Please click the link below for your operating system to download the TSG SysInfo Utility. Click on "Save File" then double-click the file to run it. Copy and paste the report in your initial post. Windows 7 and later (downloads a file named tsginfo.exe) | Windows XP (downloads a file named SysInfo.exe)

Solved: windows 7 possible virus

4032 Views 26 Replies 5 Participants Last post by Cookiegal, Oct 16, 2014

jinxy

Discussion Starter · Jul 9, 2014

Hi all haven't been on here for a bit, my computer has been running flawlessly up to now,
my teenage son has recently come home from uni, and the computer has started having
problems, i have avast anti virus and supper anti spywhere installed, the both found a virus
which has been taken out, more scans reveal nothing.
but since this time at certain times the computer wont run some of my games such as battlefield 3, but it will run
Cod 4, i was thinking it might be a driver issue so i tried to install the AMD driver detect, it downloads but wont install.
i am thinking about formatting the hard drive and starting again but this will be a headache as i have quite a few games
on there and they all will need to be patched, such as cod4, cod waw, cliffs of dover ect ect.
my basic system is as follows
windows 7 pro 64
E6600 duel core 2.4
AMD 6850 GPX
Assus GM 41 board
120 gig SSD main HD
350 gig hd
4 gig of ram
600 w power supply
i can post full spec later when i get home, you have to run a small program it think to get the full information, i have forgotten how do do so
thanks
j

Status: Not open for further replies.

1 - 20 of 27 Posts

blues_harp28

· #2 · Jul 9, 2014

Check and post
TSG System Information Utility - found here.
http://static.techguy.org/download/SysInfo.exe
I have no idea why your games will not load - not my area of expertise.
======
Start SuperAntiSpyware again.
Click View Scan Logs.
Highlight the scan log entry.
Click - View Selected Log.
The scan log will appear in Notepad.
Copy and paste in your next post.
======
Download.
MalwareBytes to your desktop.
Download the Free version.
MalwareBytes

Once downloaded to your desktop - close all open browser windows.
Click on the Install icon - allow it to update during the install process.
Start Malwarebytes Anti-Malware.
Before you run a scan.
Under Settings > Detection and Protection in the left pane.
Under Detection Options - make sure that all three entries are ticked.
Under Non-Malware detections - set to Treat detections as Malware.

Now click - Scan button.
Then select - Threat Scan.
Then - Scan Now.
If any infections are found during the scan, the number of them will be listed.
When the scan is finished, make sure to select and remove Everything in the list.
You may be prompted to restart to finish the removal process.
If Yes - restart your Pc.

Start Malwarebytes Anti-Malware again.
Click History > Application Logs.
Select the most recent scan log.
Click View.
Select Export >Text File.
Name it mbam > then save it on the desktop.
Copy-and-paste its contents in the reply box below.

See less See more

jinxy

Discussion Starter · #3 · Jul 9, 2014

specs
Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 7 Professional, Service Pack 1, 64 bit
Processor: Intel(R) Core(TM)2 CPU 6600 @ 2.40GHz, Intel64 Family 6 Model 15 Stepping 6
Processor Count: 2
RAM: 4094 Mb
Graphics Card: AMD Radeon HD 6800 Series, 1024 Mb
Hard Drives: C: Total - 114369 MB, Free - 3136 MB; E: Total - 238464 MB, Free - 128424 MB;
Motherboard: Gigabyte Technology Co., Ltd., G41M-Combo
Antivirus: avast! Antivirus, Updated and Enabled
thanks for the reply, will post the logs
j

jinxy

Discussion Starter · #4 · Jul 9, 2014

this is the results of the Malewarebytes
Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 09/07/2014
Scan Time: 19:35:42
Logfile:
Administrator: Yes

Version: 2.00.2.1012
Malware Database: v2014.07.09.08
Rootkit Database: v2014.07.07.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: daves

