Malwarebytes Anti-Rootkit BETA 1.9.3.

1001
www.malwarebytes.org
Database version:
main: v2017.03.13.06
rootkit: v2017.03.11.01
Windows 10 x64 NTFS
Internet Explorer 11.576.14393.0
AmyDerp :: DESKTOP-GRFVR0K [administrator]
3/14/2017 1:38:03 AM
mbar-log-2017-03-14 (01-38-03).txt
Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory |
Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 332185
Time elapsed: 30 minute(s), 48 second(s)
Memory Processes Detected: 2
C:\Users\AmyDerp\AppData\Local\Eskction\Windows_Activaton.exe (Spyware.Boaxxe) -
> 7216 -> Delete on reboot. [cfbbc900c2e6ba7ce751cb372ad804fc]
C:\ProgramData\service.exe (Trojan.Agent.E) -> 2060 -> Delete on reboot. [0387e8
e14b5d89adbe03b8d73bc536ca]
Memory Modules Detected: 9
C:\Users\AmyDerp\AppData\Local\Ewfztion\sgmbazwm.dll (Trojan.Miuref) -> Delete o
n reboot. [c7c33e8b6642e74f0c42eeccc23f2fd1]
C:\Users\AmyDerp\AppData\Local\Ewfztion\sgmbazwm.dll (Trojan.Miuref) -> Delete o
n reboot. [c7c33e8b6642e74f0c42eeccc23f2fd1]
C:\Users\AmyDerp\AppData\Local\Ewfztion\sgmbazwm.dll (Trojan.Miuref) -> Delete o
n reboot. [c7c33e8b6642e74f0c42eeccc23f2fd1]
C:\Users\AmyDerp\AppData\Local\Ewfztion\sgmbazwm.dll (Trojan.Miuref) -> Delete o
n reboot. [c7c33e8b6642e74f0c42eeccc23f2fd1]
C:\Users\AmyDerp\AppData\Local\Ewfztion\sgmbazwm.dll (Trojan.Miuref) -> Delete o
n reboot. [c7c33e8b6642e74f0c42eeccc23f2fd1]
C:\Users\AmyDerp\AppData\Local\Ewfztion\sgmbazwm.dll (Trojan.Miuref) -> Delete o
n reboot. [c7c33e8b6642e74f0c42eeccc23f2fd1]
C:\Users\AmyDerp\AppData\Local\Ewfztion\sgmbazwm.dll (Trojan.Miuref) -> Delete o
n reboot. [c7c33e8b6642e74f0c42eeccc23f2fd1]
C:\Users\AmyDerp\AppData\Local\Eskction\ttvbeqjj.dll (Trojan.Miuref) -> Delete o
n reboot. [cebc88416048c076c08eeecc639ec838]
C:\Windows\Temp\gCF3.tmp (Trojan.Wdfload) -> Delete on reboot. [aedc45846444d264
1201d592669b4cb4]
Registry Keys Detected: 220
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\GoogleChromeUpService (Trojan.Agent.E) ->
Delete on reboot. [0387e8e14b5d89adbe03b8d73bc536ca]
HKLM\SOFTWARE\RunBooster (Adware.RunBooster) -> Delete on reboot. [41494584f4b43
303498014e26d938d73]
HKLM\SOFTWARE\CLASSES\.001 (Adware.Kuaiba) -> Delete on reboot. [8dfd18b10c9c3cf
acf58208f5ba60cf4]
HKLM\SOFTWARE\CLASSES\.002 (Adware.Kuaiba) -> Delete on reboot. [f09aac1d8f19310
5cd5a01aeac55f709]
HKLM\SOFTWARE\CLASSES\.003 (Adware.Kuaiba) -> Delete on reboot. [2a60eadfcfd945f
1d057f2bd50b11de3]
HKLM\SOFTWARE\CLASSES\.004 (Adware.Kuaiba) -> Delete on reboot. [107a745596122e0
8c1663976a65b7d83]
HKLM\SOFTWARE\CLASSES\.005 (Adware.Kuaiba) -> Delete on reboot. [a0eabd0c1e8acb6
b2403bbf41be63cc4]
HKLM\SOFTWARE\CLASSES\.006 (Adware.Kuaiba) -> Delete on reboot. [0585b9101197d36
31c0b8e21c33e23dd]
HKLM\SOFTWARE\CLASSES\.007 (Adware.Kuaiba) -> Delete on reboot. [5733caffb9efe35
32dfaf2bd827f19e7]
HKLM\SOFTWARE\CLASSES\.008 (Adware.Kuaiba) -> Delete on reboot. [b7d3dced7a2e999
d9d8a446bee138f71]
HKLM\SOFTWARE\CLASSES\.009 (Adware.Kuaiba) -> Delete on reboot. [ff8b22a7d5d33cf
aa483456ac43d09f7]
HKLM\SOFTWARE\CLASSES\.010 (Adware.Kuaiba) -> Delete on reboot. [1f6bae1b6642cc6
a60c7317e55ac6b95]
HKLM\SOFTWARE\CLASSES\.011 (Adware.Kuaiba) -> Delete on reboot. [d5b599308e1a162
041e6634c52af42be]
HKLM\SOFTWARE\CLASSES\.012 (Adware.Kuaiba) -> Delete on reboot. [088256736f39f14
565c2edc2f011916f]
HKLM\SOFTWARE\CLASSES\.013 (Adware.Kuaiba) -> Delete on reboot. [305abb0ec6e2fa3
c75b2446bc33e6a96]
HKLM\SOFTWARE\CLASSES\.014 (Adware.Kuaiba) -> Delete on reboot. [65258445614793a
32ef96946c93833cd]
HKLM\SOFTWARE\CLASSES\.015 (Adware.Kuaiba) -> Delete on reboot. [98f28d3c2b7d7bb
b60c77a35b74a24dc]
HKLM\SOFTWARE\CLASSES\.016 (Adware.Kuaiba) -> Delete on reboot. [c9c129a0acfc8fa
75dcad9d6dc25d030]
HKLM\SOFTWARE\CLASSES\.017 (Adware.Kuaiba) -> Delete on reboot. [bcceb0194d5b1d1
975b2d8d7aa57966a]
HKLM\SOFTWARE\CLASSES\.018 (Adware.Kuaiba) -> Delete on reboot. [167460697d2b5fd
7ef386c431be632ce]
HKLM\SOFTWARE\CLASSES\.019 (Adware.Kuaiba) -> Delete on reboot. [088229a0c3e5d75
f2007ebc47889f50b]
HKLM\SOFTWARE\CLASSES\.020 (Adware.Kuaiba) -> Delete on reboot. [e9a14e7b5157d26
49493139c6a9713ed]
HKLM\SOFTWARE\CLASSES\.021 (Adware.Kuaiba) -> Delete on reboot. [dcae3d8cecbc053
176b1bbf4d72ac040]
HKLM\SOFTWARE\CLASSES\.022 (Adware.Kuaiba) -> Delete on reboot. [f9916663d4d4132
3c95e436cb74aaa56]
HKLM\SOFTWARE\CLASSES\.023 (Adware.Kuaiba) -> Delete on reboot. [741626a3d0d82e0
848dfe1cecf321de3]
HKLM\SOFTWARE\CLASSES\.024 (Adware.Kuaiba) -> Delete on reboot. [9feb03c6fcac62d
4fa2d723d18e9ba46]
HKLM\SOFTWARE\CLASSES\.025 (Adware.Kuaiba) -> Delete on reboot. [800ac009a80052e
4f334a50abd442dd3]
HKLM\SOFTWARE\CLASSES\.026 (Adware.Kuaiba) -> Delete on reboot. [9cee1eabf9af38f
e2502753a000104fc]
HKLM\SOFTWARE\CLASSES\.027 (Adware.Kuaiba) -> Delete on reboot. [4e3ce6e3367257d
f35f2515eb24f40c0]
HKLM\SOFTWARE\CLASSES\.028 (Adware.Kuaiba) -> Delete on reboot. [f199facf5e4aad8
963c49f1041c028d8]
HKLM\SOFTWARE\CLASSES\.029 (Adware.Kuaiba) -> Delete on reboot. [e9a1ffca02a6063
04cdb3c737b86867a]
HKLM\SOFTWARE\CLASSES\.030 (Adware.Kuaiba) -> Delete on reboot. [09814980d4d4ef4
7de493f70728fea16]
HKLM\SOFTWARE\CLASSES\.031 (Adware.Kuaiba) -> Delete on reboot. [fe8cba0f6f39e45
2b374fbb4ca372ed2]
HKLM\SOFTWARE\CLASSES\.032 (Adware.Kuaiba) -> Delete on reboot. [94f66d5c2b7da19
5fe29f0bfc33e2dd3]
HKLM\SOFTWARE\CLASSES\.033 (Adware.Kuaiba) -> Delete on reboot. [c3c725a4d6d2112
551d65d52da2725db]
HKLM\SOFTWARE\CLASSES\.034 (Adware.Kuaiba) -> Delete on reboot. [ff8b30994b5db38
3f433169968990af6]
HKLM\SOFTWARE\CLASSES\.035 (Adware.Kuaiba) -> Delete on reboot. [0486facfadfb7fb
7ce59ac0304fd6799]
HKLM\SOFTWARE\CLASSES\.036 (Adware.Kuaiba) -> Delete on reboot. [9eecd1f8d6d272c
41116684709f89f61]
HKLM\SOFTWARE\CLASSES\.037 (Adware.Kuaiba) -> Delete on reboot. [5b2f8742901838f
ec26509a6f50cd32d]
HKLM\SOFTWARE\CLASSES\.038 (Adware.Kuaiba) -> Delete on reboot. [4b3f24a505a3b77
f3deadcd3c63b52ae]
HKLM\SOFTWARE\CLASSES\.039 (Adware.Kuaiba) -> Delete on reboot. [5436ddec9315d06
63dea4669877ad12f]
HKLM\SOFTWARE\CLASSES\.040 (Adware.Kuaiba) -> Delete on reboot. [96f45b6eedbb5ed
8ea3dcce3e21fd32d]
HKLM\SOFTWARE\CLASSES\.041 (Adware.Kuaiba) -> Delete on reboot. [7b0fa72207a1320
42ef9cce305fcf60a]
HKLM\SOFTWARE\CLASSES\.042 (Adware.Kuaiba) -> Delete on reboot. [7d0dd7f252560a2
c4add76396c95de22]
HKLM\SOFTWARE\CLASSES\.043 (Adware.Kuaiba) -> Delete on reboot. [4f3bcbfe9d0b162
0b473199615ecb050]
HKLM\SOFTWARE\CLASSES\.044 (Adware.Kuaiba) -> Delete on reboot. [95f5daeff9aff83
