 22:29 - 00000000 ____D C:\WINDOWS\system32\ÿÿÿÿÿÿÿÿ8
2017-01-25 16:17 - 2017-01-25 16:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Settings
2017-01-25 16:17 - 2017-01-25 16:17 - 00000000 ____D C:\Program Files\ATI Technologies
2017-01-25 16:15 - 2017-01-25 16:16 - 00000000 ____D C:\AMD
2017-01-25 16:14 - 2017-01-25 16:15 - 00000000 ____D C:\WINDOWS\LastGood
2017-01-25 15:00 - 2016-12-21 00:08 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2017-01-25 15:00 - 2016-12-20 21:44 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2017-01-25 01:29 - 2017-01-25 01:29 - 01015832 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxx.dll
2017-01-25 01:29 - 2017-01-25 01:29 - 00130584 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2017-01-25 01:29 - 2017-01-25 01:29 - 00121368 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2017-01-25 01:29 - 2017-01-25 01:29 - 00038416 _____ (Microsoft Corporation) C:\WINDOWS\system32\detoured.dll
2017-01-23 20:27 - 2017-01-23 20:27 - 00000000 ___HD C:\OneDriveTemp
2017-01-23 20:20 - 2017-01-23 20:20 - 00000000 ____D C:\Users\chris\Desktop\minecraft_server
2017-01-23 20:20 - 2017-01-23 20:20 - 00000000 ____D C:\Users\chris\Desktop\minecraft skins
2017-01-23 20:19 - 2017-01-25 22:34 - 00013229 _____ C:\Users\chris\Desktop\FRST.txt
2017-01-23 20:19 - 2017-01-25 20:14 - 00001272 _____ C:\Users\chris\Desktop\nativelog.txt
2017-01-23 20:19 - 2017-01-25 20:12 - 00000000 ____D C:\Users\chris\Desktop\Tools
2017-01-23 20:19 - 2017-01-23 20:20 - 00000000 ____D C:\Users\chris\Desktop\impossible innovations
2017-01-23 20:19 - 2017-01-23 20:19 - 00000000 ____D C:\Users\chris\Desktop\falns mods
2017-01-23 20:19 - 2017-01-23 20:19 - 00000000 ____D C:\Users\chris\Desktop\elite hud
2017-01-23 20:19 - 2017-01-23 19:44 - 00011745 _____ C:\Users\chris\Desktop\Fixlog.txt
2017-01-23 20:19 - 2017-01-22 14:37 - 00075788 _____ C:\Users\chris\Desktop\Addition.txt
2017-01-23 20:19 - 2017-01-22 14:02 - 00000625 _____ C:\Users\chris\Desktop\JRT.txt
2017-01-23 20:19 - 2017-01-01 12:21 - 00000201 _____ C:\Users\chris\Desktop\Mount & Blade Warband.url
2017-01-23 20:19 - 2016-12-31 09:48 - 00000202 _____ C:\Users\chris\Desktop\Banished.url
2017-01-23 20:19 - 2016-12-28 17:40 - 00000202 _____ C:\Users\chris\Desktop\Hearts of Iron IV.url
2017-01-23 20:19 - 2016-12-24 17:34 - 00000202 _____ C:\Users\chris\Desktop\ASTRONEER.url
2017-01-23 20:19 - 2016-12-05 12:33 - 00000200 _____ C:\Users\chris\Desktop\Star Trek Online.url
2017-01-23 20:19 - 2016-11-08 18:17 - 00000202 _____ C:\Users\chris\Desktop\PlanetSide 2.url
2017-01-23 20:19 - 2016-10-27 19:34 - 00000781 _____ C:\Users\chris\Desktop\WinDirStat.lnk
2017-01-23 20:19 - 2016-10-24 14:37 - 00000210 _____ C:\Users\chris\Desktop\Sid Meier's Civilization V (Windows 8 - Touch Enabled).url
2017-01-23 20:19 - 2016-10-13 19:09 - 00000137 _____ C:\Users\chris\Desktop\SteamVR Performance Test.url
2017-01-23 20:19 - 2016-10-07 08:30 - 00000561 _____ C:\Users\chris\Desktop\Steam.lnk
2017-01-23 20:19 - 2016-09-17 11:22 - 00001890 _____ C:\Users\chris\Desktop\Homeworld Remastered Collection.lnk
2017-01-23 20:19 - 2016-08-04 17:19 - 00000202 _____ C:\Users\chris\Desktop\Homeworld Remastered Collection.url
2017-01-23 20:19 - 2016-07-28 18:10 - 00000202 _____ C:\Users\chris\Desktop\Zero G Arena.url
2017-01-23 20:19 - 2016-07-27 13:47 - 00001068 _____ C:\Users\chris\Desktop\Program Files (x86) - Shortcut.lnk
2017-01-23 20:19 - 2016-07-23 11:37 - 00000202 _____ C:\Users\chris\Desktop\Transformers Fall of Cybertron.url
2017-01-23 20:19 - 2016-07-19 15:50 - 00000201 _____ C:\Users\chris\Desktop\Order of War.url
2017-01-23 20:19 - 2016-06-29 19:21 - 00000199 _____ C:\Users\chris\Desktop\Portal 2.url
2017-01-23 20:19 - 2016-05-30 12:31 - 00000202 _____ C:\Users\chris\Desktop\MechWarrior Online.url
2017-01-23 20:19 - 2016-05-19 08:36 - 00000110 _____ C:\Users\chris\Desktop\ksp.txt
2017-01-23 20:19 - 2016-05-10 11:43 - 00000202 _____ C:\Users\chris\Desktop\Blender 2.77.url
2017-01-23 20:19 - 2016-05-04 19:17 - 00000202 _____ C:\Users\chris\Desktop\Robocraft.url
2017-01-23 20:19 - 2016-04-22 20:09 - 00000201 _____ C:\Users\chris\Desktop\Transformers War for Cybertron.url
2017-01-23 20:19 - 2016-04-11 17:38 - 00000123 _____ C:\Users\chris\Desktop\Armored Warfare.url
2017-01-23 20:19 - 2016-04-11 15:02 - 00002126 _____ C:\Users\chris\Desktop\My.com Game Center.lnk
2017-01-23 20:19 - 2016-04-07 14:13 - 04734664 _____ () C:\Users\chris\Desktop\TechnicLauncher.exe
2017-01-23 20:19 - 2016-03-26 18:36 - 00000136 _____ C:\Users\chris\Desktop\Star Wars Empire at War Forces of Corruption - Shortcut.lnk
2017-01-23 20:19 - 2016-03-26 18:36 - 00000136 _____ C:\Users\chris\Desktop\Star Wars Empire at War - Shortcut.lnk
2017-01-23 20:19 - 2016-03-06 18:06 - 00000202 _____ C:\Users\chris\Desktop\Elite Dangerous.url
2017-01-23 20:19 - 2016-02-16 21:51 - 00000202 _____ C:\Users\chris\Desktop\SNOW.url
2017-01-23 20:19 - 2016-02-10 09:30 - 00000202 _____ C:\Users\chris\Desktop\Kerbal Space Program.url
2017-01-23 20:19 - 2016-02-07 20:50 - 00000202 _____ C:\Users\chris\Desktop\BeamNG.drive.url
2017-01-23 20:19 - 2016-01-30 15:41 - 00000202 _____ C:\Users\chris\Desktop\Star Swarm Stress Test.url
2017-01-23 20:19 - 2016-01-26 14:32 - 00002155 _____ C:\Users\chris\Desktop\Play Star Wars Battlefront II.lnk
2017-01-23 20:19 - 2016-01-09 11:27 - 00000232 _____ C:\Users\chris\Desktop\Pixar in a Box Khan Academy.URL
2017-01-23 20:19 - 2016-01-09 11:26 - 00000225 _____ C:\Users\chris\Desktop\Learn Java Codecademy.URL
2017-01-23 20:19 - 2016-01-09 10:00 - 00001095 _____ C:\Users\chris\Desktop\Age of Empires III.lnk
2017-01-23 20:19 - 2015-12-26 12:07 - 00000201 _____ C:\Users\chris\Desktop\Supreme Commander 2.url
2017-01-23 20:19 - 2015-12-24 14:21 - 00000202 _____ C:\Users\chris\Desktop\Fractured Space.url
2017-01-23 20:19 - 2015-12-23 20:48 - 00000202 _____ C:\Users\chris\Desktop\Offworld Trading Company.url
2017-01-23 20:19 - 2015-12-20 16:48 - 00000201 _____ C:\Users\chris\Desktop\Sid Meier's Civilization Beyond Earth.url
2017-01-23 20:19 - 2015-11-13 15:02 - 00000202 _____ C:\Users\chris\Desktop\Total War Arena.url
2017-01-23 20:19 - 2015-11-07 11:28 - 00000202 _____ C:\Users\chris\Desktop\Endless Sky.url
2017-01-23 20:19 - 2015-10-04 18:53 - 00000201 _____ C:\Users\chris\Desktop\Moonbase Alpha.url
2017-01-23 20:19 - 2015-09-12 17:23 - 00000748 _____ C:\Users\chris\Desktop\World of Warships.lnk
2017-01-23 20:19 - 2015-08-22 13:34 - 00440817 _____ C:\Users\chris\Desktop\Flan's Mod Apocalypse-1.8-1.0.jar
2017-01-23 20:19 - 2015-08-01 11:39 - 00001122 _____ C:\Users\chris\Desktop\GameRanger.lnk
2017-01-23 20:19 - 2015-07-19 14:47 - 00000201 _____ C:\Users\chris\Desktop\Sid Meier's Civilization V SDK.url
2017-01-23 20:19 - 2015-07-14 16:37 - 00000202 _____ C:\Users\chris\Desktop\War Thunder.url
2017-01-23 20:19 - 2015-06-27 10:09 - 00000200 _____ C:\Users\chris\Desktop\Sid Meier's Civilization V.url
2017-01-23 20:19 - 2015-06-27 09:37 - 00000202 _____ C:\Users\chris\Desktop\Gear Up.url
2017-01-23 20:19 - 2015-06-15 21:19 - 00000202 _____ C:\Users\chris\Desktop\Space Engineers.url
2017-01-23 20:19 - 2014-04-25 13:59 - 00001298 _____ C:\Users\chris\Desktop\XP.lnk
2017-01-23 20:19 - 2013-02-24 16:07 - 00001780 _____ C:\Users\chris\Desktop\SimCity 4.lnk
2017-01-23 20:18 - 2017-01-23 20:19 - 00000000 ____D C:\Users\chris\Desktop\tem
2017-01-23 20:18 - 2017-01-23 20:18 - 00000000 ___RD C:\Users\chris\3D Objects
2017-01-23 20:18 - 2017-01-23 20:18 - 00000000 ____D C:\Users\chris\Desktop\survival
2017-01-23 20:18 - 2017-01-23 20:18 - 00000000 ____D C:\Users\chris\Desktop\oldwest
2017-01-23 20:18 - 2017-01-23 20:18 - 00000000 ____D C:\Users\chris\048298C9A4D3490B9FF9AB023A9238F3.TMP
2017-01-23 20:18 - 2017-01-23 20:18 - 00000000 ____D C:\Users\chris\.VirtualBox
2017-01-23 20:18 - 2017-01-23 20:18 - 00000000 ____D C:\Users\chris\.thumbnails
2017-01-23 20:18 - 2017-01-23 20:18 - 00000000 ____D C:\Users\chris\.oracle_jre_usage
2017-01-23 20:18 - 2016-09-19 19:59 - 00000000 ____D C:\Users\chris\.QtWebEngineProcess
2017-01-23 20:18 - 2016-09-19 19:59 - 00000000 ____D C:\Users\chris\.Origin
2017-01-23 20:16 - 2017-01-23 20:23 - 00000000 ____D C:\Users\chris\AppData\Local\VirtualStore
2017-01-23 20:16 - 2017-01-23 20:23 - 00000000 ____D C:\Users\chris\AppData\Local\Packages
2017-01-23 20:16 - 2017-01-23 20:16 - 00000000 ____D C:\Users\chris\AppData\Roaming\Adobe
2017-01-23 20:16 - 2017-01-23 20:16 - 00000000 ____D C:\Users\chris\AppData\Local\Zemana
2017-01-23 20:16 - 2017-01-23 20:16 - 00000000 ____D C:\Users\chris\AppData\Local\TileDataLayer
2017-01-23 20:15 - 2017-01-23 20:24 - 00000000 ____D C:\Users\chris
2017-01-23 20:15 - 2017-01-23 20:23 - 00000000 ____D C:\Users\chris\AppData\Local\ConnectedDevicesPlatform
2017-01-23 20:15 - 2017-01-23 20:23 - 00000000 ____D C:\Users\chris\AppData\Local\AMD
2017-01-23 20:15 - 2017-01-23 20:15 - 00000020 ___SH C:\Users\chris\ntuser.ini
2017-01-23 20:15 - 2017-01-23 20:15 - 00000000 _SHDL C:\Users\chris\My Documents
2017-01-23 20:15 - 2017-01-23 20:15 - 00000000 _SHDL C:\Users\chris\Documents\My Videos
2017-01-23 20:15 - 2017-01-23 20:15 - 00000000 _SHDL C:\Users\chris\Documents\My Pictures
2017-01-23 20:15 - 2017-01-23 20:15 - 00000000 _SHDL C:\Users\chris\Documents\My Music
2017-01-23 20:15 - 2016-08-13 20:41 - 00000000 ____D C:\Users\chris\AppData\Roaming\ATI
2017-01-23 20:15 - 2016-08-13 20:41 - 00000000 ____D C:\Users\chris\AppData\Local\ATI
2017-01-23 20:08 - 2017-01-23 20:08 - 00000000 ____D C:\Users\TEMP.old\AppData\Roaming\Intel Corporation
2017-01-23 20:06 - 2017-01-23 20:06 - 00002401 _____ C:\Users\TEMP.old\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-01-23 20:06 - 2017-01-23 20:06 - 00000000 ___RD C:\Users\TEMP.old\OneDrive
2017-01-23 20:06 - 2017-01-23 20:06 - 00000000 ____D C:\Users\TEMP.old\AppData\Roaming\TP-LINK
2017-01-23 20:05 - 2017-01-23 20:06 - 00000000 ____D C:\Users\TEMP.old
2017-01-23 20:05 - 2017-01-23 20:05 - 00000020 ___SH C:\Users\TEMP.old\ntuser.ini
2017-01-23 20:05 - 2017-01-23 20:05 - 00000000 _SHDL C:\Users\TEMP.old\My Documents
2017-01-23 20:05 - 2017-01-23 20:05 - 00000000 _SHDL C:\Users\TEMP.old\Documents\My Videos
2017-01-23 20:05 - 2017-01-23 20:05 - 00000000 _SHDL C:\Users\TEMP.old\Documents\My Pictures
2017-01-23 20:05 - 2017-01-23 20:05 - 00000000 _SHDL C:\Users\TEMP.old\Documents\My Music
2017-01-23 20:05 - 2017-01-23 20:05 - 00000000 ____D C:\Users\TEMP.old\AppData\Roaming\Adobe
2017-01-23 20:05 - 2017-01-23 20:05 - 00000000 ____D C:\Users\TEMP.old\AppData\Local\Zemana
2017-01-23 20:05 - 2017-01-23 20:05 - 00000000 ____D C:\Users\TEMP.old\AppData\Local\TileDataLayer
2017-01-23 20:05 - 2017-01-23 20:05 - 00000000 ____D C:\Users\TEMP.old\AppData\Local\Packages
2017-01-23 20:05 - 2017-01-23 20:05 - 00000000 ____D C:\Users\TEMP.old\AppData\Local\ConnectedDevicesPlatform
2017-01-23 20:05 - 2017-01-23 20:05 - 00000000 ____D C:\Users\TEMP.old\AppData\Local\AMD
2017-01-23 20:05 - 2016-08-13 20:41 - 00000000 ____D C:\Users\TEMP.old\AppData\Roaming\ATI
2017-01-23 20:05 - 2016-08-13 20:41 - 00000000 ____D C:\Users\TEMP.old\AppData\Local\ATI
2017-01-23 19:55 - 2017-01-23 19:55 - 00000000 ____D C:\Users\ronke_000\AppData\Local\Zemana
2017-01-22 14:36 - 2017-01-25 22:34 - 00000000 ____D C:\FRST
2017-01-22 13:34 - 2017-01-22 13:34 - 06771840 _____ (ESET spol. s r.o.) C:\Users\chris\Downloads\esetonlinescanner_enu.exe
2017-01-22 13:34 - 2017-01-22 13:34 - 00000000 ____D C:\Users\chris\AppData\Local\ESET
2017-01-21 13:48 - 2017-01-24 23:05 - 00000000 ____D C:\Users\chris\Documents\Bandicam
2017-01-21 13:48 - 2017-01-21 13:48 - 00000000 ____D C:\Users\chris\AppData\Roaming\BANDISOFT
2017-01-21 13:47 - 2017-01-21 13:47 - 00001057 _____ C:\Users\Public\Desktop\Bandicam.lnk
2017-01-21 13:47 - 2017-01-21 13:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bandicam
2017-01-21 13:47 - 2017-01-21 13:47 - 00000000 ____D C:\Program Files (x86)\BandiMPEG1
2017-01-21 13:47 - 2017-01-21 13:47 - 00000000 ____D C:\Program Files (x86)\Bandicam
2017-01-21 13:46 - 2017-01-21 13:46 - 17175976 _____ (Bandisoft) C:\Users\chris\Downloads\bdcamsetup.exe
2017-01-21 10:24 - 2017-01-21 10:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\herdProtect
2017-01-21 10:24 - 2017-01-21 10:24 - 00000000 ____D C:\Program Files\Reason
2017-01-21 10:20 - 2017-01-25 22:34 - 00601150 _____ C:\WINDOWS\ZAM.krnl.trace
2017-01-21 10:20 - 2017-01-25 22:34 - 00530002 _____ C:\WINDOWS\ZAM_Guard.krnl.trace
2017-01-21 10:20 - 2017-01-21 10:20 - 00203680 _____ (Zemana Ltd.) C:\WINDOWS\system32\Drivers\zamguard64.sys
2017-01-21 10:20 - 2017-01-21 10:20 - 00203680 _____ (Zemana Ltd.) C:\WINDOWS\system32\Drivers\zam64.sys
2017-01-21 10:19 - 2017-01-21 10:20 - 00000000 ____D C:\Program Files (x86)\Zemana AntiMalware
2017-01-21 10:19 - 2017-01-21 10:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zemana AntiMalware
2017-01-21 10:13 - 2017-01-21 10:18 - 00000000 ____D C:\ProgramData\HitmanPro
2017-01-21 10:00 - 2017-01-22 14:54 - 00000000 ____D C:\AdwCleaner
2017-01-21 09:54 - 2017-01-21 09:54 - 00291606 _____ C:\Users\chris\Downloads\TCPView.zip
2017-01-21 09:53 - 2017-01-21 09:53 - 01932769 _____ C:\Users\chris\Downloads\ProcessExplorer.zip
2017-01-20 20:50 - 2017-01-20 20:51 - 00083992 _____ C:\Users\chris\AppData\Roaming\Debut.dmp
2017-01-20 20:37 - 2017-01-20 20:37 - 00001167 _____ C:\Users\chris\AppData\Roaming\trace_FilterInstaller.txt
2017-01-20 20:37 - 2017-01-20 20:37 - 00000000 _____ C:\Users\chris\AppData\Roaming\trace_FilterInstaller.txt-CRT.txt
2017-01-20 19:44 - 2017-01-20 20:36 - 00000000 ____D C:\WINDOWS\System32\Tasks\NCH Software
2017-01-20 19:44 - 2017-01-20 19:50 - 00000000 ____D C:\Users\chris\AppData\Roaming\NCH Software
2017-01-20 19:44 - 2017-01-20 19:44 - 00034512 _____ C:\WINDOWS\system32\Drivers\debutfilterx64.sys
2017-01-20 19:44 - 2017-01-20 19:44 - 00002281 _____ C:\Users\chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NCH Suite.lnk
2017-01-20 19:44 - 2017-01-20 19:44 - 00002073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Suite.lnk
2017-01-20 19:44 - 2017-01-20 19:44 - 00001195 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Debut Video Capture Software.lnk
2017-01-20 19:44 - 2017-01-20 19:44 - 00000000 ____D C:\ProgramData\NCH Software
2017-01-20 19:44 - 2017-01-20 19:44 - 00000000 ____D C:\Program Files (x86)\NCH Software
2017-01-20 19:43 - 2017-01-20 19:44 - 01681656 _____ (NCH Software) C:\Users\chris\Downloads\debutpsetup (1).exe
2017-01-20 19:19 - 2017-01-20 19:19 - 01681656 _____ (NCH Software) C:\Users\chris\Downloads\debutpsetup.exe
2017-01-20 19:16 - 2017-01-25 16:39 - 00091584 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2017-01-20 19:16 - 2017-01-23 20:16 - 00250816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2017-01-20 19:16 - 2017-01-23 20:16 - 00102856 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2017-01-20 19:16 - 2017-01-23 20:15 - 00043968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2017-01-20 19:16 - 2017-01-20 19:16 - 00176064 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMChameleon.sys
2017-01-20 19:15 - 2017-01-20 19:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-01-20 19:15 - 2017-01-20 19:15 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-01-20 19:15 - 2017-01-20 19:15 - 00000000 ____D C:\Program Files\Malwarebytes
2017-01-20 19:15 - 2016-12-14 12:55 - 00077416 _____ C:\WINDOWS\system32\Drivers\mbae64.sys
2017-01-20 19:14 - 2017-01-20 19:15 - 54199488 _____ (Malwarebytes ) C:\Users\chris\Downloads\mb3-setup-consumer-3.0.5.1299.exe
2017-01-19 14:26 - 2017-01-19 14:26 - 00000000 ____D C:\Users\chris\AppData\Roaming\Blender Foundation
2017-01-19 14:24 - 2017-01-19 14:34 - 00000000 ____D C:\Users\chris\Downloads\Star Wars Intro byLeyve
2017-01-19 14:23 - 2017-01-19 14:23 - 103607966 _____ C:\Users\chris\Downloads\Star Wars Intro byLeyve.rar
2017-01-19 14:17 - 2017-01-19 14:17 - 00000068 _____ C:\Users\chris\Downloads\Download_Template.url
2017-01-19 14:16 - 2017-01-19 14:17 - 00000000 ____D C:\Users\chris\Downloads\Download_Template
2017-01-13 10:17 - 2017-01-13 10:17 - 00000000 ____D C:\WINDOWS\system32\55ffc3c7a45a063807a935c5e6eed..bin
2017-01-10 13:39 - 2016-12-21 01:08 - 00245600 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll
2017-01-10 13:39 - 2016-12-21 01:08 - 00136032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ImplatSetup.dll
2017-01-10 13:39 - 2016-12-21 01:04 - 07816032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-01-10 13:39 - 2016-12-21 00:49 - 00328008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2017-01-10 13:39 - 2016-12-21 00:46 - 00624048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2017-01-10 13:39 - 2016-12-21 00:43 - 04130440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2017-01-10 13:39 - 2016-12-21 00:43 - 01454504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2017-01-10 13:39 - 2016-12-21 00:43 - 01071736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2017-01-10 13:39 - 2016-12-21 00:43 - 00092512 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2017-01-10 13:39 - 2016-12-21 00:42 - 22224480 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-01-10 13:39 - 2016-12-21 00:42 - 01988560 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-01-10 13:39 - 2016-12-21 00:42 - 01702392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2017-01-10 13:39 - 2016-12-21 00:42 - 01300600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2017-01-10 13:39 - 2016-12-21 00:42 - 00241504 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2017-01-10 13:39 - 2016-12-21 00:41 - 01600632 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2017-01-10 13:39 - 2016-12-21 00:37 - 00455520 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2017-01-10 13:39 - 2016-12-21 00:15 - 22563840 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-01-10 13:39 - 2016-12-21 00:14 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2017-01-10 13:39 - 2016-12-21 00:13 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2017-01-10 13:39 - 2016-12-21 00:12 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2017-01-10 13:39 - 2016-12-21 00:10 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2017-01-10 13:39 - 2016-12-21 00:09 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneBackupHandler.dll
