Log

01:24:32 Switches begin
01:24:32 Switches end

01:24:32 Starting v4.5.0.29
01:24:32 FBUserToken: '1180273625337362'
01:24:32 FBLocale: 'es_ES'
01:24:32 FBAttackId: '940201966078273'
01:24:32 User is Admin: YES
01:24:32 Vista or Higher: YES
01:24:32 IsWow64: YES
01:24:32 GetWorkDir: C:\Users\LUISAL~1\AppData\Local\Temp\FBScanner_335111803
01:24:32 InitReport
01:24:32 SendReport_Init
01:24:32 Request query: 01:24:33 1443300579261932/malware_scanner01:24:33
01:24:33 Request body: 01:24:33 access_token=1443300579261932|cfedb1bd1113405e09
7902a8602d76ed&user_token=1180273625337362&report={"report_type": "SCANNER_INIT"
,}&report_sig=BE40D6EE5B9F256F5E45F79F4BD0B156&fwd_ip=127.0.0.1&version=4.5.0.29
01:24:33
01:24:33 Response: 01:24:33 {"status":true}01:24:33
01:24:34 # product=FBAV
# version=8
# FBAV_user_token=1180273625337362
# FBAV_user_locale=es_ES
# FBAV_attack_id=940201966078273
# FBAV_status=0
# flags=3
# ESET.exe=4.5.0.29
# EOSSerial=0e8ebb223a2de445a727ed465e6d3356
# end=init
# utc_time=2016-05-15 06:24:32
# local_time=2016-05-15 01:24:32 (-0600, Hora de verano central (Mxico))
# country="Mexico"
# osver=6.1.7601 NT Service Pack 1
01:24:34 INIT report sent to ESET
01:24:34 ExtractEsetsApi OK
7902a8602d76ed&user_token=1180273625337362&report={"report_type": "SCANNER_PROGR
ESS","progress": 0,}&report_sig=2B743F651544C758D4C21A49EB3CF23E&fwd_ip=127.0.0.
1&version=4.5.0.2901:24:34
01:24:34 Updating
01:24:34 Update Init
01:24:37 Update Download
1&version=4.5.0.2901:24:52
ESS","progress": 1,}&report_sig=3DC900E65697E57238D5A919F32752B0&fwd_ip=127.0.0.
1&version=4.5.0.2901:25:06
1&version=4.5.0.2901:25:16

ESS","progress": 3,}&report_sig=3F8375609AB7F90439B42912269A53FD&fwd_ip=127.0.0.
1&version=4.5.0.2901:25:26
ESS","progress": 4,}&report_sig=4BFD76DD577F0A652BC5A263F1463DD6&fwd_ip=127.0.0.
1&version=4.5.0.2901:25:36
ESS","progress": 5,}&report_sig=B83D224A31F8D89576CEF0F835090260&fwd_ip=127.0.0.
1&version=4.5.0.2901:25:46
ESS","progress": 7,}&report_sig=FBACAFCD06E447A3452AD6479A1B4251&fwd_ip=127.0.0.
1&version=4.5.0.2901:25:57
ESS","progress": 9,}&report_sig=4240B5BB56D2736A78A996E9141278B3&fwd_ip=127.0.0.
1&version=4.5.0.2901:26:08
ESS","progress": 10,}&report_sig=AC171CBE639BC332E608EF298CB67001&fwd_ip=127.0.0
.1&version=4.5.0.2901:26:18
ESS","progress": 12,}&report_sig=EBDD954BFD00365A56399C4CE273139A&fwd_ip=127.0.0
.1&version=4.5.0.2901:26:29
ESS","progress": 13,}&report_sig=866AF33B0280EA61B17A3A36D3449D78&fwd_ip=127.0.0
.1&version=4.5.0.2901:26:45
ESS","progress": 14,}&report_sig=65F462285C29B03D265EE11A1AC06AB6&fwd_ip=127.0.0
.1&version=4.5.0.2901:26:55
ESS","progress": 15,}&report_sig=214BAC5B4A2FF8500EE94FF24946FD5C&fwd_ip=127.0.0
.1&version=4.5.0.2901:27:06

.1&version=4.5.0.2901:27:17
ESS","progress": 16,}&report_sig=88B6B60B4797206A650127491C5C7B8E&fwd_ip=127.0.0
.1&version=4.5.0.2901:27:27
ESS","progress": 18,}&report_sig=F03CDC54B63E3A0EDB6743119E6F2AFD&fwd_ip=127.0.0
.1&version=4.5.0.2901:27:38
ESS","progress": 19,}&report_sig=A1EE68F783791D7539778E705CD79F6A&fwd_ip=127.0.0
.1&version=4.5.0.2901:27:50
.1&version=4.5.0.2901:28:17
ESS","progress": 20,}&report_sig=BCCE58E7B42B5B9894C1B0A33C679EB8&fwd_ip=127.0.0
.1&version=4.5.0.2901:28:41
01:28:41 Update Finalize
01:28:41 Call m_esets_charon_send
01:28:41 Call m_esets_charon_destroy
.1&version=4.5.0.2901:28:42
01:28:42 Updated modules version: 29475
# version=8
# FBAV_user_token=1180273625337362
# FBAV_attack_id=940201966078273
# FBAV_status=0
# flags=3
# ESET.exe=4.5.0.29
# end=Updated
# utc_time=2016-05-15 06:24:32
# country="Mexico"
01:28:43 UPDATED report sent to ESET

01:28:43 Initialize Scan
01:28:53 Call m_esets_charon_setup_create
01:28:54 Call m_esets_charon_create
01:28:54 m_esets_charon_create OK
01:28:54 Call m_esets_charon_start_send_thread
01:28:54 Call m_esets_charon_setup_set
01:28:54 m_esets_charon_setup_set OK
01:28:54 Scan
01:28:54 Scanner engine: 29475
7902a8602d76ed&user_token=1180273625337362&report={"report_type": "SCANNER_DATA"
,"event_type": "DETECTED","sample_name": "a variant of Win32/SweetIM.L potential
ly unwanted application,a variant of Win32/MPCCleaner.A potentially unwanted app
lication","sample_id": "a variant of Win32/SweetIM.L potentially unwanted applic
ation,a variant of Win32/MPCCleaner.A potentially unwanted application","sample_
hashes": {"SHA1": "0000000000000000000000000000000000000000",},}&report_sig=B454
DB59FC1B8B6A655AFA12AD148ED1&fwd_ip=127.0.0.1&version=4.5.0.2901:30:00
,"event_type": "CLEANUP_SUCCESS","sample_name": "a variant of Win32/SweetIM.L po
tentially unwanted application,a variant of Win32/MPCCleaner.A potentially unwan
ted application","sample_id": "a variant of Win32/SweetIM.L potentially unwanted
application,a variant of Win32/MPCCleaner.A potentially unwanted application","
sample_hashes": {"SHA1": "0000000000000000000000000000000000000000",},}&report_s
ig=E6065B8762BA2EB31DA9DE61E5F037FC&fwd_ip=127.0.0.1&version=4.5.0.2901:30:01
ESS","progress": 22,}&report_sig=6D15D3E1FF90784432A863B9D218F145&fwd_ip=127.0.0
.1&version=4.5.0.2901:30:02
ESS","progress": 25,}&report_sig=255031B5FF5BFFC0FBB5C509DFD0CE89&fwd_ip=127.0.0
.1&version=4.5.0.2901:30:12
ESS","progress": 27,}&report_sig=6028852688785C2E911B144B006EF253&fwd_ip=127.0.0
.1&version=4.5.0.2901:30:22
ESS","progress": 28,}&report_sig=683999D8CE197C185692803FAF784D60&fwd_ip=127.0.0
.1&version=4.5.0.2901:30:32
.1&version=4.5.0.2901:30:42

.1&version=4.5.0.2901:30:52
.1&version=4.5.0.2901:31:02
.1&version=4.5.0.2901:31:12
.1&version=4.5.0.2901:31:22
.1&version=4.5.0.2901:31:32
.1&version=4.5.0.2901:31:42
.1&version=4.5.0.2901:31:52
.1&version=4.5.0.2901:32:02
.1&version=4.5.0.2901:32:12
.1&version=4.5.0.2901:32:22

.1&version=4.5.0.2901:32:32
ESS","progress": 31,}&report_sig=15C59BA62A56DADB58E6965C0FDCCEB6&fwd_ip=127.0.0
.1&version=4.5.0.2901:32:42
.1&version=4.5.0.2901:32:52
.1&version=4.5.0.2901:33:02
.1&version=4.5.0.2901:33:12
.1&version=4.5.0.2901:33:22
.1&version=4.5.0.2901:33:32
ESS","progress": 49,}&report_sig=1E9F3631A3957C0A0B6A9DE709240B7C&fwd_ip=127.0.0
.1&version=4.5.0.2901:33:43
.1&version=4.5.0.2901:33:53
.1&version=4.5.0.2901:34:03

.1&version=4.5.0.2901:34:13
.1&version=4.5.0.2901:34:23
.1&version=4.5.0.2901:34:33
.1&version=4.5.0.2901:34:43
.1&version=4.5.0.2901:34:54
.1&version=4.5.0.2901:35:11
.1&version=4.5.0.2901:35:21
.1&version=4.5.0.2901:35:31
.1&version=4.5.0.2901:35:41
.1&version=4.5.0.2901:35:51

.1&version=4.5.0.2901:36:01
.1&version=4.5.0.2901:36:11
.1&version=4.5.0.2901:36:21
.1&version=4.5.0.2901:36:31
.1&version=4.5.0.2901:36:41
.1&version=4.5.0.2901:36:52
.1&version=4.5.0.2901:37:02
.1&version=4.5.0.2901:37:12
.1&version=4.5.0.2901:37:22
.1&version=4.5.0.2901:37:32

.1&version=4.5.0.2901:37:42
.1&version=4.5.0.2901:38:43
.1&version=4.5.0.2901:39:41
.1&version=4.5.0.2901:39:51
.1&version=4.5.0.2901:40:01
.1&version=4.5.0.2901:40:15
.1&version=4.5.0.2901:40:25
.1&version=4.5.0.2901:40:35
.1&version=4.5.0.2901:40:45
.1&version=4.5.0.2901:40:55

.1&version=4.5.0.2901:41:05
.1&version=4.5.0.2901:41:15
.1&version=4.5.0.2901:41:25
.1&version=4.5.0.2901:41:35
.1&version=4.5.0.2901:41:45
.1&version=4.5.0.2901:41:55
.1&version=4.5.0.2901:42:05
.1&version=4.5.0.2901:42:15
.1&version=4.5.0.2901:42:25
.1&version=4.5.0.2901:42:35

.1&version=4.5.0.2901:42:46
ly unwanted application","sample_id": "a variant of Win32/SweetIM.L potentially
unwanted application","sample_hashes": {"SHA1": "E1C99225C4C16710DE3AF3D52300E1E
943F7C84F",},}&report_sig=CA009A63223E93D09710A7132424D162&fwd_ip=127.0.0.1&vers
ion=4.5.0.2901:42:48
tentially unwanted application","sample_id": "a variant of Win32/SweetIM.L poten
tially unwanted application","sample_hashes": {"SHA1": "E1C99225C4C16710DE3AF3D5
2300E1E943F7C84F",},}&report_sig=BDF6DDEBD0CF85C763954A68147EAA99&fwd_ip=127.0.0
.1&version=4.5.0.2901:42:48
.1&version=4.5.0.2901:43:06
ESS","progress": 56,}&report_sig=E90BD11899688B77F684A0AA0FFF07A6&fwd_ip=127.0.0
.1&version=4.5.0.2901:43:16
01:43:22 Switches begin
01:43:22 Switches end
01:43:22 Starting v4.5.0.29
01:43:22 FBUserToken: '1180273625337362'
01:43:22 FBLocale: 'es_ES'
01:43:22 FBAttackId: '940201966078273'
01:43:22 User is Admin: YES
01:43:22 Vista or Higher: YES
01:43:22 IsWow64: YES
01:43:22 GetWorkDir: C:\Users\LUISAL~1\AppData\Local\Temp\FBScanner_990173239
01:43:22 InitReport
01:43:22 SendReport_Init
7902a8602d76ed&user_token=1180273625337362&report={"report_type": "SCANNER_INIT"
,}&report_sig=BE40D6EE5B9F256F5E45F79F4BD0B156&fwd_ip=127.0.0.1&version=4.5.0.29
01:43:22
# version=8
# FBAV_user_token=1180273625337362
# FBAV_attack_id=940201966078273
# FBAV_status=0
# flags=3
# ESET.exe=4.5.0.29
# end=init
# utc_time=2016-05-15 06:43:22
# country="Mexico"
01:43:24 INIT report sent to ESET
01:43:24 ExtractEsetsApi OK
1&version=4.5.0.2901:43:24
01:43:24 Updating
01:43:24 Update Init
01:43:27 Update Download
.1&version=4.5.0.2901:43:32
.1&version=4.5.0.2901:43:40
1&version=4.5.0.2901:43:43
.1&version=4.5.0.2901:43:52
1&version=4.5.0.2901:43:53
ESS","progress": 2,}&report_sig=75A0CE906A36623A73C4ED76B6A0217A&fwd_ip=127.0.0.
1&version=4.5.0.2901:44:03
.1&version=4.5.0.2901:44:04
ESS","progress": 3,}&report_sig=3F8375609AB7F90439B42912269A53FD&fwd_ip=127.0.0.
1&version=4.5.0.2901:44:13
.1&version=4.5.0.2901:44:14
ESS","progress": 4,}&report_sig=4BFD76DD577F0A652BC5A263F1463DD6&fwd_ip=127.0.0.
1&version=4.5.0.2901:44:23
.1&version=4.5.0.2901:44:24
,"event_type": "DETECTED","sample_name": "JS/Toolbar.Crossrider.O potentially un
wanted application","sample_id": "JS/Toolbar.Crossrider.O potentially unwanted a
pplication","sample_hashes": {"SHA1": "F4868E75E21D37FCBC9A5871B6B120EB3E4600DF"
,},}&report_sig=8F7E515831C87F17B826D835479A16EA&fwd_ip=127.0.0.1&version=4.5.0.
2901:44:25
,"event_type": "CLEANUP_SUCCESS","sample_name": "JS/Toolbar.Crossrider.O potenti
ally unwanted application","sample_id": "JS/Toolbar.Crossrider.O potentially unw
anted application","sample_hashes": {"SHA1": "F4868E75E21D37FCBC9A5871B6B120EB3E
4600DF",},}&report_sig=70E828A690C0F00C53F0A92FA7588759&fwd_ip=127.0.0.1&version
=4.5.0.2901:44:25
,"event_type": "DETECTED","sample_name": "JS/Toolbar.Crossrider.J potentially un
wanted application","sample_id": "JS/Toolbar.Crossrider.J potentially unwanted a
pplication","sample_hashes": {"SHA1": "59418B96ED4D653FE8F4C66E5E95BAE9ED93C808"
,},}&report_sig=47CB8AA3D254C8ED6405B1DB6FC89F28&fwd_ip=127.0.0.1&version=4.5.0.
2901:44:25
,"event_type": "CLEANUP_SUCCESS","sample_name": "JS/Toolbar.Crossrider.J potenti
ally unwanted application","sample_id": "JS/Toolbar.Crossrider.J potentially unw
anted application","sample_hashes": {"SHA1": "59418B96ED4D653FE8F4C66E5E95BAE9ED
93C808",},}&report_sig=BF457E30CE4C63C914F4474FA64C540E&fwd_ip=127.0.0.1&version
=4.5.0.2901:44:26
,"event_type": "DETECTED","sample_name": "JS/Toolbar.Crossrider.G potentially un
wanted application","sample_id": "JS/Toolbar.Crossrider.G potentially unwanted a
pplication","sample_hashes": {"SHA1": "32FE8D811A0CD3B7424FD03880F6FE6C32781264"
,},}&report_sig=8E535A9BEBB3FF786AC13061D7665EBB&fwd_ip=127.0.0.1&version=4.5.0.
2901:44:26
,"event_type": "CLEANUP_SUCCESS","sample_name": "JS/Toolbar.Crossrider.G potenti
ally unwanted application","sample_id": "JS/Toolbar.Crossrider.G potentially unw
anted application","sample_hashes": {"SHA1": "32FE8D811A0CD3B7424FD03880F6FE6C32
781264",},}&report_sig=DD0C230EBFA1493E003EE99C99D34F82&fwd_ip=127.0.0.1&version
=4.5.0.2901:44:26
pplication","sample_hashes": {"SHA1": "E7E3EEBCDE7D08E92E4DA1492D0198D99EB8347F"
,},}&report_sig=589ECF98FB8649BABED6985B6953230E&fwd_ip=127.0.0.1&version=4.5.0.
2901:44:27
anted application","sample_hashes": {"SHA1": "E7E3EEBCDE7D08E92E4DA1492D0198D99E
B8347F",},}&report_sig=EB13A27379C6A2A4EC91DB6F4B7090D5&fwd_ip=127.0.0.1&version
=4.5.0.2901:44:27
pplication","sample_hashes": {"SHA1": "D3F5F1CA2B7DB6EA0081432DB9F3F7290193A8A2"
,},}&report_sig=0A8988AE4E98C56724616CCE38466E9B&fwd_ip=127.0.0.1&version=4.5.0.
2901:44:27
anted application","sample_hashes": {"SHA1": "D3F5F1CA2B7DB6EA0081432DB9F3F72901
93A8A2",},}&report_sig=8C9885A4ADA86EE69727818BC0C7183C&fwd_ip=127.0.0.1&version
=4.5.0.2901:44:27

pplication","sample_hashes": {"SHA1": "BA2B61F97B433E61EB2DF4A6FBE657BA83BA4ADA"
,},}&report_sig=A31FF2B2CB3C9FB3EA2FE77BF6F20809&fwd_ip=127.0.0.1&version=4.5.0.
2901:44:28
anted application","sample_hashes": {"SHA1": "BA2B61F97B433E61EB2DF4A6FBE657BA83
BA4ADA",},}&report_sig=E56B186E73CDB1D74B1CA610413FFC12&fwd_ip=127.0.0.1&version
=4.5.0.2901:44:28
pplication","sample_hashes": {"SHA1": "E9DD2C03F93A35E32413CBB3B87CA74D1430D8D7"
,},}&report_sig=815E24B7EC9EAA3A9459E2FE56160FEB&fwd_ip=127.0.0.1&version=4.5.0.
2901:44:28
anted application","sample_hashes": {"SHA1": "E9DD2C03F93A35E32413CBB3B87CA74D14
30D8D7",},}&report_sig=FEFD54B51B3A396A11B4E5046D477FD6&fwd_ip=127.0.0.1&version
=4.5.0.2901:44:29
pplication","sample_hashes": {"SHA1": "EEC37C06483A1CC592AEBB925056B8C66C782438"
,},}&report_sig=80D3F5A5C17F7386E9F994DD6EADB9E1&fwd_ip=127.0.0.1&version=4.5.0.
2901:44:29
anted application","sample_hashes": {"SHA1": "EEC37C06483A1CC592AEBB925056B8C66C
782438",},}&report_sig=CC877B268202038F32438387A709E243&fwd_ip=127.0.0.1&version
=4.5.0.2901:44:29
,"event_type": "DETECTED","sample_name": "JS/Toolbar.Crossrider.M potentially un
wanted application","sample_id": "JS/Toolbar.Crossrider.M potentially unwanted a
pplication","sample_hashes": {"SHA1": "DF5417C02F7DA3C534D2FC914C88D491810188B7"
,},}&report_sig=B3C41A9A640F1E4B7762A447FEF6EBA5&fwd_ip=127.0.0.1&version=4.5.0.
2901:44:30

,"event_type": "CLEANUP_SUCCESS","sample_name": "JS/Toolbar.Crossrider.M potenti
ally unwanted application","sample_id": "JS/Toolbar.Crossrider.M potentially unw
anted application","sample_hashes": {"SHA1": "DF5417C02F7DA3C534D2FC914C88D49181
0188B7",},}&report_sig=159130CB9546E91F1123EA27F2E8C490&fwd_ip=127.0.0.1&version
=4.5.0.2901:44:30
,"event_type": "DETECTED","sample_name": "JS/Toolbar.Crossrider.P potentially un
wanted application","sample_id": "JS/Toolbar.Crossrider.P potentially unwanted a
pplication","sample_hashes": {"SHA1": "BDCFA8379825B1BC17A13BDF73B7384DE46E7C3B"
,},}&report_sig=5F8144BFB850877E884FE042996E2232&fwd_ip=127.0.0.1&version=4.5.0.
2901:44:30
,"event_type": "CLEANUP_SUCCESS","sample_name": "JS/Toolbar.Crossrider.P potenti
ally unwanted application","sample_id": "JS/Toolbar.Crossrider.P potentially unw
anted application","sample_hashes": {"SHA1": "BDCFA8379825B1BC17A13BDF73B7384DE4
6E7C3B",},}&report_sig=93E21A69C77251013EDF497943F78214&fwd_ip=127.0.0.1&version
=4.5.0.2901:44:31
,"event_type": "DETECTED","sample_name": "JS/Toolbar.Crossrider.B potentially un
wanted application","sample_id": "JS/Toolbar.Crossrider.B potentially unwanted a
pplication","sample_hashes": {"SHA1": "03517F89D3F20D2D4E2B1A956F8248C9DA9FFC18"
,},}&report_sig=A994F71FC748E1751ED5CE77B713BE8F&fwd_ip=127.0.0.1&version=4.5.0.
2901:44:31
,"event_type": "CLEANUP_SUCCESS","sample_name": "JS/Toolbar.Crossrider.B potenti
ally unwanted application","sample_id": "JS/Toolbar.Crossrider.B potentially unw
anted application","sample_hashes": {"SHA1": "03517F89D3F20D2D4E2B1A956F8248C9DA
9FFC18",},}&report_sig=FF0D817D4B246BFC0B2E89F6CEF40C16&fwd_ip=127.0.0.1&version
=4.5.0.2901:44:31
pplication","sample_hashes": {"SHA1": "49BBE5AC7BA9C32FE3C5B24F1074385D2C60FA38"
,},}&report_sig=A116FF669DB59C3C2DA7F8D77D0FBE2F&fwd_ip=127.0.0.1&version=4.5.0.
2901:44:32
anted application","sample_hashes": {"SHA1": "49BBE5AC7BA9C32FE3C5B24F1074385D2C
60FA38",},}&report_sig=2800D0F262368F89A7B2316DFF8C7666&fwd_ip=127.0.0.1&version
=4.5.0.2901:44:32
,"event_type": "DETECTED","sample_name": "JS/Toolbar.Crossrider.N potentially un
wanted application","sample_id": "JS/Toolbar.Crossrider.N potentially unwanted a
pplication","sample_hashes": {"SHA1": "778B8C980A33D3679264BE3920E6F15D75731E06"
,},}&report_sig=0CFD57AC318232B397AB7E0ECF6B28B3&fwd_ip=127.0.0.1&version=4.5.0.
2901:44:32
,"event_type": "CLEANUP_SUCCESS","sample_name": "JS/Toolbar.Crossrider.N potenti
ally unwanted application","sample_id": "JS/Toolbar.Crossrider.N potentially unw
anted application","sample_hashes": {"SHA1": "778B8C980A33D3679264BE3920E6F15D75
731E06",},}&report_sig=DEA1C77DC4E7F4C8F646D423E192209F&fwd_ip=127.0.0.1&version
=4.5.0.2901:44:32
pplication","sample_hashes": {"SHA1": "AF15C2CD390979ACF65E9210C6DB0E85252F6052"
,},}&report_sig=EB12DB2392434ECD7814B56DDC7D99C2&fwd_ip=127.0.0.1&version=4.5.0.
2901:44:33
ESS","progress": 6,}&report_sig=6549E52B04F5AEF9EC9A5F5686A2AE29&fwd_ip=127.0.0.
1&version=4.5.0.2901:44:33
anted application","sample_hashes": {"SHA1": "AF15C2CD390979ACF65E9210C6DB0E8525
2F6052",},}&report_sig=2C7CB4A90FF144C62698816B182C8E74&fwd_ip=127.0.0.1&version
=4.5.0.2901:44:33
pplication","sample_hashes": {"SHA1": "832ADA6E9B2673CA1DE314A566FF76316F0A2997"
,},}&report_sig=27E36A74CB2BAE403A33F589D192BE24&fwd_ip=127.0.0.1&version=4.5.0.
2901:44:34
anted application","sample_hashes": {"SHA1": "832ADA6E9B2673CA1DE314A566FF76316F
0A2997",},}&report_sig=5D244C01A0190E66A4CC89977E6BBA82&fwd_ip=127.0.0.1&version
=4.5.0.2901:44:34
.1&version=4.5.0.2901:44:34
pplication","sample_hashes": {"SHA1": "B959D7BE74EBA2B82B780E14A213BB132451990B"
,},}&report_sig=0167DF1B776FAB7496F017B5D11859F7&fwd_ip=127.0.0.1&version=4.5.0.
2901:44:34
anted application","sample_hashes": {"SHA1": "B959D7BE74EBA2B82B780E14A213BB1324
51990B",},}&report_sig=E9107C747D9F611596E0E34EFCB8128E&fwd_ip=127.0.0.1&version
=4.5.0.2901:44:35
pplication","sample_hashes": {"SHA1": "F4FE303A5886572113DF4DA3579956CEBB907F56"
,},}&report_sig=758EFBD719C205683BE874538BA67ACE&fwd_ip=127.0.0.1&version=4.5.0.
2901:44:35
anted application","sample_hashes": {"SHA1": "F4FE303A5886572113DF4DA3579956CEBB
907F56",},}&report_sig=56A442F12FF9031C4491BBE9526A6E62&fwd_ip=127.0.0.1&version
=4.5.0.2901:44:35
pplication","sample_hashes": {"SHA1": "902E327ADBC89F0A47999D10E7F6F6554CFCC0F4"
,},}&report_sig=E3AC202C50A55B2369A797CAC26D79E9&fwd_ip=127.0.0.1&version=4.5.0.
2901:44:36
anted application","sample_hashes": {"SHA1": "902E327ADBC89F0A47999D10E7F6F6554C
FCC0F4",},}&report_sig=06D1681E0A18FE250DDC732B565CC259&fwd_ip=127.0.0.1&version
=4.5.0.2901:44:36
pplication","sample_hashes": {"SHA1": "F7B2040B9EB935D0FFB1571CC0184FED6B7D7583"
,},}&report_sig=94C781B0DF6BC3040EF75FE4A36D557C&fwd_ip=127.0.0.1&version=4.5.0.
2901:44:36
anted application","sample_hashes": {"SHA1": "F7B2040B9EB935D0FFB1571CC0184FED6B
7D7583",},}&report_sig=733D01EE0ECFE52D045EC7B3F7C446D7&fwd_ip=127.0.0.1&version
=4.5.0.2901:44:37
pplication","sample_hashes": {"SHA1": "D88F73897D0415B880A52D98AACBCBA8372956B2"
,},}&report_sig=610E0AF3A7C1F4296C6593063FC6974B&fwd_ip=127.0.0.1&version=4.5.0.
2901:44:37
anted application","sample_hashes": {"SHA1": "D88F73897D0415B880A52D98AACBCBA837
2956B2",},}&report_sig=E7F63BFA9D5332265974674C2DC636BC&fwd_ip=127.0.0.1&version
=4.5.0.2901:44:37
,"event_type": "DETECTED","sample_name": "JS/Toolbar.Crossrider.H potentially un
wanted application","sample_id": "JS/Toolbar.Crossrider.H potentially unwanted a
pplication","sample_hashes": {"SHA1": "6B8D57805A81A0C2A68E87C410FF89D15BB71CC9"
,},}&report_sig=4AFE61F7BC96EDAB4F7AFE01B378623B&fwd_ip=127.0.0.1&version=4.5.0.
2901:44:38
,"event_type": "CLEANUP_SUCCESS","sample_name": "JS/Toolbar.Crossrider.H potenti
ally unwanted application","sample_id": "JS/Toolbar.Crossrider.H potentially unw
anted application","sample_hashes": {"SHA1": "6B8D57805A81A0C2A68E87C410FF89D15B
B71CC9",},}&report_sig=F287F1AD54CDEE71C3D3871E46F96B1E&fwd_ip=127.0.0.1&version
=4.5.0.2901:44:38

pplication","sample_hashes": {"SHA1": "EDB82EF0A2AC160256F1A5C49F0778E3A42AC559"
,},}&report_sig=D2873C9B46F2891C1CF7691EB3055021&fwd_ip=127.0.0.1&version=4.5.0.
2901:44:38
anted application","sample_hashes": {"SHA1": "EDB82EF0A2AC160256F1A5C49F0778E3A4
2AC559",},}&report_sig=49D9D71956F2AFF4C574D8CD0F17EDEB&fwd_ip=127.0.0.1&version
=4.5.0.2901:44:39
pplication","sample_hashes": {"SHA1": "3E6E49061DC4C0339624D1BD4C5972D2D6988DA4"
,},}&report_sig=51584B8E06F542EDB19D63454518B852&fwd_ip=127.0.0.1&version=4.5.0.
2901:44:39
anted application","sample_hashes": {"SHA1": "3E6E49061DC4C0339624D1BD4C5972D2D6
988DA4",},}&report_sig=C3B55F5BCEBF0A2BC6B54C80A277853F&fwd_ip=127.0.0.1&version
=4.5.0.2901:44:39
pplication","sample_hashes": {"SHA1": "B3ABD3CAA6ADACF7A87576C3F949A2C023F51456"
,},}&report_sig=EAB918344E0333A6292FEFB9CF5B99A0&fwd_ip=127.0.0.1&version=4.5.0.
2901:44:40
anted application","sample_hashes": {"SHA1": "B3ABD3CAA6ADACF7A87576C3F949A2C023
F51456",},}&report_sig=F648A4090D7B8BD380A2CC87E5D10599&fwd_ip=127.0.0.1&version
=4.5.0.2901:44:40
,"event_type": "DETECTED","sample_name": "JS/Toolbar.Crossrider.E potentially un
wanted application","sample_id": "JS/Toolbar.Crossrider.E potentially unwanted a
pplication","sample_hashes": {"SHA1": "908310927982C1DFD45B8CBBF669A940C0CE7CC6"
,},}&report_sig=C27B0F8B54F877E774D52BEBB342BDAB&fwd_ip=127.0.0.1&version=4.5.0.
2901:44:41

,"event_type": "CLEANUP_SUCCESS","sample_name": "JS/Toolbar.Crossrider.E potenti
ally unwanted application","sample_id": "JS/Toolbar.Crossrider.E potentially unw
anted application","sample_hashes": {"SHA1": "908310927982C1DFD45B8CBBF669A940C0
CE7CC6",},}&report_sig=4F94802416E50FB37007C5FEFE75464B&fwd_ip=127.0.0.1&version
=4.5.0.2901:44:41
,"event_type": "DETECTED","sample_name": "JS/Toolbar.Crossrider.R potentially un
wanted application","sample_id": "JS/Toolbar.Crossrider.R potentially unwanted a
pplication","sample_hashes": {"SHA1": "D7FE306EB39D64F7994917931E25229A5B156640"
,},}&report_sig=B5B7435BC6E52F8960C91941BA92C0BE&fwd_ip=127.0.0.1&version=4.5.0.
2901:44:41
,"event_type": "CLEANUP_SUCCESS","sample_name": "JS/Toolbar.Crossrider.R potenti
ally unwanted application","sample_id": "JS/Toolbar.Crossrider.R potentially unw
anted application","sample_hashes": {"SHA1": "D7FE306EB39D64F7994917931E25229A5B
156640",},}&report_sig=E97BB9390414155D5CF16F767F5B744D&fwd_ip=127.0.0.1&version
=4.5.0.2901:44:41
,"event_type": "DETECTED","sample_name": "JS/ClaraLab.A potentially unwanted app
lication","sample_id": "JS/ClaraLab.A potentially unwanted application","sample_
hashes": {"SHA1": "63B8C91672775A8A9D1641AF128B88DB0B1A9B3F",},}&report_sig=66AD
E8C5FE42037311E17E2A6ADF29F0&fwd_ip=127.0.0.1&version=4.5.0.2901:44:42
,"event_type": "CLEANUP_SUCCESS","sample_name": "JS/ClaraLab.A potentially unwan
ted application","sample_id": "JS/ClaraLab.A potentially unwanted application","
sample_hashes": {"SHA1": "63B8C91672775A8A9D1641AF128B88DB0B1A9B3F",},}&report_s
ig=D2CCA64937249A96598CE246CD8B0258&fwd_ip=127.0.0.1&version=4.5.0.2901:44:43
,"event_type": "DETECTED","sample_name": "JS/ClaraLab.A potentially unwanted app
lication","sample_id": "JS/ClaraLab.A potentially unwanted application","sample_
hashes": {"SHA1": "57C872446FAA34F3C1403986702F9177DFC0A7D0",},}&report_sig=E41C
43C6CE0B44A288CBB6D4AE8486DD&fwd_ip=127.0.0.1&version=4.5.0.2901:44:43
.1&version=4.5.0.2901:44:44
ESS","progress": 7,}&report_sig=FBACAFCD06E447A3452AD6479A1B4251&fwd_ip=127.0.0.
1&version=4.5.0.2901:44:53
ESS","progress": 8,}&report_sig=41DE667BE4B40B28EB51B069C37E545B&fwd_ip=127.0.0.
1&version=4.5.0.2901:45:03
.1&version=4.5.0.2901:45:04
ESS","progress": 10,}&report_sig=AC171CBE639BC332E608EF298CB67001&fwd_ip=127.0.0
.1&version=4.5.0.2901:45:13
.1&version=4.5.0.2901:45:14
ESS","progress": 11,}&report_sig=BCDB4B1E044BB807B717AF2307EE0CF5&fwd_ip=127.0.0
.1&version=4.5.0.2901:45:24
ESS","progress": 12,}&report_sig=EBDD954BFD00365A56399C4CE273139A&fwd_ip=127.0.0
.1&version=4.5.0.2901:45:34
.1&version=4.5.0.2901:45:44
ESS","progress": 13,}&report_sig=866AF33B0280EA61B17A3A36D3449D78&fwd_ip=127.0.0
.1&version=4.5.0.2901:45:44
.1&version=4.5.0.2901:45:54

ESS","progress": 14,}&report_sig=65F462285C29B03D265EE11A1AC06AB6&fwd_ip=127.0.0
.1&version=4.5.0.2901:45:56
.1&version=4.5.0.2901:46:04
.1&version=4.5.0.2901:46:07
.1&version=4.5.0.2901:46:14
ESS","progress": 16,}&report_sig=88B6B60B4797206A650127491C5C7B8E&fwd_ip=127.0.0
.1&version=4.5.0.2901:46:17
.1&version=4.5.0.2901:46:24
ESS","progress": 17,}&report_sig=A5A9BE6F2A1A54CB1A36A5DCE822AC6D&fwd_ip=127.0.0
.1&version=4.5.0.2901:46:27
.1&version=4.5.0.2901:46:34
ESS","progress": 18,}&report_sig=F03CDC54B63E3A0EDB6743119E6F2AFD&fwd_ip=127.0.0
.1&version=4.5.0.2901:46:38
.1&version=4.5.0.2901:46:44

.1&version=4.5.0.2901:46:48
.1&version=4.5.0.2901:46:54
.1&version=4.5.0.2901:47:04
.1&version=4.5.0.2901:47:14
.1&version=4.5.0.2901:47:16
.1&version=4.5.0.2901:47:24
.1&version=4.5.0.2901:47:34
.1&version=4.5.0.2901:47:41
01:47:42 Update Finalize
.1&version=4.5.0.2901:47:42
01:47:42 Updated modules version: 29475
# version=8
# FBAV_user_token=1180273625337362
# FBAV_attack_id=940201966078273
# FBAV_status=0
# flags=3
# ESET.exe=4.5.0.29
# end=Updated
# utc_time=2016-05-15 06:43:22
# country="Mexico"
01:47:43 UPDATED report sent to ESET
01:47:43 Initialize Scan
.1&version=4.5.0.2901:47:44
.1&version=4.5.0.2901:47:54
01:47:54 Call m_esets_charon_setup_create
01:47:54 Call m_esets_charon_create
01:47:54 m_esets_charon_create OK
01:47:54 Call m_esets_charon_start_send_thread
01:47:54 Call m_esets_charon_setup_set
01:47:54 m_esets_charon_setup_set OK
01:47:54 Scan
.1&version=4.5.0.2901:48:04
.1&version=4.5.0.2901:48:14
.1&version=4.5.0.2901:48:26
.1&version=4.5.0.2901:48:36
.1&version=4.5.0.2901:48:46
.1&version=4.5.0.2901:48:56
ly unwanted application,a variant of Win32/MPCCleaner.A potentially unwanted app
lication","sample_id": "a variant of Win32/SweetIM.L potentially unwanted applic
ation,a variant of Win32/MPCCleaner.A potentially unwanted application","sample_
hashes": {"SHA1": "0000000000000000000000000000000000000000",},}&report_sig=B454
DB59FC1B8B6A655AFA12AD148ED1&fwd_ip=127.0.0.1&version=4.5.0.2901:49:02
tentially unwanted application,a variant of Win32/MPCCleaner.A potentially unwan
ted application","sample_id": "a variant of Win32/SweetIM.L potentially unwanted
application,a variant of Win32/MPCCleaner.A potentially unwanted application","
sample_hashes": {"SHA1": "0000000000000000000000000000000000000000",},}&report_s
ig=E6065B8762BA2EB31DA9DE61E5F037FC&fwd_ip=127.0.0.1&version=4.5.0.2901:49:02
ESS","progress": 22,}&report_sig=6D15D3E1FF90784432A863B9D218F145&fwd_ip=127.0.0
.1&version=4.5.0.2901:49:02
.1&version=4.5.0.2901:49:06
ESS","progress": 27,}&report_sig=6028852688785C2E911B144B006EF253&fwd_ip=127.0.0
.1&version=4.5.0.2901:49:13
.1&version=4.5.0.2901:49:16
.1&version=4.5.0.2901:49:23

