Jump to content

harrishouse

Members
  • Posts

    4
  • Joined

  • Last visited

Reputation

0 Neutral
  1. I have rebooted a couple of times and monitored the Task Manager processes and performance. I see no more indication of unusual activity. MBAM is no longer popping up Malicious Website warnings, so it looks good to me. Am I clean?
  2. When AdwCleaner was running, I had MBAM and Webroot running too. When I started MBAR, it said to exit MBAM, which I did, but Webroot remained. MBAR cleaned one malware item, so I rebooted before next step. When I ran FRST64, both MBAM and Webroot were running. All requested files attached. system-log.txt mbar-log-2014-12-15 (12-57-11).txt FRST.txt AdwCleanerS0.txt Addition.txt
  3. That was a fast reply. I sent these messages from my uninfected laptop, so I will boot up the infected computer now and begin the steps indicated.
  4. I have been reading the other posts about computers being slowed to a stop by malware in SysWOW64 and I need similar assistance now. Is the name SYSwow64 or SVSwow64? My computer Win7 64bit started slowing two days ago. CPU was being hijacked by processes that just kept taking more memory. Webroot gave no warnings and a very slow Webroot scan found nothing. Ran Norton Power Eraser scan that found nothing. A friend suggested Malwarebytes. First time it ran, it blocked many SysWOW64 malicious websites and quarantined some objects. System was running better until restarted this morning. Now malware is back with a vengence. Cursor is a spinning circle. Powershell failed. Error messages about scripts not running. So I ran MBAM again and it found nothing. I do not know how to get a text version of the items listed in quarantine. Pasted below are MBAM scan logs from yesterday 12/14/14 and today 12/15/14. Any help greatly appreciated. Malwarebytes Anti-Malwarewww.malwarebytes.org Scan Date: 12/14/2014Scan Time: 2:59:22 PMLogfile: MBAM.txtAdministrator: Yes Version: 2.00.4.1028Malware Database: v2014.12.14.06Rootkit Database: v2014.12.08.03License: TrialMalware Protection: EnabledMalicious Website Protection: EnabledSelf-protection: Disabled OS: Windows 7 Service Pack 1CPU: x64File System: NTFSUser: Harris Family Scan Type: Threat ScanResult: CompletedObjects Scanned: 386627Time Elapsed: 9 min, 20 sec Memory: EnabledStartup: EnabledFilesystem: EnabledArchives: EnabledRootkits: DisabledHeuristics: EnabledPUP: EnabledPUM: Enabled Processes: 0(No malicious items detected) Modules: 0(No malicious items detected) Registry Keys: 140PUP.Optional.MindSpark, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\CouponXplorer_5zService, Quarantined, [823c90d298e41c1a8ab8dee332cffe02], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{0297a026-3011-46d3-ad62-bb9a7612aea7}, Quarantined, [f1cdce9485f746f090dd6f9caa5911ef], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{65c72339-fb1d-4155-84e1-9afacee02d6f}, Quarantined, [f1cdce9485f746f090dd6f9caa5911ef], PUP.Optional.MindSpark.A, HKU\S-1-5-21-2251239879-3952495651-2316126211-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{65C72339-FB1D-4155-84E1-9AFACEE02D6F}, Quarantined, [f1cdce9485f746f090dd6f9caa5911ef], PUP.Optional.MindSpark.A, HKU\S-1-5-21-2251239879-3952495651-2316126211-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{65C72339-FB1D-4155-84E1-9AFACEE02D6F}, Quarantined, [f1cdce9485f746f090dd6f9caa5911ef], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{cf91f897-175f-43e3-8369-bd3ba14eee7b}, Quarantined, [f1cdce9485f746f090dd6f9caa5911ef], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{4132189a-73c7-4d3e-a8c2-82ef57842dac}, Quarantined, [f1cdce9485f746f090dd6f9caa5911ef], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{004F2608-3092-40C2-B880-1FD74DDA6B9A}, Quarantined, [f1cdce9485f746f090dd6f9caa5911ef], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{1B4CF49B-8B69-4A90-8B51-D2088E1EC1BA}, Quarantined, [f1cdce9485f746f090dd6f9caa5911ef], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{85F06DCB-A179-4732-8BB6-DA65B0243C8A}, Quarantined, [f1cdce9485f746f090dd6f9caa5911ef], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{BCDBD520-9E35-4093-A71F-8033FF14DDEA}, Quarantined, [f1cdce9485f746f090dd6f9caa5911ef], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{D0584866-E0CD-41C8-93EC-5CD3E02E0F9D}, Quarantined, [f1cdce9485f746f090dd6f9caa5911ef], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{D9581ECE-B29B-45E1-8EB7-F64EEA35D087}, Quarantined, [f1cdce9485f746f090dd6f9caa5911ef], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{004F2608-3092-40C2-B880-1FD74DDA6B9A}, Quarantined, [f1cdce9485f746f090dd6f9caa5911ef], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{1B4CF49B-8B69-4A90-8B51-D2088E1EC1BA}, Quarantined, [f1cdce9485f746f090dd6f9caa5911ef], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{85F06DCB-A179-4732-8BB6-DA65B0243C8A}, Quarantined, [f1cdce9485f746f090dd6f9caa5911ef], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{BCDBD520-9E35-4093-A71F-8033FF14DDEA}, Quarantined, [f1cdce9485f746f090dd6f9caa5911ef], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{D0584866-E0CD-41C8-93EC-5CD3E02E0F9D}, Quarantined, [f1cdce9485f746f090dd6f9caa5911ef], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{D9581ECE-B29B-45E1-8EB7-F64EEA35D087}, Quarantined, [f1cdce9485f746f090dd6f9caa5911ef], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{4132189a-73c7-4d3e-a8c2-82ef57842dac}, Quarantined, [f1cdce9485f746f090dd6f9caa5911ef], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\CouponXplorer_5z.SettingsPlugin.1, Quarantined, [f1cdce9485f746f090dd6f9caa5911ef], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\CouponXplorer_5z.SettingsPlugin, Quarantined, [f1cdce9485f746f090dd6f9caa5911ef], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CouponXplorer_5z.SettingsPlugin, Quarantined, [f1cdce9485f746f090dd6f9caa5911ef], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CouponXplorer_5z.SettingsPlugin.1, Quarantined, [f1cdce9485f746f090dd6f9caa5911ef], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{CF91F897-175F-43E3-8369-BD3BA14EEE7B}, Quarantined, [f1cdce9485f746f090dd6f9caa5911ef], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\CouponXplorer_5zbar Uninstall Internet Explorer, Quarantined, [f1cdce9485f746f090dd6f9caa5911ef], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{0297A026-3011-46D3-AD62-BB9A7612AEA7}, Quarantined, [f1cdce9485f746f090dd6f9caa5911ef], PUP.Optional.MindSpark.A, HKU\S-1-5-21-2251239879-3952495651-2316126211-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{0297A026-3011-46D3-AD62-BB9A7612AEA7}, Quarantined, [f1cdce9485f746f090dd6f9caa5911ef], PUP.Optional.MindSpark.A, HKU\S-1-5-21-2251239879-3952495651-2316126211-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{0297A026-3011-46D3-AD62-BB9A7612AEA7}, Quarantined, [f1cdce9485f746f090dd6f9caa5911ef], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{7d69ed06-0171-4379-9528-08df51092727}, Quarantined, [0ab45f0326567fb7f081b45708fb4bb5], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{7D69ED06-0171-4379-9528-08DF51092727}, Quarantined, [0ab45f0326567fb7f081b45708fb4bb5], PUP.Optional.MindSpark.A, HKU\S-1-5-21-2251239879-3952495651-2316126211-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{7D69ED06-0171-4379-9528-08DF51092727}, Quarantined, [0ab45f0326567fb7f081b45708fb4bb5], PUP.Optional.MindSpark.A, HKU\S-1-5-21-2251239879-3952495651-2316126211-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{7D69ED06-0171-4379-9528-08DF51092727}, Quarantined, [0ab45f0326567fb7f081b45708fb4bb5], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CouponXplorer_5z, Quarantined, [eed087db4537ad898adcd6ec3dc732ce], PUP.Optional.MindSpark.A, HKU\S-1-5-21-2251239879-3952495651-2316126211-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\CouponXplorer_5z, Quarantined, [00be92d0c9b3b6802542e7dba361e818], PUP.Optional.MindSpark.A, HKU\S-1-5-21-2251239879-3952495651-2316126211-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\CouponXplorer_5z, Quarantined, [c3fb144eb7c5db5b58baff782dd6ed13], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{746c749a-528c-4e31-bc96-848c0d909fb4}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{bb925fe4-7161-454f-88ee-7f58c40f549c}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{23905799-4E4E-457F-8EEA-88A514D38DCA}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{4B6F98D4-3D4D-4D72-A89B-7B75207AF16D}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{E2B831BC-CF08-4227-AEAE-82A1C259F1BC}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{23905799-4E4E-457F-8EEA-88A514D38DCA}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{4B6F98D4-3D4D-4D72-A89B-7B75207AF16D}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{E2B831BC-CF08-4227-AEAE-82A1C259F1BC}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{bb925fe4-7161-454f-88ee-7f58c40f549c}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\CouponXplorer_5z.ToolbarProtector.1, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