2017-01-10 13:39 - 2016-12-21 00:09 - 00363520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2017-01-10 13:39 - 2016-12-21 00:08 - 01292288 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll
2017-01-10 13:39 - 2016-12-21 00:08 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2017-01-10 13:39 - 2016-12-21 00:08 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2017-01-10 13:39 - 2016-12-21 00:08 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2017-01-10 13:39 - 2016-12-21 00:08 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll
2017-01-10 13:39 - 2016-12-21 00:08 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2017-01-10 13:39 - 2016-12-21 00:07 - 00748544 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2017-01-10 13:39 - 2016-12-21 00:06 - 06285312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2017-01-10 13:39 - 2016-12-21 00:06 - 00310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncSettings.dll
2017-01-10 13:39 - 2016-12-21 00:06 - 00260608 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
2017-01-10 13:39 - 2016-12-21 00:06 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2017-01-10 13:39 - 2016-12-21 00:05 - 00425984 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2017-01-10 13:39 - 2016-12-21 00:05 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll
2017-01-10 13:39 - 2016-12-21 00:05 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2017-01-10 13:39 - 2016-12-21 00:01 - 09131008 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2017-01-10 13:39 - 2016-12-21 00:00 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcfg.dll
2017-01-10 13:39 - 2016-12-20 23:59 - 01908224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-01-10 13:39 - 2016-12-20 23:59 - 00883712 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2017-01-10 13:39 - 2016-12-20 23:58 - 23678464 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-01-10 13:39 - 2016-12-20 23:57 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsettingsprovider.dll
2017-01-10 13:39 - 2016-12-20 23:56 - 00947712 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVP9DEC.dll
2017-01-10 13:39 - 2016-12-20 23:56 - 00936960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
2017-01-10 13:39 - 2016-12-20 23:55 - 08129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-01-10 13:39 - 2016-12-20 23:55 - 04749312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-01-10 13:39 - 2016-12-20 23:54 - 05511680 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2017-01-10 13:39 - 2016-12-20 23:53 - 06664192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
2017-01-10 13:39 - 2016-12-20 23:53 - 04474368 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2017-01-10 13:39 - 2016-12-20 23:53 - 01692672 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-01-10 13:39 - 2016-12-20 23:51 - 08075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2017-01-10 13:39 - 2016-12-20 23:51 - 05611008 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2017-01-10 13:39 - 2016-12-20 23:51 - 02275840 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-01-10 13:39 - 2016-12-20 23:50 - 01490432 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2017-01-10 13:39 - 2016-12-20 23:49 - 04149248 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2017-01-10 13:39 - 2016-12-20 23:49 - 02691072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2017-01-10 13:39 - 2016-12-20 23:49 - 01062912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2017-01-10 13:39 - 2016-12-20 23:47 - 01121280 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2017-01-10 13:39 - 2016-12-20 22:59 - 00218976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinesam.dll
2017-01-10 13:39 - 2016-12-20 22:09 - 00263472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll
2017-01-10 13:39 - 2016-12-20 22:02 - 03892864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2017-01-10 13:39 - 2016-12-20 22:02 - 01852720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2017-01-10 13:39 - 2016-12-20 22:02 - 01360464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2017-01-10 13:39 - 2016-12-20 22:02 - 01277344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2017-01-10 13:39 - 2016-12-20 22:02 - 01201872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2017-01-10 13:39 - 2016-12-20 22:02 - 00980832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2017-01-10 13:39 - 2016-12-20 22:01 - 20969928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2017-01-10 13:39 - 2016-12-20 21:46 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2017-01-10 13:39 - 2016-12-20 21:43 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BlockedShutdown.dll
2017-01-10 13:39 - 2016-12-20 21:41 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BioFeedback.dll
2017-01-10 13:39 - 2016-12-20 21:41 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2017-01-10 13:39 - 2016-12-20 21:40 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2017-01-10 13:39 - 2016-12-20 21:40 - 00318976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2017-01-10 13:39 - 2016-12-20 21:40 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncSettings.dll
2017-01-10 13:39 - 2016-12-20 21:40 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2017-01-10 13:39 - 2016-12-20 21:39 - 01300480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
2017-01-10 13:39 - 2016-12-20 21:39 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe
2017-01-10 13:39 - 2016-12-20 21:38 - 00866816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Cred.dll
2017-01-10 13:39 - 2016-12-20 21:35 - 04612608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2017-01-10 13:39 - 2016-12-20 21:35 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\indexeddbserver.dll
2017-01-10 13:39 - 2016-12-20 21:34 - 07626752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2017-01-10 13:39 - 2016-12-20 21:33 - 19413504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-01-10 13:39 - 2016-12-20 21:32 - 19417600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-01-10 13:39 - 2016-12-20 21:30 - 05398016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll
2017-01-10 13:39 - 2016-12-20 21:30 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2017-01-10 13:39 - 2016-12-20 21:27 - 00640000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll
2017-01-10 13:39 - 2016-12-20 21:26 - 01155072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVP9DEC.dll
2017-01-10 13:39 - 2016-12-20 21:25 - 07469056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2017-01-10 13:39 - 2016-12-20 21:25 - 06474752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe
2017-01-10 13:39 - 2016-12-20 21:24 - 06044160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-01-10 13:39 - 2016-12-20 21:24 - 05061120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2017-01-10 13:39 - 2016-12-20 21:24 - 03733504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2017-01-10 13:39 - 2016-12-20 21:24 - 00886272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2017-01-10 13:39 - 2016-12-20 21:22 - 01883648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2017-01-10 13:39 - 2016-12-20 21:22 - 00860672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2017-01-10 13:39 - 2016-12-13 22:41 - 01235296 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2017-01-10 13:39 - 2016-12-13 22:41 - 00590960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2017-01-10 13:39 - 2016-12-13 22:34 - 02482280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2017-01-10 13:39 - 2016-12-13 22:33 - 02169184 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystems64.dll
2017-01-10 13:39 - 2016-12-13 22:33 - 01669984 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVIntegration.dll
2017-01-10 13:39 - 2016-12-13 22:33 - 01400160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystemController.dll
2017-01-10 13:39 - 2016-12-13 22:33 - 01356864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2017-01-10 13:39 - 2016-12-13 22:33 - 01054048 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPolicy.dll
2017-01-10 13:39 - 2016-12-13 22:33 - 00992096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVManifest.dll
2017-01-10 13:39 - 2016-12-13 22:33 - 00822624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVClient.exe
2017-01-10 13:39 - 2016-12-13 22:33 - 00813408 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntStreamingManager.dll
2017-01-10 13:39 - 2016-12-13 22:33 - 00779616 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVReporting.dll
2017-01-10 13:39 - 2016-12-13 22:33 - 00752992 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVOrchestration.dll
2017-01-10 13:39 - 2016-12-13 22:33 - 00704352 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntVirtualization.dll
2017-01-10 13:39 - 2016-12-13 22:33 - 00696160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPublishing.dll
2017-01-10 13:39 - 2016-12-13 22:33 - 00571744 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVCatalog.dll
2017-01-10 13:39 - 2016-12-13 22:33 - 00513376 _____ (Microsoft Corporation) C:\WINDOWS\system32\TransportDSA.dll
2017-01-10 13:39 - 2016-12-13 22:33 - 00406368 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVScripting.dll
2017-01-10 13:39 - 2016-12-13 22:33 - 00241504 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVShNotify.exe
2017-01-10 13:39 - 2016-12-13 22:33 - 00190816 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVDllSurrogate.exe
2017-01-10 13:39 - 2016-12-13 22:26 - 01469792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppVEntSubsystems32.dll
2017-01-10 13:39 - 2016-12-13 22:23 - 00404832 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2017-01-10 13:39 - 2016-12-13 22:21 - 02206496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2017-01-10 13:39 - 2016-12-13 22:19 - 00584544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2017-01-10 13:39 - 2016-12-13 22:18 - 00715104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2017-01-10 13:39 - 2016-12-13 22:18 - 00335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2017-01-10 13:39 - 2016-12-13 22:17 - 00319288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2017-01-10 13:39 - 2016-12-13 22:14 - 01694712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2017-01-10 13:39 - 2016-12-13 22:14 - 00418952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2017-01-10 13:39 - 2016-12-13 22:14 - 00089416 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2017-01-10 13:39 - 2016-12-13 22:08 - 00341344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2017-01-10 13:39 - 2016-12-13 22:06 - 00509792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2017-01-10 13:39 - 2016-12-13 22:01 - 01557808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2017-01-10 13:39 - 2016-12-13 22:01 - 00382784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2017-01-10 13:39 - 2016-12-13 22:01 - 00076984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2017-01-10 13:39 - 2016-12-13 21:48 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-01-10 13:39 - 2016-12-13 21:46 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2017-01-10 13:39 - 2016-12-13 21:46 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2017-01-10 13:39 - 2016-12-13 21:45 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
2017-01-10 13:39 - 2016-12-13 21:43 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ScDeviceEnum.dll
2017-01-10 13:39 - 2016-12-13 21:42 - 00352768 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2017-01-10 13:39 - 2016-12-13 21:42 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSCard.dll
2017-01-10 13:39 - 2016-12-13 21:42 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.UI.Logon.ProxyStub.dll
2017-01-10 13:39 - 2016-12-13 21:42 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSCard.dll
2017-01-10 13:39 - 2016-12-13 21:41 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2017-01-10 13:39 - 2016-12-13 21:40 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2017-01-10 13:39 - 2016-12-13 21:40 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsoleLogon.dll
2017-01-10 13:39 - 2016-12-13 21:40 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudBackupSettings.dll
2017-01-10 13:39 - 2016-12-13 21:40 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\certprop.dll
2017-01-10 13:39 - 2016-12-13 21:40 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.UI.Logon.ProxyStub.dll
2017-01-10 13:39 - 2016-12-13 21:39 - 00837632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2017-01-10 13:39 - 2016-12-13 21:39 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2017-01-10 13:39 - 2016-12-13 21:39 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.CredDialogController.dll
2017-01-10 13:39 - 2016-12-13 21:38 - 17188864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-01-10 13:39 - 2016-12-13 21:38 - 13869056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2017-01-10 13:39 - 2016-12-13 21:38 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudBackupSettings.dll
2017-01-10 13:39 - 2016-12-13 21:38 - 00213504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.CredDialogController.dll
2017-01-10 13:39 - 2016-12-13 21:37 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2017-01-10 13:39 - 2016-12-13 21:36 - 01002496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2017-01-10 13:39 - 2016-12-13 21:36 - 00539648 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2017-01-10 13:39 - 2016-12-13 21:36 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2017-01-10 13:39 - 2016-12-13 21:35 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2017-01-10 13:39 - 2016-12-13 21:35 - 00712192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2017-01-10 13:39 - 2016-12-13 21:35 - 00600576 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptui.dll
2017-01-10 13:39 - 2016-12-13 21:35 - 00553984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptui.dll
2017-01-10 13:39 - 2016-12-13 21:32 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll
2017-01-10 13:39 - 2016-12-13 21:32 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2017-01-10 13:39 - 2016-12-13 21:26 - 00932864 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2017-01-10 13:39 - 2016-12-13 21:26 - 00869888 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2017-01-10 13:39 - 2016-12-13 21:25 - 02009600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2017-01-10 13:39 - 2016-12-13 21:24 - 01005568 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
2017-01-10 13:39 - 2016-12-13 21:24 - 00673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2017-01-10 13:39 - 2016-12-13 21:23 - 03134976 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll
2017-01-10 13:39 - 2016-12-13 21:23 - 01231872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2017-01-10 13:39 - 2016-12-13 21:22 - 02998272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2017-01-10 13:39 - 2016-12-13 21:22 - 02748416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll
2017-01-10 13:39 - 2016-12-13 21:22 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-01-10 13:39 - 2016-12-13 21:22 - 01513472 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-01-10 13:39 - 2016-12-13 21:22 - 00707584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2017-01-10 13:39 - 2016-12-13 21:22 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-01-10 13:39 - 2016-12-13 21:21 - 03616768 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-01-10 13:39 - 2016-11-02 05:01 - 00484584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2017-01-10 13:39 - 2016-11-02 04:00 - 00534096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2017-01-10 13:39 - 2016-11-02 03:28 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2017-01-10 13:39 - 2016-11-02 03:22 - 00337920 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2017-01-10 13:39 - 2016-11-02 03:21 - 00942080 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2017-01-10 13:39 - 2016-08-01 21:30 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2016-12-31 10:47 - 2016-12-31 10:47 - 00000000 ____D C:\Users\chris\Documents\Banished
2016-12-29 21:07 - 2016-12-29 21:07 - 00642712 _____ (Microsoft Corporation) C:\Users\chris\Downloads\gfwlivesetup.exe
2016-12-29 16:48 - 2016-12-29 16:48 - 00000000 ____D C:\Users\chris\Documents\Battlestations-Pacific
2016-12-29 16:47 - 2016-12-29 16:47 - 00000000 ____D C:\Users\chris\Documents\Games for Windows - LIVE Demos
2016-12-28 17:48 - 2016-12-28 17:48 - 00000000 ____D C:\Users\chris\Documents\Paradox Interactive