.1&version=4.5.0.2901:49:26
.1&version=4.5.0.2901:49:33
.1&version=4.5.0.2901:49:36
.1&version=4.5.0.2901:49:43
.1&version=4.5.0.2901:49:46
.1&version=4.5.0.2901:49:53
.1&version=4.5.0.2901:49:56
.1&version=4.5.0.2901:50:03
.1&version=4.5.0.2901:50:06
.1&version=4.5.0.2901:50:15

.1&version=4.5.0.2901:50:16
.1&version=4.5.0.2901:50:25
.1&version=4.5.0.2901:50:26
.1&version=4.5.0.2901:50:35
,"event_type": "DETECTED","sample_name": "Win32/Amonetize.MB potentially unwante
d application,a variant of Win32/Amonetize.MB potentially unwanted application",
"sample_id": "Win32/Amonetize.MB potentially unwanted application,a variant of W
in32/Amonetize.MB potentially unwanted application","sample_hashes": {"SHA1": "9
36593F198322272B771B8FAA4B8548C838DD80B",},}&report_sig=230E5A21DDB5489DA04CF49F
410D26E3&fwd_ip=127.0.0.1&version=4.5.0.2901:50:37
,"event_type": "CLEANUP_SUCCESS","sample_name": "Win32/Amonetize.MB potentially
unwanted application,a variant of Win32/Amonetize.MB potentially unwanted applic
ation","sample_id": "Win32/Amonetize.MB potentially unwanted application,a varia
nt of Win32/Amonetize.MB potentially unwanted application","sample_hashes": {"SH
A1": "936593F198322272B771B8FAA4B8548C838DD80B",},}&report_sig=D14EC9F8515D91BC9
74C43659E164552&fwd_ip=127.0.0.1&version=4.5.0.2901:50:37
.1&version=4.5.0.2901:50:37
,"event_type": "DETECTED","sample_name": "a variant of Win32/MPCCleaner.A potent
ially unwanted application","sample_id": "a variant of Win32/MPCCleaner.A potent
ially unwanted application","sample_hashes": {"SHA1": "7BCCF11BF9C645E1D9F1F9DC4
7F8D39131A89551",},}&report_sig=49BA2A4A2E0E7A8344096C8DF14A1236&fwd_ip=127.0.0.
1&version=4.5.0.2901:50:44
,"event_type": "CLEANUP_SUCCESS","sample_name": "a variant of Win32/MPCCleaner.A
potentially unwanted application","sample_id": "a variant of Win32/MPCCleaner.A
potentially unwanted application","sample_hashes": {"SHA1": "7BCCF11BF9C645E1D9
F1F9DC47F8D39131A89551",},}&report_sig=67D3229C5C5E00ACA230D98CD31CCA50&fwd_ip=1
27.0.0.1&version=4.5.0.2901:50:44
.1&version=4.5.0.2901:50:45
.1&version=4.5.0.2901:50:47
.1&version=4.5.0.2901:51:15
.1&version=4.5.0.2901:51:20
,"event_type": "DETECTED","sample_name": "Win32/Toolbar.Babylon potentially unwa
nted application","sample_id": "Win32/Toolbar.Babylon potentially unwanted appli
cation","sample_hashes": {"SHA1": "40969E053E001937C71D74EA719F78BF9A5FEF2A",},}
&report_sig=7534EC6E9FBE892A0954B65B4DE76DB9&fwd_ip=127.0.0.1&version=4.5.0.2901
:51:27
,"event_type": "CLEANUP_SUCCESS","sample_name": "Win32/Toolbar.Babylon potential
ly unwanted application","sample_id": "Win32/Toolbar.Babylon potentially unwante
d application","sample_hashes": {"SHA1": "40969E053E001937C71D74EA719F78BF9A5FEF
2A",},}&report_sig=3110C6D747DAA9C8592B399D246C2BBF&fwd_ip=127.0.0.1&version=4.5
.0.2901:51:27
.1&version=4.5.0.2901:51:28
cation","sample_hashes": {"SHA1": "5F437ECC88A691B6161B1D168B3F4A93624F5832",},}

&report_sig=750B722C85FCA26A455FFD5F74539C30&fwd_ip=127.0.0.1&version=4.5.0.2901
:51:29
d application","sample_hashes": {"SHA1": "5F437ECC88A691B6161B1D168B3F4A93624F58
32",},}&report_sig=3C34A9DDC1D1540FCA42C9F728D1AAA9&fwd_ip=127.0.0.1&version=4.5
.0.2901:51:29
.1&version=4.5.0.2901:51:30
unwanted application","sample_hashes": {"SHA1": "E1C99225C4C16710DE3AF3D52300E1E
943F7C84F",},}&report_sig=CA009A63223E93D09710A7132424D162&fwd_ip=127.0.0.1&vers
ion=4.5.0.2901:51:30
tially unwanted application","sample_hashes": {"SHA1": "E1C99225C4C16710DE3AF3D5
2300E1E943F7C84F",},}&report_sig=BDF6DDEBD0CF85C763954A68147EAA99&fwd_ip=127.0.0
.1&version=4.5.0.2901:51:31
.1&version=4.5.0.2901:51:40
.1&version=4.5.0.2901:51:50
.1&version=4.5.0.2901:52:00
,"event_type": "DETECTED","sample_name": "a variant of MSIL/NewPlayer.A potentia
lly unwanted application,JS/Superfish.A potentially unwanted application,a varia
nt of MSIL/NewPlayer.C potentially unwanted application","sample_id": "a variant

of MSIL/NewPlayer.A potentially unwanted application,JS/Superfish.A potentially
unwanted application,a variant of MSIL/NewPlayer.C potentially unwanted applica
tion","sample_hashes": {"SHA1": "899627D87F55AD031DD739E3C37BD465707EF67B",},}&r
eport_sig=E974EA9942AC9DA50A6A665F0598BEEF&fwd_ip=127.0.0.1&version=4.5.0.2901:5
2:08
,"event_type": "CLEANUP_SUCCESS","sample_name": "a variant of MSIL/NewPlayer.A p
otentially unwanted application,JS/Superfish.A potentially unwanted application,
a variant of MSIL/NewPlayer.C potentially unwanted application","sample_id": "a
variant of MSIL/NewPlayer.A potentially unwanted application,JS/Superfish.A pote
ntially unwanted application,a variant of MSIL/NewPlayer.C potentially unwanted
application","sample_hashes": {"SHA1": "899627D87F55AD031DD739E3C37BD465707EF67B
",},}&report_sig=1AC2F7666D9185574F27A2DBCD9F1B2A&fwd_ip=127.0.0.1&version=4.5.0
.2901:52:09
.1&version=4.5.0.2901:52:09
.1&version=4.5.0.2901:52:10
,"event_type": "DETECTED","sample_name": "Win32/MyPCBackup.A potentially unwante
d application","sample_id": "Win32/MyPCBackup.A potentially unwanted application
","sample_hashes": {"SHA1": "AF023CD20C85601E6874CB788BCAA49AE325A40D",},}&repor
t_sig=E17C0A6DF75FC5A2808C2E0F01E87129&fwd_ip=127.0.0.1&version=4.5.0.2901:52:10
,"event_type": "CLEANUP_SUCCESS","sample_name": "Win32/MyPCBackup.A potentially
unwanted application","sample_id": "Win32/MyPCBackup.A potentially unwanted appl
ication","sample_hashes": {"SHA1": "AF023CD20C85601E6874CB788BCAA49AE325A40D",},
}&report_sig=93B891B569DDE3586DFD37B18FFA0B5A&fwd_ip=127.0.0.1&version=4.5.0.290
1:52:10
,"event_type": "DETECTED","sample_name": "a variant of Win32/Adware.ConvertAd.KZ
.gen application","sample_id": "a variant of Win32/Adware.ConvertAd.KZ.gen appli
cation","sample_hashes": {"SHA1": "FE22CBD28636A728C9531A3EF0927CE666FE370B",},}
&report_sig=768D94AD5FFF9E7BCDAAAC6D21F7A8EE&fwd_ip=127.0.0.1&version=4.5.0.2901
:52:18
,"event_type": "CLEANUP_SUCCESS","sample_name": "a variant of Win32/Adware.Conve
rtAd.KZ.gen application","sample_id": "a variant of Win32/Adware.ConvertAd.KZ.ge
n application","sample_hashes": {"SHA1": "FE22CBD28636A728C9531A3EF0927CE666FE37
0B",},}&report_sig=01D9B82D51D2653D1E13F771AB7A0046&fwd_ip=127.0.0.1&version=4.5
.0.2901:52:18
.1&version=4.5.0.2901:52:20
,"event_type": "DETECTED","sample_name": "Win32/Systweak potentially unwanted ap
plication","sample_id": "Win32/Systweak potentially unwanted application","sampl
e_hashes": {"SHA1": "8F983A9242C9C393DBA6966974362A97818A2C91",},}&report_sig=0B
10783EBE95D0035580C31535DBD711&fwd_ip=127.0.0.1&version=4.5.0.2901:52:25
,"event_type": "CLEANUP_SUCCESS","sample_name": "Win32/Systweak potentially unwa
nted application","sample_id": "Win32/Systweak potentially unwanted application"
,"sample_hashes": {"SHA1": "8F983A9242C9C393DBA6966974362A97818A2C91",},}&report
_sig=DB005BFE747DFA664155152D538F8E7A&fwd_ip=127.0.0.1&version=4.5.0.2901:52:25
.1&version=4.5.0.2901:52:26
,"event_type": "DETECTED","sample_name": "a variant of Win32/Toolbar.Montiera.M
potentially unwanted application","sample_id": "a variant of Win32/Toolbar.Monti
era.M potentially unwanted application","sample_hashes": {"SHA1": "D4AACD403AD96
2D4B594857BE81745262678CF8C",},}&report_sig=F3AC862E4E33B71770E1F401846937CE&fwd
_ip=127.0.0.1&version=4.5.0.2901:52:30
,"event_type": "CLEANUP_SUCCESS","sample_name": "a variant of Win32/Toolbar.Mont
iera.M potentially unwanted application","sample_id": "a variant of Win32/Toolba
r.Montiera.M potentially unwanted application","sample_hashes": {"SHA1": "D4AACD
403AD962D4B594857BE81745262678CF8C",},}&report_sig=B0AC5AA13B55F387D1427CF7F7410
0FF&fwd_ip=127.0.0.1&version=4.5.0.2901:52:30
.1&version=4.5.0.2901:52:31

,"event_type": "DETECTED","sample_name": "a variant of Win32/Toolbar.CrossRider.
BM potentially unwanted application","sample_id": "a variant of Win32/Toolbar.Cr
ossRider.BM potentially unwanted application","sample_hashes": {"SHA1": "C51EF66
203096B84260F8084D68517D8DE02AFDE",},}&report_sig=6B2C3EB26C531A802CA3B42782DBDC
FF&fwd_ip=127.0.0.1&version=4.5.0.2901:52:35
,"event_type": "CLEANUP_SUCCESS","sample_name": "a variant of Win32/Toolbar.Cros
sRider.BM potentially unwanted application","sample_id": "a variant of Win32/Too
lbar.CrossRider.BM potentially unwanted application","sample_hashes": {"SHA1": "
C51EF66203096B84260F8084D68517D8DE02AFDE",},}&report_sig=2671A76D83578693C497E46
064986985&fwd_ip=127.0.0.1&version=4.5.0.2901:52:35
.1&version=4.5.0.2901:52:36
:52:39
.0.2901:52:39
.1&version=4.5.0.2901:52:40
:52:40

.0.2901:52:40
lly unwanted application,a variant of MSIL/NewPlayer.C potentially unwanted appl
ication","sample_id": "a variant of MSIL/NewPlayer.A potentially unwanted applic
ation,a variant of MSIL/NewPlayer.C potentially unwanted application","sample_ha
shes": {"SHA1": "26A6BAF6D8BA592DC62EFD38CE10F939840CA550",},}&report_sig=58EA28
D4906E58A6E7ABB73629E3A989&fwd_ip=127.0.0.1&version=4.5.0.2901:52:50
otentially unwanted application,a variant of MSIL/NewPlayer.C potentially unwant
ed application","sample_id": "a variant of MSIL/NewPlayer.A potentially unwanted
application,a variant of MSIL/NewPlayer.C potentially unwanted application","sa
mple_hashes": {"SHA1": "26A6BAF6D8BA592DC62EFD38CE10F939840CA550",},}&report_sig
=89A37DF00F0C9095EE607AD8793AC1D0&fwd_ip=127.0.0.1&version=4.5.0.2901:52:50
.1&version=4.5.0.2901:52:50
:52:58
.0.2901:52:59
.1&version=4.5.0.2901:53:00

:53:00
.0.2901:53:00
.1&version=4.5.0.2901:53:00
cation","sample_hashes": {"SHA1": "C63ED0FFD28904C40BC8E77F3B9627343F40141D",},}
&report_sig=43356411FC14C527A4BA34EB05FABD06&fwd_ip=127.0.0.1&version=4.5.0.2901
:53:07
n application","sample_hashes": {"SHA1": "C63ED0FFD28904C40BC8E77F3B9627343F4014
1D",},}&report_sig=7BF5359C72F4ECA0B3B7BAEB51E49FEC&fwd_ip=127.0.0.1&version=4.5
.0.2901:53:08
.1&version=4.5.0.2901:53:10
:53:12
.0.2901:53:12
.1&version=4.5.0.2901:53:12
:53:13
.0.2901:53:14
:53:18
.0.2901:53:18
:53:19
.0.2901:53:20
.1&version=4.5.0.2901:53:20
1:53:21
.1&version=4.5.0.2901:53:22
,"event_type": "DETECTED","sample_name": "a variant of Win32/Toolbar.Babylon.E p
otentially unwanted application","sample_id": "a variant of Win32/Toolbar.Babylo
n.E potentially unwanted application","sample_hashes": {"SHA1": "51A0E61B7550B03
A36052A6603741510B21E7169",},}&report_sig=76F977AF5B0BE0060E9A8FA16194844A&fwd_i
p=127.0.0.1&version=4.5.0.2901:53:24
,"event_type": "CLEANUP_SUCCESS","sample_name": "a variant of Win32/Toolbar.Baby
lon.E potentially unwanted application","sample_id": "a variant of Win32/Toolbar
.Babylon.E potentially unwanted application","sample_hashes": {"SHA1": "51A0E61B
7550B03A36052A6603741510B21E7169",},}&report_sig=216AA9DF5E21D0C8E029A5895976FF1
F&fwd_ip=127.0.0.1&version=4.5.0.2901:53:24
n.E potentially unwanted application","sample_hashes": {"SHA1": "1296CC646637D9A
06A5A62159188CFE00686751D",},}&report_sig=99DAAA698C7B10D6A6E1B8E607C93C20&fwd_i
p=127.0.0.1&version=4.5.0.2901:53:25

.Babylon.E potentially unwanted application","sample_hashes": {"SHA1": "1296CC64
6637D9A06A5A62159188CFE00686751D",},}&report_sig=B85F9589F2798EACA480E37EDC74CD4
1&fwd_ip=127.0.0.1&version=4.5.0.2901:53:25
.1&version=4.5.0.2901:53:30
,"event_type": "DETECTED","sample_name": "Win32/Toolbar.Montiera.I potentially u
nwanted application,a variant of Win32/Toolbar.Babylon.AA potentially unwanted a
pplication,a variant of Win32/Toolbar.Babylon potentially unwanted application,W
in32/Toolbar.Montiera.J potentially unwanted application,a variant of Win32/Tool
bar.Babylon.K potentially unwanted application","sample_id": "Win32/Toolbar.Mont
iera.I potentially unwanted application,a variant of Win32/Toolbar.Babylon.AA po
tentially unwanted application,a variant of Win32/Toolbar.Babylon potentially un
wanted application,Win32/Toolbar.Montiera.J potentially unwanted application,a v
ariant of Win32/Toolbar.Babylon.K potentially unwanted application","sample_hash
es": {"SHA1": "17D3694A2723DD486A0CFC5C2D832152C552E1F9",},}&report_sig=4F5ED2E6
5A965A5E9F0DAC049ADF7001&fwd_ip=127.0.0.1&version=4.5.0.2901:53:30
01:53:31 Response: 01:53:31 {"error":{"message":"An unexpected error has occurre
d. Please retry your request later.","type":"OAuthException","is_transient":true
,"code":2,"fbtrace_id":"BQuDx42HycC"}}01:53:31
,"event_type": "CLEANUP_SUCCESS","sample_name": "Win32/Toolbar.Montiera.I potent
ially unwanted application,a variant of Win32/Toolbar.Babylon.AA potentially unw
anted application,a variant of Win32/Toolbar.Babylon potentially unwanted applic
ation,Win32/Toolbar.Montiera.J potentially unwanted application,a variant of Win
32/Toolbar.Babylon.K potentially unwanted application","sample_id": "Win32/Toolb
ar.Montiera.I potentially unwanted application,a variant of Win32/Toolbar.Babylo
n.AA potentially unwanted application,a variant of Win32/Toolbar.Babylon potenti
ally unwanted application,Win32/Toolbar.Montiera.J potentially unwanted applicat
ion,a variant of Win32/Toolbar.Babylon.K potentially unwanted application","samp
le_hashes": {"SHA1": "17D3694A2723DD486A0CFC5C2D832152C552E1F9",},}&report_sig=5
18123901EE25D87CF42FC62D88677EF&fwd_ip=127.0.0.1&version=4.5.0.2901:53:31
,"code":2,"fbtrace_id":"CJxaRjJ0i\/h"}}01:53:31
n.E potentially unwanted application","sample_hashes": {"SHA1": "CB32EB27A195FD7
74A8D357000AAACB9099284D7",},}&report_sig=17962D3EB12B3EF165E97C6567E22210&fwd_i
p=127.0.0.1&version=4.5.0.2901:53:33

.Babylon.E potentially unwanted application","sample_hashes": {"SHA1": "CB32EB27
A195FD774A8D357000AAACB9099284D7",},}&report_sig=6C7377BCCF4CEDE0A1049FC421C9339
A&fwd_ip=127.0.0.1&version=4.5.0.2901:53:33
.1&version=4.5.0.2901:53:34
n.E potentially unwanted application","sample_hashes": {"SHA1": "2F7F92F0EEB0C83
53BACB26BC12FED71822DE7E9",},}&report_sig=CA33D3A5AF00BFC25DAE34D7A94F9635&fwd_i
p=127.0.0.1&version=4.5.0.2901:53:35
.Babylon.E potentially unwanted application","sample_hashes": {"SHA1": "2F7F92F0
EEB0C8353BACB26BC12FED71822DE7E9",},}&report_sig=7987F264B3FF22B6FD8A0A9496AC779
1&fwd_ip=127.0.0.1&version=4.5.0.2901:53:36
.1&version=4.5.0.2901:53:40
:53:43
.0.2901:53:43
.1&version=4.5.0.2901:53:44

:53:44
.0.2901:53:45
.1&version=4.5.0.2901:53:50
.1&version=4.5.0.2901:54:01
.1&version=4.5.0.2901:54:11
lly unwanted application,MSIL/Tuguu.C potentially unwanted application,MSIL/NewP
layer.A potentially unwanted application","sample_id": "a variant of MSIL/NewPla
yer.A potentially unwanted application,MSIL/Tuguu.C potentially unwanted applica
tion,MSIL/NewPlayer.A potentially unwanted application","sample_hashes": {"SHA1"
: "4CCFD8881EC408130C36D96D0D9C9911ABA66AF4",},}&report_sig=00FB5A4B0A7003716BFC
3E2FA1E8A964&fwd_ip=127.0.0.1&version=4.5.0.2901:54:19
otentially unwanted application,MSIL/Tuguu.C potentially unwanted application,MS
IL/NewPlayer.A potentially unwanted application","sample_id": "a variant of MSIL
/NewPlayer.A potentially unwanted application,MSIL/Tuguu.C potentially unwanted
application,MSIL/NewPlayer.A potentially unwanted application","sample_hashes":
{"SHA1": "4CCFD8881EC408130C36D96D0D9C9911ABA66AF4",},}&report_sig=B73744D6F2C35
11E279CE8434BA8F2E8&fwd_ip=127.0.0.1&version=4.5.0.2901:54:19
.1&version=4.5.0.2901:54:20
","sample_hashes": {"SHA1": "1A9C2CE8C1F539AC8546D67C9F924AEA8D2A84C2",},}&repor
t_sig=53E610ECD63B4FE82BE21611FE3BE3FA&fwd_ip=127.0.0.1&version=4.5.0.2901:54:20
ication","sample_hashes": {"SHA1": "1A9C2CE8C1F539AC8546D67C9F924AEA8D2A84C2",},
}&report_sig=CF0542144D48CE87CE0D57442418D15A&fwd_ip=127.0.0.1&version=4.5.0.290
1:54:20
.1&version=4.5.0.2901:54:21
,"event_type": "DETECTED","sample_name": "Win32/Packed.ScrambleWrapper.M potenti
ally unwanted application,a variant of Win32/Packed.ScrambleWrapper.N potentiall
y unwanted application","sample_id": "Win32/Packed.ScrambleWrapper.M potentially
unwanted application,a variant of Win32/Packed.ScrambleWrapper.N potentially un
wanted application","sample_hashes": {"SHA1": "139889165B745A4C8B5D6FD7FE121234A
25922D9",},}&report_sig=55EE3535BEE0CB035D2BC669AE50FAE5&fwd_ip=127.0.0.1&versio
n=4.5.0.2901:54:30
.1&version=4.5.0.2901:54:31
.1&version=4.5.0.2901:54:31
,"event_type": "DETECTED","sample_name": "multiple threats,a variant of Win32/Ad
Ware.EoRezo.AU application,a variant of Win32/Adware.EoRezo.AJ application,Win32
/Adware.EoRezo.AS application,Win32/AdWare.EoRezo.AW application","sample_id": "
multiple threats,a variant of Win32/AdWare.EoRezo.AU application,a variant of Wi
n32/Adware.EoRezo.AJ application,Win32/Adware.EoRezo.AS application,Win32/AdWare
.EoRezo.AW application","sample_hashes": {"SHA1": "AD122982090B4113012D8C8833928
DAFF2940DC4",},}&report_sig=7FDDCC8FD172BD9882323901DB000468&fwd_ip=127.0.0.1&ve
rsion=4.5.0.2901:54:36
,"event_type": "CLEANUP_SUCCESS","sample_name": "multiple threats,a variant of W
in32/AdWare.EoRezo.AU application,a variant of Win32/Adware.EoRezo.AJ applicatio
n,Win32/Adware.EoRezo.AS application,Win32/AdWare.EoRezo.AW application","sample
_id": "multiple threats,a variant of Win32/AdWare.EoRezo.AU application,a varian
t of Win32/Adware.EoRezo.AJ application,Win32/Adware.EoRezo.AS application,Win32
/AdWare.EoRezo.AW application","sample_hashes": {"SHA1": "AD122982090B4113012D8C
8833928DAFF2940DC4",},}&report_sig=E49141AB6C6541381FF0554E79BFA9A0&fwd_ip=127.0
.0.1&version=4.5.0.2901:54:36
.1&version=4.5.0.2901:54:41
,"event_type": "DETECTED","sample_name": "Win32/Adware.ConvertAd.AQ application"
,"sample_id": "Win32/Adware.ConvertAd.AQ application","sample_hashes": {"SHA1":
"88816AA2C09F734F46B1B5814F1F98569039521A",},}&report_sig=0390EDFABE7DD18322BC64
1870DAA8DD&fwd_ip=127.0.0.1&version=4.5.0.2901:54:43
,"event_type": "CLEANUP_SUCCESS","sample_name": "Win32/Adware.ConvertAd.AQ appli
cation","sample_id": "Win32/Adware.ConvertAd.AQ application","sample_hashes": {"
SHA1": "88816AA2C09F734F46B1B5814F1F98569039521A",},}&report_sig=0CFEEC13CA0C032
5F7C4D48F3D12D1B5&fwd_ip=127.0.0.1&version=4.5.0.2901:54:43
.1&version=4.5.0.2901:54:44
.1&version=4.5.0.2901:54:51
,"event_type": "DETECTED","sample_name": "a variant of Win64/BrowseFox.BQ potent
ially unwanted application","sample_id": "a variant of Win64/BrowseFox.BQ potent
ially unwanted application","sample_hashes": {"SHA1": "FF18CDC9E0B682908C8FB73C1
1F89D8210E88472",},}&report_sig=1CCB7D3E13087604A2C26FE02E099C80&fwd_ip=127.0.0.
1&version=4.5.0.2901:54:51
,"event_type": "CLEANUP_SUCCESS","sample_name": "a variant of Win64/BrowseFox.BQ

potentially unwanted application","sample_id": "a variant of Win64/BrowseFox.BQ
potentially unwanted application","sample_hashes": {"SHA1": "FF18CDC9E0B682908C
8FB73C11F89D8210E88472",},}&report_sig=AC379E13C7A0145C5680259C3D2851F4&fwd_ip=1
27.0.0.1&version=4.5.0.2901:54:51
,"event_type": "DETECTED","sample_name": "Win32/Systweak potentially unwanted ap
plication","sample_id": "Win32/Systweak potentially unwanted application","sampl
e_hashes": {"SHA1": "8F983A9242C9C393DBA6966974362A97818A2C91",},}&report_sig=0B
10783EBE95D0035580C31535DBD711&fwd_ip=127.0.0.1&version=4.5.0.2901:54:57
,"event_type": "CLEANUP_SUCCESS","sample_name": "Win32/Systweak potentially unwa
nted application","sample_id": "Win32/Systweak potentially unwanted application"
,"sample_hashes": {"SHA1": "8F983A9242C9C393DBA6966974362A97818A2C91",},}&report
_sig=DB005BFE747DFA664155152D538F8E7A&fwd_ip=127.0.0.1&version=4.5.0.2901:54:58
.1&version=4.5.0.2901:54:58
.1&version=4.5.0.2901:55:01
:55:01
.0.2901:55:01
:55:03

.0.2901:55:03
,"event_type": "DETECTED","sample_name": "a variant of Win32/4Shared.P potential
ly unwanted application","sample_id": "a variant of Win32/4Shared.P potentially
unwanted application","sample_hashes": {"SHA1": "85580759D40D48EDB8CD54EFB49803B
470C43FAB",},}&report_sig=B7DA27264642E150947AEC3E378F5CEA&fwd_ip=127.0.0.1&vers
ion=4.5.0.2901:55:05
,"event_type": "CLEANUP_SUCCESS","sample_name": "a variant of Win32/4Shared.P po
tentially unwanted application","sample_id": "a variant of Win32/4Shared.P poten
tially unwanted application","sample_hashes": {"SHA1": "85580759D40D48EDB8CD54EF
B49803B470C43FAB",},}&report_sig=F3CAA6B7BF49E180576CE52ECBF1C8A8&fwd_ip=127.0.0
.1&version=4.5.0.2901:55:05
,"event_type": "DETECTED","sample_name": "a variant of Win32/4Shared.P potential
ly unwanted application","sample_id": "a variant of Win32/4Shared.P potentially
unwanted application","sample_hashes": {"SHA1": "B337FE0F551D86881F58F1B4BC6C061
05BFD9858",},}&report_sig=A74FA274ACC143753A71BE03652D9806&fwd_ip=127.0.0.1&vers
ion=4.5.0.2901:55:06
,"event_type": "CLEANUP_SUCCESS","sample_name": "a variant of Win32/4Shared.P po
tentially unwanted application","sample_id": "a variant of Win32/4Shared.P poten
tially unwanted application","sample_hashes": {"SHA1": "B337FE0F551D86881F58F1B4
BC6C06105BFD9858",},}&report_sig=BAA22F5DFE511CF9FF5EA34826CBF012&fwd_ip=127.0.0
.1&version=4.5.0.2901:55:06
BS potentially unwanted application","sample_id": "a variant of Win32/Toolbar.Cr
ossRider.BS potentially unwanted application","sample_hashes": {"SHA1": "F9772BC
76EB869504E02B64CB70479D7ECAA8BCE",},}&report_sig=44B96C6AC5E10732BDE6D009CCB620
5C&fwd_ip=127.0.0.1&version=4.5.0.2901:55:07
sRider.BS potentially unwanted application","sample_id": "a variant of Win32/Too
lbar.CrossRider.BS potentially unwanted application","sample_hashes": {"SHA1": "

F9772BC76EB869504E02B64CB70479D7ECAA8BCE",},}&report_sig=0F7910E4094B8F9B1A362F6
C83797037&fwd_ip=127.0.0.1&version=4.5.0.2901:55:08
.1&version=4.5.0.2901:55:08
:55:10
.0.2901:55:10
.1&version=4.5.0.2901:55:11
:55:13
.0.2901:55:14
:55:15

.0.2901:55:15
ossRider.BS potentially unwanted application","sample_hashes": {"SHA1": "AD96374
831F6F2AC92BD0526B8D30FEBD03EE246",},}&report_sig=8680EFD358EF149951451F538591AF
1F&fwd_ip=127.0.0.1&version=4.5.0.2901:55:16
AD96374831F6F2AC92BD0526B8D30FEBD03EE246",},}&report_sig=4BCB8E518E78CFF7B837380
7B005732F&fwd_ip=127.0.0.1&version=4.5.0.2901:55:17
.1&version=4.5.0.2901:55:18
.1&version=4.5.0.2901:55:21
","sample_hashes": {"SHA1": "D2EAFFAD45CC86DE6E07E9D8E42440CD25DA5754",},}&repor
t_sig=5A332438EF5F35F6557870C47FAE5D47&fwd_ip=127.0.0.1&version=4.5.0.2901:55:22
ication","sample_hashes": {"SHA1": "D2EAFFAD45CC86DE6E07E9D8E42440CD25DA5754",},
}&report_sig=7E3AA969F910A52E7FAA18BB412A3246&fwd_ip=127.0.0.1&version=4.5.0.290
1:55:22
,"event_type": "DETECTED","sample_name": "a variant of Win64/BrowseFox.AN potent
ially unwanted application","sample_id": "a variant of Win64/BrowseFox.AN potent
ially unwanted application","sample_hashes": {"SHA1": "63279B567E8763B837483E6D3
FDB8E7D70B011A5",},}&report_sig=4EB6B41A6E694B5BBFDC1CDE84C86AFF&fwd_ip=127.0.0.
1&version=4.5.0.2901:55:29
,"event_type": "CLEANUP_SUCCESS","sample_name": "a variant of Win64/BrowseFox.AN
potentially unwanted application","sample_id": "a variant of Win64/BrowseFox.AN
potentially unwanted application","sample_hashes": {"SHA1": "63279B567E8763B837
483E6D3FDB8E7D70B011A5",},}&report_sig=D3CF30BEC3563625667E305DCAEF6027&fwd_ip=1
27.0.0.1&version=4.5.0.2901:55:29
.1&version=4.5.0.2901:55:29
,"event_type": "DETECTED","sample_name": "a variant of Win32/AdWare.Lollipop.R a
pplication","sample_id": "a variant of Win32/AdWare.Lollipop.R application","sam
ple_hashes": {"SHA1": "711837BD6EC881D91000BC2E90EC6A8D789E287B",},}&report_sig=
6BE6E54FBD279A695E63D9DAA09B57A6&fwd_ip=127.0.0.1&version=4.5.0.2901:55:30
,"event_type": "CLEANUP_SUCCESS","sample_name": "a variant of Win32/AdWare.Lolli
pop.R application","sample_id": "a variant of Win32/AdWare.Lollipop.R applicatio
n","sample_hashes": {"SHA1": "711837BD6EC881D91000BC2E90EC6A8D789E287B",},}&repo
rt_sig=D4AA4153BBD1D6B73BE6F949078C3828&fwd_ip=127.0.0.1&version=4.5.0.2901:55:3
1
.1&version=4.5.0.2901:55:41
.1&version=4.5.0.2901:55:51
.1&version=4.5.0.2901:56:01
lly unwanted application,MSIL/Tuguu.C potentially unwanted application,MSIL/NewP
layer.A potentially unwanted application","sample_id": "a variant of MSIL/NewPla
yer.A potentially unwanted application,MSIL/Tuguu.C potentially unwanted applica
tion,MSIL/NewPlayer.A potentially unwanted application","sample_hashes": {"SHA1"
: "0D3CABFEDF9FA892436405F03E5ABE44831C157D",},}&report_sig=9189486FD2587C810D53
E975932BE2B7&fwd_ip=127.0.0.1&version=4.5.0.2901:56:05
otentially unwanted application,MSIL/Tuguu.C potentially unwanted application,MS
IL/NewPlayer.A potentially unwanted application","sample_id": "a variant of MSIL
/NewPlayer.A potentially unwanted application,MSIL/Tuguu.C potentially unwanted
application,MSIL/NewPlayer.A potentially unwanted application","sample_hashes":
{"SHA1": "0D3CABFEDF9FA892436405F03E5ABE44831C157D",},}&report_sig=FDFD8DDAE7CBB
A93B40D6FC8058D026D&fwd_ip=127.0.0.1&version=4.5.0.2901:56:05
01:56:06 Response: 01:56:06 {"stat01:56:06
.1&version=4.5.0.2901:56:06
,"event_type": "DETECTED","sample_name": "Win32/SpeedingUpMyPC.I application","s
ample_id": "Win32/SpeedingUpMyPC.I application","sample_hashes": {"SHA1": "B7FA6
3CF43058435806FA9204B0C4F3994C59EF0",},}&report_sig=BD6175CEC433E1ED1EC425A6FB78
154F&fwd_ip=127.0.0.1&version=4.5.0.2901:56:09
,"event_type": "CLEANUP_SUCCESS","sample_name": "Win32/SpeedingUpMyPC.I applicat
ion","sample_id": "Win32/SpeedingUpMyPC.I application","sample_hashes": {"SHA1":
"B7FA63CF43058435806FA9204B0C4F3994C59EF0",},}&report_sig=8F27B7E4029468EF2E9E4
D579CC24753&fwd_ip=127.0.0.1&version=4.5.0.2901:56:09
.1&version=4.5.0.2901:56:11
,"event_type": "DETECTED","sample_name": "Win32/Packed.ScrambleWrapper.M potenti
ally unwanted application,a variant of Win32/Packed.ScrambleWrapper.K potentiall
y unwanted application","sample_id": "Win32/Packed.ScrambleWrapper.M potentially
unwanted application,a variant of Win32/Packed.ScrambleWrapper.K potentially un
wanted application","sample_hashes": {"SHA1": "7FD47F71324C0A482E45D8704F688C1AE
3F0C70F",},}&report_sig=1562DC5978B368DD829F5B0A831BDED6&fwd_ip=127.0.0.1&versio
n=4.5.0.2901:56:15