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 352109
Time Elapsed: 9 min, 22 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 15
PUP.Optional.PriceGong.A, HKLM\SOFTWARE\CLASSES\APPID\{835315FC-1BF6-4CA9-80CD-F6C158D40692}, , [3547821bb3c83501e7c0441146bc5ea2],
PUP.Optional.PriceGong.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{835315FC-1BF6-4CA9-80CD-F6C158D40692}, , [3547821bb3c83501e7c0441146bc5ea2],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{D40753C7-8A59-4C1F-BE88-C300F4624D5B}, , [96e6f2ab86f576c0eabb7018bd45d42c],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}, , [6616b8e5dc9f9a9c371e67e8c43e956b],
PUP.Optional.PriceGong.A, HKLM\SOFTWARE\CLASSES\APPID\PriceGongIE.DLL, , [5d1f504d710ad06603d1429d61a1c23e],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\pflphaooapbgpeakohlggbpidpppgdff, , [d4a8acf1f6855ed8b006bd220002ba46],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\mysearchdial, , [e29ad0cd98e3af876d6e2fe354b01de3],
PUP.Optional.PriceGong.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\PriceGongIE.DLL, , [fe7e3f5e611a86b009cb13cc7b87b34d],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\pflphaooapbgpeakohlggbpidpppgdff, , [b8c4b9e4a6d5d462b8feb62908fa3bc5],
PUP.Optional.PriceGong.A, HKU\S-1-5-21-272211399-1918865253-3234653423-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\PriceGong, , [adcff7a6cdaeb87ea8037f588280ed13],
PUP.Optional.MySearchDial.A, HKU\S-1-5-21-272211399-1918865253-3234653423-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\pflphaooapbgpeakohlggbpidpppgdff, , [eb91336abebda492367f09d646bc3ec2],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-272211399-1918865253-3234653423-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE\1I1T1Q1S, , [6c109b026c0fae881821fde040c2b848],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-272211399-1918865253-3234653423-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE, , [dca08914afcc350172cffef5b94a45bb],
PUP.Optional.Softonic.A, HKU\S-1-5-21-272211399-1918865253-3234653423-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SOFTONIC\Universal Downloader, , [68146439542775c15cc6be0e06fcfa06],
PUP.Optional.PriceGong.A, HKU\S-1-5-21-272211399-1918865253-3234653423-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\PriceGong, , [f18b14890675102619925b7c748e03fd],

Registry Values: 5
PUP.Optional.UTorrentControl.A, HKU\S-1-5-21-272211399-1918865253-3234653423-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER\{7473B6BD-4691-4744-A82B-7854EB3D70B6}, , [f686c1dc6c0f03332f38fa58788ab749],
PUP.Optional.UTorrentControl.A, HKU\S-1-5-21-272211399-1918865253-3234653423-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER|{7473B6BD-4691-4744-A82B-7854EB3D70B6}, Â½Â¶stâFDGÂ¨+xTÃ«=pÂ¶, , [f686c1dc6c0f03332f38fa58788ab749]
PUP.Optional.UTorrentControl.A, HKU\S-1-5-21-272211399-1918865253-3234653423-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS|{7473B6BD-4691-4744-A82B-7854EB3D70B6}, , [f686c1dc6c0f03332f38fa58788ab749],
PUP.Optional.UTorrentControl.A, HKU\S-1-5-21-272211399-1918865253-3234653423-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS\{7473b6bd-4691-4744-a82b-7854eb3d70b6}, , [a5d7e2bb512a5fd7432460f2a55da25e],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-272211399-1918865253-3234653423-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE|tb, 0A2O0R1R1H2Z1S1G0H1F, , [dca08914afcc350172cffef5b94a45bb]

Registry Data: 3
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://start.mysearchdial.com/?f=1&...tFtCtAyBzytN1L1CzutCyD1B1P1R&cr=787486862&ir=, Good: (www.google.com), Bad: (http://start.mysearchdial.com/?f=1&...tFtCtAyBzytN1L1CzutCyD1B1P1R&cr=787486862&ir=),,[94e8cdd0a8d3f83e4d89dfb921e3b14f]
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\ABOUTURLS|Tabs, http://start.mysearchdial.com/?f=2&...tFtCtAyBzytN1L1CzutCyD1B1P1R&cr=787486862&ir=, Good: (www.google.com), Bad: (http://start.mysearchdial.com/?f=2&...tFtCtAyBzytN1L1CzutCyD1B1P1R&cr=787486862&ir=),,[fc8036673546d0663c4b612ee91bdd23]
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://start.mysearchdial.com/?f=1&...tFtCtAyBzytN1L1CzutCyD1B1P1R&cr=787486862&ir=, Good: (www.google.com), Bad: (http://start.mysearchdial.com/?f=1&...tFtCtAyBzytN1L1CzutCyD1B1P1R&cr=787486862&ir=),,[ee8e801d5a213afc30a6564235cf2bd5]

Folders: 4
PUP.Optional.Conduit.A, C:\Users\daves\AppData\Local\Temp\CT3220468, , [4834d1cc6813ec4a74c779237e84df21],
PUP.Optional.Conduit.A, C:\Users\daves\AppData\Local\Temp\CT3220468\xpi, , [4834d1cc6813ec4a74c779237e84df21],
PUP.Optional.Conduit.A, C:\Users\daves\AppData\Local\Temp\CT3220468\xpi\defaults, , [4834d1cc6813ec4a74c779237e84df21],
PUP.Optional.Conduit.A, C:\Users\daves\AppData\Local\Temp\CT3220468\xpi\defaults\preferences, , [4834d1cc6813ec4a74c779237e84df21],

