Jump to content

Same Malware Keeps Getting Removed-What's going on?

Favor723
 Share

Recommended Posts

Favor723

Favor723

Posted
Posted

Hello I am new to this forum and having a problem.

Lately, almost every time that I have run Malwarebytes the same Malware is found at the end of the scan and is removed, only to reappear again on subsequent scans. Why are the same malwares being removed only to be found again? How can I remove these malware permanently? I will paste the results below (thanks in advance): 

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 5/10/2016
Scan Time: 10:15 PM
Logfile: 
Administrator: Yes

Version: 2.2.1.1043
Malware Database: v2016.05.11.01
Rootkit Database: v2016.05.06.01
License: Premium
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Steve

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 309661
Time Elapsed: 7 min, 40 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 3
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc, , [841927ad10894fe7c64aeab4828023dd], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0, , [841927ad10894fe7c64aeab4828023dd], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_metadata, , [841927ad10894fe7c64aeab4828023dd], 

Files: 2
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_metadata\computed_hashes.json, , [841927ad10894fe7c64aeab4828023dd], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_metadata\verified_contents.json, , [841927ad10894fe7c64aeab4828023dd], 

Physical Sectors: 0
(No malicious items detected)


(end)

Link to post
Share on other sites
TwinHeadedEagle

TwinHeadedEagle

Posted
Posted

Hello and :welcome:

 

Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them.
Only one of them will run on your system, that will be the right version.

  • Double-click to run it. When the tool opens click Yes to disclaimer.
  • Press Scan button. button.

    x5o4gh.png

  • It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.

  • The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

Link to post
Share on other sites
TwinHeadedEagle

TwinHeadedEagle

Posted
Posted

FRST.gif Fix with Farbar Recovery Scan Tool

icon_exclaim.gif This fix was created for this user for use on that particular machine. icon_exclaim.gif


icon_exclaim.gif Running it on another one may cause damage and render the system unstable. icon_exclaim.gif

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

  • Right-click on FRST.gif icon and select RunAsAdmin.jpg Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • Press the Fix button just once and wait.
  • If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
  • When finished FRST will generate a log on the Desktop, called Fixlog.txt.

Please upload it to your reply.

fixlist.txt

Link to post
Share on other sites
Favor723

Favor723

Posted
  • Author
Posted

I ran MalwareBytes three times and nothing was found each time. Assuming my problem is truly resolved, can I delete FRST64 and its associated files now?

Additionally, thank you very much for your help. It is truly appreciated. MalwareBytes is a wonderful tool.

Link to post
Share on other sites
Favor723

Favor723

Posted
  • Author
Posted

I just ran another scan and four (4) total threats were detected. They are the same "Vonteera" malwares that were not detected in scans just a few minutes ago that I've seen reappearing in scan after scan. 

Do you have any other solutions/suggestions?

Link to post
Share on other sites
Favor723

Favor723

Posted
  • Author
Posted

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 5/11/2016
Scan Time: 2:54 PM
Logfile: 
Administrator: Yes

Version: 2.2.1.1043
Malware Database: v2016.05.11.06
Rootkit Database: v2016.05.06.01
License: Premium
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Steve

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 307785
Time Elapsed: 7 min, 51 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 3
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc, , [ddc56f653f5aae88e94eaaf5e919738d], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0, , [ddc56f653f5aae88e94eaaf5e919738d], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_metadata, , [ddc56f653f5aae88e94eaaf5e919738d], 

Files: 2
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_metadata\computed_hashes.json, , [ddc56f653f5aae88e94eaaf5e919738d], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_metadata\verified_contents.json, , [ddc56f653f5aae88e94eaaf5e919738d], 

Physical Sectors: 0
(No malicious items detected)


(end)

Link to post
Share on other sites
Favor723

Favor723

Posted
  • Author
Posted

Here are the results after reinstalling Chrome. The same malwares were found. Was I supposed to delete all of Chrome's saved files such as my passwords and such when I uninstalled it?