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-01-25 22:31 - 2015-08-02 16:34 - 00000000 ____D C:\Users\chris\AppData\Roaming\Origin
2017-01-25 22:27 - 2016-08-13 20:37 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-01-25 19:31 - 2016-07-16 04:47 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-01-25 16:18 - 2015-08-01 17:57 - 01712850 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-01-25 16:16 - 2015-07-22 13:38 - 00000000 ____D C:\ProgramData\Origin
2017-01-25 16:16 - 2015-06-12 08:17 - 00000000 ____D C:\ProgramData\AMD
2017-01-25 16:15 - 2016-07-16 04:45 - 00000000 ____D C:\WINDOWS\INF
2017-01-25 16:13 - 2016-07-16 04:36 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-01-25 15:54 - 2015-08-22 13:23 - 00000000 ____D C:\Users\chris\AppData\Roaming\.minecraft
2017-01-25 01:29 - 2016-10-26 00:04 - 09405464 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdvlk64.dll
2017-01-25 01:29 - 2016-10-26 00:04 - 07589400 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdvlk32.dll
2017-01-25 01:29 - 2016-10-26 00:04 - 02463256 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amfrt64.dll
2017-01-25 01:29 - 2016-10-26 00:04 - 02150928 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amfrt32.dll
2017-01-25 01:29 - 2016-10-26 00:04 - 00909336 _____ (AMD) C:\WINDOWS\system32\coinst_16.40.dll
2017-01-25 01:29 - 2016-10-26 00:04 - 00768024 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdlvr64.dll
2017-01-25 01:29 - 2016-10-26 00:04 - 00643096 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdlvr32.dll
2017-01-25 01:29 - 2016-10-26 00:04 - 00476696 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atidemgy.dll
2017-01-25 01:29 - 2016-10-26 00:04 - 00420376 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiapfxx.exe
2017-01-25 01:29 - 2016-10-26 00:04 - 00310808 _____ C:\WINDOWS\system32\dgtrayicon.exe
2017-01-25 01:29 - 2016-10-26 00:04 - 00266256 _____ C:\WINDOWS\system32\amdgfxinfo64.dll
2017-01-25 01:29 - 2016-10-26 00:04 - 00248344 _____ C:\WINDOWS\system32\atieah64.exe
2017-01-25 01:29 - 2016-10-26 00:04 - 00239128 _____ C:\WINDOWS\SysWOW64\amdgfxinfo32.dll
2017-01-25 01:29 - 2016-10-26 00:04 - 00219672 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6txx.dll
2017-01-25 01:29 - 2016-10-26 00:04 - 00154648 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atisamu64.dll
2017-01-25 01:29 - 2016-10-26 00:04 - 00128536 _____ (AMD) C:\WINDOWS\system32\atimuixx.dll
2017-01-25 01:29 - 2016-10-26 00:04 - 00100888 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmcl64.dll
2017-01-25 01:29 - 2016-10-26 00:04 - 00084504 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmcl32.dll
2017-01-25 01:29 - 2016-10-26 00:04 - 00077848 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ati2erec.dll
2017-01-25 01:29 - 2016-08-12 00:07 - 00158336 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\aticfx64.dll
2017-01-25 01:29 - 2016-08-12 00:07 - 00145952 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\aticfx32.dll
2017-01-25 01:29 - 2016-08-12 00:07 - 00118800 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atidxx64.dll
2017-01-25 01:29 - 2016-08-12 00:07 - 00107544 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atidxx32.dll
2017-01-25 01:29 - 2016-08-12 00:06 - 01351192 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiadlxx.dll
2017-01-25 01:29 - 2016-08-12 00:06 - 01015832 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxy.dll
2017-01-25 01:29 - 2016-08-12 00:06 - 00541208 _____ (AMD) C:\WINDOWS\system32\atieclxx.exe
2017-01-25 01:29 - 2016-08-12 00:06 - 00305176 _____ (AMD) C:\WINDOWS\system32\atiesrxx.exe
2017-01-25 01:29 - 2016-08-12 00:06 - 00293400 _____ C:\WINDOWS\system32\GameManager64.dll
2017-01-25 01:29 - 2016-08-12 00:06 - 00287248 _____ C:\WINDOWS\system32\clinfo.exe
2017-01-25 01:29 - 2016-08-12 00:06 - 00285720 _____ C:\WINDOWS\system32\hsa-thunk64.dll
2017-01-25 01:29 - 2016-08-12 00:06 - 00258072 _____ C:\WINDOWS\SysWOW64\GameManager32.dll
2017-01-25 01:29 - 2016-08-12 00:06 - 00251416 _____ C:\WINDOWS\SysWOW64\hsa-thunk.dll
2017-01-25 01:29 - 2016-08-12 00:06 - 00226328 _____ C:\WINDOWS\SysWOW64\atieah32.exe
2017-01-25 01:29 - 2016-08-12 00:06 - 00193560 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atigktxx.dll
2017-01-25 01:29 - 2016-08-12 00:06 - 00178200 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantle64.dll
2017-01-25 01:29 - 2016-08-12 00:06 - 00153112 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mantle32.dll
2017-01-25 01:29 - 2016-08-12 00:06 - 00147480 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantleaxl64.dll
2017-01-25 01:29 - 2016-08-12 00:06 - 00135704 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atisamu32.dll
2017-01-25 01:29 - 2016-08-12 00:06 - 00126488 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mantleaxl32.dll
2017-01-25 01:29 - 2016-08-12 00:06 - 00038424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\detoured.dll
2017-01-25 01:28 - 2016-10-26 00:05 - 00488496 _____ C:\WINDOWS\system32\amdmiracast.dll
2017-01-25 01:28 - 2016-10-26 00:05 - 00162216 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdhcp64.dll
2017-01-25 01:28 - 2016-10-26 00:05 - 00145872 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdhcp32.dll
2017-01-25 01:28 - 2016-10-26 00:05 - 00145360 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdave32.dll
2017-01-25 01:28 - 2016-10-26 00:05 - 00130224 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdpcom64.dll
2017-01-25 01:28 - 2016-10-26 00:05 - 00130216 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atimpc64.dll
2017-01-25 01:28 - 2016-10-26 00:05 - 00112328 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdpcom32.dll
2017-01-25 01:28 - 2016-08-12 00:07 - 00166408 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdave64.dll
2017-01-25 01:28 - 2016-08-12 00:07 - 00112336 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atimpc32.dll
2017-01-24 19:27 - 2016-07-16 04:47 - 00000000 ___HD C:\Program Files\WindowsApps
2017-01-23 20:27 - 2015-08-02 16:01 - 00000000 ___RD C:\Users\chris\OneDrive
2017-01-23 20:26 - 2016-12-13 15:56 - 00003282 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2
2017-01-23 20:26 - 2015-08-02 16:01 - 00002404 _____ C:\Users\chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-01-23 20:23 - 2015-08-02 16:00 - 00000000 ____D C:\Users\chris.tmp\AppData\Local\Packages
2017-01-23 20:22 - 2016-08-13 20:40 - 00000000 ____D C:\Users\chris.tmp
2017-01-23 20:17 - 2015-06-05 15:20 - 00000000 __RHD C:\Users\Public\AccountPictures
2017-01-23 20:15 - 2016-08-13 20:43 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-01-23 20:13 - 2016-08-13 20:38 - 00065536 _____ C:\WINDOWS\system32\spu_storage.bin
2017-01-23 20:13 - 2016-07-15 23:04 - 01048576 _____ C:\WINDOWS\system32\config\BBI
2017-01-23 20:05 - 2016-08-13 20:40 - 00000000 ____D C:\Users\ronke_000
2017-01-23 20:04 - 2015-08-22 11:59 - 00000000 ____D C:\Users\ronke_000\.oracle_jre_usage
2017-01-23 20:00 - 2015-08-02 15:17 - 00000000 ____D C:\Users\ronke_000\AppData\Local\Comms
2017-01-23 19:56 - 2015-08-02 15:18 - 00002416 _____ C:\Users\ronke_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-01-23 19:56 - 2015-06-19 14:21 - 00000000 ___RD C:\Users\ronke_000\OneDrive
2017-01-23 19:55 - 2016-06-05 15:59 - 00000000 ____D C:\Users\ronke_000\AppData\Local\AMD
2017-01-23 19:55 - 2015-06-19 14:13 - 00000000 ____D C:\Users\ronke_000\AppData\Local\Packages
2017-01-23 19:44 - 2015-08-02 12:30 - 00000008 __RSH C:\ProgramData\ntuser.pol
2017-01-23 19:43 - 2016-07-16 04:47 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2017-01-23 19:43 - 2015-08-08 12:53 - 00000000 ____D C:\Users\chris\AppData\LocalLow\Temp
2017-01-23 19:43 - 2013-08-22 08:36 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy
2017-01-22 14:15 - 2016-04-11 15:02 - 00000000 ____D C:\Users\chris\AppData\Local\MyComGames
2017-01-21 16:25 - 2016-07-16 04:47 - 00000000 ____D C:\WINDOWS\system32\AppLocker
2017-01-21 09:51 - 2015-08-14 09:29 - 00000000 ____D C:\Users\chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2017-01-20 20:52 - 2016-07-16 04:47 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2017-01-20 11:47 - 2015-11-17 13:26 - 00001000 _____ C:\Users\Public\Desktop\STAR WARS Battlefront.lnk
2017-01-19 14:32 - 2016-05-10 11:53 - 00000000 ____D C:\tmp
2017-01-11 21:18 - 2016-07-16 04:47 - 00000000 ____D C:\WINDOWS\rescache
2017-01-10 18:27 - 2016-08-13 20:37 - 00203376 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-01-10 18:27 - 2016-07-16 04:47 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-01-10 18:27 - 2016-07-16 04:47 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2017-01-10 18:27 - 2016-07-16 04:47 - 00000000 ____D C:\WINDOWS\system32\oobe
2017-01-10 18:27 - 2016-07-16 04:47 - 00000000 ____D C:\WINDOWS\ShellExperiences
2017-01-10 18:27 - 2016-07-16 04:47 - 00000000 ____D C:\WINDOWS\Provisioning
2017-01-10 18:27 - 2016-07-16 04:47 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2017-01-10 18:27 - 2015-08-01 11:30 - 00000830 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2017-01-10 18:22 - 2015-03-19 21:08 - 00000000 ____D C:\WINDOWS\system32\MRT
2017-01-10 18:21 - 2015-03-19 21:08 - 135657872 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-01-10 02:21 - 2016-07-16 04:47 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2017-01-10 02:21 - 2016-07-16 04:47 - 00000000 ____D C:\WINDOWS\system32\Macromed
2017-01-05 20:14 - 2016-05-04 19:30 - 00563960 _____ C:\WINDOWS\system32\Drivers\EasyAntiCheat.sys
2017-01-01 13:15 - 2015-08-27 15:32 - 00000000 ____D C:\Users\chris\Documents\Mount&Blade Warband Savegames
2016-12-31 14:27 - 2016-08-13 20:40 - 00524288 ___SH C:\Users\chris.tmp\NTUSER.DAT{c279ba0a-61d8-11e6-b915-8be4a007404b}.TMContainer00000000000000000002.regtrans-ms
2016-12-29 16:47 - 2016-07-16 04:47 - 00000000 ____D C:\WINDOWS\system32\NDF
2016-12-29 16:47 - 2015-08-02 16:36 - 00000000 ____D C:\Users\chris\AppData\Local\Diagnostics
2016-12-29 16:47 - 2014-02-23 20:19 - 00251201 _____ C:\WINDOWS\DirectX.log
2016-12-29 16:42 - 2016-07-16 04:47 - 00000000 __RSD C:\WINDOWS\assembly
2016-12-28 14:16 - 2013-02-24 15:37 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-12-28 14:14 - 2014-03-02 13:52 - 00000000 ____D C:\Program Files (x86)\LucasArts