ea87ffab5986926da]
HKLM\SOFTWARE\CLASSES\.045 (Adware.Kuaiba) -> Delete on reboot. [fb8f13b62286dc5
a0f18b4fb2bd66799]
HKLM\SOFTWARE\CLASSES\.046 (Adware.Kuaiba) -> Delete on reboot. [0585ac1dc6e2b97
dad7a644bbb4630d0]
HKLM\SOFTWARE\CLASSES\.047 (Adware.Kuaiba) -> Delete on reboot. [a8e27a4fe2c6c17
567c02f8054ad28d8]
HKLM\SOFTWARE\CLASSES\.048 (Adware.Kuaiba) -> Delete on reboot. [b8d28346792f37f
f37f03d72a85902fe]
HKLM\SOFTWARE\CLASSES\.049 (Adware.Kuaiba) -> Delete on reboot. [2a60c7029d0b44f
21413743b7f8252ae]
HKLM\SOFTWARE\CLASSES\.050 (Adware.Kuaiba) -> Delete on reboot. [2b5fffca68403cf
ac6618b24728f8080]
HKLM\SOFTWARE\CLASSES\.051 (Adware.Kuaiba) -> Delete on reboot. [f99116b3bbed063
064c3f8b734cd33cd]
HKLM\SOFTWARE\CLASSES\.052 (Adware.Kuaiba) -> Delete on reboot. [f496d9f03f69003
65dca3b740af7ab55]
HKLM\SOFTWARE\CLASSES\.053 (Adware.Kuaiba) -> Delete on reboot. [61299534baee2d0
953d4832cfe0332ce]
HKLM\SOFTWARE\CLASSES\.054 (Adware.Kuaiba) -> Delete on reboot. [41493c8d14945bd
bd7508d2201005ca4]
HKLM\SOFTWARE\CLASSES\.055 (Adware.Kuaiba) -> Delete on reboot. [404a87425b4da29
4d94e4b64b74ad030]
HKLM\SOFTWARE\CLASSES\.056 (Adware.Kuaiba) -> Delete on reboot. [99f185449513320
4d057a00fa25f7c84]
HKLM\SOFTWARE\CLASSES\.057 (Adware.Kuaiba) -> Delete on reboot. [b1d96a5f7137ca6
cd55246694cb526da]
HKLM\SOFTWARE\CLASSES\.058 (Adware.Kuaiba) -> Delete on reboot. [d3b72d9c832587a
f77b0139c2ed3768a]
HKLM\SOFTWARE\CLASSES\.059 (Adware.Kuaiba) -> Delete on reboot. [9ceec900a0087bb
bdc4b01ae18e9bb45]
HKLM\SOFTWARE\CLASSES\.060 (Adware.Kuaiba) -> Delete on reboot. [f496d6f3b2f666d
0ae79a50a3dc4b947]
HKLM\SOFTWARE\CLASSES\.061 (Adware.Kuaiba) -> Delete on reboot. [49410cbd426645f
166c1eac5c23ff50b]
HKLM\SOFTWARE\CLASSES\.062 (Adware.Kuaiba) -> Delete on reboot. [4941b118a2061a1
cf5320fa0af52a15f]
HKLM\SOFTWARE\CLASSES\.063 (Adware.Kuaiba) -> Delete on reboot. [47431bae00a8e55
144e37a35669b13ed]
HKLM\SOFTWARE\CLASSES\.064 (Adware.Kuaiba) -> Delete on reboot. [a0ea93361c8c91a
59e899916d03143bd]
HKLM\SOFTWARE\CLASSES\.065 (Adware.Kuaiba) -> Delete on reboot. [e3a716b3e7c1b48
2d354cee1b64beb15]
HKLM\SOFTWARE\CLASSES\.066 (Adware.Kuaiba) -> Delete on reboot. [cbbf5c6dffa954e
2ea3de7c8dd2416ea]
HKLM\SOFTWARE\CLASSES\.067 (Adware.Kuaiba) -> Delete on reboot. [b3d74f7a3e6ad95
dde49feb10cf5926e]
HKLM\SOFTWARE\CLASSES\.068 (Adware.Kuaiba) -> Delete on reboot. [3b4fac1d9711ff3
729fe6d42808150b0]
HKLM\SOFTWARE\CLASSES\.069 (Adware.Kuaiba) -> Delete on reboot. [f694f2d774349c9
a8f98822da160a957]
HKLM\SOFTWARE\CLASSES\.070 (Adware.Kuaiba) -> Delete on reboot. [0a80587151570f2
746e1832c43be10f0]
HKLM\SOFTWARE\CLASSES\.071 (Adware.Kuaiba) -> Delete on reboot. [0e7cbd0c2484092
d0225852a78896f91]
HKLM\SOFTWARE\CLASSES\.072 (Adware.Kuaiba) -> Delete on reboot. [0c7e3594b0f886b
032f5832cd52c03fd]
HKLM\SOFTWARE\CLASSES\.073 (Adware.Kuaiba) -> Delete on reboot. [55353d8ca206102
682a59817f90824dc]
HKLM\SOFTWARE\CLASSES\.074 (Adware.Kuaiba) -> Delete on reboot. [404a37924563270
f9691a10e0ff28a76]
HKLM\SOFTWARE\CLASSES\.075 (Adware.Kuaiba) -> Delete on reboot. [c6c47c4d9b0d59d
d0b1c604fb948768a]
HKLM\SOFTWARE\CLASSES\.076 (Adware.Kuaiba) -> Delete on reboot. [16746762466248e
ed255ae015aa7ed13]
HKLM\SOFTWARE\CLASSES\.077 (Adware.Kuaiba) -> Delete on reboot. [177305c41890eb4
b0e19f9b6ed1426da]
HKLM\SOFTWARE\CLASSES\.078 (Adware.Kuaiba) -> Delete on reboot. [7d0dddec2f797db
9f532169903fe43bd]
HKLM\SOFTWARE\CLASSES\.079 (Adware.Kuaiba) -> Delete on reboot. [d4b62a9f0a9e88a
ee443fab56e93d12f]
HKLM\SOFTWARE\CLASSES\.080 (Adware.Kuaiba) -> Delete on reboot. [fc8ef3d6eeba231
3b0774c63996811ef]
HKLM\SOFTWARE\CLASSES\.081 (Adware.Kuaiba) -> Delete on reboot. [5c2e5871a30554e
2aa7d1d926a97718f]
HKLM\SOFTWARE\CLASSES\.082 (Adware.Kuaiba) -> Delete on reboot. [afdb7b4ec1e77cb
adf48d1debd440bf5]
HKLM\SOFTWARE\CLASSES\.083 (Adware.Kuaiba) -> Delete on reboot. [6b1f5c6dc1e7cb6
be93e1b942ad7c040]
HKLM\SOFTWARE\CLASSES\.084 (Adware.Kuaiba) -> Delete on reboot. [1a7015b4fbad92a
4f532d1de50b1ac54]
HKLM\SOFTWARE\CLASSES\.085 (Adware.Kuaiba) -> Delete on reboot. [e5a57356cfd96bc
bcc5bcbe403fef10f]
HKLM\SOFTWARE\CLASSES\.086 (Adware.Kuaiba) -> Delete on reboot. [ccbe9435c0e86ec
868bf4f606998ba46]
HKLM\SOFTWARE\CLASSES\.087 (Adware.Kuaiba) -> Delete on reboot. [72180dbccade6bc
b05225f501ee38a76]
HKLM\SOFTWARE\CLASSES\.088 (Adware.Kuaiba) -> Delete on reboot. [fb8f1eab891fc86
eaa7da30c4bb603fd]
HKLM\SOFTWARE\CLASSES\.089 (Adware.Kuaiba) -> Delete on reboot. [bdcdc3066c3cd06
60f185f5046bb847c]
HKLM\SOFTWARE\CLASSES\.090 (Adware.Kuaiba) -> Delete on reboot. [c6c4d2f74a5ed46
2dd4a2887be43b64a]
HKLM\SOFTWARE\CLASSES\.091 (Adware.Kuaiba) -> Delete on reboot. [37536564f2b647e
fea3d991654ad4fb1]
HKLM\SOFTWARE\CLASSES\.092 (Adware.Kuaiba) -> Delete on reboot. [3357a7227137132
3998efbb460a118e8]
HKLM\SOFTWARE\CLASSES\.093 (Adware.Kuaiba) -> Delete on reboot. [28624e7b693fb68
0e047eac5f20f6898]
HKLM\SOFTWARE\CLASSES\.094 (Adware.Kuaiba) -> Delete on reboot. [31595b6e36720f2
7081f7a35649d48b8]
HKLM\SOFTWARE\CLASSES\.095 (Adware.Kuaiba) -> Delete on reboot. [79110fba1b8d211
5bb6cc5ea976ac23e]
HKLM\SOFTWARE\CLASSES\.096 (Adware.Kuaiba) -> Delete on reboot. [513924a51098e74
fd84f9d1255ac1ce4]
HKLM\SOFTWARE\CLASSES\.097 (Adware.Kuaiba) -> Delete on reboot. [66242d9cd1d752e
429fe634cd52c55ab]
HKLM\SOFTWARE\CLASSES\.098 (Adware.Kuaiba) -> Delete on reboot. [7f0b87420a9e8ba
b85a2802f9d6449b7]
HKLM\SOFTWARE\CLASSES\.099 (Adware.Kuaiba) -> Delete on reboot. [54368544cbddd56
172b59e115da45ba5]
HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{12FA
A83E-E1B9-41DE-A644-D46A370FD181} (Adware.Agent.CLK) -> Delete on reboot. [49418
b3e2385f73f462c628ed9291ee2]
HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{A705
0524-2280-43C0-888B-B09B5D0410AA} (Adware.Linkury) -> Delete on reboot. [0882329
7a9ff6acc5192ddc89c6502fe]
HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{D50D
BEFD-854E-4D24-9A0F-191F01B016EA} (Adware.Elex) -> Delete on reboot. [4e3caf1a83
25171fc0c314bb12ee5ca4]
HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\hostTa
sk (Adware.Linkury) -> Delete on reboot. [fd8d8a3f1494ec4a39fb891ead547789]
HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Milimi
li (Adware.Elex) -> Delete on reboot. [6921b7122e7aef478cbd13bc748c58a8]
HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\osTip
(Adware.Agent.CLK) -> Delete on reboot. [dfab8148fbad74c20ee8a139d2312cd4]
HKLM\SOFTWARE\WOW6432NODE\mtHotfresh (Adware.Linkury.ACMB1) -> Delete on reboot.