,"event_type": "CLEANUP_SUCCESS","sample_name": "Win32/Packed.ScrambleWrapper.M
potentially unwanted application,a variant of Win32/Packed.ScrambleWrapper.K pot
entially unwanted application","sample_id": "Win32/Packed.ScrambleWrapper.M pote
ntially unwanted application,a variant of Win32/Packed.ScrambleWrapper.K potenti
ally unwanted application","sample_hashes": {"SHA1": "7FD47F71324C0A482E45D8704F
688C1AE3F0C70F",},}&report_sig=ADF53D983F94CA6D8AB212DFEFC42C08&fwd_ip=127.0.0.1
&version=4.5.0.2901:56:15
.1&version=4.5.0.2901:56:16
.1&version=4.5.0.2901:56:21
ware.Vitruvian.F application,a variant of Win32/AdWare.Vitruvian.D application",
"sample_id": "multiple threats,a variant of Win32/Adware.Vitruvian.F application
,a variant of Win32/AdWare.Vitruvian.D application","sample_hashes": {"SHA1": "8
8849C2AC0F262B72E9AF3B5A7944EE5724C172B",},}&report_sig=DABD547BA25BD384110B4041
4F0BF673&fwd_ip=127.0.0.1&version=4.5.0.2901:56:27
in32/Adware.Vitruvian.F application,a variant of Win32/AdWare.Vitruvian.D applic
ation","sample_id": "multiple threats,a variant of Win32/Adware.Vitruvian.F appl
ication,a variant of Win32/AdWare.Vitruvian.D application","sample_hashes": {"SH
A1": "88849C2AC0F262B72E9AF3B5A7944EE5724C172B",},}&report_sig=78A9AB79E3331CC95
3407455F397837B&fwd_ip=127.0.0.1&version=4.5.0.2901:56:27
.1&version=4.5.0.2901:56:27
.1&version=4.5.0.2901:56:31
,"event_type": "DETECTED","sample_name": "Win32/Toolbar.Montiera.E potentially u
nwanted application,Win32/Toolbar.Montiera.B potentially unwanted application,a
variant of Win32/Toolbar.Montiera.A potentially unwanted application,a variant o
f Win32/Toolbar.Montiera.F potentially unwanted application,Win32/Toolbar.Montie

ra.AA potentially unwanted application","sample_id": "Win32/Toolbar.Montiera.E p
otentially unwanted application,Win32/Toolbar.Montiera.B potentially unwanted ap
plication,a variant of Win32/Toolbar.Montiera.A potentially unwanted application
,a variant of Win32/Toolbar.Montiera.F potentially unwanted application,Win32/To
olbar.Montiera.AA potentially unwanted application","sample_hashes": {"SHA1": "A
FD3B6A87144943D1CEDCC59D06B5D36F8E0FB38",},}&report_sig=66D4091241FB28729A069FC9
72A4E3AE&fwd_ip=127.0.0.1&version=4.5.0.2901:56:36
,"code":2,"fbtrace_id":"Hu0XMOzlXR6"}}01:56:36
,"event_type": "CLEANUP_SUCCESS","sample_name": "Win32/Toolbar.Montiera.E potent
ially unwanted application,Win32/Toolbar.Montiera.B potentially unwanted applica
tion,a variant of Win32/Toolbar.Montiera.A potentially unwanted application,a va
riant of Win32/Toolbar.Montiera.F potentially unwanted application,Win32/Toolbar
.Montiera.AA potentially unwanted application","sample_id": "Win32/Toolbar.Monti
era.E potentially unwanted application,Win32/Toolbar.Montiera.B potentially unwa
nted application,a variant of Win32/Toolbar.Montiera.A potentially unwanted appl
ication,a variant of Win32/Toolbar.Montiera.F potentially unwanted application,W
in32/Toolbar.Montiera.AA potentially unwanted application","sample_hashes": {"SH
A1": "AFD3B6A87144943D1CEDCC59D06B5D36F8E0FB38",},}&report_sig=0122D2B8771C67FF3
1B0C39AA79F0F0B&fwd_ip=127.0.0.1&version=4.5.0.2901:56:36
,"code":2,"fbtrace_id":"DWIhZSLyCKE"}}01:56:36
.1&version=4.5.0.2901:56:43
f Win32/Toolbar.Montiera.F potentially unwanted application,Win32/Toolbar.Montie
ra.AA potentially unwanted application","sample_id": "Win32/Toolbar.Montiera.E p
otentially unwanted application,Win32/Toolbar.Montiera.B potentially unwanted ap
plication,a variant of Win32/Toolbar.Montiera.A potentially unwanted application
,a variant of Win32/Toolbar.Montiera.F potentially unwanted application,Win32/To
olbar.Montiera.AA potentially unwanted application","sample_hashes": {"SHA1": "6
71B38AF7420D1904A24E44A5890C1242D320D32",},}&report_sig=502A29650160B7538EAA5CD0
66F16C87&fwd_ip=127.0.0.1&version=4.5.0.2901:56:49
,"code":2,"fbtrace_id":"HEafbGMnnQ3"}}01:56:49
riant of Win32/Toolbar.Montiera.F potentially unwanted application,Win32/Toolbar
.Montiera.AA potentially unwanted application","sample_id": "Win32/Toolbar.Monti
era.E potentially unwanted application,Win32/Toolbar.Montiera.B potentially unwa
nted application,a variant of Win32/Toolbar.Montiera.A potentially unwanted appl

ication,a variant of Win32/Toolbar.Montiera.F potentially unwanted application,W
in32/Toolbar.Montiera.AA potentially unwanted application","sample_hashes": {"SH
A1": "671B38AF7420D1904A24E44A5890C1242D320D32",},}&report_sig=93DC9AF1BC0B110B8
6BCF8B8781AC516&fwd_ip=127.0.0.1&version=4.5.0.2901:56:49
,"code":2,"fbtrace_id":"BgOvT9QMKXN"}}01:56:50
.1&version=4.5.0.2901:56:50
,"event_type": "DETECTED","sample_name": "Win32/AlteredSoftware.A potentially un
wanted application","sample_id": "Win32/AlteredSoftware.A potentially unwanted a
pplication","sample_hashes": {"SHA1": "0E7CC420B0BE38296EF8516DC3786361119F1F5F"
,},}&report_sig=C52BD8F0A3F4254439DF8A82A0AAA01E&fwd_ip=127.0.0.1&version=4.5.0.
2901:56:50
,"event_type": "CLEANUP_SUCCESS","sample_name": "Win32/AlteredSoftware.A potenti
ally unwanted application","sample_id": "Win32/AlteredSoftware.A potentially unw
anted application","sample_hashes": {"SHA1": "0E7CC420B0BE38296EF8516DC378636111
9F1F5F",},}&report_sig=5F1EF4B4798101C34D5611C42AA6B5CB&fwd_ip=127.0.0.1&version
=4.5.0.2901:56:51
,"event_type": "DETECTED","sample_name": "Win32/AlteredSoftware.C potentially un
wanted application","sample_id": "Win32/AlteredSoftware.C potentially unwanted a
pplication","sample_hashes": {"SHA1": "01C53FBC0030066FE9032FEC431D9EA26B5811CC"
,},}&report_sig=10A36FD8EBE5199FE254D28E70C07EFA&fwd_ip=127.0.0.1&version=4.5.0.
2901:56:52
,"event_type": "CLEANUP_SUCCESS","sample_name": "Win32/AlteredSoftware.C potenti
ally unwanted application","sample_id": "Win32/AlteredSoftware.C potentially unw
anted application","sample_hashes": {"SHA1": "01C53FBC0030066FE9032FEC431D9EA26B
5811CC",},}&report_sig=121F194C2A8EF749965C33CE88F677A2&fwd_ip=127.0.0.1&version
=4.5.0.2901:56:53
,"event_type": "DETECTED","sample_name": "a variant of Win32/AlteredSoftware.B p
otentially unwanted application","sample_id": "a variant of Win32/AlteredSoftwar
e.B potentially unwanted application","sample_hashes": {"SHA1": "A565AA91F787317
9776579995E9F4D2B2894AE5A",},}&report_sig=5DF0B7AE689EEBFBCE89B60644B3504B&fwd_i
p=127.0.0.1&version=4.5.0.2901:56:53

,"event_type": "CLEANUP_SUCCESS","sample_name": "a variant of Win32/AlteredSoftw
are.B potentially unwanted application","sample_id": "a variant of Win32/Altered
Software.B potentially unwanted application","sample_hashes": {"SHA1": "A565AA91
F7873179776579995E9F4D2B2894AE5A",},}&report_sig=A98E481E9F4AB48A1B09853ADAC593B
B&fwd_ip=127.0.0.1&version=4.5.0.2901:56:54
e.B potentially unwanted application","sample_hashes": {"SHA1": "F1A0D0D29F924A2
4AF0F0521CF6F9A9150A10ECC",},}&report_sig=74BEE8A701B3DBCE4AFBEC91EE8B19F0&fwd_i
p=127.0.0.1&version=4.5.0.2901:56:55
Software.B potentially unwanted application","sample_hashes": {"SHA1": "F1A0D0D2
9F924A24AF0F0521CF6F9A9150A10ECC",},}&report_sig=AAE20B9D6DA8351989661B1DEFA955A
F&fwd_ip=127.0.0.1&version=4.5.0.2901:56:55
,"event_type": "DETECTED","sample_name": "a variant of Win32/AlteredSoftware.A p
e.A potentially unwanted application","sample_hashes": {"SHA1": "E648CC103467FC8
C29E683E66FB8A7EC3A49D85C",},}&report_sig=762CCB7D5A0F481E7958CACC5EFCE7A1&fwd_i
p=127.0.0.1&version=4.5.0.2901:56:56
are.A potentially unwanted application","sample_id": "a variant of Win32/Altered
Software.A potentially unwanted application","sample_hashes": {"SHA1": "E648CC10
3467FC8C29E683E66FB8A7EC3A49D85C",},}&report_sig=C9D005F4615CB66AA691D6A91EC0026
4&fwd_ip=127.0.0.1&version=4.5.0.2901:56:56
e.B potentially unwanted application","sample_hashes": {"SHA1": "2B2FFD8B3B659BD
0963BF2A8DA7D4C10E4DBD8AC",},}&report_sig=FEBB2E09F8162B0CE1265FB38BA81433&fwd_i
p=127.0.0.1&version=4.5.0.2901:56:57
Software.B potentially unwanted application","sample_hashes": {"SHA1": "2B2FFD8B
3B659BD0963BF2A8DA7D4C10E4DBD8AC",},}&report_sig=34BC1523C9B88597E71FC78FF8D7819
1&fwd_ip=127.0.0.1&version=4.5.0.2901:56:57
,"event_type": "DETECTED","sample_name": "a variant of Win32/AlteredSoftware.E p
e.E potentially unwanted application","sample_hashes": {"SHA1": "C7529B6B7A22C22
646623D695434236AE6DBA8CD",},}&report_sig=D5D4FF4AC50E505E2DC1AC6CC5215944&fwd_i
p=127.0.0.1&version=4.5.0.2901:56:58
are.E potentially unwanted application","sample_id": "a variant of Win32/Altered
Software.E potentially unwanted application","sample_hashes": {"SHA1": "C7529B6B
7A22C22646623D695434236AE6DBA8CD",},}&report_sig=5E5A56452C0BA8DB143066FD990ABB7
D&fwd_ip=127.0.0.1&version=4.5.0.2901:56:58
,"event_type": "DETECTED","sample_name": "a variant of Win32/AlteredSoftware.G p
e.G potentially unwanted application","sample_hashes": {"SHA1": "EDB4A6C7E75E18A
CB805418EFFD78267BB2F37C4",},}&report_sig=042F1601B04C263F502E1FAC1BB8D2AB&fwd_i
p=127.0.0.1&version=4.5.0.2901:56:59
are.G potentially unwanted application","sample_id": "a variant of Win32/Altered
Software.G potentially unwanted application","sample_hashes": {"SHA1": "EDB4A6C7
E75E18ACB805418EFFD78267BB2F37C4",},}&report_sig=CB614BCB13C66C0AF30F07881B0D6F8
A&fwd_ip=127.0.0.1&version=4.5.0.2901:57:00
.1&version=4.5.0.2901:57:00
e.G potentially unwanted application","sample_hashes": {"SHA1": "399CE73FBD27EAB
B303FD899656E3C66C55B3F29",},}&report_sig=0E79CD8F63952B63A1DF312118E7AA4C&fwd_i
p=127.0.0.1&version=4.5.0.2901:57:00
Software.G potentially unwanted application","sample_hashes": {"SHA1": "399CE73F
BD27EABB303FD899656E3C66C55B3F29",},}&report_sig=594BD5C323729D29D1A0EFAA2B0405B
9&fwd_ip=127.0.0.1&version=4.5.0.2901:57:01
2901:57:01
=4.5.0.2901:57:02
2901:57:02
=4.5.0.2901:57:03
p=127.0.0.1&version=4.5.0.2901:57:03
B&fwd_ip=127.0.0.1&version=4.5.0.2901:57:04
.1&version=4.5.0.2901:57:05
p=127.0.0.1&version=4.5.0.2901:57:05
F&fwd_ip=127.0.0.1&version=4.5.0.2901:57:05
e.A potentially unwanted application","sample_hashes": {"SHA1": "7FA369CC6AF80F9
35BF91646DCC78E5F746C2CE4",},}&report_sig=4B603FF548A18C30831C21D9095B27B2&fwd_i
p=127.0.0.1&version=4.5.0.2901:57:06
Software.A potentially unwanted application","sample_hashes": {"SHA1": "7FA369CC
6AF80F935BF91646DCC78E5F746C2CE4",},}&report_sig=25CCDA02B045254FCD74E8740BC86D6
3&fwd_ip=127.0.0.1&version=4.5.0.2901:57:07
pplication","sample_hashes": {"SHA1": "0AF2E82F7417A67B57353FB38DC0DFB51A33004A"
,},}&report_sig=B4859A3325B51465D73AE037CA68306A&fwd_ip=127.0.0.1&version=4.5.0.
2901:57:07
anted application","sample_hashes": {"SHA1": "0AF2E82F7417A67B57353FB38DC0DFB51A
33004A",},}&report_sig=0EBFED83B4BB42866CF7ACFBC5A04CBA&fwd_ip=127.0.0.1&version
=4.5.0.2901:57:07

e.E potentially unwanted application","sample_hashes": {"SHA1": "E66ACE4EECF64CC
E06DAB2D2AC00AA48774C4B1E",},}&report_sig=C28508F53C36A8EEE3C15D92A2D01E1E&fwd_i
p=127.0.0.1&version=4.5.0.2901:57:08
Software.E potentially unwanted application","sample_hashes": {"SHA1": "E66ACE4E
ECF64CCE06DAB2D2AC00AA48774C4B1E",},}&report_sig=2ADDA931D5D0FD343267EEA51903771
F&fwd_ip=127.0.0.1&version=4.5.0.2901:57:08
p=127.0.0.1&version=4.5.0.2901:57:09
A&fwd_ip=127.0.0.1&version=4.5.0.2901:57:09
.1&version=4.5.0.2901:57:10
p=127.0.0.1&version=4.5.0.2901:57:10
9&fwd_ip=127.0.0.1&version=4.5.0.2901:57:10

2901:57:11
=4.5.0.2901:57:11
2901:57:12
=4.5.0.2901:57:12
p=127.0.0.1&version=4.5.0.2901:57:13
B&fwd_ip=127.0.0.1&version=4.5.0.2901:57:13
p=127.0.0.1&version=4.5.0.2901:57:13

F&fwd_ip=127.0.0.1&version=4.5.0.2901:57:16
e.A potentially unwanted application","sample_hashes": {"SHA1": "0669296CED9211F
09C502F5A029929E091C94897",},}&report_sig=F70E6326571C29CBBBC784E136FD8659&fwd_i
p=127.0.0.1&version=4.5.0.2901:57:17
Software.A potentially unwanted application","sample_hashes": {"SHA1": "0669296C
ED9211F09C502F5A029929E091C94897",},}&report_sig=6B5D3A80B5FD1B794C7E4C4FCCC3B2B
B&fwd_ip=127.0.0.1&version=4.5.0.2901:57:18
e.B potentially unwanted application","sample_hashes": {"SHA1": "1ED252403096CA2
177A1D06065515B08B3424BA2",},}&report_sig=B5FAEFA017F10095475D7DB2C227D84B&fwd_i
p=127.0.0.1&version=4.5.0.2901:57:19
Software.B potentially unwanted application","sample_hashes": {"SHA1": "1ED25240
3096CA2177A1D06065515B08B3424BA2",},}&report_sig=2FA2EAA5439E8153CC214EDBB5FA177
7&fwd_ip=127.0.0.1&version=4.5.0.2901:57:20
.1&version=4.5.0.2901:57:20
e.E potentially unwanted application","sample_hashes": {"SHA1": "178B8961AE76020
E95A4EFE67393AA4D73A85B23",},}&report_sig=FFF4ED2BD9B6AB9E20EEBFD279C74FEF&fwd_i
p=127.0.0.1&version=4.5.0.2901:57:21

Software.E potentially unwanted application","sample_hashes": {"SHA1": "178B8961
AE76020E95A4EFE67393AA4D73A85B23",},}&report_sig=16D8D82DE0B5066D83FE83C7A027B2D
4&fwd_ip=127.0.0.1&version=4.5.0.2901:57:21
p=127.0.0.1&version=4.5.0.2901:57:22
A&fwd_ip=127.0.0.1&version=4.5.0.2901:57:22
p=127.0.0.1&version=4.5.0.2901:57:22
9&fwd_ip=127.0.0.1&version=4.5.0.2901:57:23
2901:57:23
=4.5.0.2901:57:23
2901:57:24
=4.5.0.2901:57:24
p=127.0.0.1&version=4.5.0.2901:57:25
B&fwd_ip=127.0.0.1&version=4.5.0.2901:57:25
p=127.0.0.1&version=4.5.0.2901:57:26
F&fwd_ip=127.0.0.1&version=4.5.0.2901:57:26

e.A potentially unwanted application","sample_hashes": {"SHA1": "1922C6C9BE376B4
8DCA4E9CDCB4F398FD4588D7F",},}&report_sig=7BEBC89C900A42BEAB2E873C9BF8D0A9&fwd_i
p=127.0.0.1&version=4.5.0.2901:57:27
Software.A potentially unwanted application","sample_hashes": {"SHA1": "1922C6C9
BE376B48DCA4E9CDCB4F398FD4588D7F",},}&report_sig=C2344F55303BD721C4BBA096726CE51
E&fwd_ip=127.0.0.1&version=4.5.0.2901:57:27
,"event_type": "DETECTED","sample_name": "Win32/AlteredSoftware.B potentially un
wanted application","sample_id": "Win32/AlteredSoftware.B potentially unwanted a
pplication","sample_hashes": {"SHA1": "CAD24D6941B07E51808468EFF1EE3F03FD485F0D"
,},}&report_sig=ACE4767BBD8977D26F24B5112518B108&fwd_ip=127.0.0.1&version=4.5.0.
2901:57:28
,"event_type": "CLEANUP_SUCCESS","sample_name": "Win32/AlteredSoftware.B potenti
ally unwanted application","sample_id": "Win32/AlteredSoftware.B potentially unw
anted application","sample_hashes": {"SHA1": "CAD24D6941B07E51808468EFF1EE3F03FD
485F0D",},}&report_sig=6754B7223D69FFBCFC0D9D3588E3FD65&fwd_ip=127.0.0.1&version
=4.5.0.2901:57:28
e.E potentially unwanted application","sample_hashes": {"SHA1": "909359BCFF2D312
C1D19ED883DA584D33B1E863A",},}&report_sig=B55AF277D49DE26F01E8F0942C0DEB14&fwd_i
p=127.0.0.1&version=4.5.0.2901:57:29
Software.E potentially unwanted application","sample_hashes": {"SHA1": "909359BC
FF2D312C1D19ED883DA584D33B1E863A",},}&report_sig=747F20408370EEE94F58CE6189F9EEB
4&fwd_ip=127.0.0.1&version=4.5.0.2901:57:29
p=127.0.0.1&version=4.5.0.2901:57:30

A&fwd_ip=127.0.0.1&version=4.5.0.2901:57:30
.1&version=4.5.0.2901:57:30
p=127.0.0.1&version=4.5.0.2901:57:31
01:57:31 Response: 01:57:31 {"01:57:31
9&fwd_ip=127.0.0.1&version=4.5.0.2901:57:31
2901:57:32
=4.5.0.2901:57:32
2901:57:32

=4.5.0.2901:57:33
p=127.0.0.1&version=4.5.0.2901:57:33
B&fwd_ip=127.0.0.1&version=4.5.0.2901:57:33
p=127.0.0.1&version=4.5.0.2901:57:34
F&fwd_ip=127.0.0.1&version=4.5.0.2901:57:34
e.A potentially unwanted application","sample_hashes": {"SHA1": "E648CC103467FC8
C29E683E66FB8A7EC3A49D85C",},}&report_sig=762CCB7D5A0F481E7958CACC5EFCE7A1&fwd_i
p=127.0.0.1&version=4.5.0.2901:57:35
Software.A potentially unwanted application","sample_hashes": {"SHA1": "E648CC10
3467FC8C29E683E66FB8A7EC3A49D85C",},}&report_sig=C9D005F4615CB66AA691D6A91EC0026
4&fwd_ip=127.0.0.1&version=4.5.0.2901:57:35
e.B potentially unwanted application","sample_hashes": {"SHA1": "4492E60A333CA1E
9275EC950D724972085D05486",},}&report_sig=7FDEF1A7A0513566A817804EB8F55E07&fwd_i
p=127.0.0.1&version=4.5.0.2901:57:36
Software.B potentially unwanted application","sample_hashes": {"SHA1": "4492E60A
333CA1E9275EC950D724972085D05486",},}&report_sig=BAE09ED5C3C0BA4BA6728CD354D4AD9
F&fwd_ip=127.0.0.1&version=4.5.0.2901:57:36
e.E potentially unwanted application","sample_hashes": {"SHA1": "C7529B6B7A22C22
646623D695434236AE6DBA8CD",},}&report_sig=D5D4FF4AC50E505E2DC1AC6CC5215944&fwd_i
p=127.0.0.1&version=4.5.0.2901:57:36
Software.E potentially unwanted application","sample_hashes": {"SHA1": "C7529B6B
7A22C22646623D695434236AE6DBA8CD",},}&report_sig=5E5A56452C0BA8DB143066FD990ABB7
D&fwd_ip=127.0.0.1&version=4.5.0.2901:57:37
p=127.0.0.1&version=4.5.0.2901:57:37
A&fwd_ip=127.0.0.1&version=4.5.0.2901:57:38

p=127.0.0.1&version=4.5.0.2901:57:38
9&fwd_ip=127.0.0.1&version=4.5.0.2901:57:38
2901:57:39
=4.5.0.2901:57:39
2901:57:39
=4.5.0.2901:57:40
.1&version=4.5.0.2901:57:40

p=127.0.0.1&version=4.5.0.2901:57:41
B&fwd_ip=127.0.0.1&version=4.5.0.2901:57:41
p=127.0.0.1&version=4.5.0.2901:57:41
F&fwd_ip=127.0.0.1&version=4.5.0.2901:57:42
e.A potentially unwanted application","sample_hashes": {"SHA1": "83D00CA09F4781F
0CD31FF3A00E854611FE7EA41",},}&report_sig=4B857A60A0A033A0CF151AFD24002850&fwd_i
p=127.0.0.1&version=4.5.0.2901:57:42
Software.A potentially unwanted application","sample_hashes": {"SHA1": "83D00CA0
9F4781F0CD31FF3A00E854611FE7EA41",},}&report_sig=1607BB28E8298FD839898A5391146FE
C&fwd_ip=127.0.0.1&version=4.5.0.2901:57:43
e.B potentially unwanted application","sample_hashes": {"SHA1": "77156AF2231F093
A6771BFB93F0281DD7B07FB0C",},}&report_sig=F36BCC90BADBF119ABBB00FE58CDC3ED&fwd_i
p=127.0.0.1&version=4.5.0.2901:57:43

Software.B potentially unwanted application","sample_hashes": {"SHA1": "77156AF2
231F093A6771BFB93F0281DD7B07FB0C",},}&report_sig=2DBA5A75552AABAFF488654F1114B70
9&fwd_ip=127.0.0.1&version=4.5.0.2901:57:43
e.E potentially unwanted application","sample_hashes": {"SHA1": "2E0C043BE68E173
41B5D896EF2809F56C9B76B20",},}&report_sig=29AA7166BCD2E3F68A690A008155FB40&fwd_i
p=127.0.0.1&version=4.5.0.2901:57:44
Software.E potentially unwanted application","sample_hashes": {"SHA1": "2E0C043B
E68E17341B5D896EF2809F56C9B76B20",},}&report_sig=DEEDAE9981129E4566F1F718ED90458
2&fwd_ip=127.0.0.1&version=4.5.0.2901:57:44
p=127.0.0.1&version=4.5.0.2901:57:45
A&fwd_ip=127.0.0.1&version=4.5.0.2901:57:45
p=127.0.0.1&version=4.5.0.2901:57:46
9&fwd_ip=127.0.0.1&version=4.5.0.2901:57:46
2901:57:46
=4.5.0.2901:57:47
2901:57:47
=4.5.0.2901:57:47
p=127.0.0.1&version=4.5.0.2901:57:48
B&fwd_ip=127.0.0.1&version=4.5.0.2901:57:48

p=127.0.0.1&version=4.5.0.2901:57:49
F&fwd_ip=127.0.0.1&version=4.5.0.2901:57:49
e.A potentially unwanted application","sample_hashes": {"SHA1": "22EE3B28D9BE685
F9DBF611F949090B840D11F1E",},}&report_sig=280885CF90C59F7836B3C1595F4399F0&fwd_i
p=127.0.0.1&version=4.5.0.2901:57:50
Software.A potentially unwanted application","sample_hashes": {"SHA1": "22EE3B28
D9BE685F9DBF611F949090B840D11F1E",},}&report_sig=E299CEC59D2718B5D698F1192940458
C&fwd_ip=127.0.0.1&version=4.5.0.2901:57:50
.1&version=4.5.0.2901:57:50
e.B potentially unwanted application","sample_hashes": {"SHA1": "4FBFED3DB6F0806
9145F07AE81F724A64687EFEE",},}&report_sig=BABFB4C686322F5E416D2CDE5EFBFFB1&fwd_i
p=127.0.0.1&version=4.5.0.2901:57:50
Software.B potentially unwanted application","sample_hashes": {"SHA1": "4FBFED3D
B6F08069145F07AE81F724A64687EFEE",},}&report_sig=41E0771B734A13ED2AE0791239838CD
3&fwd_ip=127.0.0.1&version=4.5.0.2901:57:51

e.E potentially unwanted application","sample_hashes": {"SHA1": "6F1CE1B8BE0773C
D98215DACD6BDD8EA0B547AD3",},}&report_sig=630FF7A7D87B9B2B5B711EDB7C446C89&fwd_i
p=127.0.0.1&version=4.5.0.2901:57:51
Software.E potentially unwanted application","sample_hashes": {"SHA1": "6F1CE1B8
BE0773CD98215DACD6BDD8EA0B547AD3",},}&report_sig=E6F7D45F191CFD1FC8FA85B00ABBD5A
D&fwd_ip=127.0.0.1&version=4.5.0.2901:57:51
p=127.0.0.1&version=4.5.0.2901:57:52
A&fwd_ip=127.0.0.1&version=4.5.0.2901:57:52
p=127.0.0.1&version=4.5.0.2901:57:53
9&fwd_ip=127.0.0.1&version=4.5.0.2901:57:53
2901:57:54

=4.5.0.2901:57:54
2901:57:55
=4.5.0.2901:57:55
p=127.0.0.1&version=4.5.0.2901:57:55
B&fwd_ip=127.0.0.1&version=4.5.0.2901:57:56
p=127.0.0.1&version=4.5.0.2901:57:56
F&fwd_ip=127.0.0.1&version=4.5.0.2901:57:56
p=127.0.0.1&version=4.5.0.2901:57:57
C&fwd_ip=127.0.0.1&version=4.5.0.2901:57:58
e.B potentially unwanted application","sample_hashes": {"SHA1": "68103E967FBEBFB
7AF8FBB3517517A1CE41F6C49",},}&report_sig=66951A8DCD5CFC570E47A0621001DA8B&fwd_i
p=127.0.0.1&version=4.5.0.2901:57:58
Software.B potentially unwanted application","sample_hashes": {"SHA1": "68103E96
7FBEBFB7AF8FBB3517517A1CE41F6C49",},}&report_sig=8C5FFC9700E5DFCCFF284A5372F34A3
0&fwd_ip=127.0.0.1&version=4.5.0.2901:57:58
p=127.0.0.1&version=4.5.0.2901:57:59
2&fwd_ip=127.0.0.1&version=4.5.0.2901:57:59

p=127.0.0.1&version=4.5.0.2901:58:00
A&fwd_ip=127.0.0.1&version=4.5.0.2901:58:00
.1&version=4.5.0.2901:58:01
p=127.0.0.1&version=4.5.0.2901:58:01
9&fwd_ip=127.0.0.1&version=4.5.0.2901:58:01
2901:58:02
=4.5.0.2901:58:02

2901:58:02
=4.5.0.2901:58:03
p=127.0.0.1&version=4.5.0.2901:58:03
B&fwd_ip=127.0.0.1&version=4.5.0.2901:58:03
p=127.0.0.1&version=4.5.0.2901:58:04
F&fwd_ip=127.0.0.1&version=4.5.0.2901:58:04
e.A potentially unwanted application","sample_hashes": {"SHA1": "1922C6C9BE376B4
8DCA4E9CDCB4F398FD4588D7F",},}&report_sig=7BEBC89C900A42BEAB2E873C9BF8D0A9&fwd_i
p=127.0.0.1&version=4.5.0.2901:58:05

Software.A potentially unwanted application","sample_hashes": {"SHA1": "1922C6C9
BE376B48DCA4E9CDCB4F398FD4588D7F",},}&report_sig=C2344F55303BD721C4BBA096726CE51
E&fwd_ip=127.0.0.1&version=4.5.0.2901:58:05
e.B potentially unwanted application","sample_hashes": {"SHA1": "C9E1FBE5F2F9672
DC93EFC20C5FAFB225410AE7A",},}&report_sig=732EAF58568EF822C6DB31F2DE7B624D&fwd_i
p=127.0.0.1&version=4.5.0.2901:58:06
Software.B potentially unwanted application","sample_hashes": {"SHA1": "C9E1FBE5
F2F9672DC93EFC20C5FAFB225410AE7A",},}&report_sig=E46E3F32D599C25E00F91A7E18CBBC8
D&fwd_ip=127.0.0.1&version=4.5.0.2901:58:06
e.E potentially unwanted application","sample_hashes": {"SHA1": "909359BCFF2D312
C1D19ED883DA584D33B1E863A",},}&report_sig=B55AF277D49DE26F01E8F0942C0DEB14&fwd_i
p=127.0.0.1&version=4.5.0.2901:58:07
Software.E potentially unwanted application","sample_hashes": {"SHA1": "909359BC
FF2D312C1D19ED883DA584D33B1E863A",},}&report_sig=747F20408370EEE94F58CE6189F9EEB
4&fwd_ip=127.0.0.1&version=4.5.0.2901:58:07
p=127.0.0.1&version=4.5.0.2901:58:07
A&fwd_ip=127.0.0.1&version=4.5.0.2901:58:08
p=127.0.0.1&version=4.5.0.2901:58:08
9&fwd_ip=127.0.0.1&version=4.5.0.2901:58:09
2901:58:09
=4.5.0.2901:58:09
.1&version=4.5.0.2901:58:10
2901:58:10
=4.5.0.2901:58:10
p=127.0.0.1&version=4.5.0.2901:58:11
B&fwd_ip=127.0.0.1&version=4.5.0.2901:58:11
p=127.0.0.1&version=4.5.0.2901:58:12
F&fwd_ip=127.0.0.1&version=4.5.0.2901:58:12
p=127.0.0.1&version=4.5.0.2901:58:12
C&fwd_ip=127.0.0.1&version=4.5.0.2901:58:13

e.B potentially unwanted application","sample_hashes": {"SHA1": "D2B108F97FF96C8
AA1BEC9D2D8CF6871C2887020",},}&report_sig=BC2A4F623B360D4B896A9BB6CAEC4ACD&fwd_i
p=127.0.0.1&version=4.5.0.2901:58:13
Software.B potentially unwanted application","sample_hashes": {"SHA1": "D2B108F9
7FF96C8AA1BEC9D2D8CF6871C2887020",},}&report_sig=D35E6EB89690E9CB8E9BEED1942F87D
5&fwd_ip=127.0.0.1&version=4.5.0.2901:58:13
p=127.0.0.1&version=4.5.0.2901:58:14
2&fwd_ip=127.0.0.1&version=4.5.0.2901:58:14
p=127.0.0.1&version=4.5.0.2901:58:15
A&fwd_ip=127.0.0.1&version=4.5.0.2901:58:15
p=127.0.0.1&version=4.5.0.2901:58:15

9&fwd_ip=127.0.0.1&version=4.5.0.2901:58:16
:58:17
.0.2901:58:18
","sample_hashes": {"SHA1": "D2EAFFAD45CC86DE6E07E9D8E42440CD25DA5754",},}&repor
t_sig=5A332438EF5F35F6557870C47FAE5D47&fwd_ip=127.0.0.1&version=4.5.0.2901:58:20
ication","sample_hashes": {"SHA1": "D2EAFFAD45CC86DE6E07E9D8E42440CD25DA5754",},
}&report_sig=7E3AA969F910A52E7FAA18BB412A3246&fwd_ip=127.0.0.1&version=4.5.0.290
1:58:20
.1&version=4.5.0.2901:58:20
,"event_type": "DETECTED","sample_name": "Win32/DomaIQ.BC potentially unwanted a
pplication,MSIL/Tuguu.C potentially unwanted application","sample_id": "Win32/Do
maIQ.BC potentially unwanted application,MSIL/Tuguu.C potentially unwanted appli
cation","sample_hashes": {"SHA1": "AB09CEF4810D297C4BC12733E2628DCAEBEB097F",},}
&report_sig=BFD760E1D6214B67360A85581B10792E&fwd_ip=127.0.0.1&version=4.5.0.2901
:58:26

,"event_type": "CLEANUP_SUCCESS","sample_name": "Win32/DomaIQ.BC potentially unw
anted application,MSIL/Tuguu.C potentially unwanted application","sample_id": "W
in32/DomaIQ.BC potentially unwanted application,MSIL/Tuguu.C potentially unwante
d application","sample_hashes": {"SHA1": "AB09CEF4810D297C4BC12733E2628DCAEBEB09
7F",},}&report_sig=8006B0FEAB1AA1DC8BFDAF99EE1CC9BD&fwd_ip=127.0.0.1&version=4.5
.0.2901:58:27
,"event_type": "DETECTED","sample_name": "a variant of Win32/AdWare.SpeedingUpMy
PC.E application","sample_id": "a variant of Win32/AdWare.SpeedingUpMyPC.E appli
cation","sample_hashes": {"SHA1": "B6EB6DC43642454A0528F3A32AB1CCC69BAC54A0",},}
&report_sig=F2844861AF37503830621BC86DD54B14&fwd_ip=127.0.0.1&version=4.5.0.2901
:58:29
,"event_type": "CLEANUP_SUCCESS","sample_name": "a variant of Win32/AdWare.Speed
ingUpMyPC.E application","sample_id": "a variant of Win32/AdWare.SpeedingUpMyPC.
E application","sample_hashes": {"SHA1": "B6EB6DC43642454A0528F3A32AB1CCC69BAC54
A0",},}&report_sig=A1B79B76867897032098855DC332C652&fwd_ip=127.0.0.1&version=4.5
.0.2901:58:29
.1&version=4.5.0.2901:58:33
,"event_type": "DETECTED","sample_name": "a variant of Win64/BrowseFox.CA potent
ially unwanted application","sample_id": "a variant of Win64/BrowseFox.CA potent
ially unwanted application","sample_hashes": {"SHA1": "B172D4E792B9A8E63C8C37FBB
B5E94A15C0C62E8",},}&report_sig=8FA256DFFD7BAD44937BCA34751D3FF2&fwd_ip=127.0.0.
1&version=4.5.0.2901:58:37
,"event_type": "CLEANUP_SUCCESS","sample_name": "a variant of Win64/BrowseFox.CA
potentially unwanted application","sample_id": "a variant of Win64/BrowseFox.CA
potentially unwanted application","sample_hashes": {"SHA1": "B172D4E792B9A8E63C
8C37FBBB5E94A15C0C62E8",},}&report_sig=BD989B83C7EBA39EB7C7A1664866E27B&fwd_ip=1
27.0.0.1&version=4.5.0.2901:58:37
.1&version=4.5.0.2901:58:38
,"event_type": "DETECTED","sample_name": "a variant of Win32/DomaIQ.AK potential
ly unwanted application","sample_id": "a variant of Win32/DomaIQ.AK potentially
unwanted application","sample_hashes": {"SHA1": "9ECD4199149DC88F4C9961B2A44B08A
B70476EE8",},}&report_sig=4091A77ADDE3E1ACCB49D47CD0A55709&fwd_ip=127.0.0.1&vers
ion=4.5.0.2901:58:40
,"event_type": "CLEANUP_SUCCESS","sample_name": "a variant of Win32/DomaIQ.AK po
tentially unwanted application","sample_id": "a variant of Win32/DomaIQ.AK poten
tially unwanted application","sample_hashes": {"SHA1": "9ECD4199149DC88F4C9961B2
A44B08AB70476EE8",},}&report_sig=12F6BB834F31719626A8045D105DBC99&fwd_ip=127.0.0
.1&version=4.5.0.2901:58:40
,"event_type": "DETECTED","sample_name": "a variant of MSIL/DomaIQ.H potentially
unwanted application","sample_id": "a variant of MSIL/DomaIQ.H potentially unwa
nted application","sample_hashes": {"SHA1": "3F255DE0A82AE831E0D580D5805A968609C
CDC08",},}&report_sig=42B1F81AB6F865C8FEEAA1438FF2D13F&fwd_ip=127.0.0.1&version=
4.5.0.2901:58:41
,"event_type": "CLEANUP_SUCCESS","sample_name": "a variant of MSIL/DomaIQ.H pote
ntially unwanted application","sample_id": "a variant of MSIL/DomaIQ.H potential
ly unwanted application","sample_hashes": {"SHA1": "3F255DE0A82AE831E0D580D5805A
968609CCDC08",},}&report_sig=B91840659C5836AE0C27D3EA4F7C8803&fwd_ip=127.0.0.1&v
ersion=4.5.0.2901:58:41
ossRider.BM potentially unwanted application","sample_hashes": {"SHA1": "3AECE9F
55A309C1CAD0A1BAF4E68291889C6A4E5",},}&report_sig=D3296341D3FBACDA3CA618355D9DB6
E3&fwd_ip=127.0.0.1&version=4.5.0.2901:58:49
3AECE9F55A309C1CAD0A1BAF4E68291889C6A4E5",},}&report_sig=7A7BCF7387F6E9185424196
446B0BABF&fwd_ip=127.0.0.1&version=4.5.0.2901:58:49
.1&version=4.5.0.2901:58:49
,"event_type": "DETECTED","sample_name": "Win32/Conduit.SearchProtect.Q potentia
lly unwanted application","sample_id": "Win32/Conduit.SearchProtect.Q potentiall
y unwanted application","sample_hashes": {"SHA1": "9B72604832B83A5508824184D19DF
2E98B654EA4",},}&report_sig=D55089377252C630E3CE0360E8614D44&fwd_ip=127.0.0.1&ve
rsion=4.5.0.2901:58:53
,"event_type": "CLEANUP_SUCCESS","sample_name": "Win32/Conduit.SearchProtect.Q p
otentially unwanted application","sample_id": "Win32/Conduit.SearchProtect.Q pot
entially unwanted application","sample_hashes": {"SHA1": "9B72604832B83A55088241
84D19DF2E98B654EA4",},}&report_sig=74576E7A886E53E416F2A54BC14C9ADE&fwd_ip=127.0
.0.1&version=4.5.0.2901:58:53
,"event_type": "DETECTED","sample_name": "Win32/SpeedUpMyPC.A potentially unwant
ed application,a variant of Win32/UniBlue.F potentially unwanted application","s
ample_id": "Win32/SpeedUpMyPC.A potentially unwanted application,a variant of Wi
n32/UniBlue.F potentially unwanted application","sample_hashes": {"SHA1": "766CF
B2B90CED3EABE35959526F8BC219FB41852",},}&report_sig=879A303398F80C271A66E7357470
D7B9&fwd_ip=127.0.0.1&version=4.5.0.2901:58:55
,"event_type": "CLEANUP_SUCCESS","sample_name": "Win32/SpeedUpMyPC.A potentially
unwanted application,a variant of Win32/UniBlue.F potentially unwanted applicat
ion","sample_id": "Win32/SpeedUpMyPC.A potentially unwanted application,a varian
t of Win32/UniBlue.F potentially unwanted application","sample_hashes": {"SHA1":
"766CFB2B90CED3EABE35959526F8BC219FB41852",},}&report_sig=356C0C7E5E9A7D08CDF44
2E7AF468150&fwd_ip=127.0.0.1&version=4.5.0.2901:58:55
.1&version=4.5.0.2901:59:28
1:59:29

cation","sample_hashes": {"SHA1": "E6DA542AD885B2A345F94F94065FB28B6CBA4B5C",},}
&report_sig=C95FD52330DB755725D32F0EB3B2D14E&fwd_ip=127.0.0.1&version=4.5.0.2901
:59:39
n application","sample_hashes": {"SHA1": "E6DA542AD885B2A345F94F94065FB28B6CBA4B
5C",},}&report_sig=04582904CE600414FA7E3E2317636CF9&fwd_ip=127.0.0.1&version=4.5
.0.2901:59:39
.1&version=4.5.0.2901:59:39
,"event_type": "DETECTED","sample_name": "Win32/SpeedingUpMyPC.R application","s
ample_id": "Win32/SpeedingUpMyPC.R application","sample_hashes": {"SHA1": "771DF
DE2DAEFA812748B36EEBB0E095BC1A9C1FA",},}&report_sig=6C3A4FE9DA6CCC857B3698725B3B
0416&fwd_ip=127.0.0.1&version=4.5.0.2901:59:44
,"event_type": "CLEANUP_SUCCESS","sample_name": "Win32/SpeedingUpMyPC.R applicat
ion","sample_id": "Win32/SpeedingUpMyPC.R application","sample_hashes": {"SHA1":
"771DFDE2DAEFA812748B36EEBB0E095BC1A9C1FA",},}&report_sig=25C6E7A216BFAFCF5949D
E02125273D4&fwd_ip=127.0.0.1&version=4.5.0.2901:59:44
ware.Vitruvian.F application,a variant of Win32/AdWare.Vitruvian.C application,a
variant of Win64/Adware.Vitruvian.B application,a variant of Win32/AdWare.Vitru
vian.D application","sample_id": "multiple threats,a variant of Win32/Adware.Vit
ruvian.F application,a variant of Win32/AdWare.Vitruvian.C application,a variant
of Win64/Adware.Vitruvian.B application,a variant of Win32/AdWare.Vitruvian.D a
pplication","sample_hashes": {"SHA1": "834507A888BC83583741864D1468250190EDF32D"
,},}&report_sig=8A2082CE30CBB860B7B6FD91E6312319&fwd_ip=127.0.0.1&version=4.5.0.
2901:59:54
,"code":2,"fbtrace_id":"ELzE9BlA1Z1"}}01:59:54
in32/Adware.Vitruvian.F application,a variant of Win32/AdWare.Vitruvian.C applic
ation,a variant of Win64/Adware.Vitruvian.B application,a variant of Win32/AdWar

e.Vitruvian.D application","sample_id": "multiple threats,a variant of Win32/Adw
are.Vitruvian.F application,a variant of Win32/AdWare.Vitruvian.C application,a
variant of Win64/Adware.Vitruvian.B application,a variant of Win32/AdWare.Vitruv
ian.D application","sample_hashes": {"SHA1": "834507A888BC83583741864D1468250190
EDF32D",},}&report_sig=5B3741EC7487BD8ECA6CBB83A87FDFDF&fwd_ip=127.0.0.1&version
=4.5.0.2901:59:54
,"code":2,"fbtrace_id":"A8p1basShrp"}}01:59:54
.1&version=4.5.0.2901:59:54
.1&version=4.5.0.2902:00:03
ossRider.BM potentially unwanted application","sample_hashes": {"SHA1": "108B171
932483044072C4AA737231BC4C219485C",},}&report_sig=7707F4FA2AC42CDA49253DEF409687
BC&fwd_ip=127.0.0.1&version=4.5.0.2902:00:03
108B171932483044072C4AA737231BC4C219485C",},}&report_sig=14D6FD0FB713DEB1147D247
1FCCBE29C&fwd_ip=127.0.0.1&version=4.5.0.2902:00:04
.1&version=4.5.0.2902:00:04
n.E potentially unwanted application","sample_hashes": {"SHA1": "35B21F8E30C52C9
43B437503DA1628EA0BCA86FC",},}&report_sig=335C4F9A2A054AC3B6EEB4BE7A56F3EF&fwd_i
p=127.0.0.1&version=4.5.0.2902:00:10
.Babylon.E potentially unwanted application","sample_hashes": {"SHA1": "35B21F8E