Files: 19
PUP.Optional.Wajam.A, C:\Users\daves\AppData\Local\Temp\is1615585457\13739126_stp\wajam_download.exe, , [740878252754de589d6c9bac20e04fb1],
PUP.Optional.Conduit.A, C:\Users\daves\AppData\Local\Temp\DM\Installer_for_avast-antivirus_029233\WStest.exe, , [4735dfbef487b1859b036cb2f7096997],
PUP.Optional.ArcadeFrontier.A, C:\Users\daves\Downloads\ArcadeFrontierGames (2).exe, , [4e2e3e5fd7a42511976e59072ed304fc],
PUP.Optional.ArcadeFrontier.A, C:\Users\daves\Downloads\ArcadeFrontierGames (1).exe, , [86f6782583f8bd79986d332d36cbe51b],
PUP.Optional.OutBrowse, C:\Users\daves\Downloads\setup.exe, , [1a62edb0fd7eeb4b3beb83fe24dd9c64],
PUP.Optional.DomaIQ, C:\Users\daves\Downloads\Java.exe, , [116bb8e5106b2511122e97a76799dd23],
PUP.Optional.InstallCore, C:\Users\daves\Downloads\7Zip_Setup.exe, , [7804990496e53402ef803df5e31e7c84],
PUP.Optional.ArcadeFrontier.A, C:\Users\daves\Downloads\ArcadeFrontierGames.exe, , [c0bcdebf780340f69273a2beaf527789],
PUP.Optional.MySearchDial.A, C:\Users\daves\AppData\Local\mysearchdial-speeddial.crx, , [3349465794e742f4428ca70fd1311ce4],
PUP.Optional.Conduit.A, C:\Users\daves\AppData\Local\Temp\CT3220468\conduit.xml, , [4834d1cc6813ec4a74c779237e84df21],
PUP.Optional.Conduit.A, C:\Users\daves\AppData\Local\Temp\CT3220468\conduitStatistics.csf, , [4834d1cc6813ec4a74c779237e84df21],
PUP.Optional.Conduit.A, C:\Users\daves\AppData\Local\Temp\CT3220468\CT3220468.txt, , [4834d1cc6813ec4a74c779237e84df21],
PUP.Optional.Conduit.A, C:\Users\daves\AppData\Local\Temp\CT3220468\CT3220468.xpi, , [4834d1cc6813ec4a74c779237e84df21],
PUP.Optional.Conduit.A, C:\Users\daves\AppData\Local\Temp\CT3220468\dtime.csf, , [4834d1cc6813ec4a74c779237e84df21],
PUP.Optional.Conduit.A, C:\Users\daves\AppData\Local\Temp\CT3220468\initData.json, , [4834d1cc6813ec4a74c779237e84df21],
PUP.Optional.Conduit.A, C:\Users\daves\AppData\Local\Temp\CT3220468\manifest.json, , [4834d1cc6813ec4a74c779237e84df21],
PUP.Optional.Conduit.A, C:\Users\daves\AppData\Local\Temp\CT3220468\version.txt, , [4834d1cc6813ec4a74c779237e84df21],
PUP.Optional.Conduit.A, C:\Users\daves\AppData\Local\Temp\CT3220468\xpi\install.rdf, , [4834d1cc6813ec4a74c779237e84df21],
PUP.Optional.Conduit.A, C:\Users\daves\AppData\Local\Temp\CT3220468\xpi\defaults\preferences\defaults.js, , [4834d1cc6813ec4a74c779237e84df21],

Physical Sectors: 0
(No malicious items detected)

(end)

See less See more

jinxy

Discussion Starter · #5 · Jul 9, 2014

this is the last supper anti virus scan results
i did notice that windows when booting keep trying to check my E drive, i have since unplugged it, i think that it id maybe corrupt or some thing, j
UPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 07/05/2014 at 11:21 PM

Application Version : 5.7.1026

Core Rules Database Version : 11351
Trace Rules Database Version: 9163

Scan type : Complete Scan
Total Scan Time : 02:36:05

Operating System Information
Windows 7 Professional 64-bit, Service Pack 1 (Build 6.01.7601)
UAC On - Limited User

Memory items scanned : 684
Memory threats detected : 0
Registry items scanned : 72572
Registry threats detected : 0
File items scanned : 29547
File threats detected : 135