[3753cffad6d22f07d5a2a928e81810f0]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.001 (Adware.Kuaiba) -> Delete on reboot. [a4e
6e8e11f892b0bf92e09a6877a8878]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.002 (Adware.Kuaiba) -> Delete on reboot. [1b6
fad1c198f72c4a2850ea159a85da3]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.003 (Adware.Kuaiba) -> Delete on reboot. [7b0
fcffad0d8c76fb86fb6f93fc210f0]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.004 (Adware.Kuaiba) -> Delete on reboot. [751
502c74761979f988f327d936e1ee2]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.005 (Adware.Kuaiba) -> Delete on reboot. [276
3c1084b5d60d621063d725ea3867a]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.006 (Adware.Kuaiba) -> Delete on reboot. [721
8c009c0e84ceaf4336649ea176f91]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.007 (Adware.Kuaiba) -> Delete on reboot. [a4e
612b71e8a85b1e443e7c805fcae52]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.008 (Adware.Kuaiba) -> Delete on reboot. [a9e
1f0d95f492313dd4a2e815ea359a7]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.009 (Adware.Kuaiba) -> Delete on reboot. [5e2
ce0e98820a6908b9cad02b94811ef]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.010 (Adware.Kuaiba) -> Delete on reboot. [751
5a8218d1b6cca42e5ae01eb1606fa]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.011 (Adware.Kuaiba) -> Delete on reboot. [eb9
f0dbc5e4ae5513ceb604fee13748c]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.012 (Adware.Kuaiba) -> Delete on reboot. [1c6
ef9d0d1d7e1557cabd6d9f809d12f]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.013 (Adware.Kuaiba) -> Delete on reboot. [008
a7752e3c5b68000274e61d031b749]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.014 (Adware.Kuaiba) -> Delete on reboot. [256
526a3d3d57bbbcc5b7639639e1ce4]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.015 (Adware.Kuaiba) -> Delete on reboot. [e0a
a7554594f46f0939437786d9444bc]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.016 (Adware.Kuaiba) -> Delete on reboot. [038
7c0096c3c41f50f1806a90cf5c13f]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.017 (Adware.Kuaiba) -> Delete on reboot. [167
4aa1f6c3cda5c68bf4f60c73a817f]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.018 (Adware.Kuaiba) -> Delete on reboot. [2b5
f428743658aacd5521f907d844eb2]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.019 (Adware.Kuaiba) -> Delete on reboot. [5f2
b3f8a891f6dc9ef38b6f9b54cf709]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.020 (Adware.Kuaiba) -> Delete on reboot. [088
219b0ebbd1e188e99b0ff9e63f907]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.021 (Adware.Kuaiba) -> Delete on reboot. [a4e
66a5f7c2cd95d3fe87b340100a858]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.022 (Adware.Kuaiba) -> Delete on reboot. [424
87455aff9be787fa803acc1401de3]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.023 (Adware.Kuaiba) -> Delete on reboot. [3a5
056735b4d999d71b6d0dfd1308080]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.024 (Adware.Kuaiba) -> Delete on reboot. [414
9d9f0396ff541be69555aa35ea45c]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.025 (Adware.Kuaiba) -> Delete on reboot. [91f
98445cbddbe78ad7a4d62fb06d828]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.026 (Adware.Kuaiba) -> Delete on reboot. [028
807c2baeebe78cb5c9e1159a833cd]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.027 (Adware.Kuaiba) -> Delete on reboot. [068
49a2f3f69a6902ef98827b15056aa]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.028 (Adware.Kuaiba) -> Delete on reboot. [f69
47b4ebfe9f442b96ed5daef1203fd]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.029 (Adware.Kuaiba) -> Delete on reboot. [ff8
baf1a86223ff761c67d3288796997]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.030 (Adware.Kuaiba) -> Delete on reboot. [9ce
ea7223c6c20162ef92b84936e43bd]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.031 (Adware.Kuaiba) -> Delete on reboot. [7b0
f25a48523d95ddf48822da45d5aa6]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.032 (Adware.Kuaiba) -> Delete on reboot. [dea
cb910d2d61323a4831798b9482dd3]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.033 (Adware.Kuaiba) -> Delete on reboot. [a9e
1a227b0f890a60720129d09f81be5]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.034 (Adware.Kuaiba) -> Delete on reboot. [3c4
e8b3e2a7ef5410324cbe4758ccb35]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.035 (Adware.Kuaiba) -> Delete on reboot. [a9e
1be0ba008092d9a8d951a0bf6e21e]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.036 (Adware.Kuaiba) -> Delete on reboot. [3b4
f92379018f0462304941bbd4446ba]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.037 (Adware.Kuaiba) -> Delete on reboot. [8cf
e77529018280e86a14c6341c0d729]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.038 (Adware.Kuaiba) -> Delete on reboot. [8ff
b3891eabe42f4ad7a96196f92fd03]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.039 (Adware.Kuaiba) -> Delete on reboot. [662
4af1a08a0989ea97eac037f82b54b]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.040 (Adware.Kuaiba) -> Delete on reboot. [404
afecb4563d95d36f16649748d7090]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.041 (Adware.Kuaiba) -> Delete on reboot. [1a7
0676200a80e282afde9c617ea8f71]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.042 (Adware.Kuaiba) -> Delete on reboot. [c0c
a2c9d0f99ed49f92e1897bd44b848]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.043 (Adware.Kuaiba) -> Delete on reboot. [a8e
20bbe94148bab68bfffb0af52e31d]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.044 (Adware.Kuaiba) -> Delete on reboot. [cac
07059f7b140f6fc2b3778f011e31d]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.045 (Adware.Kuaiba) -> Delete on reboot. [583
26861ffa9ad898c9bc4eb8180a45c]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.046 (Adware.Kuaiba) -> Delete on reboot. [91f
947820d9be4524fd8397661a0ed13]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.047 (Adware.Kuaiba) -> Delete on reboot. [abd
fd1f865432214fd2a367927daa060]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.048 (Adware.Kuaiba) -> Delete on reboot. [3f4
ba4251296a88ebf68713eb54c9967]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.049 (Adware.Kuaiba) -> Delete on reboot. [acd
ef7d2deca83b3be69eac5b05133cd]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.050 (Adware.Kuaiba) -> Delete on reboot. [3c4
e5d6cbcec8fa71c0becc3768bbc44]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.051 (Adware.Kuaiba) -> Delete on reboot. [bbc
f5475c5e363d3998ecfe0f908b848]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.052 (Adware.Kuaiba) -> Delete on reboot. [f89
29831f2b6eb4b8d9a96198d74857b]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.053 (Adware.Kuaiba) -> Delete on reboot. [850
50fbabbed6acc190e8e2151b07a86]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.054 (Adware.Kuaiba) -> Delete on reboot. [b3d
7c20791170234f0378e21a65b6c94]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.055 (Adware.Kuaiba) -> Delete on reboot. [bad
08544bbedf5411a0d2b847e8343bd]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.056 (Adware.Kuaiba) -> Delete on reboot. [583
2f6d3aefa2c0adb4c406f649d42be]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.057 (Adware.Kuaiba) -> Delete on reboot. [048
6ba0f80281d19d0576b44b44d33cd]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.058 (Adware.Kuaiba) -> Delete on reboot. [a3e
7e7e22d7b1f1754d3238c59a803fd]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.059 (Adware.Kuaiba) -> Delete on reboot. [781
210b94c5c8bab2ff8e2cd14edce32]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.060 (Adware.Kuaiba) -> Delete on reboot. [296
130995e4ab0863ee9f5bab64bcc34]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.061 (Adware.Kuaiba) -> Delete on reboot. [652
51caddacec17535f2a00fac5521df]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.062 (Adware.Kuaiba) -> Delete on reboot. [246
62b9e4662e05620074e6157aaa65a]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.063 (Adware.Kuaiba) -> Delete on reboot. [96f