\CouponXplorer_5z.ToolbarProtector, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CouponXplorer_5z.ToolbarProtector, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CouponXplorer_5z.ToolbarProtector.1, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{927c6290-8b1f-4673-9046-658843fea0d0}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{9d51d472-88c3-4e12-93ea-8aeafc57b227}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{15F335C1-5CC0-4786-ABB9-06E727FF2D42}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{E4E06D99-5021-4A4C-A55F-E3C33E66E74A}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{FB9C1615-175B-48E3-813D-212E676B9F9E}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{15F335C1-5CC0-4786-ABB9-06E727FF2D42}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{E4E06D99-5021-4A4C-A55F-E3C33E66E74A}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{FB9C1615-175B-48E3-813D-212E676B9F9E}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{9d51d472-88c3-4e12-93ea-8aeafc57b227}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{ae1fb1ef-c142-48d2-8bfa-2730b43e8bea}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{b12e159d-74ba-45b7-ae12-f6d1a71f9e50}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{99395F16-43C8-461E-A1AC-36AC80EF13E4}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{99395F16-43C8-461E-A1AC-36AC80EF13E4}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{b12e159d-74ba-45b7-ae12-f6d1a71f9e50}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{76e9f00f-6852-44fc-b406-bb452f232a1b}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{697fa9f6-da51-4f3c-8f01-fd5daafc18e5}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{4E60D532-F00E-495B-BD0F-75F1B96CC714}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{C517F70B-242E-4408-BD38-1C8CAA053C62}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{4E60D532-F00E-495B-BD0F-75F1B96CC714}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{C517F70B-242E-4408-BD38-1C8CAA053C62}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{697fa9f6-da51-4f3c-8f01-fd5daafc18e5}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\CouponXplorer_5z.FeedManager.1, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\CouponXplorer_5z.FeedManager, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CouponXplorer_5z.FeedManager, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CouponXplorer_5z.FeedManager.1, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{BEEED033-0126-4DC6-A531-9060E3410521}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\CouponXplorer_5z.HTMLMenu.1, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\CouponXplorer_5z.HTMLMenu, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CouponXplorer_5z.HTMLMenu, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CouponXplorer_5z.HTMLMenu.1, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{BEEED033-0126-4DC6-A531-9060E3410521}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{48708b86-3672-46f9-89cf-680f8e807b91}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{be1ede40-9c0b-4913-bf21-09f7ab5e270e}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{1BCF3F83-F9A0-4075-B0BC-53128BBC228F}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{7535D37C-1554-4681-9F4B-055922B2F800}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{1BCF3F83-F9A0-4075-B0BC-53128BBC228F}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{7535D37C-1554-4681-9F4B-055922B2F800}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{be1ede40-9c0b-4913-bf21-09f7ab5e270e}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{b1c38f5a-506f-4f75-80d7-292903e8f87a}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\CouponXplorer_5z.MultipleButton.1, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\CouponXplorer_5z.MultipleButton, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CouponXplorer_5z.MultipleButton, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CouponXplorer_5z.MultipleButton.1, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{627d42c1-e006-4bf2-bb79-d5fc6e0e01f0}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\CouponXplorer_5z.ScriptButton.1, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\CouponXplorer_5z.ScriptButton, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CouponXplorer_5z.ScriptButton, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CouponXplorer_5z.ScriptButton.1, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