==================== Files in the root of some directories =======

2017-01-20 20:50 - 2017-01-20 20:51 - 0083992 _____ () C:\Users\chris\AppData\Roaming\Debut.dmp
2017-01-20 20:37 - 2017-01-20 20:37 - 0001167 _____ () C:\Users\chris\AppData\Roaming\trace_FilterInstaller.txt
2017-01-20 20:37 - 2017-01-20 20:37 - 0000000 _____ () C:\Users\chris\AppData\Roaming\trace_FilterInstaller.txt-CRT.txt
2014-03-02 13:50 - 2006-01-20 12:06 - 4489216 _____ () C:\ProgramData\EAW Deathstar.scr
2014-03-04 19:09 - 2006-01-20 11:20 - 1028096 _____ () C:\ProgramData\EAW Vehicles.scr

Some files in TEMP:
====================
2017-01-24 15:16 - 2017-01-24 15:16 - 0019968 _____ (Red Hat®, Inc.) C:\Users\chris\AppData\Local\Temp\jansi-64-git-Bukkit-67b2424-1788919902520079707.dll

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-01-19 22:44

==================== End of FRST.txt ============================

 

Addition log

 

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 25-01-2017 01
Ran by chris (25-01-2017 22:35:05)
Running from C:\Users\chris\Desktop
Windows 10 Pro Version 1607 (X64) (2016-08-14 03:45:20)
Boot Mode: Normal
==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-1127713466-721098113-725960913-500 - Administrator - Disabled)
chris (S-1-5-21-1127713466-721098113-725960913-1014 - Administrator - Enabled) => C:\Users\chris
DefaultAccount (S-1-5-21-1127713466-721098113-725960913-503 - Limited - Disabled)
Guest (S-1-5-21-1127713466-721098113-725960913-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1127713466-721098113-725960913-1004 - Limited - Enabled)
ronke_000 (S-1-5-21-1127713466-721098113-725960913-1006 - Administrator - Enabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 16.04 (x64) (HKLM\...\7-Zip) (Version: 16.04 - Igor Pavlov)
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Flash Player 24 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 24.0.0.194 - Adobe Systems Incorporated)
Age of Empires III (HKLM-x32\...\InstallShield_{70F8B183-99EB-4304-BA35-080E2DFFD2A3}) (Version: 1.00.0000 - Microsoft Game Studios)
Age of Empires III (x32 Version: 1.00.0000 - Microsoft Game Studios) Hidden
AMD Catalyst Install Manager (HKLM\...\{66AFB595-BC05-2913-7696-6D58F9B733E1}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
AMD Settings (HKLM\...\WUCCCApp) (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.)
ASTRONEER (HKLM\...\Steam App 361420) (Version:  - System Era Softworks)
Bandicam (HKLM-x32\...\Bandicam) (Version: 3.3.0.1175 - Bandisoft.com)
Bandisoft MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version:  - Bandisoft.com)
Banished (HKLM\...\Steam App 242920) (Version:  - Shining Rock Software LLC)
BeamNG.drive (HKLM-x32\...\Steam App 284160) (Version:  - BeamNG)
Blender 2.77 (HKLM\...\Steam App 365670) (Version:  - Blender Foundation)
Catalyst Control Center Next Localization BR (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization BR (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization BR (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization BR (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Civilization III (HKLM-x32\...\{0AD84416-63A4-4CF3-BDDF-8FA866711FB0}) (Version:  - )
Civilization: Call To Power (HKLM-x32\...\Activision_CivCTPUninstallKey) (Version:  - )
Debut Video Capture Software (HKLM-x32\...\Debut) (Version: 3.07 - NCH Software)
Elite Dangerous (HKLM-x32\...\Steam App 359320) (Version:  - Frontier Developments)
Empire Earth - The Art of Conquest (HKLM-x32\...\{B49C924C-A651-4378-94F6-5D9BF44A959F}) (Version:  - )
Empire Earth (HKLM-x32\...\{2447500B-22D7-47BD-9B13-1A927F43A267}) (Version:  - )
Empire: Total War (HKLM-x32\...\Steam App 10500) (Version:  - The Creative Assembly)
Endless Sky (HKLM-x32\...\Steam App 404410) (Version:  - Michael Zahniser)
Fractured Space (HKLM-x32\...\Steam App 310380) (Version:  - Edge Case Games Ltd.)
Gear Up (HKLM-x32\...\Steam App 214420) (Version:  - Doctor Entertainment AB)
Hearts of Iron IV (HKLM\...\Steam App 394360) (Version:  - Paradox Development Studio)
herdProtect Anti-Malware Scanner (HKLM-x32\...\herdProtectScan) (Version: 1.0 - Reason Company Software Inc.)
Homeworld Remastered Collection (HKLM\...\Steam App 244160) (Version:  - Gearbox Software)
Intel® Chipset Device Software (x32 Version: 10.0.13 - Intel® Corporation) Hidden
Intel® Network Connections 19.0.27.0 (HKLM\...\PROSetDX) (Version: 19.0.27.0 - Intel)
Intel® Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 13.1.0.1058 - Intel Corporation)
Java 8 Update 101 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)
Kerbal Space Program (HKLM-x32\...\Steam App 220200) (Version:  - Squad)
King's Quest Collection™ (HKLM-x32\...\{29BB5153-133B-4C82-AF51-BF303F2BFD63}) (Version: 1.00.0000 - Sierra)
King's Quest I: Quest for the Crown (4.1c) (HKLM-x32\...\{486CC64F-030A-4C9A-8716-87E26D28FKQ1}_is1) (Version: 4.1 - AGD Interactive, LLC)
King's Quest II: Romancing the Stones (3.1c) (HKLM-x32\...\{486CC64F-030A-4C9A-8716-87E26D28FKQ2}_is1) (Version: 3.1 - AGD Interactive, LLC)
King's Quest III Redux: To Heir is Human (1.1) (HKLM-x32\...\{486CC64F-030A-4C9A-8716-87E26D28FKQ3REDUX}_is1) (Version: 1.1 - AGD Interactive, LLC)
LAV Filters 0.63.0 (HKLM-x32\...\lavfilters_is1) (Version: 0.63.0 - Hendrik Leppkes)
Malwarebytes version 3.0.5.1299 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.0.5.1299 - Malwarebytes)
MechWarrior Online (HKLM\...\Steam App 342200) (Version:  - Piranha Games Inc.)
Microsoft Age of Empires II (HKLM-x32\...\Age of Empires 2.0) (Version:  - )
Microsoft Age of Empires II: The Conquerors Expansion (HKLM-x32\...\Age of Empires II: The Conquerors Expansion 1.0) (Version:  - )
Microsoft OneDrive (HKU\S-1-5-21-1127713466-721098113-725960913-1006-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-01232017201548408\...\OneDriveSetup.exe) (Version: 17.3.6743.1212 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1127713466-721098113-725960913-1014\...\OneDriveSetup.exe) (Version: 17.3.6743.1212 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24210 (HKLM-x32\...\{f144e08f-9cbe-4f09-9a8c-f2b858b7ee7f}) (Version: 14.0.24210.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24210 (HKLM-x32\...\{23658c02-145e-483d-ba6b-1eb82c580529}) (Version: 14.0.24210.0 - Microsoft Corporation)
Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang)
Moonbase Alpha (HKLM-x32\...\Steam App 39000) (Version:  - Virtual Heroes)
Mount & Blade: Warband (HKLM\...\Steam App 48700) (Version:  - TaleWorlds Entertainment)
Mozilla Firefox 47.0 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 47.0 (x86 en-US)) (Version: 47.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 47.0.0.5999 - Mozilla)
NVIDIA PhysX (HKLM-x32\...\{DEA314C4-0929-4250-BC92-98E4C105F28D}) (Version: 9.10.0129 - NVIDIA Corporation)
Offworld Trading Company (HKLM-x32\...\Steam App 271240) (Version:  - Mohawk Games)
Oracle VM VirtualBox 5.1.8 (HKLM\...\{65402252-5DA1-4360-A144-E09BB16AC7A9}) (Version: 5.1.8 - Oracle Corporation)
Order of War (HKLM\...\Steam App 34600) (Version:  - Wargaming.net)
Origin (HKLM-x32\...\Origin) (Version: 10.4.2.12697 - Electronic Arts, Inc.)
Outpost 2 (HKLM-x32\...\Outpost 2) (Version:  - )
PlanetSide 2 (HKLM\...\Steam App 218230) (Version:  - Daybreak Game Company)
Portal 2 (HKLM\...\Steam App 620) (Version:  - Valve)
Quest for Glory II: Trial by Fire (2.0) (HKLM-x32\...\{486CC64F-030A-4C9A-8716-87E26D28FQFG2VGA}_is1) (Version: 2.0 - AGD Interactive, LLC)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.)
Robocraft (HKLM\...\Steam App 301520) (Version:  - Freejam)
RollerCoaster Tycoon 3 (HKLM-x32\...\{907B4640-266B-4A21-92FB-CD1A86CD0F63}) (Version: 1.00.000 - )
Rome: Total War (HKLM-x32\...\Steam App 4760) (Version:  - The Creative Assembly)
Sid Meier's Civilization V (HKLM-x32\...\Steam App 8930) (Version:  - 2K Games, Inc.)
Sid Meier's Civilization V SDK (HKLM-x32\...\Steam App 16830) (Version:  - Firaxis Games)
Sid Meier's Civilization: Beyond Earth (HKLM-x32\...\Steam App 65980) (Version:  - Firaxis Games)
Sid Meier's Civilization: Beyond Earth SDK (HKLM-x32\...\Steam App 312800) (Version:  - )
Sid Meier's SimGolf (HKLM-x32\...\{8C4504A1-9280-11D5-9F7E-00902712427E}) (Version:  - )
SimCity 4 Deluxe (HKLM-x32\...\{A7A34FC9-DF24-4A36-00AD-D4EFE94CC116}) (Version:  - )
SimCity™ (HKLM-x32\...\{F70FDE4B-8F86-4eb6-8C8E-636EC89F6419}) (Version: 4.0.97.4382 - Electronic Arts)
SNOW (HKLM-x32\...\Steam App 244930) (Version:  - Poppermost Productions)
Space Engineers (HKLM-x32\...\Steam App 244850) (Version:  - Keen Software House)
Star Swarm Stress Test (HKLM-x32\...\Steam App 267130) (Version:  - Oxide Games)
Star Trek Online (HKLM\...\Steam App 9900) (Version:  - Cryptic Studios)
Star Wars Empire at War (HKLM-x32\...\{99AE7207-8612-4DBA-A8F8-BAE5C633390D}) (Version: 1.0 - LucasArts)
Star Wars Empire at War Forces of Corruption (HKLM-x32\...\{6592FDEC-2C1A-413A-9985-25FEC2F0848D}) (Version: 1.0 - LucasArts)
STAR WARS™ Battlefront™ (HKLM-x32\...\{E402D891-4E45-4ce9-B41F-DD35864EF170}) (Version: 1.0.7.64833 - Electronic Arts)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
SteamVR Performance Test (HKLM\...\Steam App 323910) (Version:  - Valve)
Supreme Commander 2 (HKLM-x32\...\Steam App 40100) (Version:  - Gas Powered Games)
The Silver Lining (HKLM-x32\...\{26ED4308-E0A5-4AE2-A1BC-7A55BC7DD32F}) (Version: 4.0.0 - Phoenix Online)
Total War: Arena (HKLM-x32\...\Steam App 227520) (Version:  - Creative Assembly)
TP-LINK TL-WN721N_TL-WN722N Driver (HKLM-x32\...\{86A7EED0-02D0-4D91-8183-8D2F23F5E6AE}) (Version: 1.3.1 - TP-LINK)
TP-LINK Wireless Configuration Utility (HKLM-x32\...\{319D91C6-3D44-436C-9F79-36C0D22372DC}) (Version: 1.3.1 - TP-LINK)
Transformers: Fall of Cybertron (HKLM\...\Steam App 213120) (Version:  - Mercenary Technologies)
Transformers: War for Cybertron (HKLM\...\Steam App 42650) (Version:  - High Moon Studios)
UE4 Prerequisites (x64) (Version: 1.0.10.0 - Epic Games, Inc.) Hidden
UE4 Prerequisites (x64) (x32 Version: 1.0.12.0 - Epic Games, Inc.) Hidden
War Thunder (HKLM-x32\...\Steam App 236390) (Version:  - Gaijin Entertainment)
War Thunder CDK 0.1 (HKLM-x32\...\{ed8deea4-29fe-1932-9612-e2122d8a62d9}}_is1) (Version:  - Gaijin Entertainment)
War Thunder Launcher 1.0.1.502 (HKLM-x32\...\{ed8deea4-29fa-3932-9612-e2122d8a62d9}}_is1) (Version:  - Gaijin Entertainment)
WinDirStat 1.1.2 (HKU\S-1-5-21-1127713466-721098113-725960913-1006-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-01232017201548408\...\WinDirStat) (Version:  - )
Zemana AntiMalware (HKLM-x32\...\{8F0CD7D1-42F3-4195-95CD-833578D45057}_is1) (Version: 2.70.576 - Zemana Ltd.)
Zero G Arena (HKLM\...\Steam App 467820) (Version:  - Jonathan Wood)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0525D4F9-96C2-4C23-A2E2-BE1F85C5ACAA} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)
Task: {10FD9049-53FE-47A0-84D6-C86502B08DDC} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\WINDOWS\System32\AutoWorkplace.exe
Task: {5D90976E-58D9-41F8-AED6-E1D773498D6F} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-01-10] (Adobe Systems Incorporated)
Task: {5FE59B87-FC36-4934-93A3-6C3170BF4128} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2017-01-10] (Microsoft Corporation)
Task: {765A0B50-E62A-494C-8B60-D6FBC5568A70} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)
Task: {EB7D9A78-76DB-4270-B258-45C3E086412C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