4cdfcd0d80d2958cf6f4027da7f81]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.064 (Adware.Kuaiba) -> Delete on reboot. [8df
d05c49e0a4aec998e812e02ff738d]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.065 (Adware.Kuaiba) -> Delete on reboot. [216
96c5d2d7b38fecc5ba50a9170b848]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.066 (Adware.Kuaiba) -> Delete on reboot. [345
6b217efb99f97e54228877a878d73]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.067 (Adware.Kuaiba) -> Delete on reboot. [088
27d4c8424171ff0377c33e8197e82]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.068 (Adware.Kuaiba) -> Delete on reboot. [5b2
f6a5f7038e650b96eb6f9aa574db3]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.069 (Adware.Kuaiba) -> Delete on reboot. [cfb
b5a6fe8c08bab3ceb1a955ea316ea]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.070 (Adware.Kuaiba) -> Delete on reboot. [2d5
d2c9dd4d4e0564bdc654a3fc23fc1]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.071 (Adware.Kuaiba) -> Delete on reboot. [355
56a5f2c7c2412f730bbf4926f0af6]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.072 (Adware.Kuaiba) -> Delete on reboot. [147
6f7d24d5b62d4dd4a337c23dea15f]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.073 (Adware.Kuaiba) -> Delete on reboot. [c8c
2c10854541b1b3bec634cff026898]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.074 (Adware.Kuaiba) -> Delete on reboot. [a6e
4e3e6d4d4e65063c4129d9c6521df]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.075 (Adware.Kuaiba) -> Delete on reboot. [f59
55d6c792fc57169be307f2fd233cd]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.076 (Adware.Kuaiba) -> Delete on reboot. [bad
0e7e28e1a88ae62c519965da48779]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.077 (Adware.Kuaiba) -> Delete on reboot. [216
906c38622e353180f1d927c85cc34]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.078 (Adware.Kuaiba) -> Delete on reboot. [e0a
aebdefcac94a25ec9149bb34e7888]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.079 (Adware.Kuaiba) -> Delete on reboot. [632
745849f098bab2502e4cbf20f33cd]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.080 (Adware.Kuaiba) -> Delete on reboot. [d9b
173561d8b85b1ce59703f9b667e82]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.081 (Adware.Kuaiba) -> Delete on reboot. [8df
d9831d9cf092d2ff86c43f40d6a96]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.082 (Adware.Kuaiba) -> Delete on reboot. [028
887426543eb4be344634cd72a867a]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.083 (Adware.Kuaiba) -> Delete on reboot. [8ff
b6069c7e1eb4b3ceb149b4eb339c7]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.084 (Adware.Kuaiba) -> Delete on reboot. [4c3
eddec5e4a64d257d0feb1c73a52ae]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.085 (Adware.Kuaiba) -> Delete on reboot. [088
2933651575ed82601327d827f03fd]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.086 (Adware.Kuaiba) -> Delete on reboot. [aae
01eab515744f22007f7b85ca55ca4]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.087 (Adware.Kuaiba) -> Delete on reboot. [a4e
629a08e1a61d56eb9ecc35fa2c63a]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.088 (Adware.Kuaiba) -> Delete on reboot. [7c0
ea821891f0531f433634cdf22ad53]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.089 (Adware.Kuaiba) -> Delete on reboot. [b9d
1facf169270c692954768d72a1ae6]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.090 (Adware.Kuaiba) -> Delete on reboot. [6e1
c85444c5c0a2cb671a609966bd22e]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.091 (Adware.Kuaiba) -> Delete on reboot. [5b2
faa1f06a26ec8d94ee5ca32cfef11]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.092 (Adware.Kuaiba) -> Delete on reboot. [8a0
09732594f5bdba384fab537ca1de3]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.093 (Adware.Kuaiba) -> Delete on reboot. [296
13d8cb2f6ce6867c02a85ad54f50b]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.094 (Adware.Kuaiba) -> Delete on reboot. [2f5
b4584495f46f0ea3dd7d8d52c7987]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.095 (Adware.Kuaiba) -> Delete on reboot. [91f
9a6230f9990a634f3931c917021df]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.096 (Adware.Kuaiba) -> Delete on reboot. [622
89732b6f2ac8aa681bdf2ee130df3]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.097 (Adware.Kuaiba) -> Delete on reboot. [a4e
67059278160d6ba6d46690ef33ec2]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.098 (Adware.Kuaiba) -> Delete on reboot. [652
5a4250f9959ddf433337c43be926e]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.099 (Adware.Kuaiba) -> Delete on reboot. [117
99b2ee5c3cf677bac7c33827f24dc]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\TRACING\Hotfresh_RASAPI32 (Adware.Linkury.AC
MB1) -> Delete on reboot. [c4c6a029abfdeb4b732bd7f96c94956b]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\TRACING\Hotfresh_RASMANCS (Adware.Linkury.AC
MB1) -> Delete on reboot. [8bffcffac3e55cdad2ccbb15b34d847c]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SILENTPROCESSEXIT\
Hotfresh.exe (Adware.Linkury.ACMB1) -> Delete on reboot. [d8b2eadf6741d1650e2ed7
f9e7197987]
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Kyubey (Adware.Elex.SHHKRST) -> Delete on
reboot. [d5b56d5ca20657dfee42145e23de01ff]
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\PrefersSecure (Adware.Linkury) -> Delete
on reboot. [e1a9c405b6f2d660104721859071659b]
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WinSnare (Adware.Elex) -> Delete on reboo
t. [6327f7d26444be78071bc4279d630000]
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\BACKLH (Adware.Linkury) -> Delete on rebo
ot. [662416b308a041f53bc6e71d15eda957]
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\ED2KIDLE (Adware.Elex) -> Delete on reboo
t. [5c2e5a6fdfc95adc257c755734cd5aa6]
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\APPLICATION\WinSnare (Adware.Ele
x) -> Delete on reboot. [8cfe7851495fd165059dcefe1ee3a35d]
HKU\S-1-5-21-260700862-3412582513-2462944927-1001\SOFTWARE\mtHotfresh (Adware.Li
nkury.ACMB1) -> Delete on reboot. [f595e2e7c2e6fe38441d9838ba46738d]
HKU\S-1-5-21-260700862-3412582513-2462944927-1001\SOFTWARE\osTip (Trojan.Agent.C
LK) -> Delete on reboot. [b0da25a4a9ff7eb8744205a3649ce818]
HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\H
OTFRESH.EXE (Adware.Linkury.ACMB1) -> Delete on reboot. [6b1feadf5a4ef145deaf339
e8d739769]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTI
ON OPTIONS\HOTFRESH.EXE (Adware.Linkury.ACMB1) -> Delete on reboot. [6b1feadf5a4
ef145deaf339e8d739769]
Registry Values Detected: 207
HKU\S-1-5-21-260700862-3412582513-2462944927-1001\SOFTWARE\MICROSOFT\WINDOWS\CUR
RENTVERSION\RUN|Eskction (Spyware.Boaxxe) -> Data: C:\Users\AmyDerp\AppData\Loca
l\Eskction\Windows_Activaton.exe -> Delete on reboot. [cfbbc900c2e6ba7ce751cb372
ad804fc]
HKU\S-1-5-21-260700862-3412582513-2462944927-1001\SOFTWARE\MICROSOFT\WINDOWS\CUR
RENTVERSION\RUN|msiql (Adware.Agent) -> Data: C:\Users\AmyDerp\AppData\Local\Tem
p\00001169\msiql.exe /RUNNING -> Delete on reboot. [a6e45b6ed9cf3ff74d270a1d38c9
a45c]
HKU\S-1-5-21-260700862-3412582513-2462944927-1001\SOFTWARE\MICROSOFT\WINDOWS\CUR
RENTVERSION\RUN|osmsg (Adware.Eszjuxuan) -> Data: C:\ProgramData\WindowsMsg\chro
me.exe /AUTORUN -> Delete on reboot. [f39718b107a12412a4024997c43c0bf5]
HKLM\SOFTWARE\CLASSES\.001| (Adware.Kuaiba) -> Data: KuaiZip.001 -> Delete on re
boot. [8dfd18b10c9c3cfacf58208f5ba60cf4]
HKLM\SOFTWARE\CLASSES\.002| (Adware.Kuaiba) -> Data: KuaiZip.002 -> Delete on re
boot. [f09aac1d8f193105cd5a01aeac55f709]
HKLM\SOFTWARE\CLASSES\.003| (Adware.Kuaiba) -> Data: KuaiZip.003 -> Delete on re
boot. [2a60eadfcfd945f1d057f2bd50b11de3]
HKLM\SOFTWARE\CLASSES\.004| (Adware.Kuaiba) -> Data: KuaiZip.004 -> Delete on re
boot. [107a745596122e08c1663976a65b7d83]
HKLM\SOFTWARE\CLASSES\.005| (Adware.Kuaiba) -> Data: KuaiZip.005 -> Delete on re
boot. [a0eabd0c1e8acb6b2403bbf41be63cc4]
HKLM\SOFTWARE\CLASSES\.006| (Adware.Kuaiba) -> Data: KuaiZip.006 -> Delete on re
boot. [0585b9101197d3631c0b8e21c33e23dd]
HKLM\SOFTWARE\CLASSES\.007| (Adware.Kuaiba) -> Data: KuaiZip.007 -> Delete on re