Adware.Tracking Cookie
C:\Users\daves\AppData\Roaming\Microsoft\Windows\Cookies\Low\6HYGUR3A.txt [ /at.atwola.com ]
C:\Users\daves\AppData\Roaming\Microsoft\Windows\Cookies\Low\N6RENIIK.txt [ /doubleclick.net ]
C:\Users\daves\AppData\Roaming\Microsoft\Windows\Cookies\Low\AZLMTP6C.txt [ /imrworldwide.com ]
C:\Users\daves\AppData\Roaming\Microsoft\Windows\Cookies\Low\NTF1CEMG.txt [ /ad.mlnadvertising.com ]
C:\Users\daves\AppData\Roaming\Microsoft\Windows\Cookies\Low\2C4RYF4H.txt [ /ru4.com ]
.smartadserver.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.mediaplex.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.atdmt.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.imrworldwide.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.doubleclick.net [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adtech.de [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.atdmt.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.atdmt.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.histats.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.histats.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.zedo.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.zedo.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.zedo.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
www.googleadservices.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
adserve.postrelease.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.doubleclick.net [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.ru4.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.burstnet.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adtechus.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.advertising.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.serving-sys.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.serving-sys.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.smartadserver.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.smartadserver.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.ru4.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.amazon-adsystem.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.amazon-adsystem.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.burstnet.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.yadro.ru [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.yadro.ru [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.eyeviewads.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.ad.mlnadvertising.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.weboramapublishertrackinguk2.solution.weborama.fr [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.weboramapublishertrackinguk2.solution.weborama.fr [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.weborama.fr [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
www.googleadservices.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.burstnet.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.newsquestdigitalmedia.122.2o7.net [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.clickfuse.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.ptvgoalv15.122.2o7.net [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
tracking.ukwm.co.uk [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ads.ibtracking.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
server.adformdsp.net [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adformdsp.net [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
adserving.unibet.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.server.cpmstar.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.statcounter.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ads2.williamhill.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
tracking.netrefer.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.burstnet.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
www.googleadservices.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.atdmt.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.atdmt.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.uk.at.atwola.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rainbowmedia.122.2o7.net [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ads2.williamhill.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.premiumtv.122.2o7.net [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.insightexpressai.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.insightexpressai.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.insightexpressai.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.insightexpressai.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.classichousetracks.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
www.classichousetracks.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.nextag.co.uk [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.nextag.co.uk [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.nextag.co.uk [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.ads.adsrevenue.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.ads.adsrevenue.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.trafficjunky.net [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.nextag.co.uk [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.ru4.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
track.adform.net [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.s****horpetelegraph.co.uk [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.s****horpetelegraph.co.uk [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.s****horpetelegraph.co.uk [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
www.s****horpetelegraph.co.uk [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.revsci.net [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.mediaplex.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
www.googleadservices.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.fastclick.net [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.pro-market.net [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.bs.serving-sys.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.tradedoubler.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.tradedoubler.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.tradedoubler.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.server.cpmstar.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.server.cpmstar.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.burstnet.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
statse.webtrendslive.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adinterax.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adinterax.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
fr.sitestat.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
fr.sitestat.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adfarm1.adition.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
www.googleadservices.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.2o7.net [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.2o7.net [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.2o7.net [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.gametracker.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.mediaplex.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.questionmarket.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.questionmarket.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.serving-sys.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.smartadserver.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
c1.adform.net [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adform.net [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.tribalfusion.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.advertising.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.advertising.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.advertising.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.at.atwola.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.at.atwola.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.tacoda.at.atwola.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.tacoda.at.atwola.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.advertising.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.advertising.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.casalemedia.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.casalemedia.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.casalemedia.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.revsci.net [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.burstnet.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.revsci.net [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adtech.de [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.revsci.net [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.revsci.net [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.atdmt.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.serving-sys.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.mediaplex.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.serving-sys.com [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.doubleclick.net [ C:\USERS\DAVES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

See less See more

jinxy

Discussion Starter · #6 · Jul 9, 2014

may be i am not scanning my E drive and the problem lie there
j

blues_harp28

· #7 · Jul 9, 2014

Run Malwarebytes again - scan and remove all that it finds.
Then post the log file.
======
Download Junkware Removal Tool
http://www.bleepingcomputer.com/download/junkware-removal-tool/

Shutdown your antivirus to avoid any conflicts.
Right click the icon - disable for say 10 mins.
http://www.bleepingcomputer.com/for...nti-virus-firewall-and-anti-malware-programs/

Right-mouse click JRT.exe and select Run as administrator (If using XP just double click on the icon to run it.)
The tool will open and start scanning your system.
Please be patient as this can take a while to complete.
On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
Post the contents of JRT.txt into your next message.
======
Then run a Temp file cleaner.
http://www.bleepingcomputer.com/download/tfc/

See less See more

jinxy

Discussion Starter · #8 · Jul 9, 2014

should i plug the E drive back in first
j

jinxy

Discussion Starter · #9 · Jul 9, 2014

Rootkit Database: v2014.07.07.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: daves

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 352079
Time Elapsed: 7 min, 10 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 0
(No malicious items detected)

Physical Sectors: 0
(No malicious items detected)

(end)

See less See more

jinxy

Discussion Starter · #10 · Jul 9, 2014

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Professional x64
Ran by daves on 09/07/2014 at 21:55:37.88
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Registry Values

~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\conduit
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\softonic
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\conduit
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\conduitsearchscopes
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\conduit
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\apnstub_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\apnstub_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Toolbar.CT3220468
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_for_hamachi_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_for_hamachi_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_for_hamachi_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_for_hamachi_RASMANCS
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{FE1CD38C-FBAA-436D-87F0-F800CB97A8BE}

~~~ Files

~~~ Folders

Successfully deleted: [Folder] "C:\Users\daves\appdata\locallow\conduit"
Successfully deleted: [Folder] "C:\Users\daves\appdata\locallow\pricegong"
Successfully deleted: [Folder] "C:\Program Files (x86)\conduit"
Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin"

~~~ Chrome

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Google\Chrome\Extensions\ejpbbhjlbipncjklfjjaedaieimbmdda
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\ejpbbhjlbipncjklfjjaedaieimbmdda

~~~ Event Viewer Logs were cleared

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 09/07/2014 at 22:06:40.21
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

See less See more

blues_harp28

· #11 · Jul 9, 2014

Malwarebytes has the Rootkits scan 'Disabled'
Under Settings > Detection and Protection > Tick 'Scan for Rootkits'
Scan your pc again - remove all that it finds - post the log file.