Shortcut: C:\Users\chris\Favorites\NCH Software Download Site.lnk -> hxxp://www.nchsoftware.com/index.htm

==================== Loaded Modules (Whitelisted) ==============

2016-07-16 04:42 - 2016-07-16 04:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-12-13 15:53 - 2016-12-09 03:29 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-12-13 15:53 - 2016-12-09 03:29 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
2017-01-21 10:20 - 2017-01-21 10:20 - 00152944 _____ () C:\Program Files (x86)\Zemana AntiMalware\ZAMShellExt64.dll
2015-06-25 16:34 - 2015-06-25 16:34 - 00014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick.2\qtquick2plugin.dll
2015-06-25 16:37 - 2015-06-25 16:37 - 00739840 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Controls\qtquickcontrolsplugin.dll
2015-06-25 16:35 - 2015-06-25 16:35 - 00014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Window.2\windowplugin.dll
2015-06-25 16:38 - 2015-06-25 16:38 - 00071168 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Layouts\qquicklayoutsplugin.dll
2016-06-30 19:12 - 2016-06-30 19:12 - 00011776 _____ () C:\Program Files\AMD\CNext\CNext\libEGL.dll
2016-06-30 19:12 - 2016-06-30 19:12 - 02013696 _____ () C:\Program Files\AMD\CNext\CNext\libGLESv2.dll
2015-03-19 15:26 - 2013-10-21 10:00 - 00847360 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe
2017-01-22 14:20 - 2017-01-22 14:20 - 00072192 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.152.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-01-22 14:20 - 2017-01-22 14:20 - 00179712 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.152.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-01-22 14:20 - 2017-01-22 14:20 - 42130432 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.152.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2016-12-14 09:40 - 2016-12-14 09:40 - 02216448 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.152.0_x64__kzf8qxf38zg5c\roottools.dll
2017-01-22 14:20 - 2017-01-22 14:20 - 00123904 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.152.0_x64__kzf8qxf38zg5c\SkypeHost.Proxies.dll
2016-12-18 15:16 - 2017-01-03 15:00 - 01798664 _____ () C:\Users\chris\AppData\Local\Gaijin\Program Files (x86)\NetAgent\gjagent.exe
2017-01-10 13:39 - 2016-12-20 23:54 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-01-10 13:39 - 2016-12-20 23:48 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-01-10 13:39 - 2016-12-20 23:48 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2017-01-10 13:39 - 2016-12-20 23:48 - 01033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2017-01-10 13:39 - 2016-12-20 23:48 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2017-01-10 13:39 - 2016-12-20 23:53 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-09-13 14:45 - 2016-09-06 21:56 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2017-01-10 13:39 - 2016-12-21 00:09 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2017-01-21 18:19 - 2017-01-21 18:19 - 13017288 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7812.42257.0_x64__8wekyb3d8bbwe\Office.UI.Xaml.Core.dll
2017-01-24 19:27 - 2017-01-24 19:27 - 00015872 _____ () C:\Program Files\WindowsApps\Microsoft.Getstarted_4.4.11.0_x64__8wekyb3d8bbwe\WhatsNew.Store.exe
2017-01-24 19:27 - 2017-01-24 19:27 - 06536192 _____ () C:\Program Files\WindowsApps\Microsoft.Getstarted_4.4.11.0_x64__8wekyb3d8bbwe\WhatsNew.Store.dll
2016-09-19 19:59 - 2017-01-23 21:53 - 00022024 _____ () D:\Origin\QtWebEngineProcess.exe
2016-11-21 17:19 - 2016-11-21 17:19 - 00155016 _____ () C:\Program Files\ATI Technologies\ATI.ACE\A4\AdaptiveSleepService.exe
2017-01-24 19:27 - 2017-01-24 19:27 - 04717568 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1701.10103.0_x64__8wekyb3d8bbwe\Time.exe
2017-01-24 19:27 - 2017-01-24 19:27 - 01091584 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1701.10103.0_x64__8wekyb3d8bbwe\TimeBackground.dll
2017-01-22 14:20 - 2017-01-22 14:20 - 00181248 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.152.0_x64__kzf8qxf38zg5c\Microsoft.Skype.ImageTool.dll
2017-01-22 14:20 - 2017-01-22 14:20 - 00040960 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.152.0_x64__kzf8qxf38zg5c\TraceProvider.dll
2016-12-14 09:40 - 2016-12-14 09:40 - 00796672 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.152.0_x64__kzf8qxf38zg5c\VideoN.dll
2016-12-03 15:58 - 2016-12-03 15:58 - 00019456 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
2016-12-03 15:58 - 2016-12-03 15:58 - 20433408 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll
2016-06-03 09:29 - 2016-06-03 09:30 - 00680448 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe\Microsoft.DesignCore.dll
2016-12-03 15:58 - 2016-12-03 15:58 - 01046528 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe\Microsoft.Sharing.dll
2016-12-03 15:58 - 2016-12-03 15:58 - 00353792 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe\Photos.Inking.dll
2016-03-03 13:04 - 2016-03-03 13:20 - 00291328 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe\StoreRatingPromotion.dll
2017-01-10 13:39 - 2016-12-20 23:47 - 00114176 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Dss.BackgroundTask.dll
2015-03-19 15:26 - 2013-06-28 13:50 - 01411072 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\nicLan.dll
2015-03-19 15:26 - 2013-06-28 13:48 - 00193024 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\DC_WFF.dll
2015-03-19 15:26 - 2013-06-28 13:48 - 00138752 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\WJWF\WJWF.dll
2015-03-19 15:26 - 2013-06-28 13:48 - 00115712 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\WJWF\WJWF_WPS_WIN7.DLL
2015-05-25 15:46 - 2016-12-23 11:28 - 00657184 _____ () D:\Steam\SDL2.dll
2015-05-25 15:46 - 2016-08-31 18:02 - 04969248 _____ () D:\Steam\v8.dll
2015-05-25 15:46 - 2017-01-18 18:30 - 02327840 _____ () D:\Steam\video.dll
2015-05-25 15:46 - 2016-08-31 18:02 - 01563936 _____ () D:\Steam\icui18n.dll
2015-05-25 15:46 - 2016-08-31 18:02 - 01195296 _____ () D:\Steam\icuuc.dll
2015-05-25 15:46 - 2016-01-27 00:49 - 02549760 _____ () D:\Steam\libavcodec-56.dll
2015-05-25 15:46 - 2016-01-27 00:49 - 00491008 _____ () D:\Steam\libavformat-56.dll
2015-05-25 15:46 - 2016-01-27 00:49 - 00332800 _____ () D:\Steam\libavresample-2.dll
2015-05-25 15:46 - 2016-01-27 00:49 - 00442880 _____ () D:\Steam\libavutil-54.dll
2015-05-25 15:46 - 2016-01-27 00:49 - 00485888 _____ () D:\Steam\libswscale-3.dll
2015-05-25 15:46 - 2017-01-18 18:30 - 00838432 _____ () D:\Steam\bin\chromehtml.DLL
2016-03-09 13:53 - 2016-07-04 15:17 - 00266560 _____ () D:\Steam\openvr_api.dll
2016-12-12 21:17 - 2017-01-04 20:12 - 68813088 _____ () D:\Steam\bin\cef\cef.win7\libcef.dll
2015-05-25 15:46 - 2017-01-18 18:30 - 00383776 _____ () D:\Steam\steam.dll
2015-05-25 15:46 - 2015-09-24 16:52 - 00119208 _____ () D:\Steam\winh264.dll
2016-09-19 19:59 - 2017-01-23 21:53 - 02493440 _____ () D:\Origin\libGLESv2.dll
2016-09-19 19:59 - 2017-01-23 21:53 - 00012288 _____ () D:\Origin\libEGL.DLL
2015-07-22 16:31 - 2016-06-12 12:05 - 00266240 _____ () D:\Origin\imageformats\qmng.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 06:25 - 2017-01-23 19:43 - 00000027 ____A C:\WINDOWS\system32\Drivers\etc\hosts