30C52C943B437503DA1628EA0BCA86FC",},}&report_sig=CE02B0FE34BCEC37D732C9E29D4EA94
A&fwd_ip=127.0.0.1&version=4.5.0.2902:00:10
n.E potentially unwanted application","sample_hashes": {"SHA1": "DE696B137DA4D58
DBD567EA3815AC29C48B29A38",},}&report_sig=76938EC5A775314534EE727E8BB58CE0&fwd_i
p=127.0.0.1&version=4.5.0.2902:00:11
.Babylon.E potentially unwanted application","sample_hashes": {"SHA1": "DE696B13
7DA4D58DBD567EA3815AC29C48B29A38",},}&report_sig=C8AB3EF1DAF0EB21BD00CC6EDFEF980
1&fwd_ip=127.0.0.1&version=4.5.0.2902:00:11
.1&version=4.5.0.2902:00:14
,"event_type": "DETECTED","sample_name": "Win32/Toolbar.Montiera.I potentially u
nwanted application,a variant of Win32/Toolbar.Escort.A potentially unwanted app
lication,a variant of Win32/Toolbar.Montiera.A potentially unwanted application,
Win32/Toolbar.Funmoods potentially unwanted application,a variant of Win32/Toolb
ar.Montiera.F potentially unwanted application","sample_id": "Win32/Toolbar.Mont
iera.I potentially unwanted application,a variant of Win32/Toolbar.Escort.A pote
ntially unwanted application,a variant of Win32/Toolbar.Montiera.A potentially u
nwanted application,Win32/Toolbar.Funmoods potentially unwanted application,a va
riant of Win32/Toolbar.Montiera.F potentially unwanted application","sample_hash
es": {"SHA1": "4D284D71880CACD1975902DE6861FA86AB76972A",},}&report_sig=E5938CD7
512FF11D1D120B2F55D3438B&fwd_ip=127.0.0.1&version=4.5.0.2902:00:23
,"code":2,"fbtrace_id":"FprG5zaR78W"}}02:00:23
,"event_type": "CLEANUP_SUCCESS","sample_name": "Win32/Toolbar.Montiera.I potent
ially unwanted application,a variant of Win32/Toolbar.Escort.A potentially unwan
ted application,a variant of Win32/Toolbar.Montiera.A potentially unwanted appli
cation,Win32/Toolbar.Funmoods potentially unwanted application,a variant of Win3
2/Toolbar.Montiera.F potentially unwanted application","sample_id": "Win32/Toolb
ar.Montiera.I potentially unwanted application,a variant of Win32/Toolbar.Escort
.A potentially unwanted application,a variant of Win32/Toolbar.Montiera.A potent
ially unwanted application,Win32/Toolbar.Funmoods potentially unwanted applicati
on,a variant of Win32/Toolbar.Montiera.F potentially unwanted application","samp
le_hashes": {"SHA1": "4D284D71880CACD1975902DE6861FA86AB76972A",},}&report_sig=3
0E78B5C67ECED93F2DE660849EE43A5&fwd_ip=127.0.0.1&version=4.5.0.2902:00:23

,"code":2,"fbtrace_id":"GdAStMp70Oq"}}02:00:23
.1&version=4.5.0.2902:00:23
n.E potentially unwanted application","sample_hashes": {"SHA1": "3AEAFFB61DCD95E
75DE93AFD17C83FE262E27AFD",},}&report_sig=EEA08AA1BA4A1AA2D96A9D185E4D77B2&fwd_i
p=127.0.0.1&version=4.5.0.2902:00:24
.Babylon.E potentially unwanted application","sample_hashes": {"SHA1": "3AEAFFB6
1DCD95E75DE93AFD17C83FE262E27AFD",},}&report_sig=BAA1FDA3ACC4BD607E0150737AAF089
D&fwd_ip=127.0.0.1&version=4.5.0.2902:00:25
n.E potentially unwanted application","sample_hashes": {"SHA1": "E17439583212C06
773999FC1D7348BEE61D3CC37",},}&report_sig=19E01C6A38D6A670283552AC975C8193&fwd_i
p=127.0.0.1&version=4.5.0.2902:00:27
.Babylon.E potentially unwanted application","sample_hashes": {"SHA1": "E1743958
3212C06773999FC1D7348BEE61D3CC37",},}&report_sig=5E8BC21AD7ECBBEF05A3A3E0EC92FF2
C&fwd_ip=127.0.0.1&version=4.5.0.2902:00:27
.1&version=4.5.0.2902:00:28
:00:31

.0.2902:00:32
:00:33
.0.2902:00:33
.1&version=4.5.0.2902:00:34
,"event_type": "DETECTED","sample_name": "JS/Toolbar.Crossrider.T potentially un
wanted application","sample_id": "JS/Toolbar.Crossrider.T potentially unwanted a
pplication","sample_hashes": {"SHA1": "B05753F6C31379618E73C03411D835B464D3651A"
,},}&report_sig=0E0615A2662F519F9931F542AC725ED8&fwd_ip=127.0.0.1&version=4.5.0.
2902:00:35
,"event_type": "CLEANUP_SUCCESS","sample_name": "JS/Toolbar.Crossrider.T potenti
ally unwanted application","sample_id": "JS/Toolbar.Crossrider.T potentially unw
anted application","sample_hashes": {"SHA1": "B05753F6C31379618E73C03411D835B464
D3651A",},}&report_sig=20BDAEBA49A469D189824C7A5ADD4F9D&fwd_ip=127.0.0.1&version
=4.5.0.2902:00:36
.1&version=4.5.0.2902:00:37
,"event_type": "DETECTED","sample_name": "a variant of Win32/Toolbar.Softomate.A
potentially unwanted application,JS/Toolbar.Crossrider.T potentially unwanted a

pplication","sample_id": "a variant of Win32/Toolbar.Softomate.A potentially unw
anted application,JS/Toolbar.Crossrider.T potentially unwanted application","sam
ple_hashes": {"SHA1": "FF8F61439166B8291D4107BCC55C4E7FDD1723FE",},}&report_sig=
F54B5A88936AFCBFB6CBDCD9679E4BEE&fwd_ip=127.0.0.1&version=4.5.0.2902:00:39
,"event_type": "CLEANUP_SUCCESS","sample_name": "a variant of Win32/Toolbar.Soft
omate.A potentially unwanted application,JS/Toolbar.Crossrider.T potentially unw
anted application","sample_id": "a variant of Win32/Toolbar.Softomate.A potentia
lly unwanted application,JS/Toolbar.Crossrider.T potentially unwanted applicatio
n","sample_hashes": {"SHA1": "FF8F61439166B8291D4107BCC55C4E7FDD1723FE",},}&repo
rt_sig=B5A1337E1DC610DCA0308E710B5FA35F&fwd_ip=127.0.0.1&version=4.5.0.2902:00:4
0
pplication","sample_hashes": {"SHA1": "E7519D4C2339935CDD919E9781EA3BCE402F306E"
,},}&report_sig=C892A1D754E40039C710A3A24EF987EC&fwd_ip=127.0.0.1&version=4.5.0.
2902:00:40
anted application","sample_hashes": {"SHA1": "E7519D4C2339935CDD919E9781EA3BCE40
2F306E",},}&report_sig=1F03434B603D0E4F9159FB83E1A99180&fwd_ip=127.0.0.1&version
=4.5.0.2902:00:41
5
.1&version=4.5.0.2902:00:45
2902:00:46
=4.5.0.2902:00:46
2902:00:46
.1&version=4.5.0.2902:00:47
=4.5.0.2902:00:47
.1&version=4.5.0.2902:00:55
.1&version=4.5.0.2902:00:57

2902:01:00
=4.5.0.2902:01:00
2902:01:01
=4.5.0.2902:01:01
5
.1&version=4.5.0.2902:01:05

.1&version=4.5.0.2902:01:07
9
2902:01:10
=4.5.0.2902:01:10
2902:01:11
=4.5.0.2902:01:11
.1&version=4.5.0.2902:01:15
.1&version=4.5.0.2902:01:17
.1&version=4.5.0.2902:01:25
.1&version=4.5.0.2902:01:27
,"event_type": "DETECTED","sample_name": "a variant of Win32/Amonetize.X potenti
ally unwanted application","sample_id": "a variant of Win32/Amonetize.X potentia
lly unwanted application","sample_hashes": {"SHA1": "7862938B7A639175A3CBE408D57
D646450865477",},}&report_sig=063AF3C5008C2FCD11AA062B494EAFF4&fwd_ip=127.0.0.1&
version=4.5.0.2902:01:31
,"event_type": "CLEANUP_SUCCESS","sample_name": "a variant of Win32/Amonetize.X
potentially unwanted application","sample_id": "a variant of Win32/Amonetize.X p
otentially unwanted application","sample_hashes": {"SHA1": "7862938B7A639175A3CB
E408D57D646450865477",},}&report_sig=62C2D5838ADA8C2E59C64CAD36D197F2&fwd_ip=127
.0.0.1&version=4.5.0.2902:01:31
.1&version=4.5.0.2902:01:37
.1&version=4.5.0.2902:01:47
.1&version=4.5.0.2902:01:53
.1&version=4.5.0.2902:01:57
,"event_type": "DETECTED","sample_name": "a variant of Win32/Thinknice.B potenti
ally unwanted application,Win64/Thinknice.A potentially unwanted application,Win
32/Thinknice.H potentially unwanted application,a variant of Win64/Thinknice.B p
otentially unwanted application,Win32/Thinknice.A potentially unwanted applicati
on,Win32/ELEX.AR potentially unwanted application,a variant of Win32/ELEX.AD pot
entially unwanted application,JS/Lightning.A potentially unwanted application","
sample_id": "a variant of Win32/Thinknice.B potentially unwanted application,Win
64/Thinknice.A potentially unwanted application,Win32/Thinknice.H potentially un
wanted application,a variant of Win64/Thinknice.B potentially unwanted applicati
on,Win32/Thinknice.A potentially unwanted application,Win32/ELEX.AR potentially
unwanted application,a variant of Win32/ELEX.AD potentially unwanted application
,JS/Lightning.A potentially unwanted application","sample_hashes": {"SHA1": "930
38352AE6F16C82AB36F1992DFDE2A628FEC49",},}&report_sig=7FC1D1192380D38D17C0C00BE0
9F75DA&fwd_ip=127.0.0.1&version=4.5.0.2902:01:57
,"code":2,"fbtrace_id":"B3KpyzWys57"}}02:01:57
,"event_type": "CLEANUP_SUCCESS","sample_name": "a variant of Win32/Thinknice.B
potentially unwanted application,Win64/Thinknice.A potentially unwanted applicat
ion,Win32/Thinknice.H potentially unwanted application,a variant of Win64/Thinkn
ice.B potentially unwanted application,Win32/Thinknice.A potentially unwanted ap
plication,Win32/ELEX.AR potentially unwanted application,a variant of Win32/ELEX
.AD potentially unwanted application,JS/Lightning.A potentially unwanted applica
tion","sample_id": "a variant of Win32/Thinknice.B potentially unwanted applicat
ion,Win64/Thinknice.A potentially unwanted application,Win32/Thinknice.H potenti
ally unwanted application,a variant of Win64/Thinknice.B potentially unwanted ap
plication,Win32/Thinknice.A potentially unwanted application,Win32/ELEX.AR poten
tially unwanted application,a variant of Win32/ELEX.AD potentially unwanted appl
ication,JS/Lightning.A potentially unwanted application","sample_hashes": {"SHA1
": "93038352AE6F16C82AB36F1992DFDE2A628FEC49",},}&report_sig=4C44FE3E5DC346D284A
552647E8B4AFE&fwd_ip=127.0.0.1&version=4.5.0.2902:01:57
,"code":2,"fbtrace_id":"GUvPGxxIMFt"}}02:01:58
,"event_type": "DETECTED","sample_name": "a variant of Win32/ELEX.AE potentially
unwanted application","sample_id": "a variant of Win32/ELEX.AE potentially unwa
nted application","sample_hashes": {"SHA1": "A57A0DBBB1F4509E15617380DE4A0D02B27
51622",},}&report_sig=A839662D2AC803B4CF8E9DDF50899080&fwd_ip=127.0.0.1&version=
4.5.0.2902:02:00
,"event_type": "CLEANUP_SUCCESS","sample_name": "a variant of Win32/ELEX.AE pote

ntially unwanted application","sample_id": "a variant of Win32/ELEX.AE potential
ly unwanted application","sample_hashes": {"SHA1": "A57A0DBBB1F4509E15617380DE4A
0D02B2751622",},}&report_sig=05B975575C1254E0326CA2BBB0E4BE97&fwd_ip=127.0.0.1&v
ersion=4.5.0.2902:02:00
,"event_type": "DETECTED","sample_name": "JS/Lightning.A potentially unwanted ap
plication","sample_id": "JS/Lightning.A potentially unwanted application","sampl
e_hashes": {"SHA1": "9B5BDE3B379EC16FAAC5455565708E782924DD58",},}&report_sig=C1
FE7F387E6233CE06601E14C8DD450E&fwd_ip=127.0.0.1&version=4.5.0.2902:02:01
,"event_type": "CLEANUP_SUCCESS","sample_name": "JS/Lightning.A potentially unwa
nted application","sample_id": "JS/Lightning.A potentially unwanted application"
,"sample_hashes": {"SHA1": "9B5BDE3B379EC16FAAC5455565708E782924DD58",},}&report
_sig=4BF48A284F63221B140F5358A0477955&fwd_ip=127.0.0.1&version=4.5.0.2902:02:01
.1&version=4.5.0.2902:02:02
,"event_type": "DETECTED","sample_name": "JS/Lightning.A potentially unwanted ap
plication","sample_id": "JS/Lightning.A potentially unwanted application","sampl
e_hashes": {"SHA1": "4D27DD49F9BF02F688967ED730EF5C57409F6DBD",},}&report_sig=6E
CC6D632AE9CF4E6982D54052A9C578&fwd_ip=127.0.0.1&version=4.5.0.2902:02:03
,"event_type": "CLEANUP_SUCCESS","sample_name": "JS/Lightning.A potentially unwa
nted application","sample_id": "JS/Lightning.A potentially unwanted application"
,"sample_hashes": {"SHA1": "4D27DD49F9BF02F688967ED730EF5C57409F6DBD",},}&report
_sig=4C686DE2C52CF33DDFCECBC0B9E92B4F&fwd_ip=127.0.0.1&version=4.5.0.2902:02:03
,"event_type": "DETECTED","sample_name": "a variant of Win32/ELEX.CP potentially
unwanted application,a variant of Win32/ELEX.BF potentially unwanted applicatio
n,JS/Lightning.A potentially unwanted application","sample_id": "a variant of Wi
n32/ELEX.CP potentially unwanted application,a variant of Win32/ELEX.BF potentia
lly unwanted application,JS/Lightning.A potentially unwanted application","sampl
e_hashes": {"SHA1": "E7DCD85054FC16EA0A541B4C6F766CF8A4F7782C",},}&report_sig=16
270BEA83A1EFAA3635011CF0029DE4&fwd_ip=127.0.0.1&version=4.5.0.2902:02:05
,"event_type": "CLEANUP_SUCCESS","sample_name": "a variant of Win32/ELEX.CP pote
ntially unwanted application,a variant of Win32/ELEX.BF potentially unwanted app
lication,JS/Lightning.A potentially unwanted application","sample_id": "a varian

t of Win32/ELEX.CP potentially unwanted application,a variant of Win32/ELEX.BF p
otentially unwanted application,JS/Lightning.A potentially unwanted application"
,"sample_hashes": {"SHA1": "E7DCD85054FC16EA0A541B4C6F766CF8A4F7782C",},}&report
_sig=FEF5896623718379EB39EA8B5CD028D7&fwd_ip=127.0.0.1&version=4.5.0.2902:02:06
.1&version=4.5.0.2902:02:07
,"event_type": "DETECTED","sample_name": "a variant of Win32/ELEX.CP potentially
unwanted application","sample_id": "a variant of Win32/ELEX.CP potentially unwa
nted application","sample_hashes": {"SHA1": "4C6D5E1FE6B56C9EB6C1C66701665ADA356
9C601",},}&report_sig=8F49349394D892953AA85E3CC8DD39FE&fwd_ip=127.0.0.1&version=
4.5.0.2902:02:07
,"event_type": "CLEANUP_SUCCESS","sample_name": "a variant of Win32/ELEX.CP pote
ntially unwanted application","sample_id": "a variant of Win32/ELEX.CP potential
ly unwanted application","sample_hashes": {"SHA1": "4C6D5E1FE6B56C9EB6C1C6670166
5ADA3569C601",},}&report_sig=D6746E7422D7876CE9915F21D3CF26E1&fwd_ip=127.0.0.1&v
ersion=4.5.0.2902:02:07
.1&version=4.5.0.2902:02:14
.1&version=4.5.0.2902:02:17
.1&version=4.5.0.2902:02:27
.1&version=4.5.0.2902:02:27
.1&version=4.5.0.2902:02:37

.1&version=4.5.0.2902:02:47
.1&version=4.5.0.2902:02:57
,"event_type": "DETECTED","sample_name": "Win32/UniBlue.E potentially unwanted a
pplication,Win32/UniBlue.D potentially unwanted application,Win32/SpeedUpMyPC.A
potentially unwanted application,a variant of Win32/UniBlue.F potentially unwant
ed application","sample_id": "Win32/UniBlue.E potentially unwanted application,W
in32/UniBlue.D potentially unwanted application,Win32/SpeedUpMyPC.A potentially
unwanted application,a variant of Win32/UniBlue.F potentially unwanted applicati
on","sample_hashes": {"SHA1": "7DB9EA75F40FFB76CBE20E5374E18E11C281D19D",},}&rep
ort_sig=907A05D2CA130AAA8B0CD1DE14DDA357&fwd_ip=127.0.0.1&version=4.5.0.2902:03:
01
,"event_type": "CLEANUP_SUCCESS","sample_name": "Win32/UniBlue.E potentially unw
anted application,Win32/UniBlue.D potentially unwanted application,Win32/SpeedUp
MyPC.A potentially unwanted application,a variant of Win32/UniBlue.F potentially
unwanted application","sample_id": "Win32/UniBlue.E potentially unwanted applic
ation,Win32/UniBlue.D potentially unwanted application,Win32/SpeedUpMyPC.A poten
tially unwanted application,a variant of Win32/UniBlue.F potentially unwanted ap
plication","sample_hashes": {"SHA1": "7DB9EA75F40FFB76CBE20E5374E18E11C281D19D",
},}&report_sig=58B98A0C84CFB33AAF6F2C02E4700B43&fwd_ip=127.0.0.1&version=4.5.0.2
902:03:02
.1&version=4.5.0.2902:03:02
,"event_type": "DETECTED","sample_name": "Win32/Somoto.G potentially unwanted ap
plication","sample_id": "Win32/Somoto.G potentially unwanted application","sampl
e_hashes": {"SHA1": "0E57D0A73E257D660FFD9BC2F061FF70F4D00B65",},}&report_sig=BB
991ED3BE797F279099566A95579A11&fwd_ip=127.0.0.1&version=4.5.0.2902:03:05
,"event_type": "CLEANUP_SUCCESS","sample_name": "Win32/Somoto.G potentially unwa
nted application","sample_id": "Win32/Somoto.G potentially unwanted application"
,"sample_hashes": {"SHA1": "0E57D0A73E257D660FFD9BC2F061FF70F4D00B65",},}&report
_sig=44964D39268A023A06594738700CB56C&fwd_ip=127.0.0.1&version=4.5.0.2902:03:05

.1&version=4.5.0.2902:03:13
,"event_type": "DETECTED","sample_name": "a variant of Win32/SProtector.E potent
ially unwanted application","sample_id": "a variant of Win32/SProtector.E potent
ially unwanted application","sample_hashes": {"SHA1": "CCD90EE6E9B1ADFF9657E8F2C
126BC6CB5C2EB24",},}&report_sig=21ED9E2F7EECC30ECE29A3667DDB18ED&fwd_ip=127.0.0.
1&version=4.5.0.2902:03:17
,"event_type": "CLEANUP_SUCCESS","sample_name": "a variant of Win32/SProtector.E
potentially unwanted application","sample_id": "a variant of Win32/SProtector.E
potentially unwanted application","sample_hashes": {"SHA1": "CCD90EE6E9B1ADFF96
57E8F2C126BC6CB5C2EB24",},}&report_sig=83ECE5EA3B5E58849D742CA3CE4BAD86&fwd_ip=1
27.0.0.1&version=4.5.0.2902:03:17
.1&version=4.5.0.2902:03:18
.1&version=4.5.0.2902:03:23
.1&version=4.5.0.2902:03:33
.1&version=4.5.0.2902:03:43
.1&version=4.5.0.2902:03:53
.1&version=4.5.0.2902:04:03

.1&version=4.5.0.2902:04:14
ware.EoRezo.AY application,a variant of MSIL/Adware.EoRezo.A application","sampl
e_id": "multiple threats,a variant of Win32/Adware.EoRezo.AY application,a varia
nt of MSIL/Adware.EoRezo.A application","sample_hashes": {"SHA1": "BD62D52CBAEB7
7D2EB16F9B893C6B65F48506F8D",},}&report_sig=B3F899F5503E20846BEE6CFAE6AC5670&fwd
_ip=127.0.0.1&version=4.5.0.2902:04:25
in32/Adware.EoRezo.AY application,a variant of MSIL/Adware.EoRezo.A application"
,"sample_id": "multiple threats,a variant of Win32/Adware.EoRezo.AY application,
a variant of MSIL/Adware.EoRezo.A application","sample_hashes": {"SHA1": "BD62D5
2CBAEB77D2EB16F9B893C6B65F48506F8D",},}&report_sig=F2745F44410AB13947D4AE9CD972D
A72&fwd_ip=127.0.0.1&version=4.5.0.2902:04:26
.1&version=4.5.0.2902:04:26
.1&version=4.5.0.2902:04:32
.1&version=4.5.0.2902:04:42
,"event_type": "DETECTED","sample_name": "Win32/VOPackage.BC potentially unwante
d application,Win32/AnyProtect.E potentially unwanted application","sample_id":
"Win32/VOPackage.BC potentially unwanted application,Win32/AnyProtect.E potentia
lly unwanted application","sample_hashes": {"SHA1": "3E10BCDDD1A5AB0FCA613292848
DBDFE8C04A6B1",},}&report_sig=6EB80329815540BDA0F5BBCA7D04A515&fwd_ip=127.0.0.1&
version=4.5.0.2902:04:50
,"event_type": "CLEANUP_SUCCESS","sample_name": "Win32/VOPackage.BC potentially
unwanted application,Win32/AnyProtect.E potentially unwanted application","sampl
e_id": "Win32/VOPackage.BC potentially unwanted application,Win32/AnyProtect.E p
otentially unwanted application","sample_hashes": {"SHA1": "3E10BCDDD1A5AB0FCA61

3292848DBDFE8C04A6B1",},}&report_sig=25E23A85221A8E4B0DF51AFA19801E91&fwd_ip=127
.0.0.1&version=4.5.0.2902:04:51
.1&version=4.5.0.2902:04:51
.1&version=4.5.0.2902:04:52
.1&version=4.5.0.2902:05:11
version=4.5.0.2902:05:17
.0.0.1&version=4.5.0.2902:05:18
.1&version=4.5.0.2902:05:18
.1&version=4.5.0.2902:05:21
.1&version=4.5.0.2902:05:31

.1&version=4.5.0.2902:05:44
version=4.5.0.2902:05:45
.0.0.1&version=4.5.0.2902:05:45
.1&version=4.5.0.2902:05:45
,"event_type": "DETECTED","sample_name": "Win32/Systweak.B potentially unwanted
application","sample_id": "Win32/Systweak.B potentially unwanted application","s
ample_hashes": {"SHA1": "D12DB4438118C857E220AA0C932CEC1E9D49B561",},}&report_si
g=6F4ABED82990B2D142512E352A288DD6&fwd_ip=127.0.0.1&version=4.5.0.2902:05:47
,"event_type": "CLEANUP_SUCCESS","sample_name": "Win32/Systweak.B potentially un
wanted application","sample_id": "Win32/Systweak.B potentially unwanted applicat
ion","sample_hashes": {"SHA1": "D12DB4438118C857E220AA0C932CEC1E9D49B561",},}&re
port_sig=93690D902137D1E44FFADA6A90727AB7&fwd_ip=127.0.0.1&version=4.5.0.2902:05
:47
.1&version=4.5.0.2902:05:54
.1&version=4.5.0.2902:06:01

.1&version=4.5.0.2902:06:08
.1&version=4.5.0.2902:06:18
,"event_type": "DETECTED","sample_name": "a variant of MSIL/Solimba.AC potential
ly unwanted application","sample_id": "a variant of MSIL/Solimba.AC potentially
unwanted application","sample_hashes": {"SHA1": "DFC645C0499FA3D105D98F1F0BBEC97
CC01D146F",},}&report_sig=13AA8256A32F72220762927CB4D60C61&fwd_ip=127.0.0.1&vers
ion=4.5.0.2902:06:19
,"event_type": "CLEANUP_SUCCESS","sample_name": "a variant of MSIL/Solimba.AC po
tentially unwanted application","sample_id": "a variant of MSIL/Solimba.AC poten
tially unwanted application","sample_hashes": {"SHA1": "DFC645C0499FA3D105D98F1F
0BBEC97CC01D146F",},}&report_sig=655F6E7B859BEBC32001D7DDFB13B33E&fwd_ip=127.0.0
.1&version=4.5.0.2902:06:19
.1&version=4.5.0.2902:06:19
,"event_type": "DETECTED","sample_name": "a variant of MSIL/Solimba.AC potential
ly unwanted application","sample_id": "a variant of MSIL/Solimba.AC potentially
unwanted application","sample_hashes": {"SHA1": "DDF811F21E6C066B644D03E6751E16E
FB0FBECCE",},}&report_sig=206FF0308D54DD26917080A36EC0941C&fwd_ip=127.0.0.1&vers
ion=4.5.0.2902:06:20
,"event_type": "CLEANUP_SUCCESS","sample_name": "a variant of MSIL/Solimba.AC po
tentially unwanted application","sample_id": "a variant of MSIL/Solimba.AC poten
tially unwanted application","sample_hashes": {"SHA1": "DDF811F21E6C066B644D03E6
751E16EFB0FBECCE",},}&report_sig=A7CF43E6E3BA45C99596258C6B426E59&fwd_ip=127.0.0
.1&version=4.5.0.2902:06:20
.1&version=4.5.0.2902:06:28

.1&version=4.5.0.2902:06:30
.1&version=4.5.0.2902:06:38
,"event_type": "DETECTED","sample_name": "a variant of Win64/BrowseFox.BW potent
ially unwanted application","sample_id": "a variant of Win64/BrowseFox.BW potent
ially unwanted application","sample_hashes": {"SHA1": "A57303F4797EA963609055693
DDA90CE3969F31C",},}&report_sig=0528D2027AB7C9C05D3CC8A162E51C04&fwd_ip=127.0.0.
1&version=4.5.0.2902:06:39
,"event_type": "CLEANUP_SUCCESS","sample_name": "a variant of Win64/BrowseFox.BW
potentially unwanted application","sample_id": "a variant of Win64/BrowseFox.BW
potentially unwanted application","sample_hashes": {"SHA1": "A57303F4797EA96360
9055693DDA90CE3969F31C",},}&report_sig=7540AD5101A912A8BF7360977E111FCB&fwd_ip=1
27.0.0.1&version=4.5.0.2902:06:40
.1&version=4.5.0.2902:06:40
,"event_type": "DETECTED","sample_name": "a variant of Win32/Adware.CognosAds.C
application","sample_id": "a variant of Win32/Adware.CognosAds.C application","s
ample_hashes": {"SHA1": "163C1373C5F57FD72FCB708B1A760500FDB7FD3A",},}&report_si
g=C560352C871803363AC2221FC00A9F39&fwd_ip=127.0.0.1&version=4.5.0.2902:06:42
,"event_type": "CLEANUP_SUCCESS","sample_name": "a variant of Win32/Adware.Cogno
sAds.C application","sample_id": "a variant of Win32/Adware.CognosAds.C applicat
ion","sample_hashes": {"SHA1": "163C1373C5F57FD72FCB708B1A760500FDB7FD3A",},}&re
port_sig=85F943DD05FB854F21E946DA308C6FBB&fwd_ip=127.0.0.1&version=4.5.0.2902:06
:43
ossRider.BS potentially unwanted application","sample_hashes": {"SHA1": "F2DD5CE
5FD028C4E3E96FC7127EBD5BD9DA075D1",},}&report_sig=F6EE9E0318362A8F628D76015A2B96
9E&fwd_ip=127.0.0.1&version=4.5.0.2902:06:44
F2DD5CE5FD028C4E3E96FC7127EBD5BD9DA075D1",},}&report_sig=970181B715BF2696E3645F6
521C4F758&fwd_ip=127.0.0.1&version=4.5.0.2902:06:44
,"event_type": "DETECTED","sample_name": "a variant of Win32/Toolbar.Iminent.C p
otentially unwanted application","sample_id": "a variant of Win32/Toolbar.Iminen
t.C potentially unwanted application","sample_hashes": {"SHA1": "7D54BE264410B1E
EE9ABF3671565D28685AC704E",},}&report_sig=7BCE203C48F59D83335C8A87BC47D9A0&fwd_i
p=127.0.0.1&version=4.5.0.2902:06:46
,"event_type": "CLEANUP_SUCCESS","sample_name": "a variant of Win32/Toolbar.Imin
ent.C potentially unwanted application","sample_id": "a variant of Win32/Toolbar
.Iminent.C potentially unwanted application","sample_hashes": {"SHA1": "7D54BE26
4410B1EEE9ABF3671565D28685AC704E",},}&report_sig=86044883CB33F1C0D3F92B4041F5104
2&fwd_ip=127.0.0.1&version=4.5.0.2902:06:46
.1&version=4.5.0.2902:06:48
.1&version=4.5.0.2902:06:50
.1&version=4.5.0.2902:06:59
,"event_type": "DETECTED","sample_name": "a variant of Win32/BrowseFox.U potenti
ally unwanted application","sample_id": "a variant of Win32/BrowseFox.U potentia
lly unwanted application","sample_hashes": {"SHA1": "088E0FC07617DB3CE47104E0E79
F73349CBE96F0",},}&report_sig=4741139E66379122CFDAF11F0424613C&fwd_ip=127.0.0.1&
version=4.5.0.2902:07:02
,"event_type": "CLEANUP_SUCCESS","sample_name": "a variant of Win32/BrowseFox.U

potentially unwanted application","sample_id": "a variant of Win32/BrowseFox.U p
otentially unwanted application","sample_hashes": {"SHA1": "088E0FC07617DB3CE471
04E0E79F73349CBE96F0",},}&report_sig=14F8B049941514FAF19155FF83683E06&fwd_ip=127
.0.0.1&version=4.5.0.2902:07:03
.1&version=4.5.0.2902:07:03
,"event_type": "DETECTED","sample_name": "a variant of Win32/Kryptik.DUK trojan"
,"sample_id": "a variant of Win32/Kryptik.DUK trojan","sample_hashes": {"SHA1":
"752349A64E2310481BCBEC55A416F1A1699ADF12",},}&report_sig=1D0FFFC3429B4524AA9772
A9516D8DFB&fwd_ip=127.0.0.1&version=4.5.0.2902:07:05
,"event_type": "CLEANUP_SUCCESS","sample_name": "a variant of Win32/Kryptik.DUK
trojan","sample_id": "a variant of Win32/Kryptik.DUK trojan","sample_hashes": {"
SHA1": "752349A64E2310481BCBEC55A416F1A1699ADF12",},}&report_sig=348EF39AD024DF7
340FD114F003AE7E4&fwd_ip=127.0.0.1&version=4.5.0.2902:07:05
.1&version=4.5.0.2902:07:09
cation","sample_hashes": {"SHA1": "068B9D8991990B11033EEF556E7A1B25AFE2A030",},}
&report_sig=BC30B0699C8AAC05983C94D4E2AF3AB1&fwd_ip=127.0.0.1&version=4.5.0.2902
:07:12
n application","sample_hashes": {"SHA1": "068B9D8991990B11033EEF556E7A1B25AFE2A0
30",},}&report_sig=A6F60BBE4F317E2F99A3CA746C830B43&fwd_ip=127.0.0.1&version=4.5
.0.2902:07:13
.1&version=4.5.0.2902:07:13
,"event_type": "DETECTED","sample_name": "Win32/Somoto.Q potentially unwanted ap
plication","sample_id": "Win32/Somoto.Q potentially unwanted application","sampl
e_hashes": {"SHA1": "8C26F1B547794054E89AFFC6BBF473F81F9829B1",},}&report_sig=E7
0D9E084321300EF4925695FE906190&fwd_ip=127.0.0.1&version=4.5.0.2902:07:14
,"event_type": "CLEANUP_SUCCESS","sample_name": "Win32/Somoto.Q potentially unwa
nted application","sample_id": "Win32/Somoto.Q potentially unwanted application"
,"sample_hashes": {"SHA1": "8C26F1B547794054E89AFFC6BBF473F81F9829B1",},}&report
_sig=44BB32426AE2BFD6387E7F1A824D38B8&fwd_ip=127.0.0.1&version=4.5.0.2902:07:15
.1&version=4.5.0.2902:07:19
cation","sample_hashes": {"SHA1": "068B9D8991990B11033EEF556E7A1B25AFE2A030",},}
&report_sig=BC30B0699C8AAC05983C94D4E2AF3AB1&fwd_ip=127.0.0.1&version=4.5.0.2902
:07:19
n application","sample_hashes": {"SHA1": "068B9D8991990B11033EEF556E7A1B25AFE2A0
30",},}&report_sig=A6F60BBE4F317E2F99A3CA746C830B43&fwd_ip=127.0.0.1&version=4.5
.0.2902:07:20
.1&version=4.5.0.2902:07:23
.1&version=4.5.0.2902:07:29
.1&version=4.5.0.2902:07:33
.1&version=4.5.0.2902:07:39