The Trial version of Malwarebytes that you have installed should revert to the Free version once the Trial is over.
Keep it installed and scan your Pc say, once a week.

Malwarebytes has recognized the the following - 'PUP.Optional.ArcadeFrontier.A, C:\Users\daves\Downloads\ArcadeFrontierGames (1).exe' - as a PUP [potentially unwanted program]
http://searchsecurity.techtarget.com/definition/PUP

If you need to restore it.
Open Malwarebytes > History > Quarantine.
Select the program > click Restore.
======
======
You are also using UTorrent - that can cause unwanted malware etc.

"PUP.Optional.UTorrentControl.A, HKU\S-1-5-21-272211399-1918865253-3234653423-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER|{7473B6BD-4691-4744-A82B-7854EB3D70B6}, Â½Â¶stâ€˜FDGÂ¨+xTÃ«=pÂ¶, , [f686c1dc6c0f03332f38fa58788ab749]"
-
http://www.systemlookup.com/CLSID/7...rxtbuTo1_dll_prxtbuTo2_dll_prxtbuTo3_dll.html

See less See more

jinxy

Discussion Starter · #12 · Jul 9, 2014

ok thanks very much for your time and help, i will see how it goes with the E drive back in in tomorrow.
i will make sure i fully scan the drive
thanks j

blues_harp28

· #13 · Jul 9, 2014

Anytime - keep us updated.

jinxy

Discussion Starter · #14 · Jul 10, 2014

plugged the E drive back in, slow ish boot, scanned my E drive this is the result.j
Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 10/07/2014
Scan Time: 17:41:46
Logfile:
Administrator: Yes

Version: 2.00.2.1012
Malware Database: v2014.07.10.05
Rootkit Database: v2014.07.09.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: daves

Scan Type: Custom Scan
Result: Completed
Objects Scanned: 405481
Time Elapsed: 30 min, 2 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 15
PUP.Optional.PriceGong.A, C:\Users\Wesley\AppData\LocalLow\PriceGong, Quarantined, [8756cbd28cef9b9bfd20227ec83a4db3],
PUP.Optional.PriceGong.A, C:\Users\Wesley\AppData\LocalLow\PriceGong\Data, Quarantined, [8756cbd28cef9b9bfd20227ec83a4db3],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\CacheIcons, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\EmailNotifier, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\ExternalComponent, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\Logs, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\MyStuffApps, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\Repository, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\Repository\conduit_CT3220468_CT3220468, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\Repository\conduit_CT3220468_CT3220468\AppsMetaData, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\Repository\conduit_CT3220468_CT3220468\ToolbarLogin, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\Repository\conduit_CT3220468_CT3220468\ToolbarSettings, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\Repository\conduit_CT3220468_en, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\Repository\conduit_CT3220468_en\ToolbarTranslation, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],