127.0.0.1       localhost

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1127713466-721098113-725960913-1006-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-01232017201548408\Control Panel\Desktop\\Wallpaper -> C:\Users\ronke_000\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
HKU\S-1-5-21-1127713466-721098113-725960913-1014\Control Panel\Desktop\\Wallpaper -> C:\Users\chris\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
DNS Servers: 10.1.5.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [vm-monitoring-nb-session] => LPort=139
FirewallRules: [{FFDC66C0-DBD2-44DF-9E49-DED9F86E147A}] => D:\Steam\steamapps\common\Zero G Arena\Sta.exe
FirewallRules: [{41F26E95-6775-4E93-AE20-7513E813E0F1}] => D:\Steam\steamapps\common\Zero G Arena\Sta.exe
FirewallRules: [UDP Query User{18D3B6EA-19AC-4D21-A5E9-E856C9FA8BFE}D:\steam\steamapps\common\zero g arena\sta\binaries\win64\sta.exe] => D:\steam\steamapps\common\zero g arena\sta\binaries\win64\sta.exe
FirewallRules: [TCP Query User{09F5B542-4D78-4841-8364-C730461657CD}D:\steam\steamapps\common\zero g arena\sta\binaries\win64\sta.exe] => D:\steam\steamapps\common\zero g arena\sta\binaries\win64\sta.exe
FirewallRules: [{60CCCE77-5C92-4F84-AF04-3646ECEA093A}] => D:\Steam\steamapps\common\Transformers Fall of Cybertron\Binaries\TFOC.exe
FirewallRules: [{25D0F209-5E29-46CD-B1D6-A41D23452A2F}] => D:\Steam\steamapps\common\Transformers Fall of Cybertron\Binaries\TFOC.exe
FirewallRules: [{C76ECC3D-2A6F-480C-B818-862B12953261}] => D:\Steam\steamapps\common\Order of War\oow_final_dx10.exe
FirewallRules: [{11C77020-4CD0-4DC3-BD36-56D4E0A226EC}] => D:\Steam\steamapps\common\Order of War\oow_final_dx10.exe
FirewallRules: [{F9E0F0C6-D1FE-4BDC-B6A9-F6C0D687F94A}] => D:\Steam\steamapps\common\Order of War\oow_report.exe
FirewallRules: [{844D7922-1F4A-4E28-81E4-E3C716164DDE}] => D:\Steam\steamapps\common\Order of War\oow_report.exe
FirewallRules: [{B5EB2C2A-CD8C-4A2A-AA48-D79751BEE9E7}] => D:\Steam\steamapps\common\Order of War\oow_final_dx9.exe
FirewallRules: [{9088F3D0-4719-44F4-B684-0ECF50F4637F}] => D:\Steam\steamapps\common\Order of War\oow_final_dx9.exe
FirewallRules: [{EBF0DAB0-8DD0-408F-90E1-5A9BEA321549}] => D:\Steam\steamapps\common\Order of War\oow_final.exe
FirewallRules: [{A6EDF67D-DCBD-494C-8599-C63781BD575B}] => D:\Steam\steamapps\common\Order of War\oow_final.exe
FirewallRules: [{B92C70B7-2046-4423-950C-F4C33DE4487F}] => D:\Steam\steamapps\common\Portal 2\portal2.exe
FirewallRules: [{A5C5B866-C86E-48F0-9248-D490EC1C69E0}] => D:\Steam\steamapps\common\Portal 2\portal2.exe
FirewallRules: [{2AEB4D89-C550-4F76-A964-9D436BE2BD46}] => D:\Steam\steamapps\common\Homeworld\HWLauncher\Launcher.exe
FirewallRules: [{4897EDDF-63FE-4F35-B99B-4199D742D22E}] => D:\Steam\steamapps\common\Homeworld\HWLauncher\Launcher.exe
FirewallRules: [{A399D83E-91BA-4053-BD64-F12F9A76C33F}] => D:\Steam\steamapps\common\Rise of Flight 2.0\bin_game\release\ROF.exe
FirewallRules: [{97A17F97-945A-4FBC-8BAA-432DA987ECB9}] => D:\Steam\steamapps\common\Rise of Flight 2.0\bin_game\release\ROF.exe
FirewallRules: [{947CAE77-C9AF-4E9B-B862-12C8EEAEC9AD}] => D:\Steam\steamapps\common\MechWarrior Online\Bin64\MWOClient.exe
FirewallRules: [{206BFF7D-BDC7-4F75-8405-49BED521B18B}] => D:\Steam\steamapps\common\MechWarrior Online\Bin64\MWOClient.exe
FirewallRules: [{09EDC6A9-7B70-47C9-86AC-09D4D910C6F1}] => D:\Steam\steamapps\common\Blender\blender.exe
FirewallRules: [{997F938A-30FC-463A-99E0-BC3E60A4E510}] => D:\Steam\steamapps\common\Blender\blender.exe
FirewallRules: [{EC0C9B18-3749-4695-B2F3-D0D507EF7376}] => D:\Steam\steamapps\common\Robocraft\Robocraft.exe
FirewallRules: [{1F28D618-28FB-4340-A8E1-F1E0101268B0}] => D:\Steam\steamapps\common\Robocraft\Robocraft.exe
FirewallRules: [{8CD1215C-14B0-4C78-88F7-CC83F6BDD022}] => D:\Steam\steamapps\common\Transformers War for Cybertron\Binaries\TWFC.exe
FirewallRules: [{BA6D8535-9DFB-4170-B931-C8E7088DCDCC}] => D:\Steam\steamapps\common\Transformers War for Cybertron\Binaries\TWFC.exe
FirewallRules: [{8C8D2F2B-6C82-48A6-A94F-177BC4922A28}] => D:\Steam\steamapps\common\Transformers War for Cybertron\Binaries\TWFC.exe
FirewallRules: [{F80BF5D3-27ED-4154-AF76-81A308E8B233}] => D:\Steam\steamapps\common\Kerbal Space Program\KSP_x64.exe
FirewallRules: [{87D15C39-AFC2-4F16-9C0F-AEAC67E9E89B}] => D:\Steam\steamapps\common\Kerbal Space Program\KSP_x64.exe
FirewallRules: [UDP Query User{64A575C7-C9BA-496C-980A-A717B0CAD806}D:\mygames\armored warfare mycom\bin64\armoredwarfare.exe] => D:\mygames\armored warfare mycom\bin64\armoredwarfare.exe
FirewallRules: [TCP Query User{49CC8805-C9FE-4A8F-B09E-9B43E1216240}D:\mygames\armored warfare mycom\bin64\armoredwarfare.exe] => D:\mygames\armored warfare mycom\bin64\armoredwarfare.exe
FirewallRules: [UDP Query User{69E93E6D-72F2-4FB5-9FFE-C59BD1A74586}C:\users\chris\appdata\local\mycomgames\mycomgames.exe] => C:\users\chris\appdata\local\mycomgames\mycomgames.exe
FirewallRules: [TCP Query User{54CD4969-53D6-4EF3-B31E-912F876B7E72}C:\users\chris\appdata\local\mycomgames\mycomgames.exe] => C:\users\chris\appdata\local\mycomgames\mycomgames.exe
FirewallRules: [{BB711D95-8DC6-410D-B264-79727ED0DE7A}] => D:\Program Files (x86)\Origin Games\STAR WARS Battlefront\starwarsbattlefront.exe
FirewallRules: [{B349D886-E725-4F1D-BCEB-334B5DCA25EA}] => D:\Program Files (x86)\Origin Games\STAR WARS Battlefront\starwarsbattlefront.exe
FirewallRules: [{6BC54F8B-1DE5-4F66-99C5-037BBB922391}] => D:\Steam\steamapps\common\Elite Dangerous\EDLaunch.exe
FirewallRules: [{803508BD-E5D3-4ADA-9710-817D5A39CD99}] => D:\Steam\steamapps\common\Elite Dangerous\EDLaunch.exe
FirewallRules: [{38013245-E0E4-4375-9510-8C5AFAB10812}] => LPort=25565
FirewallRules: [{594B095B-EBDB-4835-8287-638B2A5B00F1}] => LPort=25565
FirewallRules: [UDP Query User{232E7547-9FA5-4FFA-ADF2-0E8A16E36161}C:\program files (x86)\java\jre1.8.0_60\bin\javaw.exe] => C:\program files (x86)\java\jre1.8.0_60\bin\javaw.exe
FirewallRules: [TCP Query User{6E6E8A58-7097-4569-9A40-48092D17DAB2}C:\program files (x86)\java\jre1.8.0_60\bin\javaw.exe] => C:\program files (x86)\java\jre1.8.0_60\bin\javaw.exe
FirewallRules: [{3C355F1A-D88C-4E61-BEB2-0EBB79FF5E98}] => D:\Steam\steamapps\common\Total War Arena\launcher\launcher.exe
FirewallRules: [{0E7DEBDA-B481-4469-8A14-81207564184D}] => D:\Steam\steamapps\common\Total War Arena\launcher\launcher.exe
FirewallRules: [{8CFCA6C3-E460-489F-8EA5-118F55201D7F}] => D:\Steam\steamapps\common\Kerbal Space Program\KSP.exe
FirewallRules: [{4BE2FAC9-493B-430D-AF80-2727A59B7F93}] => D:\Steam\steamapps\common\Kerbal Space Program\KSP.exe
FirewallRules: [UDP Query User{429EDCFC-4953-407E-A936-599B7A235F4C}D:\steam\steamapps\common\beamng.drive\bin64\beamng.drive.x64.exe] => D:\steam\steamapps\common\beamng.drive\bin64\beamng.drive.x64.exe
FirewallRules: [TCP Query User{AEAC5566-B76A-4210-BCAA-6345A96E4FE3}D:\steam\steamapps\common\beamng.drive\bin64\beamng.drive.x64.exe] => D:\steam\steamapps\common\beamng.drive\bin64\beamng.drive.x64.exe
FirewallRules: [{AAD18D51-1FF3-45B8-AA19-D0A905778BB5}] => D:\Steam\steamapps\common\BeamNG.drive\BeamNG.drive.exe
FirewallRules: [{233E39E8-CBBD-46B0-AE6F-BAD76BD935F2}] => D:\Steam\steamapps\common\BeamNG.drive\BeamNG.drive.exe
FirewallRules: [{C231F817-3844-4C80-846D-636F57BA5CB4}] => D:\Steam\steamapps\common\Star Swarm Benchmark\StarSwarmLauncher.exe
FirewallRules: [{22D9F7AF-A460-42A9-BC67-55EBA5257A2F}] => D:\Steam\steamapps\common\Star Swarm Benchmark\StarSwarmLauncher.exe
FirewallRules: [{A0EF8CD1-6BB1-40C1-B7AD-66772A5C5372}] => D:\Steam\steamapps\common\Supreme Commander 2\bin\SupremeCommander2.exe
FirewallRules: [{1EEE0197-E12E-467E-B23A-CF12C22321C6}] => D:\Steam\steamapps\common\Supreme Commander 2\bin\SupremeCommander2.exe
FirewallRules: [UDP Query User{082E727B-D630-4548-851E-0E84D5B90B92}D:\steam\steamapps\common\space\spacegame\binaries\win64\spserver.exe] => D:\steam\steamapps\common\space\spacegame\binaries\win64\spserver.exe
FirewallRules: [TCP Query User{8259E063-4B22-475C-8934-1C50A06A7CE3}D:\steam\steamapps\common\space\spacegame\binaries\win64\spserver.exe] => D:\steam\steamapps\common\space\spacegame\binaries\win64\spserver.exe
FirewallRules: [{07AA8A0A-A2CF-437F-8B1C-FC902E585A68}] => D:\Steam\steamapps\common\Offworld Trading Company\Offworld.exe
FirewallRules: [{E7024120-6642-481C-8EAB-8A8E5B727076}] => D:\Steam\steamapps\common\Offworld Trading Company\Offworld.exe
FirewallRules: [{669815FB-2935-4219-B0D4-0ECE3588EF90}] => D:\Steam\steamapps\common\Sid Meier's Civilization Beyond Earth\CivilizationBE_Mantle.exe
FirewallRules: [{64105C96-4330-4CD4-9C4A-11BC547A5FCB}] => D:\Steam\steamapps\common\Sid Meier's Civilization Beyond Earth\CivilizationBE_Mantle.exe
FirewallRules: [{7E46632F-6AEE-4EA8-AF09-0DD29B2675C4}] => D:\Steam\steamapps\common\Sid Meier's Civilization Beyond Earth\CivilizationBE_DX11.exe
FirewallRules: [{086F4855-9B82-4A11-A0C1-2AC6A91C65C4}] => D:\Steam\steamapps\common\Sid Meier's Civilization Beyond Earth\CivilizationBE_DX11.exe
FirewallRules: [UDP Query User{BA8E3C38-D77C-4806-8D02-4FA211D817DC}D:\steam\steamapps\common\war thunder\win64\aces.exe] => D:\steam\steamapps\common\war thunder\win64\aces.exe
FirewallRules: [TCP Query User{C2D074FA-063E-4D47-9AAA-B78A57C551C0}D:\steam\steamapps\common\war thunder\win64\aces.exe] => D:\steam\steamapps\common\war thunder\win64\aces.exe
FirewallRules: [UDP Query User{E55D6E36-1D21-43E6-835D-5A17C7154169}C:\users\boys\appdata\roaming\gameranger\gameranger\gameranger.exe] => C:\users\boys\appdata\roaming\gameranger\gameranger\gameranger.exe
FirewallRules: [TCP Query User{5F7DF6DC-A214-4BA5-AEF4-93C95E036AE1}C:\users\boys\appdata\roaming\gameranger\gameranger\gameranger.exe] => C:\users\boys\appdata\roaming\gameranger\gameranger\gameranger.exe
FirewallRules: [{1AFC2627-6156-4AD2-A383-86A2FABF6A29}] => D:\Steam\steamapps\common\Sid Meier's Civilization V SDK\Sid Meier's Civilization V SDK.exe
FirewallRules: [{410BE202-E56C-4552-BFB3-05112FFCB61B}] => D:\Steam\steamapps\common\Sid Meier's Civilization V SDK\Sid Meier's Civilization V SDK.exe
FirewallRules: [UDP Query User{B7AC8D79-C8F9-4980-B64C-A3AE99B58C80}D:\steam\steamapps\common\war thunder\aces.exe] => D:\steam\steamapps\common\war thunder\aces.exe
FirewallRules: [TCP Query User{F9EA9EFF-C91E-4CE8-A698-45DDDA53E615}D:\steam\steamapps\common\war thunder\aces.exe] => D:\steam\steamapps\common\war thunder\aces.exe
FirewallRules: [{67B829C4-FAE0-489B-97D4-367A79BAE9D9}] => D:\Steam\steamapps\common\War Thunder\launcher.exe
FirewallRules: [{18E112B2-B5F6-4769-BCD6-26D45F957E1C}] => D:\Steam\steamapps\common\War Thunder\launcher.exe
FirewallRules: [{5E9A4BEF-562A-4C2F-A5E1-4E87C779B6E4}] => D:\Steam\steamapps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [{22EC0E6D-D982-4821-B69A-A3001CCB28A4}] => D:\Steam\steamapps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [{A11B0C44-A144-42AC-8186-58C7EABDDFE4}] => D:\Steam\steamapps\common\GearUp\bin\Traktor.Amalgam.App.exe
FirewallRules: [{6E8D5DCA-A4C3-42AA-9D3F-5F72F9978FD9}] => D:\Steam\steamapps\common\GearUp\bin\Traktor.Amalgam.App.exe
FirewallRules: [{394E9BD0-D3DF-4A54-AFF2-5D0A6EC1BD3A}] => D:\Steam\steamapps\common\SpaceEngineers\Bin64\SpaceEngineers.exe
FirewallRules: [{0CF6BDF7-88E1-4FA3-A9AD-B902343D54A8}] => D:\Steam\steamapps\common\SpaceEngineers\Bin64\SpaceEngineers.exe
FirewallRules: [UDP Query User{CF475F89-60CF-4C99-A3E6-108E8667E58E}C:\program files (x86)\lucasarts\star wars battlefront ii\gamedata\battlefrontii.exe] => C:\program files (x86)\lucasarts\star wars battlefront ii\gamedata\battlefrontii.exe
FirewallRules: [TCP Query User{4262A477-8822-4D43-907C-97C2D3F080DA}C:\program files (x86)\lucasarts\star wars battlefront ii\gamedata\battlefrontii.exe] => C:\program files (x86)\lucasarts\star wars battlefront ii\gamedata\battlefrontii.exe
FirewallRules: [UDP Query User{5C838933-7BE4-4225-B4E9-799D5B0B15A7}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [TCP Query User{9F8DA947-5BD7-4BB9-9DC2-08CFC489A7C6}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{7CA6A49C-3394-4513-AD84-90C97B3DDF10}] => LPort=5986
FirewallRules: [UDP Query User{85D80EAA-28CD-490C-8C5F-FF96A4EBECDA}D:\sierra\empire earth - the art of conquest\ee-aoc.exe] => D:\sierra\empire earth - the art of conquest\ee-aoc.exe
FirewallRules: [TCP Query User{3392712F-290E-443E-954C-B2F008AF493F}D:\sierra\empire earth - the art of conquest\ee-aoc.exe] => D:\sierra\empire earth - the art of conquest\ee-aoc.exe
FirewallRules: [UDP Query User{71AB9283-9924-46F3-90DB-DFF2ED482D79}D:\sierra\empire earth\empire earth.exe] => D:\sierra\empire earth\empire earth.exe
FirewallRules: [TCP Query User{DBF4E498-79BB-4139-B726-467F266C6A74}D:\sierra\empire earth\empire earth.exe] => D:\sierra\empire earth\empire earth.exe
FirewallRules: [{491F0601-CBA4-41C9-836A-E7719CF20ACD}] => D:\Steam\steamapps\common\Rome Total War Gold\RomeTW-BI.exe
FirewallRules: [{B0299828-1FCA-45BA-8CA0-CC9FC6F44866}] => D:\Steam\steamapps\common\Rome Total War Gold\RomeTW-BI.exe
FirewallRules: [{37E3E02B-3E00-43E7-8576-D934978F3D56}] => D:\Steam\steamapps\common\Rome Total War Gold\RomeTW.exe
FirewallRules: [{0B06EA95-9871-43EB-9E1E-A030AAB4E577}] => D:\Steam\steamapps\common\Rome Total War Gold\RomeTW.exe
FirewallRules: [{E0E6C8FF-534D-4300-9115-8FCA5A35632B}] => D:\Steam\steamapps\common\Empire Total War\Empire.exe
FirewallRules: [{EFF2C91D-F7A0-4903-B061-156B47F5C7F5}] => D:\Steam\steamapps\common\Empire Total War\Empire.exe
FirewallRules: [{C5DC92D6-9CF5-4690-BD4F-A082FB6967DE}] => D:\Steam\bin\steamwebhelper.exe
FirewallRules: [{5765DF7C-C1CE-424F-9935-1990037591FD}] => D:\Steam\bin\steamwebhelper.exe
FirewallRules: [{98E36C3A-040A-4665-9EB7-67A56409527E}] => D:\Steam\Steam.exe
FirewallRules: [{5662B527-816A-4822-9A63-589E2C6AC186}] => D:\Steam\Steam.exe