.1&version=4.5.0.2902:07:43
.1&version=4.5.0.2902:07:49
.1&version=4.5.0.2902:07:53
.1&version=4.5.0.2902:07:59
.1&version=4.5.0.2902:08:03
.1&version=4.5.0.2902:08:09
.1&version=4.5.0.2902:08:13
.1&version=4.5.0.2902:08:19
.1&version=4.5.0.2902:08:29
.1&version=4.5.0.2902:08:29

.1&version=4.5.0.2902:08:39
.1&version=4.5.0.2902:08:45
.1&version=4.5.0.2902:08:49
.1&version=4.5.0.2902:08:55
.1&version=4.5.0.2902:09:01
.1&version=4.5.0.2902:09:14
.1&version=4.5.0.2902:09:24
.1&version=4.5.0.2902:09:26
.1&version=4.5.0.2902:09:34
.1&version=4.5.0.2902:09:36

.1&version=4.5.0.2902:09:44
.1&version=4.5.0.2902:09:46
.1&version=4.5.0.2902:09:54
,"event_type": "DETECTED","sample_name": "multiple threats,a variant of Win32/Sp
eedingUpMyPC application,a variant of Win32/Adware.SpeedingUpMyPC.AG application
,Win32/Adware.SpeedingUpMyPC.V application,a variant of Win32/Adware.SpeedingUpM
yPC.C application,a variant of Win32/Adware.SpeedingUpMyPC.X application,a varia
nt of Win32/Adware.SpeedingUpMyPC.AL application,a variant of Win32/AdWare.Speed
ingUpMyPC.D application,a variant of Win32/SProtector.E potentially unwanted app
lication","sample_id": "multiple threats,a variant of Win32/SpeedingUpMyPC appli
cation,a variant of Win32/Adware.SpeedingUpMyPC.AG application,Win32/Adware.Spee
dingUpMyPC.V application,a variant of Win32/Adware.SpeedingUpMyPC.C application,
a variant of Win32/Adware.SpeedingUpMyPC.X application,a variant of Win32/Adware
.SpeedingUpMyPC.AL application,a variant of Win32/AdWare.SpeedingUpMyPC.D applic
ation,a variant of Win32/SProtector.E potentially unwanted application","sample_
hashes": {"SHA1": "DB5E4E4F64BAA359255F230C658BE286E266892A",},}&report_sig=11F1
C09E2FD1A9C3C9A5FC7BF9453411&fwd_ip=127.0.0.1&version=4.5.0.2902:09:57
,"code":2,"fbtrace_id":"BcQ0+GVPZQF"}}02:09:58
in32/SpeedingUpMyPC application,a variant of Win32/Adware.SpeedingUpMyPC.AG appl
ication,Win32/Adware.SpeedingUpMyPC.V application,a variant of Win32/Adware.Spee
dingUpMyPC.C application,a variant of Win32/Adware.SpeedingUpMyPC.X application,
a variant of Win32/Adware.SpeedingUpMyPC.AL application,a variant of Win32/AdWar
e.SpeedingUpMyPC.D application,a variant of Win32/SProtector.E potentially unwan
ted application","sample_id": "multiple threats,a variant of Win32/SpeedingUpMyP
C application,a variant of Win32/Adware.SpeedingUpMyPC.AG application,Win32/Adwa
re.SpeedingUpMyPC.V application,a variant of Win32/Adware.SpeedingUpMyPC.C appli
cation,a variant of Win32/Adware.SpeedingUpMyPC.X application,a variant of Win32
/Adware.SpeedingUpMyPC.AL application,a variant of Win32/AdWare.SpeedingUpMyPC.D
application,a variant of Win32/SProtector.E potentially unwanted application","
sample_hashes": {"SHA1": "DB5E4E4F64BAA359255F230C658BE286E266892A",},}&report_s
ig=4EFB9B54CAF03855455DB5F234FB9BD6&fwd_ip=127.0.0.1&version=4.5.0.2902:09:58
,"code":2,"fbtrace_id":"BPiY02:09:59

.1&version=4.5.0.2902:09:59
.1&version=4.5.0.2902:10:04
.1&version=4.5.0.2902:10:12
.1&version=4.5.0.2902:10:14
.1&version=4.5.0.2902:10:24
,"event_type": "DETECTED","sample_name": "multiple threats,a variant of Win32/Sp
eedingUpMyPC.O application,a variant of Win32/Adware.SpeedingUpMyPC.AG applicati
on,a variant of Win32/Adware.SpeedingUpMyPC.V application,a variant of Win32/Adw
are.SpeedingUpMyPC.C application,a variant of Win32/Adware.SpeedingUpMyPC.X appl
ication,a variant of Win32/Adware.SpeedingUpMyPC.AL application,a variant of Win
32/AdWare.SpeedingUpMyPC.D application,a variant of Win32/SProtector.E potential
ly unwanted application","sample_id": "multiple threats,a variant of Win32/Speed
ingUpMyPC.O application,a variant of Win32/Adware.SpeedingUpMyPC.AG application,
a variant of Win32/Adware.SpeedingUpMyPC.V application,a variant of Win32/Adware
.SpeedingUpMyPC.C application,a variant of Win32/Adware.SpeedingUpMyPC.X applica
tion,a variant of Win32/Adware.SpeedingUpMyPC.AL application,a variant of Win32/
AdWare.SpeedingUpMyPC.D application,a variant of Win32/SProtector.E potentially
unwanted application","sample_hashes": {"SHA1": "A87B7647DC34B5B6186209377786E94
6B677C574",},}&report_sig=43C8FA822CDBA520C0BB9A93838B55E7&fwd_ip=127.0.0.1&vers
ion=4.5.0.2902:10:25
,"code":2,"fbtrace_id":"G+TQJ5XCgrh"}}02:10:26
in32/SpeedingUpMyPC.O application,a variant of Win32/Adware.SpeedingUpMyPC.AG ap
plication,a variant of Win32/Adware.SpeedingUpMyPC.V application,a variant of Wi
n32/Adware.SpeedingUpMyPC.C application,a variant of Win32/Adware.SpeedingUpMyPC
.X application,a variant of Win32/Adware.SpeedingUpMyPC.AL application,a variant
of Win32/AdWare.SpeedingUpMyPC.D application,a variant of Win32/SProtector.E po
tentially unwanted application","sample_id": "multiple threats,a variant of Win3
2/SpeedingUpMyPC.O application,a variant of Win32/Adware.SpeedingUpMyPC.AG appli

cation,a variant of Win32/Adware.SpeedingUpMyPC.V application,a variant of Win32
/Adware.SpeedingUpMyPC.C application,a variant of Win32/Adware.SpeedingUpMyPC.X
application,a variant of Win32/Adware.SpeedingUpMyPC.AL application,a variant of
Win32/AdWare.SpeedingUpMyPC.D application,a variant of Win32/SProtector.E poten
tially unwanted application","sample_hashes": {"SHA1": "A87B7647DC34B5B618620937
7786E946B677C574",},}&report_sig=406D0746CAFCF2BEA1645C3E0EAF4A8C&fwd_ip=127.0.0
.1&version=4.5.0.2902:10:26
,"code":2,"fbtrace_id":"DWoeuN8kMUt"}}02:10:26
.1&version=4.5.0.2902:10:26
.1&version=4.5.0.2902:10:34
.1&version=4.5.0.2902:10:36
.1&version=4.5.0.2902:10:44
,"event_type": "DETECTED","sample_name": "a variant of Generik.JWLSFWD potential
ly unwanted application","sample_id": "a variant of Generik.JWLSFWD potentially
unwanted application","sample_hashes": {"SHA1": "8167D0E47C043F866866C812050FCB2
A765EA999",},}&report_sig=A6393B006F4C035838DEB8EF82BAF20F&fwd_ip=127.0.0.1&vers
ion=4.5.0.2902:10:48
,"event_type": "CLEANUP_SUCCESS","sample_name": "a variant of Generik.JWLSFWD po
tentially unwanted application","sample_id": "a variant of Generik.JWLSFWD poten
tially unwanted application","sample_hashes": {"SHA1": "8167D0E47C043F866866C812
050FCB2A765EA999",},}&report_sig=4273B8CD77BC1A5EB35F7FBDF079E2B6&fwd_ip=127.0.0
.1&version=4.5.0.2902:10:48
.1&version=4.5.0.2902:10:48

.1&version=4.5.0.2902:10:54
,"event_type": "DETECTED","sample_name": "JS/Toolbar.Crossrider.O potentially un
wanted application,JS/Toolbar.Crossrider.J potentially unwanted application,JS/T
oolbar.Crossrider.G potentially unwanted application,JS/Toolbar.Crossrider.M pot
entially unwanted application,JS/Toolbar.Crossrider.P potentially unwanted appli
cation,JS/Toolbar.Crossrider.B potentially unwanted application,JS/Toolbar.Cross
rider.N potentially unwanted application,JS/Toolbar.Crossrider.E potentially unw
anted application,JS/Toolbar.Crossrider.H potentially unwanted application,JS/To
olbar.Crossrider.R potentially unwanted application","sample_id": "JS/Toolbar.Cr
ossrider.O potentially unwanted application,JS/Toolbar.Crossrider.J potentially
unwanted application,JS/Toolbar.Crossrider.G potentially unwanted application,JS
/Toolbar.Crossrider.M potentially unwanted application,JS/Toolbar.Crossrider.P p
otentially unwanted application,JS/Toolbar.Crossrider.B potentially unwanted app
lication,JS/Toolbar.Crossrider.N potentially unwanted application,JS/Toolbar.Cro
ssrider.E potentially unwanted application,JS/Toolbar.Crossrider.H potentially u
nwanted application,JS/Toolbar.Crossrider.R potentially unwanted application","s
ample_hashes": {"SHA1": "B1AB5F65FFF8C5B82EBB9E8D774922C9A1CDD16A",},}&report_si
g=7F2C99E1F32B6BEE684F47B773A11B65&fwd_ip=127.0.0.1&version=4.5.0.2902:10:54
,"code":2,"fbtrace_id":"CHUg27OAETD"}}02:10:54
,"event_type": "CLEANUP_SUCCESS","sample_name": "JS/Toolbar.Crossrider.O potenti
ally unwanted application,JS/Toolbar.Crossrider.J potentially unwanted applicati
on,JS/Toolbar.Crossrider.G potentially unwanted application,JS/Toolbar.Crossride
r.M potentially unwanted application,JS/Toolbar.Crossrider.P potentially unwante
d application,JS/Toolbar.Crossrider.B potentially unwanted application,JS/Toolba
r.Crossrider.N potentially unwanted application,JS/Toolbar.Crossrider.E potentia
lly unwanted application,JS/Toolbar.Crossrider.H potentially unwanted applicatio
n,JS/Toolbar.Crossrider.R potentially unwanted application","sample_id": "JS/Too
lbar.Crossrider.O potentially unwanted application,JS/Toolbar.Crossrider.J poten
tially unwanted application,JS/Toolbar.Crossrider.G potentially unwanted applica
tion,JS/Toolbar.Crossrider.M potentially unwanted application,JS/Toolbar.Crossri
der.P potentially unwanted application,JS/Toolbar.Crossrider.B potentially unwan
ted application,JS/Toolbar.Crossrider.N potentially unwanted application,JS/Tool
bar.Crossrider.E potentially unwanted application,JS/Toolbar.Crossrider.H potent
ially unwanted application,JS/Toolbar.Crossrider.R potentially unwanted applicat
ion","sample_hashes": {"SHA1": "B1AB5F65FFF8C5B82EBB9E8D774922C9A1CDD16A",},}&re
port_sig=DB579265CAD5C48ADABD77291F188F69&fwd_ip=127.0.0.1&version=4.5.0.2902:10
:54
,"code":2,"fbtrace_id":"HlnYsyNNyC4"}}02:10:54
.1&version=4.5.0.2902:10:58
.1&version=4.5.0.2902:11:04
.1&version=4.5.0.2902:11:14
.1&version=4.5.0.2902:11:24
.1&version=4.5.0.2902:11:32
.1&version=4.5.0.2902:11:34
.1&version=4.5.0.2902:11:44
.1&version=4.5.0.2902:11:48
.1&version=4.5.0.2902:11:54
.1&version=4.5.0.2902:11:57
.1&version=4.5.0.2902:12:04
,"event_type": "DETECTED","sample_name": "MSIL/MyPCBackup.D potentially unwanted

application","sample_id": "MSIL/MyPCBackup.D potentially unwanted application",
"sample_hashes": {"SHA1": "4495024B25F21088902FBD82FC915E621187FE85",},}&report_
sig=EF3B617BCD9830387618A5D0A8CD78AE&fwd_ip=127.0.0.1&version=4.5.0.2902:12:06
,"event_type": "CLEANUP_SUCCESS","sample_name": "MSIL/MyPCBackup.D potentially u
nwanted application","sample_id": "MSIL/MyPCBackup.D potentially unwanted applic
ation","sample_hashes": {"SHA1": "4495024B25F21088902FBD82FC915E621187FE85",},}&
report_sig=6C54FBC541AFE54C73C57DC49E33774F&fwd_ip=127.0.0.1&version=4.5.0.2902:
12:09
.1&version=4.5.0.2902:12:09
p=127.0.0.1&version=4.5.0.2902:12:13
2&fwd_ip=127.0.0.1&version=4.5.0.2902:12:13
.1&version=4.5.0.2902:12:14
.1&version=4.5.0.2902:12:24
,"event_type": "DETECTED","sample_name": "a variant of Win32/BrowseFox.AO potent
ially unwanted application","sample_id": "a variant of Win32/BrowseFox.AO potent
ially unwanted application","sample_hashes": {"SHA1": "79BFCDB99DACD02FF72765DF0
D27F1019EB78CE9",},}&report_sig=C09FF3BD7C974F3E09996A4F2F267740&fwd_ip=127.0.0.
1&version=4.5.0.2902:12:24

,"event_type": "CLEANUP_SUCCESS","sample_name": "a variant of Win32/BrowseFox.AO
potentially unwanted application","sample_id": "a variant of Win32/BrowseFox.AO
potentially unwanted application","sample_hashes": {"SHA1": "79BFCDB99DACD02FF7
2765DF0D27F1019EB78CE9",},}&report_sig=D172CD97A96053EA99C00C0D9DED5B84&fwd_ip=1
27.0.0.1&version=4.5.0.2902:12:24
.1&version=4.5.0.2902:12:25
,"event_type": "DETECTED","sample_name": "a variant of Win32/Adware.CognosAds.B
application","sample_id": "a variant of Win32/Adware.CognosAds.B application","s
ample_hashes": {"SHA1": "3D139ABD97A38EE4BA22DEC2B587F771E46BC485",},}&report_si
g=0168CC5524F339C4E9AB915F3799BC1F&fwd_ip=127.0.0.1&version=4.5.0.2902:12:25
sAds.B application","sample_id": "a variant of Win32/Adware.CognosAds.B applicat
ion","sample_hashes": {"SHA1": "3D139ABD97A38EE4BA22DEC2B587F771E46BC485",},}&re
port_sig=C60CA4E80DA1D78B21DA5D2BF5926EC1&fwd_ip=127.0.0.1&version=4.5.0.2902:12
:26
.1&version=4.5.0.2902:12:34
.1&version=4.5.0.2902:12:35
,"event_type": "DETECTED","sample_name": "a variant of Win32/Toolbar.Babylon.A p
n.A potentially unwanted application","sample_hashes": {"SHA1": "EAB3A867FD239AD
7D1D5416E8139D3D71F4140FA",},}&report_sig=D58D91272BCD07B07B54AC478D5253F0&fwd_i
p=127.0.0.1&version=4.5.0.2902:12:39
lon.A potentially unwanted application","sample_id": "a variant of Win32/Toolbar
.Babylon.A potentially unwanted application","sample_hashes": {"SHA1": "EAB3A867
FD239AD7D1D5416E8139D3D71F4140FA",},}&report_sig=EE15A7AA0C67CECB1E5C3789A230324
0&fwd_ip=127.0.0.1&version=4.5.0.2902:12:40

.1&version=4.5.0.2902:12:44
.1&version=4.5.0.2902:12:45
.1&version=4.5.0.2902:12:54
.1&version=4.5.0.2902:12:55
,"event_type": "DETECTED","sample_name": "Win32/Adware.1ClickDownload.AY applica
tion","sample_id": "Win32/Adware.1ClickDownload.AY application","sample_hashes":
{"SHA1": "C90D76176EB464711C7ACB923C3631B6E3E5C773",},}&report_sig=56BA199F8DCB
6B70C5837AF0C5902139&fwd_ip=127.0.0.1&version=4.5.0.2902:12:59
,"event_type": "CLEANUP_SUCCESS","sample_name": "Win32/Adware.1ClickDownload.AY
application","sample_id": "Win32/Adware.1ClickDownload.AY application","sample_h
ashes": {"SHA1": "C90D76176EB464711C7ACB923C3631B6E3E5C773",},}&report_sig=A2167
E7A0D08F429E011355D90DA4210&fwd_ip=127.0.0.1&version=4.5.0.2902:12:59
.1&version=4.5.0.2902:13:04
.1&version=4.5.0.2902:13:05
.1&version=4.5.0.2902:13:14

.1&version=4.5.0.2902:13:15
,"event_type": "DETECTED","sample_name": "a variant of MSIL/Adware.Imali.C appli
cation","sample_id": "a variant of MSIL/Adware.Imali.C application","sample_hash
es": {"SHA1": "5C8AA300C2D5B333E336B807272BD744405627B6",},}&report_sig=1F8ECE3D
C12AACB485E5917620FE5961&fwd_ip=127.0.0.1&version=4.5.0.2902:13:16
,"event_type": "CLEANUP_SUCCESS","sample_name": "a variant of MSIL/Adware.Imali.
C application","sample_id": "a variant of MSIL/Adware.Imali.C application","samp
le_hashes": {"SHA1": "5C8AA300C2D5B333E336B807272BD744405627B6",},}&report_sig=9
35A27D5DA0FBA87AA04E6FDA82836F8&fwd_ip=127.0.0.1&version=4.5.0.2902:13:16
,"event_type": "DETECTED","sample_name": "a variant of Win32/InstallCore.PK pote
ntially unwanted application","sample_id": "a variant of Win32/InstallCore.PK po
tentially unwanted application","sample_hashes": {"SHA1": "D2937911230F09ED1A652
9A451EA026AD67D7567",},}&report_sig=6C59D7B4016E76B90094FF8A701012CA&fwd_ip=127.
0.0.1&version=4.5.0.2902:13:18
,"event_type": "CLEANUP_SUCCESS","sample_name": "a variant of Win32/InstallCore.
PK potentially unwanted application","sample_id": "a variant of Win32/InstallCor
e.PK potentially unwanted application","sample_hashes": {"SHA1": "D2937911230F09
ED1A6529A451EA026AD67D7567",},}&report_sig=13365EF12AF59FD960393FB742C6A73F&fwd_
ip=127.0.0.1&version=4.5.0.2902:13:18
p=127.0.0.1&version=4.5.0.2902:13:19
2&fwd_ip=127.0.0.1&version=4.5.0.2902:13:20
.1&version=4.5.0.2902:13:24
,"event_type": "DETECTED","sample_name": "a variant of Win32/Injector.BHCG troja
n","sample_id": "a variant of Win32/Injector.BHCG trojan","sample_hashes": {"SHA
1": "67A17016E34B66C77DC54CA1826373247644D82F",},}&report_sig=E6FE38141E79C4C9CC
FC865A3B4642B3&fwd_ip=127.0.0.1&version=4.5.0.2902:13:29
,"event_type": "CLEANUP_SUCCESS","sample_name": "a variant of Win32/Injector.BHC
G trojan","sample_id": "a variant of Win32/Injector.BHCG trojan","sample_hashes"
: {"SHA1": "67A17016E34B66C77DC54CA1826373247644D82F",},}&report_sig=D5A2673F87D
35A97ED04D4BB921137E6&fwd_ip=127.0.0.1&version=4.5.0.2902:13:29
.1&version=4.5.0.2902:13:30
,"event_type": "DETECTED","sample_name": "a variant of Win32/Adware.Genieo.A app
lication","sample_id": "a variant of Win32/Adware.Genieo.A application","sample_
hashes": {"SHA1": "9F5FE3D8BC47A98AF4555A15B588164D21C8F27F",},}&report_sig=7198
FEABD966288202686004A2F1B985&fwd_ip=127.0.0.1&version=4.5.0.2902:13:30
,"event_type": "CLEANUP_SUCCESS","sample_name": "a variant of Win32/Adware.Genie
o.A application","sample_id": "a variant of Win32/Adware.Genieo.A application","
sample_hashes": {"SHA1": "9F5FE3D8BC47A98AF4555A15B588164D21C8F27F",},}&report_s
ig=AE6B5F24AD62507C0E5E99A8DDCE5442&fwd_ip=127.0.0.1&version=4.5.0.2902:13:31
.1&version=4.5.0.2902:13:34
.1&version=4.5.0.2902:13:42
.1&version=4.5.0.2902:13:44

.1&version=4.5.0.2902:13:54
.1&version=4.5.0.2902:13:55
.1&version=4.5.0.2902:14:04
.1&version=4.5.0.2902:14:10
.1&version=4.5.0.2902:14:15
.1&version=4.5.0.2902:14:21
.1&version=4.5.0.2902:14:25
,"event_type": "DETECTED","sample_name": "Win32/SweetIM.K potentially unwanted a
pplication","sample_id": "Win32/SweetIM.K potentially unwanted application","sam
ple_hashes": {"SHA1": "C8F1E3F28152C6C010B7AE8FA4D167E3C388FF0C",},}&report_sig=
26974ABA535501FD26CAAE6842BE256A&fwd_ip=127.0.0.1&version=4.5.0.2902:14:28
,"event_type": "CLEANUP_SUCCESS","sample_name": "Win32/SweetIM.K potentially unw
anted application","sample_id": "Win32/SweetIM.K potentially unwanted applicatio
n","sample_hashes": {"SHA1": "C8F1E3F28152C6C010B7AE8FA4D167E3C388FF0C",},}&repo
rt_sig=A6114D0F2C117C66C268F0FF6AA6B2F5&fwd_ip=127.0.0.1&version=4.5.0.2902:14:2
8
.1&version=4.5.0.2902:14:35
.1&version=4.5.0.2902:14:35
.1&version=4.5.0.2902:14:45
.1&version=4.5.0.2902:14:45
.1&version=4.5.0.2902:14:55
.1&version=4.5.0.2902:15:05
.1&version=4.5.0.2902:15:13
,"event_type": "DETECTED","sample_name": "Win32/VOPackage.BS potentially unwante
d application","sample_id": "Win32/VOPackage.BS potentially unwanted application
","sample_hashes": {"SHA1": "117B708AA171989B1C23FF89FD01EE49CA792876",},}&repor
t_sig=34A585D234C122E4AA298E56569EAC70&fwd_ip=127.0.0.1&version=4.5.0.2902:15:17
,"event_type": "CLEANUP_SUCCESS","sample_name": "Win32/VOPackage.BS potentially
unwanted application","sample_id": "Win32/VOPackage.BS potentially unwanted appl
ication","sample_hashes": {"SHA1": "117B708AA171989B1C23FF89FD01EE49CA792876",},
}&report_sig=51CEC8BC1B87149019C12024A0146357&fwd_ip=127.0.0.1&version=4.5.0.290
2:15:18
.1&version=4.5.0.2902:15:18
,"event_type": "DETECTED","sample_name": "a variant of Win32/Adware.ConvertAd.QS
application","sample_id": "a variant of Win32/Adware.ConvertAd.QS application",
"sample_hashes": {"SHA1": "B4D76FDD22197E4ED1942C9FA056820E616D4FA6",},}&report_
sig=6F7678128B66D1F57EE1821A956F27BA&fwd_ip=127.0.0.1&version=4.5.0.2902:15:24
rtAd.QS application","sample_id": "a variant of Win32/Adware.ConvertAd.QS applic
ation","sample_hashes": {"SHA1": "B4D76FDD22197E4ED1942C9FA056820E616D4FA6",},}&
report_sig=C5743848676A73FDA6C2CE26A81BE577&fwd_ip=127.0.0.1&version=4.5.0.2902:
15:25
,"event_type": "DETECTED","sample_name": "multiple threats,Win32/Adware.ConvertA
d.AQ application,a variant of Win32/Adware.ConvertAd.QH application","sample_id"
: "multiple threats,Win32/Adware.ConvertAd.AQ application,a variant of Win32/Adw
are.ConvertAd.QH application","sample_hashes": {"SHA1": "A85B5DCD611400CB2733EFF
F1739BA70823C3449",},}&report_sig=6AED5E5DA96E09542D501C6801F11506&fwd_ip=127.0.
0.1&version=4.5.0.2902:15:29
,"event_type": "CLEANUP_SUCCESS","sample_name": "multiple threats,Win32/Adware.C
onvertAd.AQ application,a variant of Win32/Adware.ConvertAd.QH application","sam
ple_id": "multiple threats,Win32/Adware.ConvertAd.AQ application,a variant of Wi
n32/Adware.ConvertAd.QH application","sample_hashes": {"SHA1": "A85B5DCD611400CB
2733EFFF1739BA70823C3449",},}&report_sig=A174A47B15020BC5250584C9887799D5&fwd_ip
=127.0.0.1&version=4.5.0.2902:15:29
.1&version=4.5.0.2902:15:29
tentially unwanted application","sample_hashes": {"SHA1": "D2937911230F09ED1A652
9A451EA026AD67D7567",},}&report_sig=6C59D7B4016E76B90094FF8A701012CA&fwd_ip=127.
0.0.1&version=4.5.0.2902:15:31

e.PK potentially unwanted application","sample_hashes": {"SHA1": "D2937911230F09
ED1A6529A451EA026AD67D7567",},}&report_sig=13365EF12AF59FD960393FB742C6A73F&fwd_
ip=127.0.0.1&version=4.5.0.2902:15:32
2:15:35
tentially unwanted application","sample_hashes": {"SHA1": "3498A713581543958CA44
D2B3AA1C6687F128526",},}&report_sig=40D8C1109468A632846A4615DBE7DBFC&fwd_ip=127.
0.0.1&version=4.5.0.2902:15:36
e.PK potentially unwanted application","sample_hashes": {"SHA1": "3498A713581543
958CA44D2B3AA1C6687F128526",},}&report_sig=13F03B38B05CCAA39FF51005243AAE18&fwd_
ip=127.0.0.1&version=4.5.0.2902:15:37
tentially unwanted application","sample_hashes": {"SHA1": "723B4E944AC6658DBE6E6
B5A1005796BD8B10A34",},}&report_sig=15CF0DD3A145124DB9F8E32F0ED0CDE5&fwd_ip=127.
0.0.1&version=4.5.0.2902:15:38
e.PK potentially unwanted application","sample_hashes": {"SHA1": "723B4E944AC665
8DBE6E6B5A1005796BD8B10A34",},}&report_sig=52556C8939228B9C1472EC3184CBA7A1&fwd_
ip=127.0.0.1&version=4.5.0.2902:15:39

.1&version=4.5.0.2902:15:39
,"event_type": "DETECTED","sample_name": "a variant of Win32/Toolbar.Montiera.AB
potentially unwanted application","sample_id": "a variant of Win32/Toolbar.Mont
iera.AB potentially unwanted application","sample_hashes": {"SHA1": "B84640CD4BA
66F8FEA925ECB03681902EBFF692B",},}&report_sig=72A83F3F01DD6C7DA31AFA0256C58D3B&f
wd_ip=127.0.0.1&version=4.5.0.2902:15:41
,"event_type": "CLEANUP_SUCCESS","sample_name": "a variant of Win32/Toolbar.Mont
iera.AB potentially unwanted application","sample_id": "a variant of Win32/Toolb
ar.Montiera.AB potentially unwanted application","sample_hashes": {"SHA1": "B846
40CD4BA66F8FEA925ECB03681902EBFF692B",},}&report_sig=ED83A144EE083E71157B4CBFB44
ECBA7&fwd_ip=127.0.0.1&version=4.5.0.2902:15:41
,"event_type": "DETECTED","sample_name": "MSIL/Riskware.ShimChanger.A applicatio
n","sample_id": "MSIL/Riskware.ShimChanger.A application","sample_hashes": {"SHA
1": "71E59B27F713BEA299C36235638BA484807C6FD0",},}&report_sig=6293169CFD1886903E
8D38E37C33EA1F&fwd_ip=127.0.0.1&version=4.5.0.2902:15:43
,"event_type": "CLEANUP_SUCCESS","sample_name": "MSIL/Riskware.ShimChanger.A app
lication","sample_id": "MSIL/Riskware.ShimChanger.A application","sample_hashes"
: {"SHA1": "71E59B27F713BEA299C36235638BA484807C6FD0",},}&report_sig=6101E216C34
27320A55318931C8C9D2A&fwd_ip=127.0.0.1&version=4.5.0.2902:15:44
,"event_type": "DETECTED","sample_name": "MSIL/Riskware.ShimChanger.A applicatio
n","sample_id": "MSIL/Riskware.ShimChanger.A application","sample_hashes": {"SHA
1": "04A46249F8F23E18D30AA6CB05C776BDE234F9D5",},}&report_sig=86BF5A2B8DFBF3B5F4
1A992B939E47C7&fwd_ip=127.0.0.1&version=4.5.0.2902:15:44
,"event_type": "CLEANUP_SUCCESS","sample_name": "MSIL/Riskware.ShimChanger.A app
lication","sample_id": "MSIL/Riskware.ShimChanger.A application","sample_hashes"
: {"SHA1": "04A46249F8F23E18D30AA6CB05C776BDE234F9D5",},}&report_sig=7903BDF7BA0
D3EC28FAD99E1B6BB7A22&fwd_ip=127.0.0.1&version=4.5.0.2902:15:44
.1&version=4.5.0.2902:15:47

ossRider.BM potentially unwanted application","sample_hashes": {"SHA1": "FDEAF72
3C9EF7D4E8D5C24FA3764934D9FC94928",},}&report_sig=0644E6A3749FABF47FDE900694829C
F4&fwd_ip=127.0.0.1&version=4.5.0.2902:15:50
FDEAF723C9EF7D4E8D5C24FA3764934D9FC94928",},}&report_sig=FD8ACA75D1E3FCD9A0204EC
47304B664&fwd_ip=127.0.0.1&version=4.5.0.2902:15:50
.1&version=4.5.0.2902:15:50
,"event_type": "DETECTED","sample_name": "a variant of Win32/Adware.CognosAds.C
application","sample_id": "a variant of Win32/Adware.CognosAds.C application","s
ample_hashes": {"SHA1": "AC80343516F0432760A49BD8E709AF31398B6773",},}&report_si
g=FEA61C8A7923EF8EB19B79223A92D77C&fwd_ip=127.0.0.1&version=4.5.0.2902:15:54
sAds.C application","sample_id": "a variant of Win32/Adware.CognosAds.C applicat
ion","sample_hashes": {"SHA1": "AC80343516F0432760A49BD8E709AF31398B6773",},}&re
port_sig=03D0E92354DB3481960151C7AE2FB870&fwd_ip=127.0.0.1&version=4.5.0.2902:15
:55
.1&version=4.5.0.2902:15:56
,"event_type": "DETECTED","sample_name": "a variant of Win32/SweetIM.C potential
ly unwanted application","sample_id": "a variant of Win32/SweetIM.C potentially
unwanted application","sample_hashes": {"SHA1": "D60F6EBE31E049C5236DBCE204F82B3
CC16AE311",},}&report_sig=ACF6B659AD967EEE2A9EFD5CE9B35FD3&fwd_ip=127.0.0.1&vers
ion=4.5.0.2902:16:07
,"event_type": "CLEANUP_SUCCESS","sample_name": "a variant of Win32/SweetIM.C po

tentially unwanted application","sample_id": "a variant of Win32/SweetIM.C poten
tially unwanted application","sample_hashes": {"SHA1": "D60F6EBE31E049C5236DBCE2
04F82B3CC16AE311",},}&report_sig=E76824916E500D22087F899237D2DC80&fwd_ip=127.0.0
.1&version=4.5.0.2902:16:08
.1&version=4.5.0.2902:16:08
.1&version=4.5.0.2902:16:17
,"event_type": "DETECTED","sample_name": "a variant of Win32/SweetIM.C potential
ly unwanted application","sample_id": "a variant of Win32/SweetIM.C potentially
unwanted application","sample_hashes": {"SHA1": "D60F6EBE31E049C5236DBCE204F82B3
CC16AE311",},}&report_sig=ACF6B659AD967EEE2A9EFD5CE9B35FD3&fwd_ip=127.0.0.1&vers
ion=4.5.0.2902:16:21
,"event_type": "CLEANUP_SUCCESS","sample_name": "a variant of Win32/SweetIM.C po
tentially unwanted application","sample_id": "a variant of Win32/SweetIM.C poten
tially unwanted application","sample_hashes": {"SHA1": "D60F6EBE31E049C5236DBCE2
04F82B3CC16AE311",},}&report_sig=E76824916E500D22087F899237D2DC80&fwd_ip=127.0.0
.1&version=4.5.0.2902:16:21
.1&version=4.5.0.2902:16:22
.1&version=4.5.0.2902:16:27
.1&version=4.5.0.2902:16:44
.1&version=4.5.0.2902:16:50

.1&version=4.5.0.2902:16:54
.1&version=4.5.0.2902:17:04
f Win32/Toolbar.Escort.A potentially unwanted application,Win32/Toolbar.Funmoods
potentially unwanted application,a variant of Win32/Toolbar.Montiera.F potentia
lly unwanted application","sample_id": "Win32/Toolbar.Montiera.E potentially unw
anted application,Win32/Toolbar.Montiera.B potentially unwanted application,a va
riant of Win32/Toolbar.Montiera.A potentially unwanted application,a variant of
Win32/Toolbar.Escort.A potentially unwanted application,Win32/Toolbar.Funmoods p
otentially unwanted application,a variant of Win32/Toolbar.Montiera.F potentiall
y unwanted application","sample_hashes": {"SHA1": "93384EECA6F412B277C9772D96467
586723A7E00",},}&report_sig=AE0759FE7B5B4C9CFFE8C4763B3F25C2&fwd_ip=127.0.0.1&ve
rsion=4.5.0.2902:17:04
,"code":2,"fbtrace_id":"EeoONJmYMz3"}}02:17:04
riant of Win32/Toolbar.Escort.A potentially unwanted application,Win32/Toolbar.F
unmoods potentially unwanted application,a variant of Win32/Toolbar.Montiera.F p
otentially unwanted application","sample_id": "Win32/Toolbar.Montiera.E potentia
lly unwanted application,Win32/Toolbar.Montiera.B potentially unwanted applicati
on,a variant of Win32/Toolbar.Montiera.A potentially unwanted application,a vari
ant of Win32/Toolbar.Escort.A potentially unwanted application,Win32/Toolbar.Fun
moods potentially unwanted application,a variant of Win32/Toolbar.Montiera.F pot
entially unwanted application","sample_hashes": {"SHA1": "93384EECA6F412B277C977
2D96467586723A7E00",},}&report_sig=D21E6F229B2E9C1B9D8414F9562D3031&fwd_ip=127.0
.0.1&version=4.5.0.2902:17:04
,"code":2,"fbtrace_id":"GCz2YYV+SCW"}}02:17:05
.1&version=4.5.0.2902:17:05
.1&version=4.5.0.2902:17:14
.1&version=4.5.0.2902:17:15
.1&version=4.5.0.2902:17:32
,"event_type": "DETECTED","sample_name": "a variant of Win32/Adware.CognosAds.A
application","sample_id": "a variant of Win32/Adware.CognosAds.A application","s
ample_hashes": {"SHA1": "2DD3DE8A6B21DFD3340CA0A8CDFD35513408035B",},}&report_si
g=AB86436CA6E466CF0A17949B653271B2&fwd_ip=127.0.0.1&version=4.5.0.2902:17:33
sAds.A application","sample_id": "a variant of Win32/Adware.CognosAds.A applicat
ion","sample_hashes": {"SHA1": "2DD3DE8A6B21DFD3340CA0A8CDFD35513408035B",},}&re
port_sig=55AE03C8A662B15C7DE640D96DC1BB1C&fwd_ip=127.0.0.1&version=4.5.0.2902:17
:34
.1&version=4.5.0.2902:17:36
.1&version=4.5.0.2902:17:44
.1&version=4.5.0.2902:17:53
.1&version=4.5.0.2902:17:54
.1&version=4.5.0.2902:18:03