Files: 104
PUP.Optional.PriceGong.A, C:\Users\Wesley\AppData\LocalLow\PriceGong\Data\g.txt, Quarantined, [8756cbd28cef9b9bfd20227ec83a4db3],
PUP.Optional.PriceGong.A, C:\Users\Wesley\AppData\LocalLow\PriceGong\Data\1.txt, Quarantined, [8756cbd28cef9b9bfd20227ec83a4db3],
PUP.Optional.PriceGong.A, C:\Users\Wesley\AppData\LocalLow\PriceGong\Data\10.txt, Quarantined, [8756cbd28cef9b9bfd20227ec83a4db3],
PUP.Optional.PriceGong.A, C:\Users\Wesley\AppData\LocalLow\PriceGong\Data\11.txt, Quarantined, [8756cbd28cef9b9bfd20227ec83a4db3],
PUP.Optional.PriceGong.A, C:\Users\Wesley\AppData\LocalLow\PriceGong\Data\20359.txt, Quarantined, [8756cbd28cef9b9bfd20227ec83a4db3],
PUP.Optional.PriceGong.A, C:\Users\Wesley\AppData\LocalLow\PriceGong\Data\20384.txt, Quarantined, [8756cbd28cef9b9bfd20227ec83a4db3],
PUP.Optional.PriceGong.A, C:\Users\Wesley\AppData\LocalLow\PriceGong\Data\22042.txt, Quarantined, [8756cbd28cef9b9bfd20227ec83a4db3],
PUP.Optional.PriceGong.A, C:\Users\Wesley\AppData\LocalLow\PriceGong\Data\2229.txt, Quarantined, [8756cbd28cef9b9bfd20227ec83a4db3],
PUP.Optional.PriceGong.A, C:\Users\Wesley\AppData\LocalLow\PriceGong\Data\2255.txt, Quarantined, [8756cbd28cef9b9bfd20227ec83a4db3],
PUP.Optional.PriceGong.A, C:\Users\Wesley\AppData\LocalLow\PriceGong\Data\2829.txt, Quarantined, [8756cbd28cef9b9bfd20227ec83a4db3],
PUP.Optional.PriceGong.A, C:\Users\Wesley\AppData\LocalLow\PriceGong\Data\3848.txt, Quarantined, [8756cbd28cef9b9bfd20227ec83a4db3],
PUP.Optional.PriceGong.A, C:\Users\Wesley\AppData\LocalLow\PriceGong\Data\4369.txt, Quarantined, [8756cbd28cef9b9bfd20227ec83a4db3],
PUP.Optional.PriceGong.A, C:\Users\Wesley\AppData\LocalLow\PriceGong\Data\5711.txt, Quarantined, [8756cbd28cef9b9bfd20227ec83a4db3],
PUP.Optional.PriceGong.A, C:\Users\Wesley\AppData\LocalLow\PriceGong\Data\5885.txt, Quarantined, [8756cbd28cef9b9bfd20227ec83a4db3],
PUP.Optional.PriceGong.A, C:\Users\Wesley\AppData\LocalLow\PriceGong\Data\6115.txt, Quarantined, [8756cbd28cef9b9bfd20227ec83a4db3],
PUP.Optional.PriceGong.A, C:\Users\Wesley\AppData\LocalLow\PriceGong\Data\9514.txt, Quarantined, [8756cbd28cef9b9bfd20227ec83a4db3],
PUP.Optional.PriceGong.A, C:\Users\Wesley\AppData\LocalLow\PriceGong\Data\a.txt, Quarantined, [8756cbd28cef9b9bfd20227ec83a4db3],
PUP.Optional.PriceGong.A, C:\Users\Wesley\AppData\LocalLow\PriceGong\Data\b.txt, Quarantined, [8756cbd28cef9b9bfd20227ec83a4db3],
PUP.Optional.PriceGong.A, C:\Users\Wesley\AppData\LocalLow\PriceGong\Data\c.txt, Quarantined, [8756cbd28cef9b9bfd20227ec83a4db3],
PUP.Optional.PriceGong.A, C:\Users\Wesley\AppData\LocalLow\PriceGong\Data\d.txt, Quarantined, [8756cbd28cef9b9bfd20227ec83a4db3],
PUP.Optional.PriceGong.A, C:\Users\Wesley\AppData\LocalLow\PriceGong\Data\e.txt, Quarantined, [8756cbd28cef9b9bfd20227ec83a4db3],
PUP.Optional.PriceGong.A, C:\Users\Wesley\AppData\LocalLow\PriceGong\Data\f.txt, Quarantined, [8756cbd28cef9b9bfd20227ec83a4db3],
PUP.Optional.PriceGong.A, C:\Users\Wesley\AppData\LocalLow\PriceGong\Data\h.txt, Quarantined, [8756cbd28cef9b9bfd20227ec83a4db3],
PUP.Optional.PriceGong.A, C:\Users\Wesley\AppData\LocalLow\PriceGong\Data\i.txt, Quarantined, [8756cbd28cef9b9bfd20227ec83a4db3],
PUP.Optional.PriceGong.A, C:\Users\Wesley\AppData\LocalLow\PriceGong\Data\j.txt, Quarantined, [8756cbd28cef9b9bfd20227ec83a4db3],
PUP.Optional.PriceGong.A, C:\Users\Wesley\AppData\LocalLow\PriceGong\Data\k.txt, Quarantined, [8756cbd28cef9b9bfd20227ec83a4db3],
PUP.Optional.PriceGong.A, C:\Users\Wesley\AppData\LocalLow\PriceGong\Data\l.txt, Quarantined, [8756cbd28cef9b9bfd20227ec83a4db3],
PUP.Optional.PriceGong.A, C:\Users\Wesley\AppData\LocalLow\PriceGong\Data\m.txt, Quarantined, [8756cbd28cef9b9bfd20227ec83a4db3],
PUP.Optional.PriceGong.A, C:\Users\Wesley\AppData\LocalLow\PriceGong\Data\mru.xml, Quarantined, [8756cbd28cef9b9bfd20227ec83a4db3],
PUP.Optional.PriceGong.A, C:\Users\Wesley\AppData\LocalLow\PriceGong\Data\n.txt, Quarantined, [8756cbd28cef9b9bfd20227ec83a4db3],
PUP.Optional.PriceGong.A, C:\Users\Wesley\AppData\LocalLow\PriceGong\Data\o.txt, Quarantined, [8756cbd28cef9b9bfd20227ec83a4db3],
PUP.Optional.PriceGong.A, C:\Users\Wesley\AppData\LocalLow\PriceGong\Data\p.txt, Quarantined, [8756cbd28cef9b9bfd20227ec83a4db3],
PUP.Optional.PriceGong.A, C:\Users\Wesley\AppData\LocalLow\PriceGong\Data\q.txt, Quarantined, [8756cbd28cef9b9bfd20227ec83a4db3],
PUP.Optional.PriceGong.A, C:\Users\Wesley\AppData\LocalLow\PriceGong\Data\r.txt, Quarantined, [8756cbd28cef9b9bfd20227ec83a4db3],
PUP.Optional.PriceGong.A, C:\Users\Wesley\AppData\LocalLow\PriceGong\Data\s.txt, Quarantined, [8756cbd28cef9b9bfd20227ec83a4db3],
PUP.Optional.PriceGong.A, C:\Users\Wesley\AppData\LocalLow\PriceGong\Data\t.txt, Quarantined, [8756cbd28cef9b9bfd20227ec83a4db3],
PUP.Optional.PriceGong.A, C:\Users\Wesley\AppData\LocalLow\PriceGong\Data\u.txt, Quarantined, [8756cbd28cef9b9bfd20227ec83a4db3],
PUP.Optional.PriceGong.A, C:\Users\Wesley\AppData\LocalLow\PriceGong\Data\v.txt, Quarantined, [8756cbd28cef9b9bfd20227ec83a4db3],
PUP.Optional.PriceGong.A, C:\Users\Wesley\AppData\LocalLow\PriceGong\Data\w.txt, Quarantined, [8756cbd28cef9b9bfd20227ec83a4db3],
PUP.Optional.PriceGong.A, C:\Users\Wesley\AppData\LocalLow\PriceGong\Data\wlu.txt, Quarantined, [8756cbd28cef9b9bfd20227ec83a4db3],
PUP.Optional.PriceGong.A, C:\Users\Wesley\AppData\LocalLow\PriceGong\Data\x.txt, Quarantined, [8756cbd28cef9b9bfd20227ec83a4db3],
PUP.Optional.PriceGong.A, C:\Users\Wesley\AppData\LocalLow\PriceGong\Data\y.txt, Quarantined, [8756cbd28cef9b9bfd20227ec83a4db3],