boot. [5733caffb9efe3532dfaf2bd827f19e7]
HKLM\SOFTWARE\CLASSES\.008| (Adware.Kuaiba) -> Data: KuaiZip.008 -> Delete on re
boot. [b7d3dced7a2e999d9d8a446bee138f71]
HKLM\SOFTWARE\CLASSES\.009| (Adware.Kuaiba) -> Data: KuaiZip.009 -> Delete on re
boot. [ff8b22a7d5d33cfaa483456ac43d09f7]
HKLM\SOFTWARE\CLASSES\.010| (Adware.Kuaiba) -> Data: KuaiZip.010 -> Delete on re
boot. [1f6bae1b6642cc6a60c7317e55ac6b95]
HKLM\SOFTWARE\CLASSES\.011| (Adware.Kuaiba) -> Data: KuaiZip.011 -> Delete on re
boot. [d5b599308e1a162041e6634c52af42be]
HKLM\SOFTWARE\CLASSES\.012| (Adware.Kuaiba) -> Data: KuaiZip.012 -> Delete on re
boot. [088256736f39f14565c2edc2f011916f]
HKLM\SOFTWARE\CLASSES\.013| (Adware.Kuaiba) -> Data: KuaiZip.013 -> Delete on re
boot. [305abb0ec6e2fa3c75b2446bc33e6a96]
HKLM\SOFTWARE\CLASSES\.014| (Adware.Kuaiba) -> Data: KuaiZip.014 -> Delete on re
boot. [65258445614793a32ef96946c93833cd]
HKLM\SOFTWARE\CLASSES\.015| (Adware.Kuaiba) -> Data: KuaiZip.015 -> Delete on re
boot. [98f28d3c2b7d7bbb60c77a35b74a24dc]
HKLM\SOFTWARE\CLASSES\.016| (Adware.Kuaiba) -> Data: KuaiZip.016 -> Delete on re
boot. [c9c129a0acfc8fa75dcad9d6dc25d030]
HKLM\SOFTWARE\CLASSES\.017| (Adware.Kuaiba) -> Data: KuaiZip.017 -> Delete on re
boot. [bcceb0194d5b1d1975b2d8d7aa57966a]
HKLM\SOFTWARE\CLASSES\.018| (Adware.Kuaiba) -> Data: KuaiZip.018 -> Delete on re
boot. [167460697d2b5fd7ef386c431be632ce]
HKLM\SOFTWARE\CLASSES\.019| (Adware.Kuaiba) -> Data: KuaiZip.019 -> Delete on re
boot. [088229a0c3e5d75f2007ebc47889f50b]
HKLM\SOFTWARE\CLASSES\.020| (Adware.Kuaiba) -> Data: KuaiZip.020 -> Delete on re
boot. [e9a14e7b5157d2649493139c6a9713ed]
HKLM\SOFTWARE\CLASSES\.021| (Adware.Kuaiba) -> Data: KuaiZip.021 -> Delete on re
boot. [dcae3d8cecbc053176b1bbf4d72ac040]
HKLM\SOFTWARE\CLASSES\.022| (Adware.Kuaiba) -> Data: KuaiZip.022 -> Delete on re
boot. [f9916663d4d41323c95e436cb74aaa56]
HKLM\SOFTWARE\CLASSES\.023| (Adware.Kuaiba) -> Data: KuaiZip.023 -> Delete on re
boot. [741626a3d0d82e0848dfe1cecf321de3]
HKLM\SOFTWARE\CLASSES\.024| (Adware.Kuaiba) -> Data: KuaiZip.024 -> Delete on re
boot. [9feb03c6fcac62d4fa2d723d18e9ba46]
HKLM\SOFTWARE\CLASSES\.025| (Adware.Kuaiba) -> Data: KuaiZip.025 -> Delete on re
boot. [800ac009a80052e4f334a50abd442dd3]
HKLM\SOFTWARE\CLASSES\.026| (Adware.Kuaiba) -> Data: KuaiZip.026 -> Delete on re
boot. [9cee1eabf9af38fe2502753a000104fc]
HKLM\SOFTWARE\CLASSES\.027| (Adware.Kuaiba) -> Data: KuaiZip.027 -> Delete on re
boot. [4e3ce6e3367257df35f2515eb24f40c0]
HKLM\SOFTWARE\CLASSES\.028| (Adware.Kuaiba) -> Data: KuaiZip.028 -> Delete on re
boot. [f199facf5e4aad8963c49f1041c028d8]
HKLM\SOFTWARE\CLASSES\.029| (Adware.Kuaiba) -> Data: KuaiZip.029 -> Delete on re
boot. [e9a1ffca02a606304cdb3c737b86867a]
HKLM\SOFTWARE\CLASSES\.030| (Adware.Kuaiba) -> Data: KuaiZip.030 -> Delete on re
boot. [09814980d4d4ef47de493f70728fea16]
HKLM\SOFTWARE\CLASSES\.031| (Adware.Kuaiba) -> Data: KuaiZip.031 -> Delete on re
boot. [fe8cba0f6f39e452b374fbb4ca372ed2]
HKLM\SOFTWARE\CLASSES\.032| (Adware.Kuaiba) -> Data: KuaiZip.032 -> Delete on re
boot. [94f66d5c2b7da195fe29f0bfc33e2dd3]
HKLM\SOFTWARE\CLASSES\.033| (Adware.Kuaiba) -> Data: KuaiZip.033 -> Delete on re
boot. [c3c725a4d6d2112551d65d52da2725db]
HKLM\SOFTWARE\CLASSES\.034| (Adware.Kuaiba) -> Data: KuaiZip.034 -> Delete on re
boot. [ff8b30994b5db383f433169968990af6]
HKLM\SOFTWARE\CLASSES\.035| (Adware.Kuaiba) -> Data: KuaiZip.035 -> Delete on re
boot. [0486facfadfb7fb7ce59ac0304fd6799]
HKLM\SOFTWARE\CLASSES\.036| (Adware.Kuaiba) -> Data: KuaiZip.036 -> Delete on re
boot. [9eecd1f8d6d272c41116684709f89f61]
HKLM\SOFTWARE\CLASSES\.037| (Adware.Kuaiba) -> Data: KuaiZip.037 -> Delete on re
boot. [5b2f8742901838fec26509a6f50cd32d]
HKLM\SOFTWARE\CLASSES\.038| (Adware.Kuaiba) -> Data: KuaiZip.038 -> Delete on re
boot. [4b3f24a505a3b77f3deadcd3c63b52ae]
HKLM\SOFTWARE\CLASSES\.039| (Adware.Kuaiba) -> Data: KuaiZip.039 -> Delete on re
boot. [5436ddec9315d0663dea4669877ad12f]
HKLM\SOFTWARE\CLASSES\.040| (Adware.Kuaiba) -> Data: KuaiZip.040 -> Delete on re
boot. [96f45b6eedbb5ed8ea3dcce3e21fd32d]
HKLM\SOFTWARE\CLASSES\.041| (Adware.Kuaiba) -> Data: KuaiZip.041 -> Delete on re
boot. [7b0fa72207a132042ef9cce305fcf60a]
HKLM\SOFTWARE\CLASSES\.042| (Adware.Kuaiba) -> Data: KuaiZip.042 -> Delete on re
boot. [7d0dd7f252560a2c4add76396c95de22]
HKLM\SOFTWARE\CLASSES\.043| (Adware.Kuaiba) -> Data: KuaiZip.043 -> Delete on re
boot. [4f3bcbfe9d0b1620b473199615ecb050]
HKLM\SOFTWARE\CLASSES\.044| (Adware.Kuaiba) -> Data: KuaiZip.044 -> Delete on re
boot. [95f5daeff9aff83ea87ffab5986926da]
HKLM\SOFTWARE\CLASSES\.045| (Adware.Kuaiba) -> Data: KuaiZip.045 -> Delete on re
boot. [fb8f13b62286dc5a0f18b4fb2bd66799]
HKLM\SOFTWARE\CLASSES\.046| (Adware.Kuaiba) -> Data: KuaiZip.046 -> Delete on re
boot. [0585ac1dc6e2b97dad7a644bbb4630d0]
HKLM\SOFTWARE\CLASSES\.047| (Adware.Kuaiba) -> Data: KuaiZip.047 -> Delete on re
boot. [a8e27a4fe2c6c17567c02f8054ad28d8]
HKLM\SOFTWARE\CLASSES\.048| (Adware.Kuaiba) -> Data: KuaiZip.048 -> Delete on re
boot. [b8d28346792f37ff37f03d72a85902fe]
HKLM\SOFTWARE\CLASSES\.049| (Adware.Kuaiba) -> Data: KuaiZip.049 -> Delete on re
boot. [2a60c7029d0b44f21413743b7f8252ae]
HKLM\SOFTWARE\CLASSES\.050| (Adware.Kuaiba) -> Data: KuaiZip.050 -> Delete on re
boot. [2b5fffca68403cfac6618b24728f8080]
HKLM\SOFTWARE\CLASSES\.051| (Adware.Kuaiba) -> Data: KuaiZip.051 -> Delete on re
boot. [f99116b3bbed063064c3f8b734cd33cd]
HKLM\SOFTWARE\CLASSES\.052| (Adware.Kuaiba) -> Data: KuaiZip.052 -> Delete on re
boot. [f496d9f03f6900365dca3b740af7ab55]
HKLM\SOFTWARE\CLASSES\.053| (Adware.Kuaiba) -> Data: KuaiZip.053 -> Delete on re
boot. [61299534baee2d0953d4832cfe0332ce]
HKLM\SOFTWARE\CLASSES\.054| (Adware.Kuaiba) -> Data: KuaiZip.054 -> Delete on re
boot. [41493c8d14945bdbd7508d2201005ca4]
HKLM\SOFTWARE\CLASSES\.055| (Adware.Kuaiba) -> Data: KuaiZip.055 -> Delete on re
boot. [404a87425b4da294d94e4b64b74ad030]
HKLM\SOFTWARE\CLASSES\.056| (Adware.Kuaiba) -> Data: KuaiZip.056 -> Delete on re
boot. [99f1854495133204d057a00fa25f7c84]
HKLM\SOFTWARE\CLASSES\.057| (Adware.Kuaiba) -> Data: KuaiZip.057 -> Delete on re
boot. [b1d96a5f7137ca6cd55246694cb526da]
HKLM\SOFTWARE\CLASSES\.058| (Adware.Kuaiba) -> Data: KuaiZip.058 -> Delete on re
boot. [d3b72d9c832587af77b0139c2ed3768a]
HKLM\SOFTWARE\CLASSES\.059| (Adware.Kuaiba) -> Data: KuaiZip.059 -> Delete on re
boot. [9ceec900a0087bbbdc4b01ae18e9bb45]
HKLM\SOFTWARE\CLASSES\.060| (Adware.Kuaiba) -> Data: KuaiZip.060 -> Delete on re
boot. [f496d6f3b2f666d0ae79a50a3dc4b947]
HKLM\SOFTWARE\CLASSES\.061| (Adware.Kuaiba) -> Data: KuaiZip.061 -> Delete on re
boot. [49410cbd426645f166c1eac5c23ff50b]
HKLM\SOFTWARE\CLASSES\.062| (Adware.Kuaiba) -> Data: KuaiZip.062 -> Delete on re
boot. [4941b118a2061a1cf5320fa0af52a15f]
HKLM\SOFTWARE\CLASSES\.063| (Adware.Kuaiba) -> Data: KuaiZip.063 -> Delete on re
boot. [47431bae00a8e55144e37a35669b13ed]
HKLM\SOFTWARE\CLASSES\.064| (Adware.Kuaiba) -> Data: KuaiZip.064 -> Delete on re
boot. [a0ea93361c8c91a59e899916d03143bd]
HKLM\SOFTWARE\CLASSES\.065| (Adware.Kuaiba) -> Data: KuaiZip.065 -> Delete on re
boot. [e3a716b3e7c1b482d354cee1b64beb15]
HKLM\SOFTWARE\CLASSES\.066| (Adware.Kuaiba) -> Data: KuaiZip.066 -> Delete on re
boot. [cbbf5c6dffa954e2ea3de7c8dd2416ea]
HKLM\SOFTWARE\CLASSES\.067| (Adware.Kuaiba) -> Data: KuaiZip.067 -> Delete on re
boot. [b3d74f7a3e6ad95dde49feb10cf5926e]
HKLM\SOFTWARE\CLASSES\.068| (Adware.Kuaiba) -> Data: KuaiZip.068 -> Delete on re
boot. [3b4fac1d9711ff3729fe6d42808150b0]
HKLM\SOFTWARE\CLASSES\.069| (Adware.Kuaiba) -> Data: KuaiZip.069 -> Delete on re
boot. [f694f2d774349c9a8f98822da160a957]
HKLM\SOFTWARE\CLASSES\.070| (Adware.Kuaiba) -> Data: KuaiZip.070 -> Delete on re
boot. [0a80587151570f2746e1832c43be10f0]
HKLM\SOFTWARE\CLASSES\.071| (Adware.Kuaiba) -> Data: KuaiZip.071 -> Delete on re
boot. [0e7cbd0c2484092d0225852a78896f91]
HKLM\SOFTWARE\CLASSES\.072| (Adware.Kuaiba) -> Data: KuaiZip.072 -> Delete on re
boot. [0c7e3594b0f886b032f5832cd52c03fd]
HKLM\SOFTWARE\CLASSES\.073| (Adware.Kuaiba) -> Data: KuaiZip.073 -> Delete on re
boot. [55353d8ca206102682a59817f90824dc]
HKLM\SOFTWARE\CLASSES\.074| (Adware.Kuaiba) -> Data: KuaiZip.074 -> Delete on re
boot. [404a37924563270f9691a10e0ff28a76]