.1&version=4.5.0.2902:18:05
.1&version=4.5.0.2902:18:13
.1&version=4.5.0.2902:18:16
.1&version=4.5.0.2902:18:23
.1&version=4.5.0.2902:18:26
.1&version=4.5.0.2902:18:34
.1&version=4.5.0.2902:18:36
.1&version=4.5.0.2902:18:46
.1&version=4.5.0.2902:18:53
.1&version=4.5.0.2902:18:56

.1&version=4.5.0.2902:19:15
version=4.5.0.2902:19:23
.0.0.1&version=4.5.0.2902:19:23
.1&version=4.5.0.2902:19:24
.1&version=4.5.0.2902:19:26
2:19:28

2:19:32
.1&version=4.5.0.2902:19:34
.1&version=4.5.0.2902:19:36
.1&version=4.5.0.2902:19:46
.1&version=4.5.0.2902:19:56
.1&version=4.5.0.2902:20:08
.1&version=4.5.0.2902:24:14
.1&version=4.5.0.2902:24:53
.1&version=4.5.0.2902:28:54
.1&version=4.5.0.2902:29:04
.1&version=4.5.0.2902:29:26
.1&version=4.5.0.2902:29:29
.1&version=4.5.0.2902:29:36
.1&version=4.5.0.2902:29:46
.1&version=4.5.0.2902:29:47
.1&version=4.5.0.2902:29:56
.1&version=4.5.0.2902:29:57
.1&version=4.5.0.2902:30:06
.1&version=4.5.0.2902:30:07
potentially unwanted application","sample_id": "a variant of Win32/Toolbar.Soft
omate.A potentially unwanted application","sample_hashes": {"SHA1": "38C0D189103
390913FB5FB06B32B59AABC7F11F3",},}&report_sig=A61748E15DB707765C962C813E2C0C8E&f
wd_ip=127.0.0.1&version=4.5.0.2902:30:12
omate.A potentially unwanted application","sample_id": "a variant of Win32/Toolb
ar.Softomate.A potentially unwanted application","sample_hashes": {"SHA1": "38C0
D189103390913FB5FB06B32B59AABC7F11F3",},}&report_sig=F6C63C9EF275E1A3C93F4A6A8F0
F4146&fwd_ip=127.0.0.1&version=4.5.0.2902:30:12
pplication","sample_hashes": {"SHA1": "618A2939E8ADF578F36EB614B3BD9309C4D44EED"
,},}&report_sig=102B7547B1FB38BE9F76581F8BCBA5AB&fwd_ip=127.0.0.1&version=4.5.0.
2902:30:14
anted application","sample_hashes": {"SHA1": "618A2939E8ADF578F36EB614B3BD9309C4
D44EED",},}&report_sig=811BA9A99E70A37788E35081314F9CB1&fwd_ip=127.0.0.1&version
=4.5.0.2902:30:14
pplication","sample_hashes": {"SHA1": "CA9FF1B733EFBDC4FB4AF0FF306705C61ACEFA77"
,},}&report_sig=274B2C3A6C2305B4D20EC5CC81A1A737&fwd_ip=127.0.0.1&version=4.5.0.
2902:30:15
anted application","sample_hashes": {"SHA1": "CA9FF1B733EFBDC4FB4AF0FF306705C61A
CEFA77",},}&report_sig=F50205CEF27DDA354D932DCA84A12002&fwd_ip=127.0.0.1&version
=4.5.0.2902:30:15

.1&version=4.5.0.2902:30:16
.1&version=4.5.0.2902:30:17
potentially unwanted application","sample_id": "a variant of Win32/Toolbar.Soft
omate.A potentially unwanted application","sample_hashes": {"SHA1": "38C0D189103
390913FB5FB06B32B59AABC7F11F3",},}&report_sig=A61748E15DB707765C962C813E2C0C8E&f
wd_ip=127.0.0.1&version=4.5.0.2902:30:21
02:30:21 Response: 02:30:21 Response: 02:30:21 {"status":true}02:30:21
omate.A potentially unwanted application","sample_id": "a variant of Win32/Toolb
ar.Softomate.A potentially unwanted application","sample_hashes": {"SHA1": "38C0
D189103390913FB5FB06B32B59AABC7F11F3",},}&report_sig=F6C63C9EF275E1A3C93F4A6A8F0
F4146&fwd_ip=127.0.0.1&version=4.5.0.2902:30:21
pplication","sample_hashes": {"SHA1": "618A2939E8ADF578F36EB614B3BD9309C4D44EED"
,},}&report_sig=102B7547B1FB38BE9F76581F8BCBA5AB&fwd_ip=127.0.0.1&version=4.5.0.
2902:30:22
anted application","sample_hashes": {"SHA1": "618A2939E8ADF578F36EB614B3BD9309C4
D44EED",},}&report_sig=811BA9A99E70A37788E35081314F9CB1&fwd_ip=127.0.0.1&version
=4.5.0.2902:30:22
pplication","sample_hashes": {"SHA1": "CA9FF1B733EFBDC4FB4AF0FF306705C61ACEFA77"
,},}&report_sig=274B2C3A6C2305B4D20EC5CC81A1A737&fwd_ip=127.0.0.1&version=4.5.0.
2902:30:23
anted application","sample_hashes": {"SHA1": "CA9FF1B733EFBDC4FB4AF0FF306705C61A
CEFA77",},}&report_sig=F50205CEF27DDA354D932DCA84A12002&fwd_ip=127.0.0.1&version
=4.5.0.2902:30:23
,"event_type": "DETECTED","sample_name": "Win32/Adware.ActiveCollector.AA applic
ation","sample_id": "Win32/Adware.ActiveCollector.AA application","sample_hashes
": {"SHA1": "9A632BC7623B8DC7A6DECFE47E953DFAEEED4288",},}&report_sig=446D4747D9
5B13CD8BFB0A922EE42CE5&fwd_ip=127.0.0.1&version=4.5.0.2902:30:25
02:30:25 Response: 02:30:25 1443300579261932/malware_scanner02:30:25
,"event_type": "CLEANUP_SUCCESS","sample_name": "Win32/Adware.ActiveCollector.AA
application","sample_id": "Win32/Adware.ActiveCollector.AA application","sample
_hashes": {"SHA1": "9A632BC7623B8DC7A6DECFE47E953DFAEEED4288",},}&report_sig=256
323CC5A9F8EA13EECD7CA80550134&fwd_ip=127.0.0.1&version=4.5.0.2902:30:26
.1&version=4.5.0.2902:30:26
.1&version=4.5.0.2902:30:27
,"event_type": "DETECTED","sample_name": "Win32/Systweak.G potentially unwanted
application","sample_id": "Win32/Systweak.G potentially unwanted application","s
ample_hashes": {"SHA1": "64F52D0F082C758DBE89032616A5D6ABA9CCE9AC",},}&report_si
g=D0669316B8649CE7EAFCD3331258A357&fwd_ip=127.0.0.1&version=4.5.0.2902:30:31
,"event_type": "CLEANUP_SUCCESS","sample_name": "Win32/Systweak.G potentially un
wanted application","sample_id": "Win32/Systweak.G potentially unwanted applicat
ion","sample_hashes": {"SHA1": "64F52D0F082C758DBE89032616A5D6ABA9CCE9AC",},}&re
port_sig=E90AEE6800FB9BC68A3272B7923E2BA4&fwd_ip=127.0.0.1&version=4.5.0.2902:30
:31
02:30:33 Request query: 02:30:33 Request query: 02:30:33 1443300579261932/malwar
e_scanner02:30:33
cation","sample_hashes": {"SHA1": "F415283B5DB67BBA300F318DBE88C5DEFEBB4129",},}
&report_sig=614372410578B3E6DE475C8E44EA6438&fwd_ip=127.0.0.1&version=4.5.0.2902
:30:33
d application","sample_hashes": {"SHA1": "F415283B5DB67BBA300F318DBE88C5DEFEBB41
29",},}&report_sig=8C95C7D2104DCCBC22DCC0129B77B49A&fwd_ip=127.0.0.1&version=4.5
.0.2902:30:33
,"event_type": "DETECTED","sample_name": "multiple threats,Win32/Adware.ActiveCo
llector application,Win64/Adware.ActiveCollector application,a variant of Win32/
Adware.ActiveCollector.AA application","sample_id": "multiple threats,Win32/Adwa
re.ActiveCollector application,Win64/Adware.ActiveCollector application,a varian
t of Win32/Adware.ActiveCollector.AA application","sample_hashes": {"SHA1": "890
92BB29B0608D09B6B0346320032F39159FC86",},}&report_sig=4E8374D69542AA64997D70194D
2083D8&fwd_ip=127.0.0.1&version=4.5.0.2902:30:36
,"event_type": "CLEANUP_SUCCESS","sample_name": "multiple threats,Win32/Adware.A
ctiveCollector application,Win64/Adware.ActiveCollector application,a variant of
Win32/Adware.ActiveCollector.AA application","sample_id": "multiple threats,Win
32/Adware.ActiveCollector application,Win64/Adware.ActiveCollector application,a
variant of Win32/Adware.ActiveCollector.AA application","sample_hashes": {"SHA1
": "89092BB29B0608D09B6B0346320032F39159FC86",},}&report_sig=AF0B3C30C89017E3E24
E8B556B9BC678&fwd_ip=127.0.0.1&version=4.5.0.2902:30:37
.1&version=4.5.0.2902:30:37
.1&version=4.5.0.2902:31:22
.1&version=4.5.0.2902:31:22
CB potentially unwanted application","sample_id": "a variant of Win32/Toolbar.Cr
ossRider.CB potentially unwanted application","sample_hashes": {"SHA1": "9AA2600
61369FFAA8550B417CB125E732749365A",},}&report_sig=D2E656749B8273102F9B11398649AF
EA&fwd_ip=127.0.0.1&version=4.5.0.2902:31:23

sRider.CB potentially unwanted application","sample_id": "a variant of Win32/Too
lbar.CrossRider.CB potentially unwanted application","sample_hashes": {"SHA1": "
9AA260061369FFAA8550B417CB125E732749365A",},}&report_sig=9812790AD2071E1D6499287
0D1F00A95&fwd_ip=127.0.0.1&version=4.5.0.2902:31:23
sRider.CB potentially unwanted application","sample_id": "a variant of Win32/Too
lbar.CrossRider.CB potentially unwanted application","sample_hashes": {"SHA1": "
9AA260061369FFAA8550B417CB125E732749365A",},}&report_sig=9812790AD2071E1D6499287
0D1F00A95&fwd_ip=127.0.0.1&version=4.5.0.2902:31:24
AX potentially unwanted application","sample_id": "a variant of Win32/Toolbar.Cr
ossRider.AX potentially unwanted application","sample_hashes": {"SHA1": "F9E0B42
66C015CF0B7369D5A9B8FFCC26AF23ACC",},}&report_sig=53C4E5DCD1D921DC92D401F524A14C
2A&fwd_ip=127.0.0.1&version=4.5.0.2902:31:24
sRider.AX potentially unwanted application","sample_id": "a variant of Win32/Too
lbar.CrossRider.AX potentially unwanted application","sample_hashes": {"SHA1": "
F9E0B4266C015CF0B7369D5A9B8FFCC26AF23ACC",},}&report_sig=4A33702AD134B3F006DC85C
CCC830AF4&fwd_ip=127.0.0.1&version=4.5.0.2902:31:25
BN potentially unwanted application","sample_id": "a variant of Win32/Toolbar.Cr
ossRider.BN potentially unwanted application","sample_hashes": {"SHA1": "1F066FD
533416EE481FE0E61534AEEC759DC5409",},}&report_sig=257E900CF9473000674FAB070CF038
56&fwd_ip=127.0.0.1&version=4.5.0.2902:31:26
sRider.BN potentially unwanted application","sample_id": "a variant of Win32/Too
lbar.CrossRider.BN potentially unwanted application","sample_hashes": {"SHA1": "
1F066FD533416EE481FE0E61534AEEC759DC5409",},}&report_sig=2CF786109A5CD76AF20CDC0
2F1A3B322&fwd_ip=127.0.0.1&version=4.5.0.2902:31:26
e_scanner02:31:27
AX potentially unwanted application","sample_id": "a variant of Win32/Toolbar.Cr
ossRider.AX potentially unwanted application","sample_hashes": {"SHA1": "2EE020C
0DE473A7B4247542C0A5FAA85E0499DBF",},}&report_sig=41FE0F90A17E1C72D55FA96BD677CA
D5&fwd_ip=127.0.0.1&version=4.5.0.2902:31:27
sRider.AX potentially unwanted application","sample_id": "a variant of Win32/Too
lbar.CrossRider.AX potentially unwanted application","sample_hashes": {"SHA1": "
2EE020C0DE473A7B4247542C0A5FAA85E0499DBF",},}&report_sig=44428A6DB08058B9B1F8A07
D97513FCE&fwd_ip=127.0.0.1&version=4.5.0.2902:31:27
.1&version=4.5.0.2902:31:32
.1&version=4.5.0.2902:31:42
.1&version=4.5.0.2902:31:52
.1&version=4.5.0.2902:32:02
.1&version=4.5.0.2902:32:12
.1&version=4.5.0.2902:32:22
.1&version=4.5.0.2902:32:32

.1&version=4.5.0.2902:32:42
e_hashes": {"SHA1": "BF2F2487AF0440F495459080A76FBD40BCA69307",},}&report_sig=A9
AAFEFC31D6939788BB09E6FE0CD63A&fwd_ip=127.0.0.1&version=4.5.0.2902:33:03
e_hashes": {"SHA1": "BF2F2487AF0440F495459080A76FBD40BCA69307",},}&report_sig=A9
AAFEFC31D6939788BB09E6FE0CD63A&fwd_ip=127.0.0.1&version=4.5.0.2902:33:03
,"event_type": "CLEANUP_SUCCESS","sample_name": "Win32/Somoto.Q potentially unwa
nted application","sample_id": "Win32/Somoto.Q potentially unwanted application"
,"sample_hashes": {"SHA1": "BF2F2487AF0440F495459080A76FBD40BCA69307",},}&report
_sig=CF5ACA5C8F3986E31EBCA9429930032D&fwd_ip=127.0.0.1&version=4.5.0.2902:33:03
.1&version=4.5.0.2902:33:03
,"event_type": "DETECTED","sample_name": "Win32/SoftonicDownloader.E potentially
unwanted application","sample_id": "Win32/SoftonicDownloader.E potentially unwa
nted application","sample_hashes": {"SHA1": "7838A1A25A4903937722A1F5C2D48A1B7A3
62901",},}&report_sig=0CEDC6CDD4EB2847D1367003E1724F82&fwd_ip=127.0.0.1&version=
4.5.0.2902:33:06
,"event_type": "CLEANUP_SUCCESS","sample_name": "Win32/SoftonicDownloader.E pote
ntially unwanted application","sample_id": "Win32/SoftonicDownloader.E potential
ly unwanted application","sample_hashes": {"SHA1": "7838A1A25A4903937722A1F5C2D4
8A1B7A362901",},}&report_sig=B9CF214BF854429922700098D94F6E5A&fwd_ip=127.0.0.1&v
ersion=4.5.0.2902:33:07

,"event_type": "DETECTED","sample_name": "a variant of Win32/SoftPulse.Q potenti
ally unwanted application","sample_id": "a variant of Win32/SoftPulse.Q potentia
lly unwanted application","sample_hashes": {"SHA1": "73DC066C7857E9151303F64F64A
BB22FC2298AD6",},}&report_sig=0F74CA730585FC223F2D0FBDB1BD7F86&fwd_ip=127.0.0.1&
version=4.5.0.2902:33:09
02:33:10 Response: 02:33:10 Request query: 02:33:10 1443300579261932/malware_sca
nner02:33:10
,"event_type": "CLEANUP_SUCCESS","sample_name": "a variant of Win32/SoftPulse.Q
potentially unwanted application","sample_id": "a variant of Win32/SoftPulse.Q p
otentially unwanted application","sample_hashes": {"SHA1": "73DC066C7857E9151303
F64F64ABB22FC2298AD6",},}&report_sig=05397D2E23DEA4F819B597140C3FD08A&fwd_ip=127
.0.0.1&version=4.5.0.2902:33:10
.1&version=4.5.0.2902:33:19
.1&version=4.5.0.2902:33:19
.1&version=4.5.0.2902:33:36
.1&version=4.5.0.2902:33:36
,"event_type": "DETECTED","sample_name": "a variant of Win32/SoftPulse.V potenti
ally unwanted application","sample_id": "a variant of Win32/SoftPulse.V potentia
lly unwanted application","sample_hashes": {"SHA1": "D656E2DD8CD1479CC766C44E4D8
64B642DF89A3C",},}&report_sig=F20717B985418065BE53F57B7A437A00&fwd_ip=127.0.0.1&
version=4.5.0.2902:33:37
,"event_type": "DETECTED","sample_name": "a variant of Win32/SoftPulse.V potenti
ally unwanted application","sample_id": "a variant of Win32/SoftPulse.V potentia
lly unwanted application","sample_hashes": {"SHA1": "D656E2DD8CD1479CC766C44E4D8
64B642DF89A3C",},}&report_sig=F20717B985418065BE53F57B7A437A00&fwd_ip=127.0.0.1&
version=4.5.0.2902:33:37

,"event_type": "CLEANUP_SUCCESS","sample_name": "a variant of Win32/SoftPulse.V
potentially unwanted application","sample_id": "a variant of Win32/SoftPulse.V p
otentially unwanted application","sample_hashes": {"SHA1": "D656E2DD8CD1479CC766
C44E4D864B642DF89A3C",},}&report_sig=9AFABE6B51751B93386F51E3E1846E51&fwd_ip=127
.0.0.1&version=4.5.0.2902:33:37
,"event_type": "DETECTED","sample_name": "a variant of Win32/SoftPulse.AH potent
ially unwanted application","sample_id": "a variant of Win32/SoftPulse.AH potent
ially unwanted application","sample_hashes": {"SHA1": "2CB266EA202CC4B75EB30CEF2
9A73332C904B4BC",},}&report_sig=019BD7B82E99DA06DF16307988312D99&fwd_ip=127.0.0.
1&version=4.5.0.2902:34:03
,"event_type": "CLEANUP_SUCCESS","sample_name": "a variant of Win32/SoftPulse.AH
potentially unwanted application","sample_id": "a variant of Win32/SoftPulse.AH
potentially unwanted application","sample_hashes": {"SHA1": "2CB266EA202CC4B75E
B30CEF29A73332C904B4BC",},}&report_sig=1C5DB494809F5840F5B9495A6BA01C80&fwd_ip=1
27.0.0.1&version=4.5.0.2902:34:04
.1&version=4.5.0.2902:34:04
,"event_type": "DETECTED","sample_name": "a variant of Win32/SoftPulse.AH potent
ially unwanted application","sample_id": "a variant of Win32/SoftPulse.AH potent
ially unwanted application","sample_hashes": {"SHA1": "2CB266EA202CC4B75EB30CEF2
9A73332C904B4BC",},}&report_sig=019BD7B82E99DA06DF16307988312D99&fwd_ip=127.0.0.
1&version=4.5.0.2902:34:05
,"event_type": "CLEANUP_SUCCESS","sample_name": "a variant of Win32/SoftPulse.AH
potentially unwanted application","sample_id": "a variant of Win32/SoftPulse.AH
potentially unwanted application","sample_hashes": {"SHA1": "2CB266EA202CC4B75E
B30CEF29A73332C904B4BC",},}&report_sig=1C5DB494809F5840F5B9495A6BA01C80&fwd_ip=1
27.0.0.1&version=4.5.0.2902:34:05
.1&version=4.5.0.2902:34:05
.1&version=4.5.0.2902:34:14
.1&version=4.5.0.2902:34:15
.1&version=4.5.0.2902:34:24
.1&version=4.5.0.2902:34:25
.1&version=4.5.0.2902:34:34
.1&version=4.5.0.2902:34:35
.1&version=4.5.0.2902:34:44
.1&version=4.5.0.2902:34:45
ESS","progress": 61,}&report_sig=2C0252EB82AD3C80EC89A0CB7CAC85F3&fwd_ip=127.0.0
.1&version=4.5.0.2902:34:54
.1&version=4.5.0.2902:34:55
,"event_type": "DETECTED","sample_name": "Win64/MPCCleaner.A potentially unwante

d application","sample_id": "Win64/MPCCleaner.A potentially unwanted application
","sample_hashes": {"SHA1": "46D69A4DD532E91014B6362D705D2FF4B6F3E2C5",},}&repor
t_sig=F7C68C912C6249EFD880052D44190192&fwd_ip=127.0.0.1&version=4.5.0.2902:35:00
,"event_type": "CLEANUP_SUCCESS","sample_name": "Win64/MPCCleaner.A potentially
unwanted application","sample_id": "Win64/MPCCleaner.A potentially unwanted appl
ication","sample_hashes": {"SHA1": "46D69A4DD532E91014B6362D705D2FF4B6F3E2C5",},
}&report_sig=B0875A9D87710BD48784CA23A5A2D01E&fwd_ip=127.0.0.1&version=4.5.0.290
2:35:00
.1&version=4.5.0.2902:35:04
.1&version=4.5.0.2902:35:05
ESS","progress": 80,}&report_sig=E2A70107B3D066CEC3BFB72625E01640&fwd_ip=127.0.0
.1&version=4.5.0.2902:35:14
.1&version=4.5.0.2902:35:15
.1&version=4.5.0.2902:35:24
.1&version=4.5.0.2902:35:25
.1&version=4.5.0.2902:35:34
.1&version=4.5.0.2902:35:40
.1&version=4.5.0.2902:35:44
.1&version=4.5.0.2902:35:50
.1&version=4.5.0.2902:35:54
.1&version=4.5.0.2902:36:00
.1&version=4.5.0.2902:36:04
.1&version=4.5.0.2902:36:10
.1&version=4.5.0.2902:36:14
.1&version=4.5.0.2902:36:20
.1&version=4.5.0.2902:36:24
.1&version=4.5.0.2902:36:30
.1&version=4.5.0.2902:36:34
.1&version=4.5.0.2902:36:55
.1&version=4.5.0.2902:37:15
02:37:34 Request query: 02:37:34
.1&version=4.5.0.2902:37:57
.1&version=4.5.0.2902:38:24
02:38:44 Request query: 02:38:44 Request body: 02:38:44 access_token=14433005792
61932|cfedb1bd1113405e097902a8602d76ed&user_token=1180273625337362&report={"repo
rt_type": "SCANNER_PROGRESS","progress": 80,}&report_sig=E2A70107B3D066CEC3BFB72
625E01640&fwd_ip=127.0.0.1&version=4.5.0.2902:38:44
.1&version=4.5.0.2902:39:04
02:39:26 Request query: 02:39:26 1443300579261932/malware_scanner02:39:26 Reques
t query: 02:39:26 1443300579261932/malware_scanner02:39:26
.1&version=4.5.0.2902:39:26
02:39:26 Response: 02:39:26 {"status":true}02:39:26 Response: 02:39:26 {"status"
:true}02:39:26
.1&version=4.5.0.2902:39:36
.1&version=4.5.0.2902:39:46
.1&version=4.5.0.2902:39:56
.1&version=4.5.0.2902:40:06
,"event_type": "DETECTED","sample_name": "a variant of MSIL/DomaIQ.A potentially
unwanted application","sample_id": "a variant of MSIL/DomaIQ.A potentially unwa
nted application","sample_hashes": {"SHA1": "741518CA17409E0C108EA202464829E6C66
4ED1E",},}&report_sig=C2C7AA3EECFCBB6C0518FBE71CCC4BDF&fwd_ip=127.0.0.1&version=
4.5.0.2902:40:15
,"event_type": "CLEANUP_SUCCESS","sample_name": "a variant of MSIL/DomaIQ.A pote
ntially unwanted application","sample_id": "a variant of MSIL/DomaIQ.A potential
ly unwanted application","sample_hashes": {"SHA1": "741518CA17409E0C108EA2024648
29E6C664ED1E",},}&report_sig=C6302DCCB65CDF708799A6C629B9B68F&fwd_ip=127.0.0.1&v
ersion=4.5.0.2902:40:16
.1&version=4.5.0.2902:40:16
ESS","progress": 90,}&report_sig=A6B8FCD063352026A7E9D4F37C6B13DA&fwd_ip=127.0.0
.1&version=4.5.0.2902:40:26
.1&version=4.5.0.2902:40:36

,"event_type": "DETECTED","sample_name": "a variant of Win32/Amonetize.X potenti
ally unwanted application","sample_id": "a variant of Win32/Amonetize.X potentia
lly unwanted application","sample_hashes": {"SHA1": "02E9282CC4E21309AA99104ED8D
95E40BFC6416B",},}&report_sig=D07900862DC816FAC1355EB6517D4414&fwd_ip=127.0.0.1&
version=4.5.0.2902:40:39
,"event_type": "CLEANUP_SUCCESS","sample_name": "a variant of Win32/Amonetize.X
potentially unwanted application","sample_id": "a variant of Win32/Amonetize.X p
otentially unwanted application","sample_hashes": {"SHA1": "02E9282CC4E21309AA99
104ED8D95E40BFC6416B",},}&report_sig=8A1C1EDCA56C47610D89C230971D04E0&fwd_ip=127
.0.0.1&version=4.5.0.2902:40:39
.1&version=4.5.0.2902:40:46
.1&version=4.5.0.2902:40:56
.1&version=4.5.0.2902:41:06
.1&version=4.5.0.2902:41:16
.1&version=4.5.0.2902:41:26
.1&version=4.5.0.2902:41:36
.1&version=4.5.0.2902:41:46
.1&version=4.5.0.2902:41:56
.1&version=4.5.0.2902:42:06
.1&version=4.5.0.2902:42:16
.1&version=4.5.0.2902:42:26
.1&version=4.5.0.2902:42:39
.1&version=4.5.0.2902:42:39
.1&version=4.5.0.2902:42:49
.1&version=4.5.0.2902:42:49
.1&version=4.5.0.2902:42:59
.1&version=4.5.0.2902:43:09
.1&version=4.5.0.2902:43:19
.1&version=4.5.0.2902:43:29
.1&version=4.5.0.2902:43:39
.1&version=4.5.0.2902:43:49
.1&version=4.5.0.2902:44:04
.1&version=4.5.0.2902:44:33
.1&version=4.5.0.2902:44:44
,"event_type": "DETECTED","sample_name": "a variant of Win32/AdWare.EasySpeedChe
ck.A application","sample_id": "a variant of Win32/AdWare.EasySpeedCheck.A appli
cation","sample_hashes": {"SHA1": "8412296D2832D41331AE581C1E300D0812251002",},}
&report_sig=7EC9AC85A6BA8D1BDFD328E2F9D49AE0&fwd_ip=127.0.0.1&version=4.5.0.2902
:44:51
,"event_type": "CLEANUP_SUCCESS","sample_name": "a variant of Win32/AdWare.EasyS

peedCheck.A application","sample_id": "a variant of Win32/AdWare.EasySpeedCheck.
A application","sample_hashes": {"SHA1": "8412296D2832D41331AE581C1E300D08122510
02",},}&report_sig=E3443F73A8564BC5833AFD71E1B3865D&fwd_ip=127.0.0.1&version=4.5
.0.2902:44:51
.1&version=4.5.0.2902:44:59
.1&version=4.5.0.2902:45:11
.1&version=4.5.0.2902:45:11
.1&version=4.5.0.2902:45:22
,"event_type": "DETECTED","sample_name": "a variant of Win32/Toolbar.Babylon.A p
n.A potentially unwanted application","sample_hashes": {"SHA1": "DF4FB1B2D51A6D5
F64FA31858598711134756D63",},}&report_sig=01EECDCBFE7D9BC2BD57CA13F56A9216&fwd_i
p=127.0.0.1&version=4.5.0.2902:45:26
lon.A potentially unwanted application","sample_id": "a variant of Win32/Toolbar
.Babylon.A potentially unwanted application","sample_hashes": {"SHA1": "DF4FB1B2
D51A6D5F64FA31858598711134756D63",},}&report_sig=158232720D5169E9C62DD8EBA406EDE
4&fwd_ip=127.0.0.1&version=4.5.0.2902:45:26
.1&version=4.5.0.2902:46:10
.1&version=4.5.0.2902:46:10
.1&version=4.5.0.2902:46:20
.1&version=4.5.0.2902:46:30
.1&version=4.5.0.2902:46:40
.1&version=4.5.0.2902:46:50
.1&version=4.5.0.2902:47:02
.1&version=4.5.0.2902:47:12
.1&version=4.5.0.2902:47:22
.1&version=4.5.0.2902:47:32
.1&version=4.5.0.2902:47:42

.1&version=4.5.0.2902:47:52
.1&version=4.5.0.2902:48:02
.1&version=4.5.0.2902:48:12
.1&version=4.5.0.2902:48:22
.1&version=4.5.0.2902:48:32
ially unwanted application","sample_hashes": {"SHA1": "7BBA403FF536FCD057B03BC6C
6DD60B30818E26F",},}&report_sig=2341D94082553784D0FD1103B382589B&fwd_ip=127.0.0.
1&version=4.5.0.2902:48:40
potentially unwanted application","sample_hashes": {"SHA1": "7BBA403FF536FCD057
B03BC6C6DD60B30818E26F",},}&report_sig=5EFAFD643DC62728778C38D0C13D91BC&fwd_ip=1
27.0.0.1&version=4.5.0.2902:48:41
potentially unwanted application","sample_hashes": {"SHA1": "7BBA403FF536FCD057
B03BC6C6DD60B30818E26F",},}&report_sig=5EFAFD643DC62728778C38D0C13D91BC&fwd_ip=1
27.0.0.1&version=4.5.0.2902:48:41

2:48:41
ially unwanted application","sample_hashes": {"SHA1": "75862FCA547282A04952F2AD1
235A86A244D5BF5",},}&report_sig=61996BD69397F308501A2521CF7287BD&fwd_ip=127.0.0.
1&version=4.5.0.2902:48:42
potentially unwanted application","sample_hashes": {"SHA1": "75862FCA547282A049
52F2AD1235A86A244D5BF5",},}&report_sig=E09DF13EEC6FD85B2AC74EDA56F5767A&fwd_ip=1
27.0.0.1&version=4.5.0.2902:48:42
potentially unwanted application","sample_hashes": {"SHA1": "75862FCA547282A049
52F2AD1235A86A244D5BF5",},}&report_sig=E09DF13EEC6FD85B2AC74EDA56F5767A&fwd_ip=1
27.0.0.1&version=4.5.0.2902:48:42
.1&version=4.5.0.2902:48:42
.1&version=4.5.0.2902:48:42

2:48:43
potentially unwanted application","sample_hashes": {"SHA1": "659F5A30DA39FEAE4B
3EE7F0C40A24222AA3E27E",},}&report_sig=F09A4A0EEFFF087AC4BF5A3F63453A73&fwd_ip=1
27.0.0.1&version=4.5.0.2902:48:43
ially unwanted application","sample_hashes": {"SHA1": "7FA3746CD92CF822FFA1D3AF4
F0304655A7FA69F",},}&report_sig=69D47B451163DE56BEB325F692EEE243&fwd_ip=127.0.0.
1&version=4.5.0.2902:48:48
:true}02:48:48
potentially unwanted application","sample_hashes": {"SHA1": "7FA3746CD92CF822FF
A1D3AF4F0304655A7FA69F",},}&report_sig=9B1D2E438F165161872F8FE286B9573B&fwd_ip=1
27.0.0.1&version=4.5.0.2902:48:48
ially unwanted application","sample_hashes": {"SHA1": "27E6143704C268FD62E0184A7
CFD9A5C3D2F411F",},}&report_sig=E222311E3B1FF5E4F4ED5287C54F65A0&fwd_ip=127.0.0.
1&version=4.5.0.2902:48:49
potentially unwanted application","sample_hashes": {"SHA1": "27E6143704C268FD62
E0184A7CFD9A5C3D2F411F",},}&report_sig=2375B1923C4190480498B964AA5B4873&fwd_ip=1
27.0.0.1&version=4.5.0.2902:48:49
ially unwanted application","sample_hashes": {"SHA1": "B00D7D54417F83530AB41C1D4
5CECB48DC796FCF",},}&report_sig=7D18DC88C00D35C8806FC79BA5B2C7A1&fwd_ip=127.0.0.
1&version=4.5.0.2902:48:51
02:48:51 Response: 02:48:51 Response: 02:48:51 Request body: 02:48:51 access_tok
en=1443300579261932|cfedb1bd1113405e097902a8602d76ed&user_token=1180273625337362
&report={"report_type": "SCANNER_DATA","event_type": "CLEANUP_SUCCESS","sample_n
ame": "a variant of Win32/MPCCleaner.A potentially unwanted application","sample
_id": "a variant of Win32/MPCCleaner.A potentially unwanted application","sample
_hashes": {"SHA1": "B00D7D54417F83530AB41C1D45CECB48DC796FCF",},}&report_sig=CAC
6278D6896A99718C5E17781C216BD&fwd_ip=127.0.0.1&version=4.5.0.2902:48:51
02:48:51 Request query: 02:48:51
potentially unwanted application","sample_hashes": {"SHA1": "5ADCA9DD3BF59F20C0
B0CBB12D35F2EF0849982A",},}&report_sig=EA3A64FDC3131C922D02313FBACA6ECE&fwd_ip=1
27.0.0.1&version=4.5.0.2902:48:51
.1&version=4.5.0.2902:48:52
ially unwanted application","sample_hashes": {"SHA1": "A0876F1786A56B0F15553C3ED
921BD9796B1F309",},}&report_sig=607A494A5E2C0A14CC4869FC16CE49CB&fwd_ip=127.0.0.
1&version=4.5.0.2902:48:52
02:48:52
ially unwanted application","sample_hashes": {"SHA1": "1A61B312A4C24359798ED1DCA
279564AB10A4809",},}&report_sig=29D15E70751F1C9B90B45DBAC411EA7A&fwd_ip=127.0.0.
1&version=4.5.0.2902:48:53

potentially unwanted application","sample_hashes": {"SHA1": "1A61B312A4C2435979
8ED1DCA279564AB10A4809",},}&report_sig=915E56DDC2D394133EA0137106DE1B4F&fwd_ip=1
27.0.0.1&version=4.5.0.2902:48:53
ially unwanted application","sample_hashes": {"SHA1": "9B3DB936D99C7E4068AB0EE40
D01A3EA12F93516",},}&report_sig=C7C47D7F9C31AD5CBE355017FE4C525A&fwd_ip=127.0.0.
1&version=4.5.0.2902:48:53
potentially unwanted application","sample_hashes": {"SHA1": "9B3DB936D99C7E4068
AB0EE40D01A3EA12F93516",},}&report_sig=1272892EA24425EC512F512191A343C0&fwd_ip=1
27.0.0.1&version=4.5.0.2902:48:53
ially unwanted application","sample_hashes": {"SHA1": "E87299615DD3E4BBB830A1C5B
CB1740F84918F36",},}&report_sig=64A62407454576735DBC12EDF79B2C15&fwd_ip=127.0.0.
1&version=4.5.0.2902:48:54
potentially unwanted application","sample_hashes": {"SHA1": "E87299615DD3E4BBB8
30A1C5BCB1740F84918F36",},}&report_sig=D4EFB8F38DF85E2804B2ED9AFCB97EA1&fwd_ip=1
27.0.0.1&version=4.5.0.2902:48:54
ially unwanted application","sample_hashes": {"SHA1": "47B0D6CD29DDD112644FDBEEF
C5FBA12BD4454F0",},}&report_sig=F44A0FB661485CB4C1D4DD36F3C7D75F&fwd_ip=127.0.0.
1&version=4.5.0.2902:48:54
:true}02:48:55
potentially unwanted application","sample_hashes": {"SHA1": "47B0D6CD29DDD11264
4FDBEEFC5FBA12BD4454F0",},}&report_sig=7ED6EF8BF90490698F87EBDC7692DB3C&fwd_ip=1
27.0.0.1&version=4.5.0.2902:48:55
ially unwanted application","sample_hashes": {"SHA1": "7F8A85698C0E04C809EB165A6
E5BCB49D436F4C0",},}&report_sig=7622679A37B147FD0AAACF7762AB54F1&fwd_ip=127.0.0.
1&version=4.5.0.2902:48:55
potentially unwanted application","sample_hashes": {"SHA1": "7F8A85698C0E04C809
EB165A6E5BCB49D436F4C0",},}&report_sig=0A708FFA94320B2062B241A3D3926142&fwd_ip=1
27.0.0.1&version=4.5.0.2902:48:55
ially unwanted application","sample_hashes": {"SHA1": "523D9F4DD4F306213D7F391E5
F09ED617AB8AC9E",},}&report_sig=FEBD717687CDCDD72D3260B3962A89E1&fwd_ip=127.0.0.
1&version=4.5.0.2902:48:56
potentially unwanted application","sample_hashes": {"SHA1": "523D9F4DD4F306213D
7F391E5F09ED617AB8AC9E",},}&report_sig=D199CD90305998B684B321ADE1BD58C6&fwd_ip=1
27.0.0.1&version=4.5.0.2902:48:56
potentially unwanted application","sample_hashes": {"SHA1": "41D812F8C628FD41FA
B616F2663CE46042C72A18",},}&report_sig=D50571EAA7D2F3BFE59506BD4E2D1E4A&fwd_ip=1
27.0.0.1&version=4.5.0.2902:48:57
ially unwanted application","sample_hashes": {"SHA1": "563CA7FA5E43EF24D45268B58
AA2678C69D4979D",},}&report_sig=D73C8B6EF05BE01DAD2772652C265BBF&fwd_ip=127.0.0.
1&version=4.5.0.2902:48:57
potentially unwanted application","sample_hashes": {"SHA1": "563CA7FA5E43EF24D4
5268B58AA2678C69D4979D",},}&report_sig=461DCB400BD20549353CD0EB380E243E&fwd_ip=1
27.0.0.1&version=4.5.0.2902:48:58
ially unwanted application","sample_hashes": {"SHA1": "43A933E2395C4A3C1A70EF012
0B7F32FB614E15B",},}&report_sig=CD13AE28753CB302A466458873B0C7C6&fwd_ip=127.0.0.
1&version=4.5.0.2902:48:58
potentially unwanted application","sample_hashes": {"SHA1": "43A933E2395C4A3C1A
70EF0120B7F32FB614E15B",},}&report_sig=9499CCECBA6D2CA004268F190E4C17D5&fwd_ip=1
27.0.0.1&version=4.5.0.2902:48:58
ially unwanted application","sample_hashes": {"SHA1": "F528FF67BE3F6A16A83A8B839
85CCB745C29440F",},}&report_sig=35E4D589A9FBAE7089EC7F291B05F783&fwd_ip=127.0.0.
1&version=4.5.0.2902:48:59
02:48:59 1443300579261932/malware_scanner02:48:59
potentially unwanted application","sample_hashes": {"SHA1": "F528FF67BE3F6A16A8
3A8B83985CCB745C29440F",},}&report_sig=A3990E1F82CF492139A08202B197D1B9&fwd_ip=1
27.0.0.1&version=4.5.0.2902:48:59
ially unwanted application","sample_hashes": {"SHA1": "E50E257A2772B05ABDC5B1301
348F3A7BCD31037",},}&report_sig=D5715B7EBD5A02129B853B7F9288B74A&fwd_ip=127.0.0.
1&version=4.5.0.2902:49:00

potentially unwanted application","sample_hashes": {"SHA1": "E50E257A2772B05ABD
C5B1301348F3A7BCD31037",},}&report_sig=6D258A0A49F6B2302F30314FF18DF5EA&fwd_ip=1
27.0.0.1&version=4.5.0.2902:49:00
ially unwanted application","sample_hashes": {"SHA1": "92C399BF4685ACAB45D637C8C
C3374BAEE33B6F6",},}&report_sig=AC2EE652CB3BB1A8CD0D99C646C42B07&fwd_ip=127.0.0.
1&version=4.5.0.2902:49:00
potentially unwanted application","sample_hashes": {"SHA1": "92C399BF4685ACAB45
D637C8CC3374BAEE33B6F6",},}&report_sig=D3124FCD171F82CE4694F18FE7288686&fwd_ip=1
27.0.0.1&version=4.5.0.2902:49:00
ially unwanted application","sample_hashes": {"SHA1": "91A4B01891B52EFC7216F5800
89BDF9316595670",},}&report_sig=27EF0E5A404CD14ECBBB0093C1A62991&fwd_ip=127.0.0.
1&version=4.5.0.2902:49:01
potentially unwanted application","sample_hashes": {"SHA1": "91A4B01891B52EFC72
16F580089BDF9316595670",},}&report_sig=C5B3D7C2DC031F62F02D09E5B0AD8F09&fwd_ip=1
27.0.0.1&version=4.5.0.2902:49:01
02:49:01 Request query: 02:49:01
potentially unwanted application","sample_hashes": {"SHA1": "E6E86E548502CEE214
0887ABAA15E1D33CAB0369",},}&report_sig=854B5039B2DFA60A355F7284818BF3AD&fwd_ip=1
27.0.0.1&version=4.5.0.2902:49:02