PUP.Optional.PriceGong.A, C:\Users\Wesley\AppData\LocalLow\PriceGong\Data\z.txt, Quarantined, [8756cbd28cef9b9bfd20227ec83a4db3],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\ldrtbuTor.dll, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\tbuTor.dll, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\ThirdPartyComponents.xml, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\tmpDialogs.cab, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\toolbar.cfg, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\CacheIcons\http___storage_conduit_com_images_SearchEngines_news_icon_gif.gif, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\CacheIcons\http___storage_conduit_com_images_searchengines_search_icon_gif.gif, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\CacheIcons\http___storage_conduit_com_images_searchengines_softonic_gif.gif, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\CacheIcons\http___storage_conduit_com_images_SearchEngines_tfd_gif.gif, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\CacheIcons\http___storage_conduit_com_images_SearchEngines_video_gif.gif, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Contact_png.png, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Hide_png.png, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_LikeIcon_png.png, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_MoreFromPublisher_png.png, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_More_png.png, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Options_png.png, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Privacy_png.png, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Refresh_png.png, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Upgrade_png.png, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\CacheIcons\http___storage_conduit_com_BankImages_Facebook_Facebook_png.png, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\CacheIcons\http___storage_conduit_com_Images_ClientResources_mini_browser_gif.gif, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\CacheIcons\http___storage_conduit_com_bankimages_commandcomps_block_gif.gif, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Browse_png.png, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\CacheIcons\http___storage_conduit_com_images_eula_png.png, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\CacheIcons\http___storage_conduit_com_images_SearchEngines_images_search_gif.gif, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\CacheIcons\http___storage_conduit_com_images_main_menu_about_gif.gif, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\CacheIcons\http___storage_conduit_com_images_main_menu_clear_history_gif.gif, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\CacheIcons\http___storage_conduit_com_images_main_menu_contact_gif.gif, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\CacheIcons\http___storage_conduit_com_images_main_menu_help_gif.gif, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\CacheIcons\http___storage_conduit_com_images_main_menu_home_page_gif.gif, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\CacheIcons\http___storage_conduit_com_images_main_menu_options_gif.gif, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\CacheIcons\http___storage_conduit_com_images_main_menu_privacy_gif.gif, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\CacheIcons\http___storage_conduit_com_images_main_menu_refresh_gif.gif, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\CacheIcons\http___storage_conduit_com_images_main_menu_shrink_gif.gif, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\CacheIcons\http___storage_conduit_com_images_main_menu_tell_a_friend_gif.gif, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\CacheIcons\http___storage_conduit_com_images_main_menu_upgrade_gif.gif, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\CacheIcons\http___storage_conduit_com_53_307_CT3072253_images_634514692184142958_20PX_png.png, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\CacheIcons\http___storage_conduit_com_53_307_CT3072253_Images_634520779497696087_png.png, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\CacheIcons\http___storage_conduit_com_bankimages_CommandComps_calculator_gif.gif, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\CacheIcons\http___storage_conduit_com_bankimages_CommandComps_excel_gif.gif, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\CacheIcons\http___storage_conduit_com_bankimages_CommandComps_MsAccess_gif.gif, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\CacheIcons\http___storage_conduit_com_bankimages_CommandComps_msnmessenger_gif.gif, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\CacheIcons\http___storage_conduit_com_bankimages_CommandComps_notepad_gif.gif, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\CacheIcons\http___storage_conduit_com_bankimages_CommandComps_office_gif.gif, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\CacheIcons\http___storage_conduit_com_bankimages_CommandComps_OutlookExpress_gif.gif, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\CacheIcons\http___storage_conduit_com_bankimages_CommandComps_Outlook_gif.gif, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\CacheIcons\http___storage_conduit_com_bankimages_CommandComps_paint_gif.gif, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\CacheIcons\http___storage_conduit_com_bankimages_CommandComps_powerpoint_gif.gif, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\CacheIcons\http___storage_conduit_com_bankimages_CommandComps_RegistryEditor_gif.gif, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\CacheIcons\http___storage_conduit_com_bankimages_CommandComps_winword_gif.gif, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\CacheIcons\http___storage_conduit_com_bankimages_CommandComps_WMPlayer_gif.gif, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_About_png.png, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\ExternalComponent\http___contextmenu_toolbar_conduit-services_com__name=GottenApps&locale=en.xml, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\ExternalComponent\http___contextmenu_toolbar_conduit-services_com__name=OtherApps&locale=en.xml, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\ExternalComponent\http___contextmenu_toolbar_conduit-services_com__name=SharedApps&locale=en.xml, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\ExternalComponent\http___contextmenu_toolbar_conduit-services_com__name=Toolbar&locale=en.xml, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\Repository\conduit_CT3220468_CT3220468\AppsMetaData\data.txt, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\Repository\conduit_CT3220468_CT3220468\ToolbarLogin\data.txt, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\Repository\conduit_CT3220468_CT3220468\ToolbarSettings\data.bck.txt, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\Repository\conduit_CT3220468_CT3220468\ToolbarSettings\data.txt, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],
PUP.Optional.UTorrentControl.A, C:\Users\Wesley\AppData\LocalLow\uTorrentControl_v2\Repository\conduit_CT3220468_en\ToolbarTranslation\data.txt, Quarantined, [0bd2e2bb611a50e6ecee6a39dc264cb4],