{131a1f72-5c50-43cf-ba3e-3ac75df1188b}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{b4685aa8-dbdd-4d8e-9a16-51b64646026a}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{0CD246B5-EC5A-4601-9A8F-C6D21742BB86}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{8D4ECA6C-82AC-4E26-B86D-E251635FFA72}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{99CA1314-FC92-47C3-916A-9A4C31C13108}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{9B500682-83D6-4252-BA71-20AA34A74A06}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{0CD246B5-EC5A-4601-9A8F-C6D21742BB86}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{8D4ECA6C-82AC-4E26-B86D-E251635FFA72}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{99CA1314-FC92-47C3-916A-9A4C31C13108}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{9B500682-83D6-4252-BA71-20AA34A74A06}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{b4685aa8-dbdd-4d8e-9a16-51b64646026a}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{131A1F72-5C50-43CF-BA3E-3AC75DF1188B}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{5bb649a4-1c05-4e18-b7a0-80a0fd29d8d7}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\CouponXplorer_5z.PseudoTransparentPlugin.1, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\CouponXplorer_5z.PseudoTransparentPlugin, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CouponXplorer_5z.PseudoTransparentPlugin, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CouponXplorer_5z.PseudoTransparentPlugin.1, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{5BB649A4-1C05-4E18-B7A0-80A0FD29D8D7}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{b32e7dc1-4d99-4480-844a-06c15df31ed4}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{2c76e19a-5b10-4018-92dd-54de302114f9}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{3852ab8e-1ca9-4b29-846f-092ca8d97969}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{4025F9A4-91CE-4F20-8486-8A3D95564DB3}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{5128A486-0AED-4F8D-B1C0-1E0FF64CD1D0}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{4025F9A4-91CE-4F20-8486-8A3D95564DB3}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{5128A486-0AED-4F8D-B1C0-1E0FF64CD1D0}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{3852ab8e-1ca9-4b29-846f-092ca8d97969}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\CouponXplorer_5z.ThirdPartyInstaller.1, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\CouponXplorer_5z.ThirdPartyInstaller, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CouponXplorer_5z.ThirdPartyInstaller, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CouponXplorer_5z.ThirdPartyInstaller.1, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{2C76E19A-5B10-4018-92DD-54DE302114F9}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{46861ec7-fd7a-4197-b4a2-223196de2dcb}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{8221ac18-699f-46c9-8a89-0916cbdb5005}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{41040243-9338-4C91-9457-AD11F56F48E1}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{97B4338F-DF52-45F6-9EA5-BA99A9883A78}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{41040243-9338-4C91-9457-AD11F56F48E1}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{97B4338F-DF52-45F6-9EA5-BA99A9883A78}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{8221ac18-699f-46c9-8a89-0916cbdb5005}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\CouponXplorer_5z.HTMLPanel.1, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\CouponXplorer_5z.HTMLPanel, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CouponXplorer_5z.HTMLPanel, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CouponXplorer_5z.HTMLPanel.1, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{46861EC7-FD7A-4197-B4A2-223196DE2DCB}, Quarantined, [5e60045e0577a88e67c951d55ea58f71], Registry Values: 5PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{65C72339-FB1D-4155-84E1-9AFACEE02D6F}, Quarantined, [f1cdce9485f746f090dd6f9caa5911ef], PUP.Optional.MindSpark.A, HKU\S-1-5-21-2251239879-3952495651-2316126211-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS\{9b138bf3-1d40-4e7e-84bb-2975198ad938}, Quarantined, [9c221e445e1ef541ee7b7f8c5fa419e7], PUP.Optional.MindSpark.A, HKU\S-1-5-21-2251239879-3952495651-2316126211-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS|{9B138BF3-1D40-4E7E-84BB-2975198AD938}, Quarantined, [9c221e445e1ef541ee7b7f8c5fa419e7], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\{65c72339-fb1d-4155-84e1-9afacee02d6f}, Quarantined, [843a134f94e863d379ff907b9c67c040], PUP.Optional.FreeMakeConverter.