FirewallRules: [{312A6B27-E8A4-4473-8BDE-BF72210FC20B}] => C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{ADC7D884-D158-4F96-8BAA-2D93DAC46C52}] => C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [UDP Query User{A76DB7A0-7873-4E84-9570-34864B133C0B}C:\program files (x86)\lucasarts\star wars empire at war\gamedata\sweaw.exe] => C:\program files (x86)\lucasarts\star wars empire at war\gamedata\sweaw.exe
FirewallRules: [TCP Query User{57BC8D14-22A2-473E-93BE-373B0A471522}C:\program files (x86)\lucasarts\star wars empire at war\gamedata\sweaw.exe] => C:\program files (x86)\lucasarts\star wars empire at war\gamedata\sweaw.exe
FirewallRules: [UDP Query User{EA05A334-9E5E-4896-AE31-D3C849937F85}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [TCP Query User{B5C8329A-0FE0-45E2-A082-9FC059116BCA}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{EC19FA11-E49F-4524-BC02-F52A084DC7A4}C:\program files (x86)\microsoft games\age of empires iii\age3.exe] => C:\program files (x86)\microsoft games\age of empires iii\age3.exe
FirewallRules: [TCP Query User{8CD7A764-2F1A-4C37-8A4D-8BAC418BB9C0}C:\program files (x86)\microsoft games\age of empires iii\age3.exe] => C:\program files (x86)\microsoft games\age of empires iii\age3.exe
FirewallRules: [UDP Query User{D17D17AA-3E16-4A0D-ABF5-31275560FA20}C:\warthunder\launcher.exe] => C:\warthunder\launcher.exe
FirewallRules: [TCP Query User{B9BCE46B-EED0-404B-9DAF-F2FF69185DD4}C:\warthunder\launcher.exe] => C:\warthunder\launcher.exe
FirewallRules: [UDP Query User{2CB64064-8A17-4BEE-83CA-712D3DFFF5BF}C:\warthunder\aces.exe] => C:\warthunder\aces.exe
FirewallRules: [TCP Query User{A1C940BC-1E62-40EC-8A30-084551E050E7}C:\warthunder\aces.exe] => C:\warthunder\aces.exe
FirewallRules: [{DE5EB669-90BD-4025-A592-F61C9E777D1C}] => C:\Program Files (x86)\Microsoft Games\Age of Empires III\age3.exe
FirewallRules: [{238EE600-BBA1-4C5F-9440-847FCC5A2210}] => C:\Program Files (x86)\Microsoft Games\Age of Empires III\age3.exe
FirewallRules: [TCP Query User{648AE4B4-4FF3-45BA-A75A-0E87567D6474}C:\program files (x86)\taldren\starfleet command ii - demo\starfleet2.exe] => C:\program files (x86)\taldren\starfleet command ii - demo\starfleet2.exe
FirewallRules: [UDP Query User{D147F28B-30AF-4DE4-B146-7AE4B1305C7C}C:\program files (x86)\taldren\starfleet command ii - demo\starfleet2.exe] => C:\program files (x86)\taldren\starfleet command ii - demo\starfleet2.exe
FirewallRules: [TCP Query User{C8F29648-F857-4484-AC17-3DE468D60018}C:\windows\syswow64\dplaysvr.exe] => C:\windows\syswow64\dplaysvr.exe
FirewallRules: [UDP Query User{B14AB546-38D9-4339-AD85-D5C308523669}C:\windows\syswow64\dplaysvr.exe] => C:\windows\syswow64\dplaysvr.exe
FirewallRules: [TCP Query User{7F34DE4E-2A71-44A6-B024-548EBCFDB798}C:\games\interplay\starfleet command demo\starfleetdemo.exe] => C:\games\interplay\starfleet command demo\starfleetdemo.exe
FirewallRules: [UDP Query User{DD61A032-6BCD-45C4-98C1-7850A71DBD3B}C:\games\interplay\starfleet command demo\starfleetdemo.exe] => C:\games\interplay\starfleet command demo\starfleetdemo.exe
FirewallRules: [TCP Query User{6E177D92-C8CB-45E7-AB7B-AC25882B889F}C:\program files (x86)\microsoft games\age of empires ii\age2_x1\age2_x1.icd] => C:\program files (x86)\microsoft games\age of empires ii\age2_x1\age2_x1.icd
FirewallRules: [UDP Query User{6CF1CEF5-F0A9-4273-A979-E6A2F53A6F8D}C:\program files (x86)\microsoft games\age of empires ii\age2_x1\age2_x1.icd] => C:\program files (x86)\microsoft games\age of empires ii\age2_x1\age2_x1.icd
FirewallRules: [TCP Query User{DE57A7B1-00EC-4E0E-897E-A65D622375BC}C:\program files (x86)\microsoft games\age of empires ii\empires2.icd] => C:\program files (x86)\microsoft games\age of empires ii\empires2.icd
FirewallRules: [UDP Query User{D33803F0-605C-4895-8FE6-8896842F6330}C:\program files (x86)\microsoft games\age of empires ii\empires2.icd] => C:\program files (x86)\microsoft games\age of empires ii\empires2.icd
FirewallRules: [{E3D48E58-88D2-42CF-A583-BC20C4D1EF18}] => C:\Program Files (x86)\LucasArts\Star Wars Empire at War\GameData\sweaw.exe
FirewallRules: [{C40B6F34-4A0B-4B3C-8A5D-F8708B9933F2}] => C:\Program Files (x86)\LucasArts\Star Wars Empire at War\GameData\sweaw.exe
FirewallRules: [{115E15F9-969E-44CF-B213-2AA9CCE03160}] => C:\WarThunder\launcher.exe
FirewallRules: [{947B9C11-1ED9-447E-931B-6C4D78A82DFD}] => C:\WarThunder\launcher.exe
FirewallRules: [{79FE634B-3FF7-4EAD-82F3-D8D0CBE2A910}] => C:\WarThunder\bpreport.exe
FirewallRules: [{4D162E9D-D2F7-4381-896B-0A603B324FF9}] => C:\WarThunder\bpreport.exe
FirewallRules: [{0A7E2EA3-8BBF-4824-853C-E4A39EE5ABE2}] => LPort=80
FirewallRules: [{649C3AE5-BE0D-4F31-80E3-75F558F50ABB}] => LPort=443
FirewallRules: [{BCE888CE-B716-4CB2-B0D3-39474ADF9CD7}] => LPort=20010
FirewallRules: [{199207F2-97B4-4F22-8638-90501A660201}] => LPort=3478
FirewallRules: [{CF1BB3CF-3A3C-4BE7-B1CB-749E7E0A7473}] => LPort=7850
FirewallRules: [{BA471F21-A415-4CE6-AABB-59B2CF612CB2}] => LPort=7852
FirewallRules: [{B66D1A34-D396-48F3-A9FA-310D47F4F334}] => LPort=7853
FirewallRules: [{09F874C4-DFD4-4F28-A2E6-2BFBF339E87F}] => LPort=27022
FirewallRules: [{08CB1F7F-0B65-4088-BCF9-770E10B9FA68}] => LPort=6881
FirewallRules: [{BAD66533-9CCF-49B7-AD37-820EF079821E}] => LPort=33333
FirewallRules: [{182849F8-CDEF-4F1B-A39D-D3B2D07071E7}] => LPort=20443
FirewallRules: [{5C9EE404-EFCF-4966-B602-AD5C9F23919A}] => LPort=8090
FirewallRules: [{52D9F2B4-3F14-44A7-BE3F-68A8FEF6B5DB}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{82347A25-0C75-4F63-8B70-5FB4CCA0D78B}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [TCP Query User{D685599B-1DA0-4755-B4ED-2822C2F6929A}C:\warthunder\aces.exe] => C:\warthunder\aces.exe
FirewallRules: [UDP Query User{87CD3D8C-CF82-4C31-A115-FD42A263AD56}C:\warthunder\aces.exe] => C:\warthunder\aces.exe
FirewallRules: [{8A9823BA-CFB9-4CD4-90C1-5CE204FF9654}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{54FC0125-297A-4A12-993C-D3039A0106A2}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{230F1E0F-6D81-4CF3-831C-EA84F7BA3A02}C:\program files (x86)\mozilla firefox\firefox.exe] => C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{B2FC3808-BC4D-49E1-9254-DFDDDA6117F8}C:\program files (x86)\mozilla firefox\firefox.exe] => C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [TCP Query User{CAFBC441-7F78-405A-9BFF-C3243D01FF68}C:\users\chris\appdata\roaming\gameranger\gameranger\gameranger.exe] => C:\users\chris\appdata\roaming\gameranger\gameranger\gameranger.exe
FirewallRules: [UDP Query User{2ECEB0C7-3D36-4C7C-981C-69D4E6011AB4}C:\users\chris\appdata\roaming\gameranger\gameranger\gameranger.exe] => C:\users\chris\appdata\roaming\gameranger\gameranger\gameranger.exe
FirewallRules: [{15319CD5-5A93-4E6E-B9BC-C027C28A613A}] => D:\Steam\steamapps\common\Sid Meier's Civilization Beyond Earth SDK\Sid Meier's Civilization Beyond Earth SDK.exe
FirewallRules: [{46D7E00B-8858-4CFD-90A8-44A08B9A1579}] => D:\Steam\steamapps\common\Sid Meier's Civilization Beyond Earth SDK\Sid Meier's Civilization Beyond Earth SDK.exe
FirewallRules: [TCP Query User{666DF764-3665-4C83-8A55-094461BC6F99}C:\games\world_of_warships\wowslauncher.exe] => C:\games\world_of_warships\wowslauncher.exe
FirewallRules: [UDP Query User{D7956348-E78C-4144-80BA-5C28A2F92743}C:\games\world_of_warships\wowslauncher.exe] => C:\games\world_of_warships\wowslauncher.exe
FirewallRules: [TCP Query User{70B7B034-5A4F-45B1-A4CC-75A01DF1AB74}D:\games\world_of_warships\wowslauncher.exe] => D:\games\world_of_warships\wowslauncher.exe
FirewallRules: [UDP Query User{D2424CDD-9C0C-416B-9580-9EBED1EC1D0D}D:\games\world_of_warships\wowslauncher.exe] => D:\games\world_of_warships\wowslauncher.exe
FirewallRules: [TCP Query User{C2D4DB85-27A2-4D1B-8934-E4AC8398C330}D:\sierra\empire earth\empire earth.exe] => D:\sierra\empire earth\empire earth.exe
FirewallRules: [UDP Query User{A9EBE749-7826-4289-9927-60856E309608}D:\sierra\empire earth\empire earth.exe] => D:\sierra\empire earth\empire earth.exe
FirewallRules: [{12DD341D-BCFB-4F1D-9E6E-3224F6DCD721}] => D:\Steam\steamapps\common\Moon Base Alpha\Binaries\Win32\MoonBaseAlphaGame.exe
FirewallRules: [{69FFF643-2727-40C8-A91F-0604F7A25599}] => D:\Steam\steamapps\common\Moon Base Alpha\Binaries\Win32\MoonBaseAlphaGame.exe
FirewallRules: [TCP Query User{56D741F4-1204-4A0D-8175-3EE0B1705F4E}D:\steam\steamapps\common\war thunder\win64\aces64.exe] => D:\steam\steamapps\common\war thunder\win64\aces64.exe
FirewallRules: [UDP Query User{3111022F-6666-424D-AF4F-CE72B5F44D3F}D:\steam\steamapps\common\war thunder\win64\aces64.exe] => D:\steam\steamapps\common\war thunder\win64\aces64.exe
FirewallRules: [{01289BDC-FAF5-4FFC-ACB5-D052FB360D91}] => D:\Steam\steamapps\common\Endless Sky\EndlessSky.exe
FirewallRules: [{B0E44A31-4ABE-4B14-9DAE-D37FF18E7081}] => D:\Steam\steamapps\common\Endless Sky\EndlessSky.exe
FirewallRules: [{601F907E-DCC3-446A-82FA-DF4F149CA0B6}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{42ACC533-C871-4C55-84C2-46E264FD5EEA}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{BB64C09D-BF03-4C22-AFAA-4E848DEA1F3C}D:\steam\steamapps\common\total war arena\arena.exe] => D:\steam\steamapps\common\total war arena\arena.exe
FirewallRules: [UDP Query User{C9DEE80F-4300-44BA-8CC9-A9B2CC5DA374}D:\steam\steamapps\common\total war arena\arena.exe] => D:\steam\steamapps\common\total war arena\arena.exe
FirewallRules: [{8D7440B9-6728-46F8-B00D-8F4B50D19151}] => D:\Steam\steamapps\common\SteamVRPerformanceTest\bin\win64\vr.exe
FirewallRules: [{BB30C447-0473-4150-8582-17FE303049A4}] => D:\Steam\steamapps\common\SteamVRPerformanceTest\bin\win64\vr.exe
FirewallRules: [{A38633CD-7AA1-4E56-BB03-63122FD54E61}] => D:\Steam\steamapps\common\PlanetSide 2\LaunchPad.exe
FirewallRules: [{909C3999-1DCD-4315-AEAC-5990B91CF697}] => D:\Steam\steamapps\common\PlanetSide 2\LaunchPad.exe
FirewallRules: [TCP Query User{84C10E36-68C3-4263-9B7B-5339B173B06F}D:\steam\steamapps\common\planetside 2\planetside2_x64.exe] => D:\steam\steamapps\common\planetside 2\planetside2_x64.exe
FirewallRules: [UDP Query User{72BDDB71-A070-4CC3-A32E-D47CB4A48B24}D:\steam\steamapps\common\planetside 2\planetside2_x64.exe] => D:\steam\steamapps\common\planetside 2\planetside2_x64.exe
FirewallRules: [{2BB661F8-600F-4E7D-9805-C61CFC294161}] => D:\Steam\steamapps\common\Star Trek Online\Star Trek Online.exe
FirewallRules: [{B18DF86E-FD33-4298-9850-1FCE5521FC5B}] => D:\Steam\steamapps\common\Star Trek Online\Star Trek Online.exe
FirewallRules: [TCP Query User{7AB8B750-A73B-45DD-A973-8A09086676B4}D:\steam\steamapps\common\star trek online\star trek online\live\gameclient.exe] => D:\steam\steamapps\common\star trek online\star trek online\live\gameclient.exe
FirewallRules: [UDP Query User{B2F80BD1-7736-447A-A84D-8EE81A5355E2}D:\steam\steamapps\common\star trek online\star trek online\live\gameclient.exe] => D:\steam\steamapps\common\star trek online\star trek online\live\gameclient.exe
FirewallRules: [{7712FF3A-AC08-47E0-B279-C8F85F79AC82}] => D:\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{486F8E25-5A93-4C46-A3EB-D9362561FF48}] => D:\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{2859A3D9-4E6F-4506-983C-930FF78661D9}] => D:\Steam\steamapps\common\SNOW\Bin64\playSNOW.exe
FirewallRules: [{A86C6B0E-66D7-4950-A2EA-CF5C76A23D9C}] => D:\Steam\steamapps\common\SNOW\Bin64\playSNOW.exe
FirewallRules: [{66C54C76-0A52-4F90-AE06-277E519AC493}] => D:\Program Files (x86)\Origin Games\SimCity\SimCity\SimCity.exe
FirewallRules: [{24068677-90F2-40AC-B361-6365F6DDE3FD}] => D:\Program Files (x86)\Origin Games\SimCity\SimCity\SimCity.exe
FirewallRules: [{13300C16-BD63-463E-91AA-B6B2E9822109}] => D:\Steam\steamapps\common\Offworld Trading Company\StardockLauncher.exe
FirewallRules: [{9C117448-F698-48A6-AAAB-E90D61DA5001}] => D:\Steam\steamapps\common\Offworld Trading Company\StardockLauncher.exe
FirewallRules: [{5BA2803C-366C-4126-A68F-C81C76A25611}] => D:\Steam\steamapps\common\ASTRONEER Early Access\Astro.exe
FirewallRules: [{164C0306-015B-40E4-998A-B15BDEF5AEBF}] => D:\Steam\steamapps\common\ASTRONEER Early Access\Astro.exe
FirewallRules: [TCP Query User{94A5A5C9-F28F-4AAC-8AC2-07130352F6F8}D:\steam\steamapps\common\astroneer early access\astro\binaries\win64\astro-win64-shipping.exe] => D:\steam\steamapps\common\astroneer early access\astro\binaries\win64\astro-win64-shipping.exe
FirewallRules: [UDP Query User{58FF30EE-EE2C-463F-90BE-9733681A3BFA}D:\steam\steamapps\common\astroneer early access\astro\binaries\win64\astro-win64-shipping.exe] => D:\steam\steamapps\common\astroneer early access\astro\binaries\win64\astro-win64-shipping.exe
FirewallRules: [{55C9D716-4EE3-4FC4-8129-413B0C500DCA}] => D:\Games\New folder\swfoc.exe
FirewallRules: [{1877E2A3-D887-4568-B3F3-A5DB6815506C}] => D:\Games\New folder\swfoc.exe
FirewallRules: [{B0E90BCB-FF2A-4B5E-A3DC-527014491BE2}] => D:\Steam\steamapps\common\Hearts of Iron IV\hoi4.exe
FirewallRules: [{AEFA8530-6429-4981-B66D-1B90146A828B}] => D:\Steam\steamapps\common\Hearts of Iron IV\hoi4.exe
FirewallRules: [TCP Query User{60E2FB98-60D9-47E4-8181-8FDC84D287C4}D:\steam\steamapps\common\battlestations pacific\bsp.exe] => D:\steam\steamapps\common\battlestations pacific\bsp.exe
FirewallRules: [UDP Query User{96579F5E-0E4F-4E8B-B17C-095E75D3FD09}D:\steam\steamapps\common\battlestations pacific\bsp.exe] => D:\steam\steamapps\common\battlestations pacific\bsp.exe
FirewallRules: [{4B0D8474-D7C9-485F-99D3-7A88ECE94B26}] => D:\Steam\steamapps\common\Banished\Application-steam-x64.exe
FirewallRules: [{45BD6747-D18C-4E9B-943C-59270E40E16A}] => D:\Steam\steamapps\common\Banished\Application-steam-x64.exe
FirewallRules: [{F933A18B-9C81-4030-87E4-2144AD7BF4A4}] => D:\Steam\steamapps\common\MountBlade Warband\mb_warband.exe
FirewallRules: [{5CBFB972-7BE5-485A-9728-9FC4E5172FF8}] => D:\Steam\steamapps\common\MountBlade Warband\mb_warband.exe
FirewallRules: [{4D5089B3-632C-4165-8129-8460F30CCA18}] => D:\Steam\steamapps\common\Space\spacegame\Binaries\Win64\Fractured Space.exe
FirewallRules: [{A7C56A43-9D6C-4301-BFFD-18A36E9F4CE9}] => D:\Steam\steamapps\common\Space\spacegame\Binaries\Win64\Fractured Space.exe