Physical Sectors: 0
(No malicious items detected)

(end)

See less See more

blues_harp28

· #15 · Jul 10, 2014

Just PUP's - Potentially Unwanted Programs.
But Malwarebytes has the Rootkits scan 'Disabled'
Under Settings > Detection and Protection > Tick 'Scan for Rootkits'

jinxy

Discussion Starter · #16 · Jul 10, 2014

it is enabled, j

jinxy

Discussion Starter · #17 · Jul 10, 2014

just restarted "CHKDSK" seems to keep checking my E drive for file systerm consistancey,before windows boots
is this anything.j

blues_harp28

· #18 · Jul 10, 2014

jinxy said:
just restarted "CHKDSK" seems to keep checking my E drive for file systerm consistancey,before windows boots
is this anything.j

It could be for many reasons - you can check the result in Event Viewer and post the CHKDSKResults.txt file here.
http://www.sevenforums.com/tutorials/96938-check-disk-chkdsk-read-event-viewer-log.html

jinxy

Discussion Starter · #19 · Jul 16, 2014

yep will do when i get home, bit of an up date, after a while being on it becomes very slow
and sluggish, as soon as i unplug the E drive, it runs perfectly, also i have noticed a slight
bit of a beep type noise coming from the said drive, some times, i think my problem lies
here, its either corrupt or dying, i am going to format this later, to see if things improve
if not i may have to replace it,
j

blues_harp28

· #20 · Jul 16, 2014

A 'beep type noise' is likely to be Ram related or a Motherboard problem.
http://www.memtest.org/
Scroll down to 'Download (Pre-built & ISOs)'
'Download - Pre-Compiled Bootable ISO (.zip)'
Download to your desktop.
Then burn the ISO to a Cd.
Start the Pc using the Cd and run the memory test overnight or for at least 8 passes.
It is best to run a full scan on individual Ram sticks if you can.
Or run the test but if any errors are shown - then remove all sticks of Ram and test each Ram stick one at a time.
======
Run a hard drive test.
SeaTools for DOS tutorial - ISO to CD
http://knowledge.seagate.com/articles/en_US/FAQ/201271en

See less See more

1 - 20 of 27 Posts

Status: Not open for further replies.