HKLM\SOFTWARE\CLASSES\.075| (Adware.Kuaiba) -> Data: KuaiZip.075 -> Delete on re
boot. [c6c47c4d9b0d59dd0b1c604fb948768a]
HKLM\SOFTWARE\CLASSES\.076| (Adware.Kuaiba) -> Data: KuaiZip.076 -> Delete on re
boot. [16746762466248eed255ae015aa7ed13]
HKLM\SOFTWARE\CLASSES\.077| (Adware.Kuaiba) -> Data: KuaiZip.077 -> Delete on re
boot. [177305c41890eb4b0e19f9b6ed1426da]
HKLM\SOFTWARE\CLASSES\.078| (Adware.Kuaiba) -> Data: KuaiZip.078 -> Delete on re
boot. [7d0dddec2f797db9f532169903fe43bd]
HKLM\SOFTWARE\CLASSES\.079| (Adware.Kuaiba) -> Data: KuaiZip.079 -> Delete on re
boot. [d4b62a9f0a9e88aee443fab56e93d12f]
HKLM\SOFTWARE\CLASSES\.080| (Adware.Kuaiba) -> Data: KuaiZip.080 -> Delete on re
boot. [fc8ef3d6eeba2313b0774c63996811ef]
HKLM\SOFTWARE\CLASSES\.081| (Adware.Kuaiba) -> Data: KuaiZip.081 -> Delete on re
boot. [5c2e5871a30554e2aa7d1d926a97718f]
HKLM\SOFTWARE\CLASSES\.082| (Adware.Kuaiba) -> Data: KuaiZip.082 -> Delete on re
boot. [afdb7b4ec1e77cbadf48d1debd440bf5]
HKLM\SOFTWARE\CLASSES\.083| (Adware.Kuaiba) -> Data: KuaiZip.083 -> Delete on re
boot. [6b1f5c6dc1e7cb6be93e1b942ad7c040]
HKLM\SOFTWARE\CLASSES\.084| (Adware.Kuaiba) -> Data: KuaiZip.084 -> Delete on re
boot. [1a7015b4fbad92a4f532d1de50b1ac54]
HKLM\SOFTWARE\CLASSES\.085| (Adware.Kuaiba) -> Data: KuaiZip.085 -> Delete on re
boot. [e5a57356cfd96bcbcc5bcbe403fef10f]
HKLM\SOFTWARE\CLASSES\.086| (Adware.Kuaiba) -> Data: KuaiZip.086 -> Delete on re
boot. [ccbe9435c0e86ec868bf4f606998ba46]
HKLM\SOFTWARE\CLASSES\.087| (Adware.Kuaiba) -> Data: KuaiZip.087 -> Delete on re
boot. [72180dbccade6bcb05225f501ee38a76]
HKLM\SOFTWARE\CLASSES\.088| (Adware.Kuaiba) -> Data: KuaiZip.088 -> Delete on re
boot. [fb8f1eab891fc86eaa7da30c4bb603fd]
HKLM\SOFTWARE\CLASSES\.089| (Adware.Kuaiba) -> Data: KuaiZip.089 -> Delete on re
boot. [bdcdc3066c3cd0660f185f5046bb847c]
HKLM\SOFTWARE\CLASSES\.090| (Adware.Kuaiba) -> Data: KuaiZip.090 -> Delete on re
boot. [c6c4d2f74a5ed462dd4a2887be43b64a]
HKLM\SOFTWARE\CLASSES\.091| (Adware.Kuaiba) -> Data: KuaiZip.091 -> Delete on re
boot. [37536564f2b647efea3d991654ad4fb1]
HKLM\SOFTWARE\CLASSES\.092| (Adware.Kuaiba) -> Data: KuaiZip.092 -> Delete on re
boot. [3357a72271371323998efbb460a118e8]
HKLM\SOFTWARE\CLASSES\.093| (Adware.Kuaiba) -> Data: KuaiZip.093 -> Delete on re
boot. [28624e7b693fb680e047eac5f20f6898]
HKLM\SOFTWARE\CLASSES\.094| (Adware.Kuaiba) -> Data: KuaiZip.094 -> Delete on re
boot. [31595b6e36720f27081f7a35649d48b8]
HKLM\SOFTWARE\CLASSES\.095| (Adware.Kuaiba) -> Data: KuaiZip.095 -> Delete on re
boot. [79110fba1b8d2115bb6cc5ea976ac23e]
HKLM\SOFTWARE\CLASSES\.096| (Adware.Kuaiba) -> Data: KuaiZip.096 -> Delete on re
boot. [513924a51098e74fd84f9d1255ac1ce4]
HKLM\SOFTWARE\CLASSES\.097| (Adware.Kuaiba) -> Data: KuaiZip.097 -> Delete on re
boot. [66242d9cd1d752e429fe634cd52c55ab]
HKLM\SOFTWARE\CLASSES\.098| (Adware.Kuaiba) -> Data: KuaiZip.098 -> Delete on re
boot. [7f0b87420a9e8bab85a2802f9d6449b7]
HKLM\SOFTWARE\CLASSES\.099| (Adware.Kuaiba) -> Data: KuaiZip.099 -> Delete on re
boot. [54368544cbddd56172b59e115da45ba5]
HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{12FA
A83E-E1B9-41DE-A644-D46A370FD181}|Path (Adware.Agent.CLK) -> Data: \osTip -> Del
ete on reboot. [49418b3e2385f73f462c628ed9291ee2]
HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{A705
0524-2280-43C0-888B-B09B5D0410AA}|Path (Adware.Linkury) -> Data: \hostTask -> De
lete on reboot. [08823297a9ff6acc5192ddc89c6502fe]
HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{D50D
BEFD-854E-4D24-9A0F-191F01B016EA}|Path (Adware.Elex) -> Data: \Milimili -> Delet
e on reboot. [4e3caf1a8325171fc0c314bb12ee5ca4]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.001| (Adware.Kuaiba) -> Data: KuaiZip.001 ->
Delete on reboot. [a4e6e8e11f892b0bf92e09a6877a8878]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.002| (Adware.Kuaiba) -> Data: KuaiZip.002 ->
Delete on reboot. [1b6fad1c198f72c4a2850ea159a85da3]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.003| (Adware.Kuaiba) -> Data: KuaiZip.003 ->
Delete on reboot. [7b0fcffad0d8c76fb86fb6f93fc210f0]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.004| (Adware.Kuaiba) -> Data: KuaiZip.004 ->
Delete on reboot. [751502c74761979f988f327d936e1ee2]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.005| (Adware.Kuaiba) -> Data: KuaiZip.005 ->
Delete on reboot. [2763c1084b5d60d621063d725ea3867a]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.006| (Adware.Kuaiba) -> Data: KuaiZip.006 ->
Delete on reboot. [7218c009c0e84ceaf4336649ea176f91]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.007| (Adware.Kuaiba) -> Data: KuaiZip.007 ->
Delete on reboot. [a4e612b71e8a85b1e443e7c805fcae52]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.008| (Adware.Kuaiba) -> Data: KuaiZip.008 ->
Delete on reboot. [a9e1f0d95f492313dd4a2e815ea359a7]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.009| (Adware.Kuaiba) -> Data: KuaiZip.009 ->
Delete on reboot. [5e2ce0e98820a6908b9cad02b94811ef]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.010| (Adware.Kuaiba) -> Data: KuaiZip.010 ->
Delete on reboot. [7515a8218d1b6cca42e5ae01eb1606fa]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.011| (Adware.Kuaiba) -> Data: KuaiZip.011 ->
Delete on reboot. [eb9f0dbc5e4ae5513ceb604fee13748c]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.012| (Adware.Kuaiba) -> Data: KuaiZip.012 ->
Delete on reboot. [1c6ef9d0d1d7e1557cabd6d9f809d12f]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.013| (Adware.Kuaiba) -> Data: KuaiZip.013 ->
Delete on reboot. [008a7752e3c5b68000274e61d031b749]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.014| (Adware.Kuaiba) -> Data: KuaiZip.014 ->
Delete on reboot. [256526a3d3d57bbbcc5b7639639e1ce4]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.015| (Adware.Kuaiba) -> Data: KuaiZip.015 ->
Delete on reboot. [e0aa7554594f46f0939437786d9444bc]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.016| (Adware.Kuaiba) -> Data: KuaiZip.016 ->
Delete on reboot. [0387c0096c3c41f50f1806a90cf5c13f]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.017| (Adware.Kuaiba) -> Data: KuaiZip.017 ->
Delete on reboot. [1674aa1f6c3cda5c68bf4f60c73a817f]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.018| (Adware.Kuaiba) -> Data: KuaiZip.018 ->
Delete on reboot. [2b5f428743658aacd5521f907d844eb2]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.019| (Adware.Kuaiba) -> Data: KuaiZip.019 ->
Delete on reboot. [5f2b3f8a891f6dc9ef38b6f9b54cf709]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.020| (Adware.Kuaiba) -> Data: KuaiZip.020 ->
Delete on reboot. [088219b0ebbd1e188e99b0ff9e63f907]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.021| (Adware.Kuaiba) -> Data: KuaiZip.021 ->
Delete on reboot. [a4e66a5f7c2cd95d3fe87b340100a858]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.022| (Adware.Kuaiba) -> Data: KuaiZip.022 ->
Delete on reboot. [42487455aff9be787fa803acc1401de3]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.023| (Adware.Kuaiba) -> Data: KuaiZip.023 ->
Delete on reboot. [3a5056735b4d999d71b6d0dfd1308080]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.024| (Adware.Kuaiba) -> Data: KuaiZip.024 ->
Delete on reboot. [4149d9f0396ff541be69555aa35ea45c]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.025| (Adware.Kuaiba) -> Data: KuaiZip.025 ->
Delete on reboot. [91f98445cbddbe78ad7a4d62fb06d828]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.026| (Adware.Kuaiba) -> Data: KuaiZip.026 ->
Delete on reboot. [028807c2baeebe78cb5c9e1159a833cd]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.027| (Adware.Kuaiba) -> Data: KuaiZip.027 ->
Delete on reboot. [06849a2f3f69a6902ef98827b15056aa]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.028| (Adware.Kuaiba) -> Data: KuaiZip.028 ->
Delete on reboot. [f6947b4ebfe9f442b96ed5daef1203fd]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.029| (Adware.Kuaiba) -> Data: KuaiZip.029 ->
Delete on reboot. [ff8baf1a86223ff761c67d3288796997]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.030| (Adware.Kuaiba) -> Data: KuaiZip.030 ->
Delete on reboot. [9ceea7223c6c20162ef92b84936e43bd]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.031| (Adware.Kuaiba) -> Data: KuaiZip.031 ->