 

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 5/11/2016
Scan Time: 3:54 PM
Logfile: 
Administrator: Yes

Version: 2.2.1.1043
Malware Database: v2016.05.11.06
Rootkit Database: v2016.05.06.01
License: Premium
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Steve

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 308242
Time Elapsed: 7 min, 8 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 3
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc, , [cbd706ce5a3f2115bd7a099626dcaa56], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0, , [cbd706ce5a3f2115bd7a099626dcaa56], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_metadata, , [cbd706ce5a3f2115bd7a099626dcaa56], 

Files: 1
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_metadata\verified_contents.json, , [cbd706ce5a3f2115bd7a099626dcaa56], 

Physical Sectors: 0
(No malicious items detected)


(end)

Link to post
Share on other sites
Favor723

Favor723

Posted
  • Author
Posted

I uninstall Google Chrome again, this time also making sure to check mark the box as suggested above, and reinstalled it. After running a Malwarebytes scan, it shockingly found an increased number of the same type of "Vonteera" malwayres than it ever has before. Here is the log:

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 5/12/2016
Scan Time: 10:02 PM
Logfile: 
Administrator: Yes

Version: 2.2.1.1043
Malware Database: v2016.05.13.01
Rootkit Database: v2016.05.06.01
License: Premium
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Steve

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 308211
Time Elapsed: 7 min, 24 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 47
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\images, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\ar, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\bg, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\ca, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\cs, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\da, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\de, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\el, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\en, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\en_GB, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\es, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\es_419, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\et, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\fi, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\fil, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\fr, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\he, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\hi, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\hr, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\hu, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\id, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\it, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\ja, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\ko, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\lt, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\lv, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\nb, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\nl, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\pl, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\pt_BR, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\pt_PT, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\ro, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\ru, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\sk, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\sl, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\sr, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\sv, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\th, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\tr, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\uk, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\vi, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\zh_CN, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\zh_TW, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_metadata, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 

Files: 85
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\about.html, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\about_ltr_css.css, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\about_rtl_css.css, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\about_with_deps.js, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\background.html, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\background_with_deps.js, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\in-document-message_content_script.js, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\in-document-start_content_script.js, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\in-document_content_script.js, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\in-document_ltr_css.css, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\in-document_rtl_css.css, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\in-search-results_content_script.js, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\jquery_do_not_compile.js, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\manifest.json, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\images\number_2.png, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\images\close.png, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\images\close_on.png, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\images\help.png, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\images\help_on.png, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\images\icon128x128.png, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\images\icon16x16.png, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\images\icon19x19.png, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\images\icon32x32.png, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\images\icon48x48.png, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\images\minimize.png, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\images\minimize_on.png, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\images\number_1.png, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\images\number_3.png, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\images\page-action-active.png, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\images\page-action-animated_0.png, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\images\page-action-animated_1.png, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\images\page-action-animated_2.png, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\images\page-action-animated_3.png, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\images\page-action-animated_4.png, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\images\page-action-animated_5.png, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\images\page-action-animated_6.png, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\images\page-action-animated_7.png, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\images\page-action-inactive.png, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\images\step_1.png, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\images\step_2.png, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\images\step_3.png, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\ar\messages.json, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\bg\messages.json, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\ca\messages.json, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\cs\messages.json, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\da\messages.json, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\de\messages.json, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\el\messages.json, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\en\messages.json, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\en_GB\messages.json, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\es\messages.json, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\es_419\messages.json, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\et\messages.json, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\fi\messages.json, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\fil\messages.json, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\fr\messages.json, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\he\messages.json, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\hi\messages.json, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\hr\messages.json, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\hu\messages.json, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\id\messages.json, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\it\messages.json, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\ja\messages.json, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\ko\messages.json, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\lt\messages.json, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\lv\messages.json, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\nb\messages.json, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\nl\messages.json, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\pl\messages.json, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\pt_BR\messages.json, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\pt_PT\messages.json, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\ro\messages.json, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\ru\messages.json, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\sk\messages.json, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\sl\messages.json, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\sr\messages.json, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\sv\messages.json, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\th\messages.json, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\tr\messages.json, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\uk\messages.json, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\vi\messages.json, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\zh_CN\messages.json, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_locales\zh_TW\messages.json, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_metadata\computed_hashes.json, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 
Trojan.Vonteera.ChrPRST, C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\42.1_0\_metadata\verified_contents.json, , [7ee7b61fa1f8f145aedd8b1537cb4ab6], 

Physical Sectors: 0
(No malicious items detected)


(end)

Link to post
Share on other sites
TwinHeadedEagle

TwinHeadedEagle

Posted
Posted

FRST.gif Scan with Farbar Recovery Scan Tool

Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.

  • Right-click on FRST.gif icon and select RunAsAdmin.jpg Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • Make sure that Addition.txt option is checked. option is checked.

    2873ryc.png

  • Press Scan button and wait.

  • The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.


Please attach report into your next reply.

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.