==================== Restore Points =========================

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:
==================
Error: (01/25/2017 09:12:20 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: Microsoft.Photos.exe, version: 1.0.1611.18000, time stamp: 0x582f93e9
Faulting module name: twinapi.appcore.dll, version: 10.0.14393.206, time stamp: 0x57daca78
Exception code: 0xc000027b
Fault offset: 0x000000000006d1c4
Faulting process id: 0x69fc
Faulting application start time: 0x01d276dbfad45d0d
Faulting application path: C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
Faulting module path: C:\WINDOWS\SYSTEM32\twinapi.appcore.dll
Report Id: 37ed64f8-f701-44e8-8953-eac50470d877
Faulting package full name: Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe
Faulting package-relative application ID: App

Error: (01/25/2017 08:14:44 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program javaw.exe version 8.0.25.18 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.

Process ID: 7a2c

Start Time: 01d2775ddfae8308

Termination Time: 2

Application Path: C:\Program Files (x86)\Minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe

Report Id: 92ea92c0-e375-11e6-bf87-e8de27a177c0

Faulting package full name:

Faulting package-relative application ID:

Error: (01/25/2017 04:16:59 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft Link-Layer Discovery Protocol.

System Error:
Access is denied.
.

Error: (01/25/2017 04:16:57 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volume Shadow Copy Service error: Unexpected error calling routine ConvertStringSidToSid(S-1-5-21-1127713466-721098113-725960913-1006.bak).  hr = 0x80070539, The security ID structure is invalid.
.

Operation:
   OnIdentify event
   Gathering Writer Data

Context:
   Execution Context: Shadow Copy Optimization Writer
   Writer Class Id: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
   Writer Name: Shadow Copy Optimization Writer
   Writer Instance ID: {d16cf516-7169-406f-90ed-8dc99519a587}

Error: (01/25/2017 04:16:38 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft Link-Layer Discovery Protocol.

System Error:
Access is denied.
.

Error: (01/25/2017 04:16:36 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volume Shadow Copy Service error: Unexpected error calling routine ConvertStringSidToSid(S-1-5-21-1127713466-721098113-725960913-1006.bak).  hr = 0x80070539, The security ID structure is invalid.
.

Operation:
   OnIdentify event
   Gathering Writer Data

Context:
   Execution Context: Shadow Copy Optimization Writer
   Writer Class Id: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
   Writer Name: Shadow Copy Optimization Writer
   Writer Instance ID: {d16cf516-7169-406f-90ed-8dc99519a587}

Error: (01/25/2017 04:16:09 PM) (Source: Microsoft-Windows-RestartManager) (EventID: 10007) (User: NT AUTHORITY)
Description: Application or service 'AdaptiveSleepService' could not be restarted.

Error: (01/25/2017 04:16:06 PM) (Source: Adaptive Sleep Service) (EventID: 0) (User: )
Description: Event-ID 0

Error: (01/24/2017 04:52:56 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: playSNOW.exe, version: 0.9.0.0, time stamp: 0x584c76d3
Faulting module name: playSNOW.exe, version: 0.9.0.0, time stamp: 0x584c76d3
Exception code: 0xc0000005
Fault offset: 0x00000000004a15b3
Faulting process id: 0x1530
Faulting application start time: 0x01d2769b0f373fec
Faulting application path: D:\Steam\steamapps\common\SNOW\Bin64\playSNOW.exe
Faulting module path: D:\Steam\steamapps\common\SNOW\Bin64\playSNOW.exe
Report Id: 1e8afd98-1f9e-48fe-9d06-2a744884aab4
Faulting package full name:
Faulting package-relative application ID:

Error: (01/24/2017 04:38:40 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: playSNOW.exe, version: 0.9.0.0, time stamp: 0x584c76d3
Faulting module name: MSVCR110.dll, version: 11.0.51106.1, time stamp: 0x5098826e
Exception code: 0xc0000409
Fault offset: 0x00000000000740c4
Faulting process id: 0x3db8
Faulting application start time: 0x01d27699cc51ebe9
Faulting application path: D:\Steam\steamapps\common\SNOW\Bin64\playSNOW.exe
Faulting module path: D:\Steam\steamapps\common\SNOW\Bin64\MSVCR110.dll
Report Id: d24bd627-5e4c-41f1-8995-3408d657bc2e
Faulting package full name:
Faulting package-relative application ID:

System errors:
=============
Error: (01/25/2017 10:29:19 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (01/25/2017 10:27:19 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (01/25/2017 09:27:48 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (01/25/2017 08:15:02 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (01/25/2017 08:14:26 PM) (Source: volsnap) (EventID: 35) (User: )
Description: The shadow copies of volume C: were aborted because the shadow copy storage failed to grow.

Error: (01/25/2017 08:14:24 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (01/25/2017 08:14:06 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The eapihdrv service failed to start due to the following error:
This driver has been blocked from loading

Error: (01/25/2017 08:14:06 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\chris\AppData\Local\Temp\ehdrv.sys

Error: (01/25/2017 08:14:06 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The eapihdrv service failed to start due to the following error:
This driver has been blocked from loading

Error: (01/25/2017 08:14:06 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\chris\AppData\Local\Temp\ehdrv.sys

CodeIntegrity:
===================================
  Date: 2017-01-20 19:16:12.576
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

==================== Memory info ===========================

Processor: Intel® Core™ i3-4370 CPU @ 3.80GHz
Percentage of memory in use: 39%
Total physical RAM: 8127.14 MB
Available physical RAM: 4898.83 MB
Total Virtual: 12991.14 MB
Available Virtual: 8070.89 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:73.75 GB) (Free:1.52 GB) NTFS
Drive d: (Mass Storage) (Fixed) (Total:1397.26 GB) (Free:1008.71 GB) NTFS
Drive e: (EAWG_1EF) (CDROM) (Total:2.9 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 74.5 GB) (Disk ID: AB28F450)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=73.7 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=450 MB) - (Type=27)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1397.3 GB) (Disk ID: C9B2809F)
Partition 1: (Not Active) - (Size=1397.3 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================

[Jr0x]

OK! Well done. Here is the best part of the process! The mullygrubs are gone! That's a technical term for your log(s) appear to be clean! If you have no further issues with your computer, please complete the housekeeping procedures outlined below.
The first thing we need to do is to remove all the tools that we have used. This is so that should you ever be re-infected, you will download updated versions.

Tools CleanUp with DelFix

Download Delfix and save it to the Desktop.

• Right click the and click Run as Administrator.
• Ensure ALL boxes are checked.
  
• Click the Run button.
• The program will run for a few moments and then notepad will open with a log. Please paste the log in your next reply.

Delete the following Files and Folders (If Present):

Delete any other .bat, .log, .reg, .txt, and any other files created or downloaded during this process, and left on the desktop and empty the Recycle Bin.

Keeping your software updated

Windows Updates

• Please go to Start Menu -> Control Panel
• Under View by: select Large Icons, then tap or click Windows Update.
• Click on Change Settings
  
  [/b]
• Select "Install updates automatically (recommended)" from the Important updates drop-down.
  
  
• Choose a day and a time when you know the computer will be on and connected to the internet. The default is 3:00AM every day.
• Ensure that all of the other check boxes are checked.
• Click OK.

Malwarebytes Anti-Malware

I recommend keeping Malwarebytes Anti-Malware installed. Make sure to update it and run it at least once a week. If it finds things such as PUP's (Potentially Unwanted Programs) you can delete those with no worries. However, if it finds something like a trojan, come see us.

Keep Java Updated

Java has become the #1 program exploited by thieves and hackers as of today. It's gotten so bad, the Department of Homeland Security recently recommended that users disable Java on their machines.

For more information regarding this, see the two articles below:

Forbes: US Department of Homeland Security Calls on user do disable Java

US warns on Java software

Unless you have software on your machine that absolutely requires Java, I highly recommend you completely remove it from your system.
If you do have software that requires it, then disable it until such time as it's needed by those programs.
Please click the link below for instructions to disable and uninstall Java.

How to Disable Java in your Web Browser

How to Completely Remove and Uninstall Java From Windows PC

Filehippo Updatechecker

Another weapon against malicious programs and viruses is to keeping other programs updated. There are several programs out there that can check for out of date programs on your computer. One is Filehippo. You can run this on a weekly or monthly basis to check your programs for updates and then it will provide a link for you to download them.

Download Filehippo Updatechecker

Tips, Information, and Optional Installation

Watch what you open in your emails. If you get an email from an unknown source with any attached files, do not open it.

Be careful of the websites you visit.

When installing new programs, don't be "click happy" and click through the screens. Many programs come with adware in them and are set to install them by default. Several programs require that you uncheck or select no to prevent the installation. Take you time and read each screen as you go.

To help protect yourself while on the web, I recommend you read Answers to common security questions - Best Practices

Installation of Unchecky (Optional)

This is a very good little program that will automatically uncheck any boxes during a software installation. This helps prevent the software from installing any malware that is by default checked while the program is being installed.

Click here to be taken to Unchecky.com

Click the very large Download button.

Click Save

Once downloaded, double click the program (Vista, Win 7, and 8, right click and Run as Administrator)

Once open, click the Install button.



Then click Finish



Unchecky is now installed and will help you keep unwanted check boxes unchecked.

Installation of CryptoPrevent (Optional)

CryptoPrevent is a free program that prevents CryptoLocker / ransomware from infecting your PC by locking down the OS so the malware can not get a grip on your system. You may read more about this here.

To download and install:

• Click CryptoPrevent
• Under the Free Edition column, click on Download button to request for a download link and download to your Desktop
• Extract the content of the zip file to your Desktop and right-click and select Run as Administrator
• Accept all the defaults during the install. The last screen of the install has a checkmark in "Launch CryptoPrevent". This is good and will launch the program once you click Finish.
• You will get a prompt asking if you purchased a Product Key for Automatic Updates. You can answer No.
• You will then be prompted to learn more about automatic updates or if you want to purchase a key. This is up to you but you don't have to.
• You will be prompted to click OK to continue and select your protection level. Go ahead and click OK.
• Click the Apply button to set Default protection.
• You may get a message stating that Windows Sidebar and Desktop Gadgets are a major security vulnerability and asking you if you want to disable them. If you don't use these features, answer Yes.
• That's it. The protection is in place.

Note: The free version doesn't provide automatic updates. Periodically, you should open up the program (there is a shortcut on your desktop now) and select the Updates! menu....and select Check for Updates to see if there are any as this infection has serious consequences.

If you have any other questions, please feel free to ask me.

[christian keyston]

Thanks for your help.

 

the link for delfix doesn't work may you send it again please.

 

I deleted of the .txt .log .bat and ,reg files as you requested.

 

I got all of the programs you suggested.

 

thank you once again you have been a ton of help.

[Jr0x]

Apologies for the wrong link.

 

Please try to download from here.

[christian keyston]

Thank you and here the log you asked for.

 

 

# DelFix v1.013 - Logfile created 31/01/2017 at 21:29:21
# Updated 17/04/2016 by Xplode
# Username : chris - BASEMENT-PC
# Operating System : Windows 10 Pro  (64 bits)

~ Removing disinfection tools ...

Deleted : C:\FRST
Deleted : C:\AdwCleaner
Deleted : C:\Users\chris\Desktop\FRST-OlderVersion
Deleted : C:\Users\chris\Desktop\Addition.txt
Deleted : C:\Users\chris\Desktop\FRST64.exe

~ Creating registry backup ... OK

~ Cleaning system restore ...

Deleted : RP #4 [Scheduled Checkpoint | 01/27/2017 03:45:49]
Deleted : RP #5 [Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 | 02/01/2017 00:18:21]
Deleted : RP #6 [Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 | 02/01/2017 00:19:15]

New restore point created !

~ Resetting system settings ... OK

########## - EOF - ##########

[Jr0x]

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.