Delete on reboot. [7b0f25a48523d95ddf48822da45d5aa6]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.032| (Adware.Kuaiba) -> Data: KuaiZip.032 ->
Delete on reboot. [deacb910d2d61323a4831798b9482dd3]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.033| (Adware.Kuaiba) -> Data: KuaiZip.033 ->
Delete on reboot. [a9e1a227b0f890a60720129d09f81be5]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.034| (Adware.Kuaiba) -> Data: KuaiZip.034 ->
Delete on reboot. [3c4e8b3e2a7ef5410324cbe4758ccb35]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.035| (Adware.Kuaiba) -> Data: KuaiZip.035 ->
Delete on reboot. [a9e1be0ba008092d9a8d951a0bf6e21e]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.036| (Adware.Kuaiba) -> Data: KuaiZip.036 ->
Delete on reboot. [3b4f92379018f0462304941bbd4446ba]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.037| (Adware.Kuaiba) -> Data: KuaiZip.037 ->
Delete on reboot. [8cfe77529018280e86a14c6341c0d729]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.038| (Adware.Kuaiba) -> Data: KuaiZip.038 ->
Delete on reboot. [8ffb3891eabe42f4ad7a96196f92fd03]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.039| (Adware.Kuaiba) -> Data: KuaiZip.039 ->
Delete on reboot. [6624af1a08a0989ea97eac037f82b54b]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.040| (Adware.Kuaiba) -> Data: KuaiZip.040 ->
Delete on reboot. [404afecb4563d95d36f16649748d7090]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.041| (Adware.Kuaiba) -> Data: KuaiZip.041 ->
Delete on reboot. [1a70676200a80e282afde9c617ea8f71]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.042| (Adware.Kuaiba) -> Data: KuaiZip.042 ->
Delete on reboot. [c0ca2c9d0f99ed49f92e1897bd44b848]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.043| (Adware.Kuaiba) -> Data: KuaiZip.043 ->
Delete on reboot. [a8e20bbe94148bab68bfffb0af52e31d]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.044| (Adware.Kuaiba) -> Data: KuaiZip.044 ->
Delete on reboot. [cac07059f7b140f6fc2b3778f011e31d]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.045| (Adware.Kuaiba) -> Data: KuaiZip.045 ->
Delete on reboot. [58326861ffa9ad898c9bc4eb8180a45c]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.046| (Adware.Kuaiba) -> Data: KuaiZip.046 ->
Delete on reboot. [91f947820d9be4524fd8397661a0ed13]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.047| (Adware.Kuaiba) -> Data: KuaiZip.047 ->
Delete on reboot. [abdfd1f865432214fd2a367927daa060]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.048| (Adware.Kuaiba) -> Data: KuaiZip.048 ->
Delete on reboot. [3f4ba4251296a88ebf68713eb54c9967]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.049| (Adware.Kuaiba) -> Data: KuaiZip.049 ->
Delete on reboot. [acdef7d2deca83b3be69eac5b05133cd]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.050| (Adware.Kuaiba) -> Data: KuaiZip.050 ->
Delete on reboot. [3c4e5d6cbcec8fa71c0becc3768bbc44]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.051| (Adware.Kuaiba) -> Data: KuaiZip.051 ->
Delete on reboot. [bbcf5475c5e363d3998ecfe0f908b848]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.052| (Adware.Kuaiba) -> Data: KuaiZip.052 ->
Delete on reboot. [f8929831f2b6eb4b8d9a96198d74857b]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.053| (Adware.Kuaiba) -> Data: KuaiZip.053 ->
Delete on reboot. [85050fbabbed6acc190e8e2151b07a86]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.054| (Adware.Kuaiba) -> Data: KuaiZip.054 ->
Delete on reboot. [b3d7c20791170234f0378e21a65b6c94]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.055| (Adware.Kuaiba) -> Data: KuaiZip.055 ->
Delete on reboot. [bad08544bbedf5411a0d2b847e8343bd]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.056| (Adware.Kuaiba) -> Data: KuaiZip.056 ->
Delete on reboot. [5832f6d3aefa2c0adb4c406f649d42be]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.057| (Adware.Kuaiba) -> Data: KuaiZip.057 ->
Delete on reboot. [0486ba0f80281d19d0576b44b44d33cd]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.058| (Adware.Kuaiba) -> Data: KuaiZip.058 ->
Delete on reboot. [a3e7e7e22d7b1f1754d3238c59a803fd]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.059| (Adware.Kuaiba) -> Data: KuaiZip.059 ->
Delete on reboot. [781210b94c5c8bab2ff8e2cd14edce32]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.060| (Adware.Kuaiba) -> Data: KuaiZip.060 ->
Delete on reboot. [296130995e4ab0863ee9f5bab64bcc34]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.061| (Adware.Kuaiba) -> Data: KuaiZip.061 ->
Delete on reboot. [65251caddacec17535f2a00fac5521df]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.062| (Adware.Kuaiba) -> Data: KuaiZip.062 ->
Delete on reboot. [24662b9e4662e05620074e6157aaa65a]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.063| (Adware.Kuaiba) -> Data: KuaiZip.063 ->
Delete on reboot. [96f4cdfcd0d80d2958cf6f4027da7f81]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.064| (Adware.Kuaiba) -> Data: KuaiZip.064 ->
Delete on reboot. [8dfd05c49e0a4aec998e812e02ff738d]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.065| (Adware.Kuaiba) -> Data: KuaiZip.065 ->
Delete on reboot. [21696c5d2d7b38fecc5ba50a9170b848]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.066| (Adware.Kuaiba) -> Data: KuaiZip.066 ->
Delete on reboot. [3456b217efb99f97e54228877a878d73]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.067| (Adware.Kuaiba) -> Data: KuaiZip.067 ->
Delete on reboot. [08827d4c8424171ff0377c33e8197e82]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.068| (Adware.Kuaiba) -> Data: KuaiZip.068 ->
Delete on reboot. [5b2f6a5f7038e650b96eb6f9aa574db3]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.069| (Adware.Kuaiba) -> Data: KuaiZip.069 ->
Delete on reboot. [cfbb5a6fe8c08bab3ceb1a955ea316ea]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.070| (Adware.Kuaiba) -> Data: KuaiZip.070 ->
Delete on reboot. [2d5d2c9dd4d4e0564bdc654a3fc23fc1]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.071| (Adware.Kuaiba) -> Data: KuaiZip.071 ->
Delete on reboot. [35556a5f2c7c2412f730bbf4926f0af6]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.072| (Adware.Kuaiba) -> Data: KuaiZip.072 ->
Delete on reboot. [1476f7d24d5b62d4dd4a337c23dea15f]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.073| (Adware.Kuaiba) -> Data: KuaiZip.073 ->
Delete on reboot. [c8c2c10854541b1b3bec634cff026898]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.074| (Adware.Kuaiba) -> Data: KuaiZip.074 ->
Delete on reboot. [a6e4e3e6d4d4e65063c4129d9c6521df]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.075| (Adware.Kuaiba) -> Data: KuaiZip.075 ->
Delete on reboot. [f5955d6c792fc57169be307f2fd233cd]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.076| (Adware.Kuaiba) -> Data: KuaiZip.076 ->
Delete on reboot. [bad0e7e28e1a88ae62c519965da48779]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.077| (Adware.Kuaiba) -> Data: KuaiZip.077 ->
Delete on reboot. [216906c38622e353180f1d927c85cc34]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.078| (Adware.Kuaiba) -> Data: KuaiZip.078 ->
Delete on reboot. [e0aaebdefcac94a25ec9149bb34e7888]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.079| (Adware.Kuaiba) -> Data: KuaiZip.079 ->
Delete on reboot. [632745849f098bab2502e4cbf20f33cd]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.080| (Adware.Kuaiba) -> Data: KuaiZip.080 ->
Delete on reboot. [d9b173561d8b85b1ce59703f9b667e82]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.081| (Adware.Kuaiba) -> Data: KuaiZip.081 ->
Delete on reboot. [8dfd9831d9cf092d2ff86c43f40d6a96]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.082| (Adware.Kuaiba) -> Data: KuaiZip.082 ->
Delete on reboot. [028887426543eb4be344634cd72a867a]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.083| (Adware.Kuaiba) -> Data: KuaiZip.083 ->
Delete on reboot. [8ffb6069c7e1eb4b3ceb149b4eb339c7]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.084| (Adware.Kuaiba) -> Data: KuaiZip.084 ->
Delete on reboot. [4c3eddec5e4a64d257d0feb1c73a52ae]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.085| (Adware.Kuaiba) -> Data: KuaiZip.085 ->