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|fmconverter@gmail.com, C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\, Quarantined, [a81692d03547082eadbed97d8d7652ae] Registry Data: 0(No malicious items detected) Folders: 22PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z, Delete-on-Reboot, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar, Delete-on-Reboot, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin, Delete-on-Reboot, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\assists, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\assists\ie_default_search_provider, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\assists\ie_enable, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\chrome, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\ThirdPartyInstallers, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\assists, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\gen1, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\Message, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\Settings, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5zEI, Quarantined, [d9e5045e324abb7b6ec246e059aa20e0], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5zEI\Installr, Quarantined, [d9e5045e324abb7b6ec246e059aa20e0], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5zEI\Installr\1.bin, Quarantined, [d9e5045e324abb7b6ec246e059aa20e0], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5zEI\Installr\setups, Quarantined, [d9e5045e324abb7b6ec246e059aa20e0], PUP.Optional.MindSpark.A, C:\Users\Harris Family\AppData\LocalLow\CouponXplorer_5z, Quarantined, [4a7481e113691f171ce3ea42d033e917], PUP.Optional.MindSpark.A, C:\Users\Harris Family\AppData\LocalLow\CouponXplorer_5z\bar, Quarantined, [4a7481e113691f171ce3ea42d033e917], PUP.Optional.MindSpark.A, C:\Users\Harris Family\AppData\LocalLow\CouponXplorer_5z\bar\Settings, Quarantined, [4a7481e113691f171ce3ea42d033e917], PUP.Optional.MindSpark.A, C:\Users\Harris Family\AppData\LocalLow\CouponXplorer_5zEI, Quarantined, [229c31313e3ec175a25d9c909073768a], PUP.Optional.MindSpark.A, C:\Users\Harris Family\AppData\LocalLow\CouponXplorer_5zEI\Installr, Quarantined, [229c31313e3ec175a25d9c909073768a], PUP.Optional.MindSpark.A, C:\Users\Harris Family\AppData\LocalLow\CouponXplorer_5zEI\Installr\Cache, Quarantined, [229c31313e3ec175a25d9c909073768a], Files: 67PUP.Optional.MindSpark, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\5zbarsvc.exe, Delete-on-Reboot, [823c90d298e41c1a8ab8dee332cffe02], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\5zbar.dll, Quarantined, [f1cdce9485f746f090dd6f9caa5911ef], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\5zSrcAs.dll, Quarantined, [0ab45f0326567fb7f081b45708fb4bb5], PUP.Optional.OpenCandy, C:\$Recycle.Bin\S-1-5-21-2251239879-3952495651-2316126211-1001\$ROERH7S.exe, Quarantined, [a816a4be027a74c2d91d9e8c7b8653ad], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\5zbprtct.dll, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\5zdatact.dll, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\5zdlghk.dll, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\5zdlghk64.dll, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\5zfeedmg.dll, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\5zhighin.exe, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\5zhkstub.dll, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\5zhtmlmu.dll, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\5zhttpct.dll, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\5zidle.dll, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\5zmedint.exe, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\5zmlbtn.dll, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\5zPlugin.dll, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\5zreghk.dll, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\5zregiet.dll, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\5zscript.dll, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\5zskin.dll, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\5zskplay.exe, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\5zSrchMn.exe, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\5zsrchmr.dll, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\5ztpinst.dll, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\APPINTEGRATOR.EXE, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\AppIntegrator64.exe, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\APPINTEGRATORSTUB.DLL, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\AppIntegratorStub64.dll, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\ASSISTMONITOR.DLL, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\ASSISTMONITOR64.DLL, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\BOOTSTRAP.JS, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\CREXT.DLL, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\CrExtP5z.exe, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\DPNMNGR.DLL, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\FF-NativeMessagingDispatcher.dll, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\HKFXMGR.DLL, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\HKFXMGR64.DLL, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\HPG.DLL, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\Hpg64.dll, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\installKeys.js, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\LOGO.BMP, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\T8EPMSUP.DLL, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\T8EXTEX.DLL, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\T8EXTPEX.DLL, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\T8HTML.DLL, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\T8RES.DLL, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\T8TICKER.DLL, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\TOOLBARGUARD.DLL, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\TOOLBARGUARD64.DLL, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\VERIFY.DLL, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\assists\ie_default_search_provider\ARBITER.DLL, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\assists\ie_default_search_provider\ARBITER64.DLL, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\assists\ie_default_search_provider\ASSIST.EXE, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\assists\ie_default_search_provider\CONFIG.XML, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\assists\ie_enable\ARBITER.DLL, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\assists\ie_enable\ARBITER64.DLL, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\assists\ie_enable\CONFIG.XML, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\assists\COMMON.T8S, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\gen1\COMMON.T8S, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\Message\COMMON.T8S, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5z\bar\Settings\s_pid.dat, Quarantined, [5e60045e0577a88e67c951d55ea58f71], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5zEI\Installr\1.bin\5zEIPlug.dll, Quarantined, [d9e5045e324abb7b6ec246e059aa20e0], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5zEI\Installr\1.bin\5zEZSETP.dll, Quarantined, [d9e5045e324abb7b6ec246e059aa20e0], PUP.Optional.MindSpark.A, C:\Program Files (x86)\CouponXplorer_5zEI\Installr\1.bin\NP5zEISb.dll, Quarantined, [d9e5045e324abb7b6ec246e059aa20e0], PUP.Optional.MindSpark.A, C:\Users\Harris Family\AppData\LocalLow\CouponXplorer_5zEI\Installr\Cache\006C4C0F.exe, Quarantined, [229c31313e3ec175a25d9c909073768a], PUP.Optional.MindSpark.A, C:\Users\Harris Family\AppData\LocalLow\CouponXplorer_5zEI\Installr\Cache\files.ini, Quarantined, [229c31313e3ec175a25d9c909073768a], Physical Sectors: 0(No malicious items detected) (end)>>>>> Malwarebytes Anti-Malwarewww.malwarebytes.org Scan Date: 12/15/2014Scan Time: 11:00:44 AMLogfile: MBAM scan.txtAdministrator: Yes Version: 2.00.4.1028Malware Database: v2014.12.15.03Rootkit Database: v2014.12.14.01License: TrialMalware Protection: EnabledMalicious Website Protection: EnabledSelf-protection: Disabled OS: Windows 7 Service Pack 1CPU: x64File System: NTFSUser: Harris Family Scan Type: Threat ScanResult: CompletedObjects Scanned: 387028Time Elapsed: 13 min, 10 sec Memory: EnabledStartup: EnabledFilesystem: EnabledArchives: EnabledRootkits: DisabledHeuristics: EnabledPUP: EnabledPUM: Enabled Processes: 0(No malicious items detected) Modules: 0(No malicious items detected) Registry Keys: 0(No malicious items detected) Registry Values: 0(No malicious items detected) Registry Data: 0(No malicious items detected) Folders: 0(No malicious items detected) Files: 0(No malicious items detected) Physical Sectors: 0(No malicious items detected) (end)
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.