.1&version=4.5.0.2902:49:02
ially unwanted application","sample_hashes": {"SHA1": "A54EA6483D2EBE28F90745F64
A484BC8BA78621B",},}&report_sig=1A8B4733C1FECF7D66F1CE51270DC795&fwd_ip=127.0.0.
1&version=4.5.0.2902:49:02
potentially unwanted application","sample_hashes": {"SHA1": "A54EA6483D2EBE28F9
0745F64A484BC8BA78621B",},}&report_sig=2628EA86701B7B5F523347210E8565E4&fwd_ip=1
27.0.0.1&version=4.5.0.2902:49:02
ially unwanted application","sample_hashes": {"SHA1": "B6C8B991C4E32E63FDAB176AE
73BB82C2E99758F",},}&report_sig=77F9DC10AF79AD0FB44B6B05D6780E86&fwd_ip=127.0.0.
1&version=4.5.0.2902:49:03
potentially unwanted application","sample_hashes": {"SHA1": "B6C8B991C4E32E63FD
AB176AE73BB82C2E99758F",},}&report_sig=982BDD4A48C8BDDD16EF71A7DA5A733A&fwd_ip=1
27.0.0.1&version=4.5.0.2902:49:03
02:49:03 Request body: 02:49:03 Request query: 02:49:03 1443300579261932/malware
_scanner02:49:03
ially unwanted application","sample_hashes": {"SHA1": "38AC9F35E07275308456A86AB
74010ACFBE697C4",},}&report_sig=AFAECD2D4451A2583EAB9BE6BDA91B56&fwd_ip=127.0.0.
1&version=4.5.0.2902:49:03

potentially unwanted application","sample_hashes": {"SHA1": "38AC9F35E072753084
56A86AB74010ACFBE697C4",},}&report_sig=3E899072F475D9181BD1D9251610267C&fwd_ip=1
27.0.0.1&version=4.5.0.2902:49:04
02:49:04 Request query: 02:49:04 1443300579261932/malware_scanner02:49:04 144330
0579261932/malware_scanner02:49:04
ially unwanted application","sample_hashes": {"SHA1": "D8369B07B0B92C86C7DECE866
5EA79940841BA10",},}&report_sig=748711812DE9649D3B18E13907CB2382&fwd_ip=127.0.0.
1&version=4.5.0.2902:49:04
potentially unwanted application","sample_hashes": {"SHA1": "D8369B07B0B92C86C7
DECE8665EA79940841BA10",},}&report_sig=010D214BC96BB36E8B6F3A36A71255A2&fwd_ip=1
27.0.0.1&version=4.5.0.2902:49:04
02:49:05
ially unwanted application","sample_hashes": {"SHA1": "73D9CF58402E2A780E175B885
18645DEC6FC4468",},}&report_sig=4B9130441D13C886BFE9274A3DDF310C&fwd_ip=127.0.0.
1&version=4.5.0.2902:49:05
potentially unwanted application","sample_hashes": {"SHA1": "73D9CF58402E2A780E
175B88518645DEC6FC4468",},}&report_sig=8073C1FEA99E62B5393CEC3D7EB1E6E3&fwd_ip=1
27.0.0.1&version=4.5.0.2902:49:05
ially unwanted application","sample_hashes": {"SHA1": "CE917EF310695BFC3C19525A7
0DC038762257053",},}&report_sig=0842E81C3FD2E0CABADA5339A446A74C&fwd_ip=127.0.0.
1&version=4.5.0.2902:49:05
potentially unwanted application","sample_hashes": {"SHA1": "CE917EF310695BFC3C

19525A70DC038762257053",},}&report_sig=A6B29BD848F3DAAC6392ED0FB26928FB&fwd_ip=1
27.0.0.1&version=4.5.0.2902:49:05
ially unwanted application","sample_hashes": {"SHA1": "E66376388A51D1EA948523679
5500EBB328E56F7",},}&report_sig=EFB816774A6DEF62EE103C9A8EFB0A0B&fwd_ip=127.0.0.
1&version=4.5.0.2902:49:06
potentially unwanted application","sample_hashes": {"SHA1": "E66376388A51D1EA94
85236795500EBB328E56F7",},}&report_sig=0D7277800FF4D630B125B2D35DC7401C&fwd_ip=1
27.0.0.1&version=4.5.0.2902:49:06
ially unwanted application","sample_hashes": {"SHA1": "937836780BB991A61B3FC9EE8
96D85933B0B931F",},}&report_sig=AE2DDBE5344B16D382A3823927B89A3A&fwd_ip=127.0.0.
1&version=4.5.0.2902:49:07
potentially unwanted application","sample_hashes": {"SHA1": "937836780BB991A61B
3FC9EE896D85933B0B931F",},}&report_sig=EA0456CA5B5AE215F2E39C60FE6751D6&fwd_ip=1
27.0.0.1&version=4.5.0.2902:49:07
ially unwanted application","sample_hashes": {"SHA1": "803B51C4D42E07BB41210CD4E
01DFC213C9901DA",},}&report_sig=D90046B3777FF80FE3CA3699B4E8DA04&fwd_ip=127.0.0.
1&version=4.5.0.2902:49:07
potentially unwanted application","sample_hashes": {"SHA1": "803B51C4D42E07BB41
210CD4E01DFC213C9901DA",},}&report_sig=AECCD6305CFE1CDA60EA5BDE85EE136E&fwd_ip=1
27.0.0.1&version=4.5.0.2902:49:07

ially unwanted application","sample_hashes": {"SHA1": "27E6143704C268FD62E0184A7
CFD9A5C3D2F411F",},}&report_sig=E222311E3B1FF5E4F4ED5287C54F65A0&fwd_ip=127.0.0.
1&version=4.5.0.2902:49:08
02:49:08 Response: 02:49:08 {"s02:49:08
potentially unwanted application","sample_hashes": {"SHA1": "27E6143704C268FD62
E0184A7CFD9A5C3D2F411F",},}&report_sig=2375B1923C4190480498B964AA5B4873&fwd_ip=1
27.0.0.1&version=4.5.0.2902:49:08
ially unwanted application","sample_hashes": {"SHA1": "1CADB36329505892F0578833C
2910E84C716269E",},}&report_sig=AE7D199D3784D9A994BFB6AB596F35F1&fwd_ip=127.0.0.
1&version=4.5.0.2902:49:09
02:49:09 Response: 02:49:09 {"s02:49:09
potentially unwanted application","sample_hashes": {"SHA1": "1CADB36329505892F0
578833C2910E84C716269E",},}&report_sig=1ACE1293FA253A1031CEDE1463875D47&fwd_ip=1
27.0.0.1&version=4.5.0.2902:49:09
e_scanner02:49:09
ially unwanted application","sample_hashes": {"SHA1": "47BEF3747FF0703C5710E292D
C6FA29E1739425F",},}&report_sig=DB9A126590CB1490833FC82B86B67501&fwd_ip=127.0.0.
1&version=4.5.0.2902:49:09
potentially unwanted application","sample_hashes": {"SHA1": "47BEF3747FF0703C57
10E292DC6FA29E1739425F",},}&report_sig=51204A79F1F17348F5890C405B217B62&fwd_ip=1
27.0.0.1&version=4.5.0.2902:49:10

potentially unwanted application","sample_hashes": {"SHA1": "47BEF3747FF0703C57
10E292DC6FA29E1739425F",},}&report_sig=51204A79F1F17348F5890C405B217B62&fwd_ip=1
27.0.0.1&version=4.5.0.2902:49:10
ially unwanted application","sample_hashes": {"SHA1": "37CB7B8ECF1AC40532B00988B
D3141724AEE6AA4",},}&report_sig=D7AD843ACE87ABAD3ED532213F9EC8B0&fwd_ip=127.0.0.
1&version=4.5.0.2902:49:10
ially unwanted application","sample_hashes": {"SHA1": "37CB7B8ECF1AC40532B00988B
D3141724AEE6AA4",},}&report_sig=D7AD843ACE87ABAD3ED532213F9EC8B0&fwd_ip=127.0.0.
1&version=4.5.0.2902:49:10
potentially unwanted application","sample_hashes": {"SHA1": "37CB7B8ECF1AC40532
B00988BD3141724AEE6AA4",},}&report_sig=B47567B99D045AF36331A0F8DBBB6B23&fwd_ip=1
27.0.0.1&version=4.5.0.2902:49:10
ially unwanted application","sample_hashes": {"SHA1": "1370B0833D91FA5D473462989
6AD2A8A6BC7E66C",},}&report_sig=96036A04FD9A13F465785579B45A6B98&fwd_ip=127.0.0.
1&version=4.5.0.2902:49:11
ially unwanted application","sample_hashes": {"SHA1": "1370B0833D91FA5D473462989
6AD2A8A6BC7E66C",},}&report_sig=96036A04FD9A13F465785579B45A6B98&fwd_ip=127.0.0.
1&version=4.5.0.2902:49:11
potentially unwanted application","sample_hashes": {"SHA1": "1370B0833D91FA5D47
34629896AD2A8A6BC7E66C",},}&report_sig=C75FD319DC8FF30C5926C21D0073B497&fwd_ip=1
27.0.0.1&version=4.5.0.2902:49:11

potentially unwanted application","sample_hashes": {"SHA1": "1370B0833D91FA5D47
34629896AD2A8A6BC7E66C",},}&report_sig=C75FD319DC8FF30C5926C21D0073B497&fwd_ip=1
27.0.0.1&version=4.5.0.2902:49:11
ially unwanted application","sample_hashes": {"SHA1": "E3136ECC7F2BB03FB1C452F0B
6F67B87FE828C37",},}&report_sig=D4149E14744C520353010BF587117880&fwd_ip=127.0.0.
1&version=4.5.0.2902:49:11
02:49:12 Response: 02:49:12 Request query: 02:49:12 1443300579261932/malware_sca
nner02:49:12
potentially unwanted application","sample_hashes": {"SHA1": "E3136ECC7F2BB03FB1
C452F0B6F67B87FE828C37",},}&report_sig=CDEB288FE5D917FE553C7F89FFB74E5F&fwd_ip=1
27.0.0.1&version=4.5.0.2902:49:12
:true}02:49:12
.1&version=4.5.0.2902:49:12
ially unwanted application","sample_hashes": {"SHA1": "53D8EE4FB02CAACC0253A6BFA
01D309B437D7D20",},}&report_sig=ADB41EB887C21ACECAEDA1E1E80FE1DF&fwd_ip=127.0.0.
1&version=4.5.0.2902:49:12
potentially unwanted application","sample_hashes": {"SHA1": "53D8EE4FB02CAACC02
53A6BFA01D309B437D7D20",},}&report_sig=9357A2474546F868C8A43BE690F476C6&fwd_ip=1
27.0.0.1&version=4.5.0.2902:49:13

ially unwanted application","sample_hashes": {"SHA1": "E0FC6B43F8FAC1C0D1037887E
5EAF7B1F9C5F86A",},}&report_sig=119B8BF9819E9A13499E455770AC37FA&fwd_ip=127.0.0.
1&version=4.5.0.2902:49:14
02:49:14 Request query: 02:49:14 1443300579261932/malware_scanner02:49:14 Respon
se: 02:49:14 {"status":true}02:49:14
potentially unwanted application","sample_hashes": {"SHA1": "E0FC6B43F8FAC1C0D1
037887E5EAF7B1F9C5F86A",},}&report_sig=EAD4BF6DB78C896228AC9886AA3845F8&fwd_ip=1
27.0.0.1&version=4.5.0.2902:49:14
ially unwanted application","sample_hashes": {"SHA1": "E364F40928C63A03E07C47EA6
6AD832F935DAF71",},}&report_sig=B9EE046AFD1FD9A79763ABF6650043A3&fwd_ip=127.0.0.
1&version=4.5.0.2902:49:14
potentially unwanted application","sample_hashes": {"SHA1": "E364F40928C63A03E0
7C47EA66AD832F935DAF71",},}&report_sig=79DC7E953040C46ACF31A4AD668F6539&fwd_ip=1
27.0.0.1&version=4.5.0.2902:49:14
ially unwanted application","sample_hashes": {"SHA1": "001C01C16A3087ECA4029C816
FF50DE2E083B974",},}&report_sig=B765379C6204E026926E62E43A6D7914&fwd_ip=127.0.0.
1&version=4.5.0.2902:49:15
potentially unwanted application","sample_hashes": {"SHA1": "001C01C16A3087ECA4
029C816FF50DE2E083B974",},}&report_sig=7026D942672C498C18863007B1E10997&fwd_ip=1
27.0.0.1&version=4.5.0.2902:49:15
02:49:16 Request query: 02:49:16 1443300579261932/malware_scanner02:49:16 144330
0579261932/malware_scanner02:49:16

ially unwanted application","sample_hashes": {"SHA1": "A29E3225E8E005B477E1237D5
390D34684239937",},}&report_sig=EBDECB65E769000F06484E38418A92EF&fwd_ip=127.0.0.
1&version=4.5.0.2902:49:16
potentially unwanted application","sample_hashes": {"SHA1": "A29E3225E8E005B477
E1237D5390D34684239937",},}&report_sig=F1164F149D6083B4E823229BB7E1D207&fwd_ip=1
27.0.0.1&version=4.5.0.2902:49:16
ially unwanted application","sample_hashes": {"SHA1": "9FA4D99DE311E69F934643135
F8EE32E44A98C41",},}&report_sig=A2027AB4F6280E4313E154EDF5FFC897&fwd_ip=127.0.0.
1&version=4.5.0.2902:49:16
potentially unwanted application","sample_hashes": {"SHA1": "9FA4D99DE311E69F93
4643135F8EE32E44A98C41",},}&report_sig=618DD25E23754E315BB6F146BC20B261&fwd_ip=1
27.0.0.1&version=4.5.0.2902:49:16
ially unwanted application","sample_hashes": {"SHA1": "D75E7481BF43F7EFB55867032
D8E93A886717528",},}&report_sig=3575F50461AD1C2FAD42647ED299AD81&fwd_ip=127.0.0.
1&version=4.5.0.2902:49:17
potentially unwanted application","sample_hashes": {"SHA1": "D75E7481BF43F7EFB5
5867032D8E93A886717528",},}&report_sig=E7D94C8057C1698CF1669C750214E24C&fwd_ip=1
27.0.0.1&version=4.5.0.2902:49:17
ially unwanted application","sample_hashes": {"SHA1": "F9B4481ACF194E4CAF80A92B5
F120A7471F93744",},}&report_sig=AD5234B6B9CBCFEDEE360933F286C68A&fwd_ip=127.0.0.
1&version=4.5.0.2902:49:17
potentially unwanted application","sample_hashes": {"SHA1": "F9B4481ACF194E4CAF
80A92B5F120A7471F93744",},}&report_sig=F013F7E7329DC1D066A7725FC36E0EA4&fwd_ip=1
27.0.0.1&version=4.5.0.2902:49:18
ially unwanted application","sample_hashes": {"SHA1": "82C95690C090EC05FDE21F437
2A8013DC9E7A281",},}&report_sig=989BD456A0CACCA75448590854E7C17E&fwd_ip=127.0.0.
1&version=4.5.0.2902:49:19
potentially unwanted application","sample_hashes": {"SHA1": "82C95690C090EC05FD
E21F4372A8013DC9E7A281",},}&report_sig=A3E554DD0BE1CC38D0B7A8A64435B5C0&fwd_ip=1
27.0.0.1&version=4.5.0.2902:49:19
potentially unwanted application","sample_hashes": {"SHA1": "82C95690C090EC05FD
E21F4372A8013DC9E7A281",},}&report_sig=A3E554DD0BE1CC38D0B7A8A64435B5C0&fwd_ip=1
27.0.0.1&version=4.5.0.2902:49:19
ially unwanted application","sample_hashes": {"SHA1": "86C97042F4A378EBA06C0F54D
825F096B04CFC91",},}&report_sig=A32EA6B843557797F24EC5210E931405&fwd_ip=127.0.0.
1&version=4.5.0.2902:49:19
potentially unwanted application","sample_hashes": {"SHA1": "86C97042F4A378EBA0
6C0F54D825F096B04CFC91",},}&report_sig=C725BCA597EEE1D46BEBC415F20F0759&fwd_ip=1
27.0.0.1&version=4.5.0.2902:49:19

ially unwanted application","sample_hashes": {"SHA1": "F46740D4E2A0F7748FD7CACDF
A827A93EE1E28C3",},}&report_sig=E4D0E2C9033A9780EB8BBC33E8B1F22E&fwd_ip=127.0.0.
1&version=4.5.0.2902:49:20
potentially unwanted application","sample_hashes": {"SHA1": "F46740D4E2A0F7748F
D7CACDFA827A93EE1E28C3",},}&report_sig=EEA5187C6B03A4B611C9A078EC1DF5C0&fwd_ip=1
27.0.0.1&version=4.5.0.2902:49:20
ially unwanted application","sample_hashes": {"SHA1": "77A677D732B2F9FCE206017D2
B4F65358D89854A",},}&report_sig=16F6CB6B906B7CEF4BB3352C8C26DE64&fwd_ip=127.0.0.
1&version=4.5.0.2902:49:21
potentially unwanted application","sample_hashes": {"SHA1": "77A677D732B2F9FCE2
06017D2B4F65358D89854A",},}&report_sig=D865A27E940FBCD9EBC2BE0FEAE04009&fwd_ip=1
27.0.0.1&version=4.5.0.2902:49:21
ially unwanted application","sample_hashes": {"SHA1": "28EA52315FD6208C147068209
C15A8CC69D2BFBE",},}&report_sig=616EF176AF8DF7EE4B1494AA0544B884&fwd_ip=127.0.0.
1&version=4.5.0.2902:49:21
potentially unwanted application","sample_hashes": {"SHA1": "28EA52315FD6208C14
7068209C15A8CC69D2BFBE",},}&report_sig=F74FF59CEE836B1A6DAFA8B3924EADD3&fwd_ip=1
27.0.0.1&version=4.5.0.2902:49:21
02:49:22 Request query: 02:49:22 Response: 02:49:22 {"status":true}02:49:22
.1&version=4.5.0.2902:49:22
ially unwanted application","sample_hashes": {"SHA1": "A53E3FDC66DD1978D4B1E8C58
9BD42AAF81EA52A",},}&report_sig=A1162022B7E6C969374D7B750F6DC198&fwd_ip=127.0.0.
1&version=4.5.0.2902:49:22
potentially unwanted application","sample_hashes": {"SHA1": "A53E3FDC66DD1978D4
B1E8C589BD42AAF81EA52A",},}&report_sig=FB1A32903CD517B9D54DB899EF9321E1&fwd_ip=1
27.0.0.1&version=4.5.0.2902:49:22
ially unwanted application","sample_hashes": {"SHA1": "73014EDE7B750F44B574947F3
EDA1DB2BDB7344E",},}&report_sig=A335E7A5FC295D7E5116148780438F90&fwd_ip=127.0.0.
1&version=4.5.0.2902:49:23
potentially unwanted application","sample_hashes": {"SHA1": "73014EDE7B750F44B5
74947F3EDA1DB2BDB7344E",},}&report_sig=C55A3F338DA23E2A259B2BE7F58C24D8&fwd_ip=1
27.0.0.1&version=4.5.0.2902:49:23
.1&version=4.5.0.2902:49:32
.1&version=4.5.0.2902:49:52
.1&version=4.5.0.2902:50:04

.1&version=4.5.0.2902:50:04
.1&version=4.5.0.2902:50:16
.1&version=4.5.0.2902:50:32
.1&version=4.5.0.2902:50:32
.1&version=4.5.0.2902:50:42
.1&version=4.5.0.2902:50:52
.1&version=4.5.0.2902:51:02
.1&version=4.5.0.2902:51:12
.1&version=4.5.0.2902:51:22
.1&version=4.5.0.2902:51:37
:true}02:51:37
.1&version=4.5.0.2902:51:47
.1&version=4.5.0.2902:51:57
.1&version=4.5.0.2902:52:08
.1&version=4.5.0.2902:52:18
.1&version=4.5.0.2902:52:28
.1&version=4.5.0.2902:52:38
.1&version=4.5.0.2902:52:48

6
unwanted application","sample_hashes": {"SHA1": "23B3E5F508EB6FC76D67A873A5AAC2D
34C3CE5E1",},}&report_sig=FF79DC92A589078B8D4778D4F395A5AC&fwd_ip=127.0.0.1&vers
ion=4.5.0.2902:52:57
tially unwanted application","sample_hashes": {"SHA1": "23B3E5F508EB6FC76D67A873
A5AAC2D34C3CE5E1",},}&report_sig=66C3122DD20F252339A7B47502020072&fwd_ip=127.0.0
.1&version=4.5.0.2902:52:57
unwanted application","sample_hashes": {"SHA1": "7DB65607A18C67C0C8C0310E0FF23A2
02AB3F070",},}&report_sig=907C2C1CD71B8AD01DC9C802B72EA975&fwd_ip=127.0.0.1&vers
ion=4.5.0.2902:52:57
tially unwanted application","sample_hashes": {"SHA1": "7DB65607A18C67C0C8C0310E
0FF23A202AB3F070",},}&report_sig=2D728D5B018C8A724B1CB05F0CDAA1D8&fwd_ip=127.0.0
.1&version=4.5.0.2902:52:57
.1&version=4.5.0.2902:52:58
unwanted application","sample_hashes": {"SHA1": "3176C30E3A30990C42C968951B6BB2A
DFD0B1C00",},}&report_sig=79B38BC26C4DA8E7C37ACA00B979AA33&fwd_ip=127.0.0.1&vers
ion=4.5.0.2902:52:58
tially unwanted application","sample_hashes": {"SHA1": "3176C30E3A30990C42C96895
1B6BB2ADFD0B1C00",},}&report_sig=C4DA829058B04C239A907F9FB95CA6C1&fwd_ip=127.0.0
.1&version=4.5.0.2902:52:58
unwanted application","sample_hashes": {"SHA1": "08647AB20AED7B8385931FDF5B4A481
65131A061",},}&report_sig=9E3C7D63F68C6B72A48159B4F55C348B&fwd_ip=127.0.0.1&vers
ion=4.5.0.2902:52:58
tially unwanted application","sample_hashes": {"SHA1": "08647AB20AED7B8385931FDF
5B4A48165131A061",},}&report_sig=6634EE0FD08A8199410E5B0F525E68D9&fwd_ip=127.0.0
.1&version=4.5.0.2902:52:59
,"event_type": "DETECTED","sample_name": "a variant of Win32/SweetIM.F potential
ly unwanted application","sample_id": "a variant of Win32/SweetIM.F potentially
unwanted application","sample_hashes": {"SHA1": "C6A9FB024D614702667E0768E0B673B
A3A31F504",},}&report_sig=763A3776B5615DD8D10CCE7CE036B22F&fwd_ip=127.0.0.1&vers
ion=4.5.0.2902:52:59
,"event_type": "CLEANUP_SUCCESS","sample_name": "a variant of Win32/SweetIM.F po
tentially unwanted application","sample_id": "a variant of Win32/SweetIM.F poten
tially unwanted application","sample_hashes": {"SHA1": "C6A9FB024D614702667E0768
E0B673BA3A31F504",},}&report_sig=AD70FF167CFEB124E01C22143247296A&fwd_ip=127.0.0
.1&version=4.5.0.2902:52:59

0
02:53:00 Request query: 02:53:00
tially unwanted application","sample_hashes": {"SHA1": "D09F832544B921CD7C61A7DB
193F29EF6638AD88",},}&report_sig=822A0CE6A4F3D2A70E3AC998E070C472&fwd_ip=127.0.0
.1&version=4.5.0.2902:53:01
unwanted application","sample_hashes": {"SHA1": "C6E3F8034D197C34D61701AC146694B
6DBEC36CD",},}&report_sig=A46B836809139B4C95C97A8CED5B672E&fwd_ip=127.0.0.1&vers
ion=4.5.0.2902:53:01
tially unwanted application","sample_hashes": {"SHA1": "C6E3F8034D197C34D61701AC
146694B6DBEC36CD",},}&report_sig=217CCCF60EBA6B42EAE74AA9E37E35FA&fwd_ip=127.0.0
.1&version=4.5.0.2902:53:01
unwanted application","sample_hashes": {"SHA1": "FC883B83DA2A9ED93AC2A4CEC993626
8A6B264C2",},}&report_sig=AA3A71DCAB73974E52A76972FE999E79&fwd_ip=127.0.0.1&vers
ion=4.5.0.2902:53:01
tially unwanted application","sample_hashes": {"SHA1": "FC883B83DA2A9ED93AC2A4CE
C9936268A6B264C2",},}&report_sig=BC18BE0041F2BBD8B323F2B26D78940B&fwd_ip=127.0.0
.1&version=4.5.0.2902:53:02
e_scanner02:53:02
unwanted application","sample_hashes": {"SHA1": "F3001B5F58A6C6AB8DD7E6E63CB89D2
0F74EF228",},}&report_sig=6309BD7133E1E4062EC6CF8996BF0F05&fwd_ip=127.0.0.1&vers
ion=4.5.0.2902:53:02
tially unwanted application","sample_hashes": {"SHA1": "F3001B5F58A6C6AB8DD7E6E6
3CB89D20F74EF228",},}&report_sig=66AE93C36D8644994E3583825784D658&fwd_ip=127.0.0
.1&version=4.5.0.2902:53:02
unwanted application","sample_hashes": {"SHA1": "2CF3C9FBCBEBAA6D75DE43CCC487D62
954538F81",},}&report_sig=3F0D222A1FD191A69A84F5CE964A8F20&fwd_ip=127.0.0.1&vers
ion=4.5.0.2902:53:03
tially unwanted application","sample_hashes": {"SHA1": "2CF3C9FBCBEBAA6D75DE43CC
C487D62954538F81",},}&report_sig=9116CB1E3C04163F12D8E71F69EA8C1B&fwd_ip=127.0.0
.1&version=4.5.0.2902:53:03
unwanted application","sample_hashes": {"SHA1": "60FCD298549E0383DFACBE66420DC92
2D6BAAF84",},}&report_sig=96C63FEC4037872601CBABEA13AA6AAC&fwd_ip=127.0.0.1&vers
ion=4.5.0.2902:53:03
tially unwanted application","sample_hashes": {"SHA1": "60FCD298549E0383DFACBE66
420DC922D6BAAF84",},}&report_sig=E99DDB2B674CD94BC7172736566C96C2&fwd_ip=127.0.0
.1&version=4.5.0.2902:53:03

unwanted application","sample_hashes": {"SHA1": "531A5D492B39076AA7990DD76F41B76
2258B86A7",},}&report_sig=2310A4DBE3DD92274311812B08323D6D&fwd_ip=127.0.0.1&vers
ion=4.5.0.2902:53:04
unwanted application","sample_hashes": {"SHA1": "531A5D492B39076AA7990DD76F41B76
2258B86A7",},}&report_sig=2310A4DBE3DD92274311812B08323D6D&fwd_ip=127.0.0.1&vers
ion=4.5.0.2902:53:04
tially unwanted application","sample_hashes": {"SHA1": "531A5D492B39076AA7990DD7
6F41B762258B86A7",},}&report_sig=4A8B181113DDB8C7F5A01C63DD988219&fwd_ip=127.0.0
.1&version=4.5.0.2902:53:04
unwanted application","sample_hashes": {"SHA1": "AE57E26160449200540B1FD8E839F1B
D5A30327A",},}&report_sig=B69A94E831EC3F8D123332325AEA55D0&fwd_ip=127.0.0.1&vers
ion=4.5.0.2902:53:04
tially unwanted application","sample_hashes": {"SHA1": "AE57E26160449200540B1FD8
E839F1BD5A30327A",},}&report_sig=ABAF73AFC72B97F56F5C4D22A7DA632E&fwd_ip=127.0.0
.1&version=4.5.0.2902:53:04
unwanted application","sample_hashes": {"SHA1": "B6E78443D25AF8B978DC24D515DF7B2
F673629CC",},}&report_sig=12760BF77D60D841AC8D08DDECFA6517&fwd_ip=127.0.0.1&vers
ion=4.5.0.2902:53:05
tially unwanted application","sample_hashes": {"SHA1": "B6E78443D25AF8B978DC24D5
15DF7B2F673629CC",},}&report_sig=E467B8E4ACED117BFA730F4E762A44A8&fwd_ip=127.0.0
.1&version=4.5.0.2902:53:05

unwanted application","sample_hashes": {"SHA1": "42B14A7D72C6EDAF5140A2C7B95149B
92473853C",},}&report_sig=A15A84B11220DA999BA304E6DF491061&fwd_ip=127.0.0.1&vers
ion=4.5.0.2902:53:05
:true}02:53:06
tially unwanted application","sample_hashes": {"SHA1": "42B14A7D72C6EDAF5140A2C7
B95149B92473853C",},}&report_sig=CDFEC78902414F30487C82C7E884D1A1&fwd_ip=127.0.0
.1&version=4.5.0.2902:53:06
unwanted application","sample_hashes": {"SHA1": "B28C9BCA89A124EBD2EAAF5073370E7
E0E87DB4E",},}&report_sig=EAC76C19BDD1B4A2052D0B48864D448A&fwd_ip=127.0.0.1&vers
ion=4.5.0.2902:53:06
unwanted application","sample_hashes": {"SHA1": "87FF2D9A36B50B5A7DF4D08F87B92BE
A86D7DAB7",},}&report_sig=5735D4D7F274C49EFAAFCF9C23FD5ADC&fwd_ip=127.0.0.1&vers
ion=4.5.0.2902:53:06
tially unwanted application","sample_hashes": {"SHA1": "B28C9BCA89A124EBD2EAAF50
73370E7E0E87DB4E",},}&report_sig=2F7987F2E7661344B3EB3BA6830182E0&fwd_ip=127.0.0
.1&version=4.5.0.2902:53:06
tially unwanted application","sample_hashes": {"SHA1": "87FF2D9A36B50B5A7DF4D08F
87B92BEA86D7DAB7",},}&report_sig=F9DA84B123A00BCA48CBC3F4570BC768&fwd_ip=127.0.0
.1&version=4.5.0.2902:53:06

unwanted application","sample_hashes": {"SHA1": "C86CF9524D11A2392A491EA15ED12D2
CA890F249",},}&report_sig=B43C0CC76EBF1032D3AC7398A4EFA295&fwd_ip=127.0.0.1&vers
ion=4.5.0.2902:53:07
unwanted application","sample_hashes": {"SHA1": "055E7A147AB9DCB141FDF58A0D3CCD8
25AE8B361",},}&report_sig=7D9738082E0EC2BF80DD2319888435C6&fwd_ip=127.0.0.1&vers
ion=4.5.0.2902:53:07
tially unwanted application","sample_hashes": {"SHA1": "055E7A147AB9DCB141FDF58A
0D3CCD825AE8B361",},}&report_sig=CAE91523A7A8458FBADFB218D6D5F5C7&fwd_ip=127.0.0
.1&version=4.5.0.2902:53:07
unwanted application","sample_hashes": {"SHA1": "73987118D6F1799B0B29DB00BF7248B
20347BB46",},}&report_sig=22E4A167A13B74E117FACD7D049F07E5&fwd_ip=127.0.0.1&vers
ion=4.5.0.2902:53:07
tially unwanted application","sample_hashes": {"SHA1": "73987118D6F1799B0B29DB00
BF7248B20347BB46",},}&report_sig=11EACDD1A6CC39BBC3A99332B5D58FBA&fwd_ip=127.0.0
.1&version=4.5.0.2902:53:07
unwanted application","sample_hashes": {"SHA1": "C786E62AB09C10B6277F3E9CFC34207
FE56E1FFA",},}&report_sig=BA309B7C45062978C391B4EF956A2BE6&fwd_ip=127.0.0.1&vers
ion=4.5.0.2902:53:07
.1&version=4.5.0.2902:53:08

unwanted application","sample_hashes": {"SHA1": "07695C8842935A01310F52C83BAB364
950419841",},}&report_sig=DBFE349313BC85C34D511BEA61F81D11&fwd_ip=127.0.0.1&vers
ion=4.5.0.2902:53:08
unwanted application","sample_hashes": {"SHA1": "07695C8842935A01310F52C83BAB364
950419841",},}&report_sig=DBFE349313BC85C34D511BEA61F81D11&fwd_ip=127.0.0.1&vers
ion=4.5.0.2902:53:08
tially unwanted application","sample_hashes": {"SHA1": "07695C8842935A01310F52C8
3BAB364950419841",},}&report_sig=D5F1791E3AA12CBF5E0EDABA5695B5DB&fwd_ip=127.0.0
.1&version=4.5.0.2902:53:08
tially unwanted application","sample_hashes": {"SHA1": "07695C8842935A01310F52C8
3BAB364950419841",},}&report_sig=D5F1791E3AA12CBF5E0EDABA5695B5DB&fwd_ip=127.0.0
.1&version=4.5.0.2902:53:08
unwanted application","sample_hashes": {"SHA1": "093FB06E67DB8C5562A823E38985334
0405B8724",},}&report_sig=4C11F199CB771CFB72C895795226F258&fwd_ip=127.0.0.1&vers
ion=4.5.0.2902:53:09
unwanted application","sample_hashes": {"SHA1": "093FB06E67DB8C5562A823E38985334
0405B8724",},}&report_sig=4C11F199CB771CFB72C895795226F258&fwd_ip=127.0.0.1&vers
ion=4.5.0.2902:53:09
tially unwanted application","sample_hashes": {"SHA1": "093FB06E67DB8C5562A823E3
89853340405B8724",},}&report_sig=23145D0D67C98E5991DCBC7152B6630A&fwd_ip=127.0.0
.1&version=4.5.0.2902:53:09