Delete on reboot. [0882933651575ed82601327d827f03fd]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.086| (Adware.Kuaiba) -> Data: KuaiZip.086 ->
Delete on reboot. [aae01eab515744f22007f7b85ca55ca4]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.087| (Adware.Kuaiba) -> Data: KuaiZip.087 ->
Delete on reboot. [a4e629a08e1a61d56eb9ecc35fa2c63a]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.088| (Adware.Kuaiba) -> Data: KuaiZip.088 ->
Delete on reboot. [7c0ea821891f0531f433634cdf22ad53]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.089| (Adware.Kuaiba) -> Data: KuaiZip.089 ->
Delete on reboot. [b9d1facf169270c692954768d72a1ae6]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.090| (Adware.Kuaiba) -> Data: KuaiZip.090 ->
Delete on reboot. [6e1c85444c5c0a2cb671a609966bd22e]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.091| (Adware.Kuaiba) -> Data: KuaiZip.091 ->
Delete on reboot. [5b2faa1f06a26ec8d94ee5ca32cfef11]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.092| (Adware.Kuaiba) -> Data: KuaiZip.092 ->
Delete on reboot. [8a009732594f5bdba384fab537ca1de3]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.093| (Adware.Kuaiba) -> Data: KuaiZip.093 ->
Delete on reboot. [29613d8cb2f6ce6867c02a85ad54f50b]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.094| (Adware.Kuaiba) -> Data: KuaiZip.094 ->
Delete on reboot. [2f5b4584495f46f0ea3dd7d8d52c7987]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.095| (Adware.Kuaiba) -> Data: KuaiZip.095 ->
Delete on reboot. [91f9a6230f9990a634f3931c917021df]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.096| (Adware.Kuaiba) -> Data: KuaiZip.096 ->
Delete on reboot. [62289732b6f2ac8aa681bdf2ee130df3]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.097| (Adware.Kuaiba) -> Data: KuaiZip.097 ->
Delete on reboot. [a4e67059278160d6ba6d46690ef33ec2]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.098| (Adware.Kuaiba) -> Data: KuaiZip.098 ->
Delete on reboot. [6525a4250f9959ddf433337c43be926e]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\.099| (Adware.Kuaiba) -> Data: KuaiZip.099 ->
Delete on reboot. [11799b2ee5c3cf677bac7c33827f24dc]
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\BACKLH|ImagePath (Adware.Linkury) -> Data
: C:\ProgramData\Logic Cramble\set.exe -> Delete on reboot. [662416b308a041f53bc
6e71d15eda957]
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\ED2KIDLE|ImagePath (Adware.Elex) -> Data:
"C:\Program Files (x86)\amulell\ed2k.exe" -downloadwhenidle -> Delete on reboot
. [5c2e5a6fdfc95adc257c755734cd5aa6]
HKU\S-1-5-21-260700862-3412582513-2462944927-1001\SOFTWARE\MICROSOFT\WINDOWS\CUR
RENTVERSION\RUN|Ewfztion (Trojan.Boaxxe.Gen) -> Data: regsvr32.exe C:\Users\AmyD
erp\AppData\Local\Ewfztion\sgmbazwm.dll -> Delete on reboot. [d3b7f4d502a6ae881f
8ffaea689b0df3]
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 3
C:\ProgramData\Hotfresh (Adware.Linkury.ACMB1) -> Delete on reboot. [6b1feadf5a4
ef145deaf339e8d739769]
C:\Users\AmyDerp\AppData\Roaming\WinSnare (Adware.Elex) -> Delete on reboot. [18
729336fbad39fd847d6387e11f12ee]
C:\ProgramData\PrefersSecure (Adware.Linkury) -> Delete on reboot. [81099f2ab2f6
60d674c32a7ca35e58a8]
Files Detected: 41
C:\Users\AmyDerp\AppData\Local\Ewfztion\sgmbazwm.dll (Trojan.Miuref) -> Delete o
n reboot. [c7c33e8b6642e74f0c42eeccc23f2fd1]
C:\Users\AmyDerp\AppData\Local\Eskction\Windows_Activaton.exe (Spyware.Boaxxe) -
> Delete on reboot. [cfbbc900c2e6ba7ce751cb372ad804fc]
C:\Users\AmyDerp\AppData\Local\Eskction\ttvbeqjj.dll (Trojan.Miuref) -> Delete o
n reboot. [cebc88416048c076c08eeecc639ec838]
C:\Windows\Temp\gCF3.tmp (Trojan.Wdfload) -> Delete on reboot. [aedc45846444d264
1201d592669b4cb4]
C:\Users\AmyDerp\AppData\Local\Temp\00001169\msiql.exe (Adware.Agent) -> Delete
on reboot. [a6e45b6ed9cf3ff74d270a1d38c9a45c]
C:\ProgramData\WindowsMsg\chrome.exe (Adware.Eszjuxuan) -> Delete on reboot. [f3
9718b107a12412a4024997c43c0bf5]
C:\Program Files (x86)\Microsoft Toolkit Final\Windows_Activaton.exe (Spyware.Bo
axxe) -> Delete on reboot. [7a104f7ab7f104325bdd9d65fe0444bc]
C:\Program Files (x86)\MIO\MIO.exe (Adware.Elex) -> Delete on reboot. [0882d0f9d
ace84b26036359877894eb2]
C:\Users\AmyDerp\AppData\Local\Temp\KZipShell.dll.del (Adware.Kuaiba) -> Delete
on reboot. [2862d5f4bfe9f93d4f9cc01d8779b050]
C:\Users\AmyDerp\AppData\Local\Temp\gC35A.tmp (Trojan.Wdfload) -> Delete on rebo
ot. [bbcff0d9d5d338fe9c77b0b7847dba46]
C:\Users\AmyDerp\AppData\Local\Temp\gC35B.tmp.exe (Adware.Elex) -> Delete on reb
oot. [9bef7059adfbc86eff7b1cc342bfff01]
C:\Users\AmyDerp\AppData\Local\Temp\gC35C.tmp.exe (Adware.Elex) -> Delete on reb
oot. [a8e211b8297f092d575bffdab1505aa6]
C:\Users\AmyDerp\AppData\Local\Temp\gC35D.tmp (Trojan.Wdfload) -> Delete on rebo
ot. [b9d175545751bf774a86eb8068997b85]
C:\Users\AmyDerp\AppData\Local\Temp\00001166\kpzip.exe (Adware.Elex) -> Delete o
n reboot. [b7d30dbc0f99c86e3b16d20c0ef34bb5]
C:\Users\AmyDerp\AppData\Local\Temp\00001176\newAutoTime_51504.jpg (Adware.Agent
) -> Delete on reboot. [a1e919b0d0d8cd69206d153808f8db25]
C:\Users\AmyDerp\AppData\Local\Temp\00001189\51504.top.exe (Adware.Eszjuxuan) ->
Delete on reboot. [256521a8e1c7251136ddb20fca3616ea]
C:\Users\AmyDerp\AppData\Local\Temp\00001189\ruixin.exe (Adware.Clicker) -> Dele
te on reboot. [5b2fd8f1c7e1ee48c390ef16d62a936d]
C:\Users\AmyDerp\AppData\Local\Temp\is-KCGEM.tmp\AutoTime.exe (Adware.Agent) ->
Delete on reboot. [c2c8c108a20655e1bb647ed30ef227d9]
C:\Users\AmyDerp\AppData\Local\Temp\1\MIO.exe (Adware.Elex) -> Delete on reboot.
[f6944782faae0c2a9df927a632ce08f8]
C:\Users\AmyDerp\AppData\Local\Temp\1\yacqq.exe (Adware.Elex) -> Delete on reboo
t. [14769a2f179151e59b8af8d67a86d12f]
C:\Users\AmyDerp\AppData\Local\Temp\90908734\RunBoosterSetup64_3231.exe (Adware.
RunBooster) -> Delete on reboot. [8bff33961f897db98b9a840fc23e2dd3]
C:\Windows\Temp\gCF4.tmp.exe (Adware.Elex) -> Delete on reboot. [9cee7e4b82265fd
75a20fce3fc0549b7]
C:\Windows\Temp\gD72.tmp.exe (Adware.Elex) -> Delete on reboot. [8a00cbfeffa98ba
b328006d321e04fb1]
C:\Windows\Temp\gD73.tmp (Adware.Elex) -> Delete on reboot. [95f5f5d4fdab270f549
55f9d8b7603fd]
C:\Windows\Temp\tmp283E.tmp\Kyubey.exe (Adware.Elex) -> Delete on reboot. [d0ba9
831ecbc43f38b5e2dd0f110b54b]
C:\Windows\Temp\tmp5E00.tmp\QQBrowserFrame.dll (Adware.Elex) -> Delete on reboot
. [3d4de0e9bfe9f24426db52807d83936d]
C:\Windows\Temp\tmp6C69.tmp\Kyubey.exe (Adware.Elex) -> Delete on reboot. [56349
8313d6b65d183f1b64e659da060]
C:\Users\AmyDerp\AppData\Local\svchost\svchost.exe (Adware.Eszjuxuan) -> Delete
on reboot. [5c2e6465604870c6e2975875a0605ea2]
C:\ProgramData\27Y6513J719s28\27Y6513J719s28.dll (Trojan.Wdfload.Generic) -> Del
ete on reboot. [91f9bf0ac0e863d3dae77e59d62b3dc3]
C:\ProgramData\9920N3863N2045R22\9920N3863N2045R22.dll (Trojan.Wdfload.Generic)
-> Delete on reboot. [2f5bdeebeabeea4c259c54830ff238c8]
C:\Windows\System32\drivers\KuaiZipDrive.sys (PUP.Optional.Kuaizip) -> Delete on
reboot. [dd221e071ddd349e21808f66b57799e1]
C:\ProgramData\service.exe (Trojan.Agent.E) -> Delete on reboot. [0387e8e14b5d89
adbe03b8d73bc536ca]
C:\Windows\System32\Tasks\Milimili (Adware.Elex) -> Delete on reboot. [6a207554a
ff94aec6c92458c6e924bb5]
C:\Windows\System32\Tasks\hostTask (Adware.Linkury) -> Delete on reboot. [cac0be
0b6840a4924b416a3c12ef2dd3]
C:\Windows\System32\Tasks\osTip (Adware.Agent.CLK) -> Delete on reboot. [3456d7f
23f699e986b8ae3f705fe29d7]
C:\ProgramData\PrefersSecure\Nettrans.exe (Adware.Linkury) -> Delete on reboot.
[e1a9c405b6f2d660104721859071659b]
C:\ProgramData\Logic Cramble\set.exe (Adware.Linkury) -> Delete on reboot. [6624
16b308a041f53bc6e71d15eda957]
C:\ProgramData\Hotfresh\Hotfresh.dat (Adware.Linkury.ACMB1) -> Delete on reboot.
[6b1feadf5a4ef145deaf339e8d739769]
C:\ProgramData\Hotfresh\Hotfresh.exe (Adware.Linkury.ACMB1) -> Delete on reboot.
[6b1feadf5a4ef145deaf339e8d739769]
C:\Users\AmyDerp\AppData\Roaming\WinSnare\WinSnare.dll (Adware.Elex) -> Delete o
n reboot. [18729336fbad39fd847d6387e11f12ee]
C:\ProgramData\PrefersSecure\Nettrans.exe.config (Adware.Linkury) -> Delete on r
eboot. [81099f2ab2f660d674c32a7ca35e58a8]
Physical Sectors Detected: 0
(No malicious items detected)
(end)