unwanted application","sample_hashes": {"SHA1": "A679EB39BB32DD88C09E150B0E5F7BA
ED12467A6",},}&report_sig=6FC4EF60C306FC02CE4D637EA743D55E&fwd_ip=127.0.0.1&vers
ion=4.5.0.2902:53:09
tially unwanted application","sample_hashes": {"SHA1": "A679EB39BB32DD88C09E150B
0E5F7BAED12467A6",},}&report_sig=A75B45E57F82BCC99B37485BF8A1982A&fwd_ip=127.0.0
.1&version=4.5.0.2902:53:10
unwanted application","sample_hashes": {"SHA1": "9B45902B8B791A84EC6F7D1AD2E8099
410D1A467",},}&report_sig=9FA9F10651729C5A0981DEEA3F41CB04&fwd_ip=127.0.0.1&vers
ion=4.5.0.2902:53:10
tially unwanted application","sample_hashes": {"SHA1": "9B45902B8B791A84EC6F7D1A
D2E8099410D1A467",},}&report_sig=75C4998F0088663E127AFF624E5D448C&fwd_ip=127.0.0
.1&version=4.5.0.2902:53:10
.1&version=4.5.0.2902:53:18
.1&version=4.5.0.2902:53:28
ESS","progress": 100,}&report_sig=38179CAEFE86A682F37B9182AAB91D97&fwd_ip=127.0.
0.1&version=4.5.0.2902:53:34
02:53:34 Reporting
# version=8
# FBAV_user_token=1180273625337362
# FBAV_attack_id=940201966078273
# FBAV_status=0
# flags=3
# ESET.exe=4.5.0.29
# engine=29475
# end=finished
# remove_checked=true
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# sfx_checked=true
# utc_time=2016-05-15 06:43:22
# country="Mexico"
# lang=1033
# compatibility_mode_1='Microsoft Security Essentials'
# compatibility_mode=5895 16777213 100 100 6782939 157364824 0 0
# scanned=68711
# found=102
# cleaned=102
# scan_time=3939
sh=0000000000000000000000000000000000000000 ft=- fh=0000000000000000 vn="a varia
nt of Win32/SweetIM.L potentially unwanted application,a variant of Win32/MPCCle
aner.A potentially unwanted application (deleted (after the next restart))" ac=C
fn="${Memory}"
sh=E08352F04E41416C4E168071A20108365108CF15 ft=0 fh=000000000000008c vn="" ac=S
fn="C:\Users\Administrador\AppData\Local\Chromatic Browser\User Data\Default\Ext
ensions\plmeednkcpcefcjniehbglhgjcjfmlkb\5.2\background.html"
sh=D4DAF5B05945B9B398AE6AAB9C94A28BC61C9B9E ft=0 fh=000000000000181d vn="" ac=S
ensions\plmeednkcpcefcjniehbglhgjcjfmlkb\5.2\content.js"
sh=939A40461C57432A1E16974F98263D66D8E25262 ft=0 fh=0000000000001ff9 vn="" ac=S
ensions\plmeednkcpcefcjniehbglhgjcjfmlkb\5.2\lsdb.js"
fn="C:\Users\Administrador\AppData\Local\Comodo\Dragon\User Data\Default\Extensi
ons\plmeednkcpcefcjniehbglhgjcjfmlkb\5.2\background.html"
ons\plmeednkcpcefcjniehbglhgjcjfmlkb\5.2\content.js"
ons\plmeednkcpcefcjniehbglhgjcjfmlkb\5.2\lsdb.js"
fn="C:\Users\Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensi
fn="C:\Users\Administrador\AppData\Local\Google\Chrome SxS\User Data\Default\Ext
fn="C:\Users\Administrador\AppData\Local\Torch\User Data\Default\Extensions\plme
ednkcpcefcjniehbglhgjcjfmlkb\5.2\background.html"
ednkcpcefcjniehbglhgjcjfmlkb\5.2\content.js"
ednkcpcefcjniehbglhgjcjfmlkb\5.2\lsdb.js"
fn="C:\Users\Invitado\AppData\Local\Chromatic Browser\User Data\Default\Extensio
ns\plmeednkcpcefcjniehbglhgjcjfmlkb\5.2\background.html"
ns\plmeednkcpcefcjniehbglhgjcjfmlkb\5.2\content.js"
ns\plmeednkcpcefcjniehbglhgjcjfmlkb\5.2\lsdb.js"
fn="C:\Users\Invitado\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\p
lmeednkcpcefcjniehbglhgjcjfmlkb\5.2\background.html"
lmeednkcpcefcjniehbglhgjcjfmlkb\5.2\content.js"
lmeednkcpcefcjniehbglhgjcjfmlkb\5.2\lsdb.js"
fn="C:\Users\Invitado\AppData\Local\Google\Chrome\User Data\Default\Extensions\p
fn="C:\Users\Invitado\AppData\Local\Google\Chrome SxS\User Data\Default\Extensio
fn="C:\Users\Invitado\AppData\Local\Torch\User Data\Default\Extensions\plmeednkc
pcefcjniehbglhgjcjfmlkb\5.2\background.html"
pcefcjniehbglhgjcjfmlkb\5.2\content.js"
pcefcjniehbglhgjcjfmlkb\5.2\lsdb.js"
sh=763A1C3053CA7D5AE9459683F9D7628BAA0B3499 ft=0 fh=0000000000001140 vn="" ac=S
fn="C:\Users\luis alberto\AppData\Local\BoBrowser\User Data\Default\Extensions\c
fonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9297_0\scripts\libs\angular-sanitize.min.j
s"
sh=615453F72A3D8ACF6BFDA1850C10DF327725B152 ft=0 fh=0000000000019b76 vn="" ac=S
fonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9297_0\scripts\libs\angular.min.js"
sh=4BB2B1EE13C1A294425303A6A8490CE12C56C182 ft=0 fh=00000000000010f6 vn="" ac=S
fonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9297_0\scripts\libs\sienium.remoteCoordina
tor.js"
sh=674AA80585EFDD1E247284AF8C53F4747CE67A1E ft=0 fh=0000000000000e2d vn="" ac=S
fonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9297_0\scripts\coreApp.js"
sh=D80955A1EF7D497A190FBCB3A364C0BD145EE189 ft=0 fh=0000000000001bbe vn="" ac=S
fonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9297_0\scripts\facebookSidebarController.j
s"
sh=644B72E285C75BF6FF6C1686C5EC2CFD3200940B ft=0 fh=00000000000018cb vn="" ac=S
fonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9297_0\scripts\linkSliderController.js"
sh=F40A2D8C5E038C4DD2846C33547B41D0A195876D ft=0 fh=0000000000005318 vn="" ac=S
fonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9297_0\styles\fonts\OpenSans-Bold.woff"
sh=9361285CDCB438D671847BA0B01B93D2BE43FB92 ft=0 fh=00000000000054f0 vn="" ac=S
fonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9297_0\styles\fonts\OpenSans-Light.woff"
sh=D8721A797492D3DD8A5F5A419A386E69246D15ED ft=0 fh=0000000000005040 vn="" ac=S
fonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9297_0\styles\fonts\OpenSans-Regular.woff"
sh=0EA9D60A9DD7EAE49A7FACC8A28C4073BC52019E ft=0 fh=00000000000000f1 vn="" ac=S
fonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9297_0\styles\angular-csp.css"
sh=F54C538C90514FDBEF69E5035B2DA513B0F7A36F ft=0 fh=000000000000034a vn="" ac=S
fonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9297_0\styles\cssreset-min.css"
sh=BDA955EEBD69346CCCD0EDB3BDAB0CC8A704AA8A ft=0 fh=000000000000235a vn="" ac=S
fonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9297_0\styles\facebookSidebar.css"
sh=CD3560E5B8187A675F5963B0C998FD4FF1EA4DD5 ft=0 fh=0000000000000243 vn="" ac=S
fonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9297_0\styles\font.css"
sh=6EDA66B78F1AF67DFAA3A9D5D6C4001C86D91829 ft=0 fh=0000000000000886 vn="" ac=S
fonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9297_0\styles\linkSlider.css"
sh=947DADB00D2C01CC5BCF8D235F407A14EDA12CE6 ft=0 fh=000000000000154b vn="" ac=S
fonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9297_0\styles\main.css"
sh=29A85B8CBD994B65486CE34E8A2F31C22382444C ft=0 fh=0000000000000b19 vn="" ac=S
fonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9297_0\styles\offerscreenFacebook.css"
sh=46E1D59734C4A70902AE27F94979EA1752C6018E ft=0 fh=0000000000000b33 vn="" ac=S
fonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9297_0\views\facebookSidebar.html"
sh=E2FFCB5D8D6093319B84EDECE75F8AACE35B9B95 ft=0 fh=00000000000006bd vn="" ac=S
fonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9297_0\views\linkSlider.html"
sh=0000000000000000000000000000000000000000 ft=- fh=0000000000000000 vn="" ac=S
fonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9297_0\background.js"
sh=943804A8971C223127655CF71B5B9381653B342D ft=0 fh=0000000000001b51 vn="" ac=S
fn="C:\Users\luis alberto\AppData\Local\BoBrowser\User Data\Default\Extensions\e
bpeonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\extensionData\plugins\13.js"
sh=38D00461C6AAE76E8D28F1B29256E854E240C868 ft=0 fh=00000000000137f8 vn="" ac=S
sh=E9CFDDDFB63F66D63EF97015966FAF5BE2854550 ft=0 fh=00000000000022bb vn="" ac=S
sh=A4019FBB278A4876B965482CC7AE25C4981A8AED ft=0 fh=000000000001723d vn="" ac=S
sh=89B0A0DFD4DF451FEEC433683868EE588C08EC51 ft=0 fh=0000000000000c73 vn="" ac=S
sh=2CEA208F2CC82921DF8F3DEBC3D3FF68D338CE13 ft=0 fh=000000000000003e vn="" ac=S
sh=289C4B4BF748758CE24013FB6A712DB4E0037264 ft=0 fh=00000000000003fc vn="" ac=S
bpeonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\extensionData\userCode\background.js"
sh=2FB786E17F7F77C2E84E08AAC6FE03267586FEEF ft=0 fh=0000000000000203 vn="" ac=S
bpeonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\extensionData\userCode\extension.js"
sh=89CAC5FB6F99DBB54FD2409D9302D161232345B6 ft=0 fh=00000000000006b4 vn="" ac=S
bpeonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\extensionData\manifest.xml"
sh=40D8A5CBA5987152A8DFAC467C672EF1CC430939 ft=0 fh=00000000000009d7 vn="" ac=S
bpeonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\js\api\36dfb01775344ea98fb928a370e764c
9.js"
sh=B7CF98A7E98785EE5C4412B62DA49AA2CCA5FC6E ft=0 fh=00000000000006c9 vn="" ac=S
bpeonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\js\api\pageAction.js"
sh=8F30AFD1319EBF5F58B2F53EF737A26A92614C59 ft=0 fh=0000000000000028 vn="" ac=S
bpeonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\js\lib\popupResource\newPopup.js"
sh=D8F5FAEB15E6CD653955E1D45C8DE0C6C87E1D23 ft=0 fh=000000000000002d vn="" ac=S
bpeonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\js\lib\popupResource\popup.js"
sh=08D58C3894EBE6ACECBBB854F1F2E05B7400A6C0 ft=0 fh=00000000000001ad vn="" ac=S
bpeonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\js\lib\133af6a538a475a11e853980d9fb760
4.js"
sh=17A2876D4B9F9108CDEE3B9F698A5C054E7B3971 ft=0 fh=00000000000002fd vn="" ac=S
bpeonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\js\lib\99434304477ed65ec7bc082f3bcac28
7.js"
sh=CAC2FC420F4819373AA1C871E7DDA0F33F11B9C5 ft=0 fh=0000000000000387 vn="" ac=S
bpeonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\js\lib\a02d595bfe2b499ab027b2b57d08cd8
0.js"
sh=83D52B954331FF588BF95ACF190E40A9C28128A1 ft=0 fh=00000000000007d2 vn="" ac=S
bpeonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\js\lib\a1b9768c5a2bbf5a1f9ab44457cafec
0.js"
sh=21997B73E3432F6719F64E595FA7F4CAE082EC01 ft=0 fh=00000000000020d3 vn="" ac=S
bpeonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\js\lib\a7a1cbf95302ebb23d8d85ff7b5d7ef
9.js"
sh=DB89F46344CECC785277E46A5AF6C0C2F7177E62 ft=0 fh=0000000000001a29 vn="" ac=S
bpeonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\js\lib\app_api.js"
sh=87F0A95E563A9119567248A593244440843E134B ft=0 fh=0000000000001aa1 vn="" ac=S
bpeonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\js\lib\c787e5b445793b24400e7aa53b63812
8.js"
sh=F60E85FECE253870FBF3E77FB088F546688FB9AF ft=0 fh=00000000000003b0 vn="" ac=S
bpeonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\js\lib\f57e0d49f0be762bf25f6fc53276e62
6.js"
sh=A83E4FF8F350598A0B7CC3E1388AAF0C4A738782 ft=0 fh=0000000000000630 vn="" ac=S
bpeonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\js\lib\installer.js"
sh=0A9451EFBC63BD32E5E797E0546804BACDE4F91B ft=0 fh=0000000000000199 vn="" ac=S
bpeonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\js\23e9c206a501d715e2ea1fca3804453d.js
"
sh=E5D0657F1319601059FF7A5D9819F3A9B8DFF354 ft=0 fh=0000000000000887 vn="" ac=S
bpeonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\background.html"
sh=E36EEA4B539B5F4710D5A0ED6FF9663CD8BD776D ft=0 fh=000000000000032c vn="" ac=S
bpeonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\chromeCoreFilesIndex.txt"
sh=F0F5DB5C87CD2BA7181DDEEEDF87353894C31A94 ft=0 fh=000000000000008b vn="" ac=S
bpeonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\popup.html"
fn="C:\Users\luis alberto\AppData\Local\BoBrowser\User Data\Default\Extensions\g
fmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.9480_0\css\angular-csp.css"
fmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.9480_0\css\cssreset-min.css"
sh=37BC0A7F3898C216017428CDD8CD01B7B1028A66 ft=0 fh=0000000000000766 vn="" ac=S
fmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.9480_0\css\followedProducts.css"
sh=5AF0FDCFCD08C9E6C73B7B7FDFA77669C19E41D5 ft=0 fh=000000000000013a vn="" ac=S
fmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.9480_0\css\offerscreen.css"
sh=0F3ABF92D892889090477B2D99202B2F32D619A8 ft=0 fh=0000000000003f70 vn="" ac=S
fmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.9480_0\scripts\background\background.js"
sh=28DD9F5BA4BC403C4F0BE4061F6A5F22F3DE37D1 ft=0 fh=0000000000000256 vn="" ac=S
fmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.9480_0\scripts\content\handle.css"
sh=02A507DC19B268AC8F2F9DAD1850FD53767B43F0 ft=0 fh=0000000000000aad vn="" ac=S
fmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.9480_0\scripts\content\handleHelper.js"
sh=97898ECAC314C9A42FCC8C2088D5E5CF278A6D73 ft=0 fh=00000000000008e9 vn="" ac=S
fmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.9480_0\scripts\content\offerscreen.js"
sh=E0FCECF1563BB705B6646D5C5FBE041094F539EC ft=0 fh=0000000000001141 vn="" ac=S
fmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.9480_0\scripts\libs\angular-sanitize.min.j
s"
fmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.9480_0\scripts\libs\angular.min.js"
sh=9CEF0FAA1417E642CDF4618861C1283ADB5E34FB ft=0 fh=00000000000068b6 vn="" ac=S

fmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.9480_0\scripts\libs\sienium.js"
fmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.9480_0\scripts\libs\sienium.remoteCoordina
tor.js"
sh=C56269593A7F4F80B7056E160907EA3369D17F52 ft=0 fh=0000000000000171 vn="" ac=S
fmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.9480_0\scripts\tools\analytics.js"
sh=BEDF17CA621F882BFF4388B9C812C9050C36EA2C ft=0 fh=000000000000cc55 vn="" ac=S
fmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.9480_0\scripts\tools\config.js"
sh=AA355CD362543211D7818C56F88ACC19895CF218 ft=0 fh=0000000000000c5b vn="" ac=S
fmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.9480_0\scripts\tools\tracking.js"
sh=363CB05DF766B4D4953D316F8EA1322885CEC87C ft=0 fh=00000000000005b0 vn="" ac=S
fmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.9480_0\scripts\offerscreenController.js"
sh=3CA53737E85229D8EFC8E0B95859F5F25DD1597B ft=0 fh=0000000000000191 vn="" ac=S
fmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.9480_0\views\adView.html"
sh=E4637C39869BD0C6DE079A41702A8C3D6210218F ft=0 fh=0000000000000a6e vn="" ac=S
fmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.9480_0\views\followedproducts.html"
sh=ABA15127FCDF9AF071A22F295A6A04523CB15A5C ft=0 fh=00000000000016ab vn="" ac=S
fmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.9480_0\views\offerscreen.html"
sh=04B79722DF4F9A2AA2C09FC3F5F03391B97D8A47 ft=0 fh=0000000000000186 vn="" ac=S
fmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.9480_0\views\offershop.html"
sh=75ADE48350AAB78B74DF44E1A104967C6CD80968 ft=0 fh=000000000000055c vn="" ac=S
fmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.9480_0\background.html"
sh=24457D0D2FD8210E66CE7C7977B0BFC6EB40006E ft=0 fh=000000000000116e vn="" ac=S
fn="C:\Users\luis alberto\AppData\Local\BoBrowser\User Data\Default\Extensions\p
dlpmjkeahlbfeiclkokomifjfnkghpg\1.0.0.9393_0\scripts\backendservice.js"
sh=D647B11ACB45078FECDDA537ABF09301F69E2C86 ft=0 fh=00000000000004d7 vn="" ac=S
dlpmjkeahlbfeiclkokomifjfnkghpg\1.0.0.9393_0\scripts\background.js"
sh=9F5B09D622F71D7B26C2C48AE7A0B2EA53E8C790 ft=0 fh=000000000000d0e1 vn="" ac=S
dlpmjkeahlbfeiclkokomifjfnkghpg\1.0.0.9393_0\scripts\lunr.js"
sh=F22BA8E5ED3C3E5BAFBE3792CBAC87A90F187465 ft=0 fh=0000000000000811 vn="" ac=S
dlpmjkeahlbfeiclkokomifjfnkghpg\1.0.0.9393_0\scripts\suggestionEngine.js"
sh=1FF8050D62B8DD2261B5C0A2F33E2F95E1FDC595 ft=0 fh=00000000000018b6 vn="" ac=S
dlpmjkeahlbfeiclkokomifjfnkghpg\1.0.0.9393_0\scripts\util.js"
sh=72F21A6F3BCACF56ECF7B08B88F43F0695693757 ft=0 fh=0000000000000642 vn="" ac=S
dlpmjkeahlbfeiclkokomifjfnkghpg\1.0.0.9393_0\scripts\uuid.core.js"
fn="C:\Users\luis alberto\AppData\Local\Chromatic Browser\User Data\Default\Exte
nsions\plmeednkcpcefcjniehbglhgjcjfmlkb\5.2\background.html"
nsions\plmeednkcpcefcjniehbglhgjcjfmlkb\5.2\content.js"
nsions\plmeednkcpcefcjniehbglhgjcjfmlkb\5.2\lsdb.js"

fn="C:\Users\luis alberto\AppData\Local\Comodo\Dragon\User Data\Default\Extensio
sh=BF995A87B7E8F553A886D828AC01ACF390207C75 ft=0 fh=000000000000005c vn="" ac=S
fn="C:\Users\luis alberto\AppData\Local\Google\Chrome\User Data\Default\Extensio
ns\aohghmighlieiainnegkcijnfilokake\0.9_1\main.html"
sh=FFE9A28CDE2E130F64CCB51A76DF3A453464BE19 ft=0 fh=000000000000005b vn="" ac=S
ns\aohghmighlieiainnegkcijnfilokake\0.9_1\main.js"
ns\felcaaldnbdncclmgdcncolpebgiejap\1.1_1\main.html"
sh=C905665276FF5DBA2D052AD4C11588C3172F81F8 ft=0 fh=000000000000005f vn="" ac=S
ns\felcaaldnbdncclmgdcncolpebgiejap\1.1_1\main.js"
sh=21B7C28AF08A4BF167223B2BB153B34F3752EAFC ft=0 fh=0000000000001103 vn="" ac=S
ns\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_0\contentscript_bin_prod.js"
sh=113B1B3703874BDD7BAFF97496FC2E49A85CEFB5 ft=0 fh=0000000000005b6c vn="" ac=S
ns\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_0\eventpage_bin_prod.js"
sh=A5190F975F481AAEB69D10C0FFF0EC3624146C4F ft=0 fh=00000000000000e0 vn="" ac=S
ns\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_0\page_embed_script.js"
sh=A4AC74DD258E8E0689034FAA1B15A5C7C56DC3BB ft=0 fh=00000000000006cd vn="" ac=S
ns\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\css\craw_window.css"
sh=8B4EAA74D31EED5B0BABA3CA5460201F6B10DA46 ft=0 fh=000000000000032a vn="" ac=S
ns\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\html\craw_window.html"
sh=6AB94577F592645D1393BCA769B1A5D5298A720B ft=0 fh=000000000002f358 vn="" ac=S
ns\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\craw_background.js"
sh=B40A227CF98B3DE19F22EFA64A28EC2CD88F89DD ft=0 fh=0000000000036a0f vn="" ac=S
ns\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\craw_window.js"
fn="C:\Users\luis alberto\AppData\Local\Google\Chrome SxS\User Data\Default\Exte
fn="C:\Users\luis alberto\AppData\Local\Torch\User Data\Default\Extensions\plmee
dnkcpcefcjniehbglhgjcjfmlkb\5.2\background.html"
dnkcpcefcjniehbglhgjcjfmlkb\5.2\content.js"
dnkcpcefcjniehbglhgjcjfmlkb\5.2\lsdb.js"
sh=7CC7D6CA03127A31A4ECA9A1CA5A5A205B815309 ft=0 fh=00000000000020fa vn="" ac=S

fn="C:\Users\luis alberto\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\
extensions\AppGraffiti@AppGraffiti.com\chrome\AppGraffiti.jar"
sh=356A66B6580D9C5CD068835EDB189B25331DD68A ft=0 fh=000000000000010b vn="" ac=S
extensions\AppGraffiti@AppGraffiti.com\chrome.manifest"
sh=599B22864F9C6E339309D66D1E2F86D0DB162364 ft=0 fh=000000000000062a vn="" ac=S
extensions\AppGraffiti@AppGraffiti.com\ini.xml"
sh=73ABF44CBEFB6DC718B659E6EE71C563EA109384 ft=0 fh=000000000000044d vn="" ac=S
extensions\AppGraffiti@AppGraffiti.com\install.rdf"
sh=4B04D890E2DCE0F53762279F6402FC0D4CF2868D ft=0 fh=000000000000007a vn="" ac=S
extensions\AppGraffiti@AppGraffiti.com\install.xml"
sh=F84F8D764C8D8573DF67C329238994AFD341C6F5 ft=0 fh=0000000000000745 vn="" ac=S
extensions\chrome\content\id_imbooster4web_v6\ask_settings.xul"
sh=E2FD679A1CD8B3D64CB314D54B9A977942A9881E ft=0 fh=0000000000001fa9 vn="" ac=S
extensions\chrome\content\id_imbooster4web_v6\basis.xml"
sh=C7D7E8479D18F90FAE613ABC09DAFB32DBD5734D ft=0 fh=00000000000017b1 vn="" ac=S
extensions\chrome\content\id_imbooster4web_v6\bubble.js"
sh=40C3B3DBDADE7CB8FCA68A8F2C82D36E091310FE ft=0 fh=00000000000001aa vn="" ac=S
extensions\chrome\content\id_imbooster4web_v6\bubble.xul"
sh=24601994B0CC58DFB2E53113B1B0BD4A7CDF185D ft=0 fh=000000000000043b vn="" ac=S
extensions\chrome\content\id_imbooster4web_v6\contents.rdf"
sh=FD793E27569B20AE30EE64F8780F370A55237C82 ft=0 fh=0000000000020136 vn="" ac=S
extensions\chrome\content\id_imbooster4web_v6\icons.bmp"
sh=ED66950DCF0267C474DB1728862729C4060CA35F ft=1 fh=000000000000a400 vn="" ac=S
extensions\chrome\content\id_imbooster4web_v6\IMBooster4Web_v6.dll"
sh=A5BC6F1A92B4BBD2DD38E7CD9785C8A922A75546 ft=0 fh=00000000000002cc vn="" ac=S
extensions\chrome\content\id_imbooster4web_v6\info.txt"
sh=D9300D19575B63525BFE7D41E67ACEC090798BC9 ft=0 fh=0000000000000039 vn="" ac=S
extensions\chrome\content\id_imbooster4web_v6\jscontainer.htm"
sh=742EBC274AD08267F56E51E585C8720A32C9E3A5 ft=0 fh=000000000000227b vn="" ac=S
extensions\chrome\content\id_imbooster4web_v6\md5.js"
sh=7E7790EA71E8F137E529728B44EAEEA9A77F0CD2 ft=0 fh=0000000000000b7b vn="" ac=S
extensions\chrome\content\id_imbooster4web_v6\minibrowser.js"
sh=C01FCC70C5EF278A6503881C3C2BE7539D0B30FD ft=0 fh=0000000000000436 vn="" ac=S
extensions\chrome\content\id_imbooster4web_v6\minibrowser.xul"
sh=5D8E85FC2F2DC46DCF3FFC7203D817EBB8375B4B ft=0 fh=0000000000000205 vn="" ac=S
extensions\chrome\content\id_imbooster4web_v6\mozilla.xul"
sh=5643F282CD6B808DF2A4CA9575D5B2CFA88FFAEC ft=0 fh=0000000000002c40 vn="" ac=S
extensions\chrome\content\id_imbooster4web_v6\tabs.htm"
sh=99DA997B52D2461154E8E6A7F5104DB845EFD3B7 ft=0 fh=0000000000000169 vn="" ac=S
extensions\chrome\content\id_imbooster4web_v6\tb.css"
sh=CD05224991B8E41A790FFBE7A151F6BA6DD18761 ft=0 fh=0000000000048b40 vn="" ac=S

extensions\chrome\content\id_imbooster4web_v6\tb.js"
sh=01DFCCFF0D6F55D875E8A0ACA5656DC3F921232E ft=0 fh=000000000001326a vn="" ac=S
extensions\chrome\content\id_imbooster4web_v6\tb.xsl"
sh=F557072E46B0E37D8E6ABE05CB90CC722A779890 ft=0 fh=00000000000002de vn="" ac=S
extensions\chrome\content\id_imbooster4web_v6\tb.xul"
sh=921683030F3D422F7F901F42AEBCAE54AE3F50C1 ft=1 fh=000000000001a800 vn="" ac=S
extensions\chrome\content\id_imbooster4web_v6\TbCommonUtils.dll"
sh=38C0D189103390913FB5FB06B32B59AABC7F11F3 ft=1 fh=0000000000262600 vn="a varia
nt of Win32/Toolbar.Softomate.A potentially unwanted application (cleaned by del
eting)" ac=C fn="C:\Users\luis alberto\AppData\Roaming\Mozilla\Firefox\Profiles\
41A66E7E5EE1\extensions\chrome\content\id_imbooster4web_v6\tbcore3.dll"
sh=C993D6FE436BF88E6AE86F2749EF06F1C00D8AE8 ft=0 fh=00000000000008fe vn="" ac=S
extensions\chrome\content\id_imbooster4web_v6\tbcore3.inf"
sh=AE0E83C2FE4D62E9643312AFEA99344916AE4F75 ft=1 fh=0000000000049a00 vn="" ac=S
extensions\chrome\content\id_imbooster4web_v6\tbhelper.dll"
sh=BFF574CD128F84A405E3338D0B4CBEBDBF3A1F0F ft=1 fh=0000000000030400 vn="" ac=S
extensions\chrome\content\id_imbooster4web_v6\TbHelper2.exe"
sh=8201444A3AF481104C2F2AF10388BF5D6A40547B ft=1 fh=000000000000a600 vn="" ac=S
extensions\chrome\content\id_imbooster4web_v6\uninstall.exe"
sh=7931AF7E08CED074DCCA75ED40C6998388916591 ft=1 fh=000000000000de00 vn="" ac=S
extensions\chrome\content\id_imbooster4web_v6\update.exe"
sh=40A29510D8004E55051C01895BCB8F3C8A4C276B ft=0 fh=0000000000000265 vn="" ac=S
extensions\chrome\content\id_imbooster4web_v6\url_processor.htm"
sh=CD8FBFF6BD22EF661EAE1F36CEE940C1A607C2E9 ft=0 fh=0000000000000034 vn="" ac=S
extensions\chrome\content\id_imbooster4web_v6\version.txt"
sh=AD434722BE7395A7803816053F6BF435665D1074 ft=1 fh=0000000000014a00 vn="" ac=S
extensions\components\Engine.dll"
sh=2DB56094837C8C0F03695196F0BC3D9925CE27B9 ft=0 fh=0000000000000169 vn="" ac=S
extensions\components\Engine.xpt"
sh=28A24FD1C377138D65CD6094851B41ECDEDD600D ft=1 fh=0000000000025458 vn="" ac=S
extensions\components\setup_widget_serv.exe"
sh=56D29CDA58427EFE0E21D3880D39EB1B0EF60BEE ft=0 fh=00000000000009d3 vn="" ac=S
extensions\staged\DrMNLa@8.edu\bootstrap.js"
sh=25F5168839AB0D9C383ED077FE237B2558E39D58 ft=0 fh=0000000000000023 vn="" ac=S
extensions\staged\DrMNLa@8.edu\chrome.manifest"
sh=CBCA82B52FA82EAFD13CB79C7A1CF22F70DD1DBC ft=0 fh=0000000000000255 vn="" ac=S
extensions\staged\DrMNLa@8.edu\install.rdf"
sh=A1AE49B8CC6826B2A422C69D792F3E21BFE6F703 ft=0 fh=0000000000000627 vn="" ac=S
extensions\staged\WebSiteRecommendation@weknownet.com\chrome\content\common.js"
sh=8B6BABFF47B8A9793F37036FD1B1A3AD41D38423 ft=0 fh=0000000000016dc5 vn="" ac=S
extensions\staged\WebSiteRecommendation@weknownet.com\chrome\content\jquery-1.8.
3.min.js"
sh=0000000000000000000000000000000000000000 ft=- fh=0000000000000000 vn="" ac=S
extensions\staged\WebSiteRecommendation@weknownet.com\chrome\content\options.js"
sh=15C35DA593E063B349A8F81985981489BB50EEA8 ft=0 fh=00000000000002e3 vn="" ac=S
extensions\staged\WebSiteRecommendation@weknownet.com\chrome\content\options.xul
"
sh=E9D7977DCDA2FC4F5A4FF0C6AF9A2345E4DA506E ft=0 fh=0000000000000ec6 vn="" ac=S
extensions\staged\WebSiteRecommendation@weknownet.com\chrome\content\overlay.js"
sh=0830D2CBB6869B24AB9FE93F2139DEF6F6BA269D ft=0 fh=00000000000007a0 vn="" ac=S
extensions\staged\WebSiteRecommendation@weknownet.com\chrome\content\overlay.xul
"
sh=CD31EC1A49FD6B66ABDFB60405AD8F890880F449 ft=0 fh=0000000000000495 vn="" ac=S
extensions\staged\WebSiteRecommendation@weknownet.com\chrome\content\popup.html"
sh=9DDDEAF893EFADAF3E4A269A2EEB998911677D5E ft=0 fh=0000000000001b6c vn="" ac=S
extensions\staged\WebSiteRecommendation@weknownet.com\chrome\content\popup.js"
sh=D5AA99C1DEC2D7452EE2462C830CDF1DD8E0BBCA ft=0 fh=00000000000030be vn="" ac=S
extensions\staged\WebSiteRecommendation@weknownet.com\chrome\content\tabs_listen
er.js"
sh=C3FB4F40222491887BE3944BCA46D0400E13352B ft=0 fh=000000000000003f vn="" ac=S
extensions\staged\WebSiteRecommendation@weknownet.com\chrome\locale\en-US\settin
gs.dtd"
sh=7A87D104F9C9204299E90C02003B5EE16041CEBE ft=0 fh=0000000000006e4a vn="" ac=S
extensions\staged\WebSiteRecommendation@weknownet.com\chrome\skin\classic\main.c
ss"
sh=F62F16094FDE98FAAE67FE445541D9069FEEED36 ft=0 fh=00000000000003f2 vn="" ac=S
extensions\staged\WebSiteRecommendation@weknownet.com\chrome\skin\classic\overla
y.css"
sh=24C9AB7A3019BB2350B95E7F54BFE24D872B463E ft=0 fh=0000000000000698 vn="" ac=S
extensions\staged\WebSiteRecommendation@weknownet.com\chrome\skin\classic\websit
erecommendation.css"
sh=41066F7B790E53875F8CCD299A5AF316330242C0 ft=0 fh=00000000000001fa vn="" ac=S
extensions\staged\WebSiteRecommendation@weknownet.com\chrome.manifest"
sh=3104D1A3F04E29686B19D9E967133D943122B2DC ft=0 fh=00000000000004d6 vn="" ac=S
extensions\staged\WebSiteRecommendation@weknownet.com\install.rdf"
sh=0000000000000000000000000000000000000000 ft=- fh=0000000000000000 vn="" ac=S
extensions\staged\WebSiteRecommendation@weknownet.com\readme.txt"
sh=618A2939E8ADF578F36EB614B3BD9309C4D44EED ft=0 fh=0000000000000861 vn="JS/Tool
bar.Crossrider.T potentially unwanted application (cleaned by deleting)" ac=C fn
="C:\Users\luis alberto\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\ex
tensions\youtube-e2l@jetpack\content\overlay.js"
sh=2E3EFC59B07FA4A3EB4027DF2CE5BAA8A2844780 ft=0 fh=0000000000000102 vn="" ac=S
extensions\youtube-e2l@jetpack\content\overlay.xul"
sh=21CE557DFC5414C9343F0E14232A46ACDDF7FDEF ft=0 fh=00000000000000b1 vn="" ac=S
extensions\youtube-e2l@jetpack\chrome.manifest"
sh=376DC3328225E066DD92CE0C7AB34769EDF4917F ft=0 fh=0000000000000266 vn="" ac=S
extensions\youtube-e2l@jetpack\install.rdf"
sh=CA9FF1B733EFBDC4FB4AF0FF306705C61ACEFA77 ft=0 fh=0000000000000861 vn="JS/Tool
tensions\{FDD8ECF0-451A-414D-8C8F-7B7F78B0ECD3}\content\overlay.js"
sh=66791F148C0E26BB4170FA65300177786BDD5189 ft=0 fh=0000000000000120 vn="" ac=S
extensions\{FDD8ECF0-451A-414D-8C8F-7B7F78B0ECD3}\content\overlay.xul"
sh=0D2DF9A12D58C0405F7B3A9E6F17F823B63E50FF ft=0 fh=00000000000000de vn="" ac=S
extensions\{FDD8ECF0-451A-414D-8C8F-7B7F78B0ECD3}\chrome.manifest"
sh=9087B413F1B6F1535538880F84BD0C4E3BCDCA99 ft=0 fh=0000000000000288 vn="" ac=S
extensions\{FDD8ECF0-451A-414D-8C8F-7B7F78B0ECD3}\install.rdf"
sh=8850A227A46E0DE099584C1E5C8F337924BBD7A5 ft=0 fh=00000000000000fe vn="" ac=S
extensions\chrome.manifest"
sh=E71236DD268A0EBF8C6B56B41E90FE4E424E8054 ft=0 fh=0000000000000397 vn="" ac=S
extensions\install.rdf"
sh=F6C657CF06B27B1DC695C2E1772780FA83C87202 ft=0 fh=000000000002e630 vn="" ac=S
extensions\{EEE6C361-6118-11DC-9C72-001320C79847}.xpi"
fn="C:\Users\luis alberto\AppData\Roaming\Mozilla\Firefox\Profiles\c8nj36s2.defa
ult\extensions\AppGraffiti@AppGraffiti.com\chrome\AppGraffiti.jar"
ult\extensions\AppGraffiti@AppGraffiti.com\chrome.manifest"
ult\extensions\AppGraffiti@AppGraffiti.com\ini.xml"
ult\extensions\AppGraffiti@AppGraffiti.com\install.rdf"
ult\extensions\AppGraffiti@AppGraffiti.com\install.xml"
ult\extensions\chrome\content\id_imbooster4web_v6\ask_settings.xul"
ult\extensions\chrome\content\id_imbooster4web_v6\basis.xml"
ult\extensions\chrome\content\id_imbooster4web_v6\bubble.js"
ult\extensions\chrome\content\id_imbooster4web_v6\bubble.xul"
ult\extensions\chrome\content\id_imbooster4web_v6\contents.rdf"
ult\extensions\chrome\content\id_imbooster4web_v6\icons.bmp"
ult\extensions\chrome\content\id_imbooster4web_v6\IMBooster4Web_v6.dll"
ult\extensions\chrome\content\id_imbooster4web_v6\info.txt"
ult\extensions\chrome\content\id_imbooster4web_v6\jscontainer.htm"
ult\extensions\chrome\content\id_imbooster4web_v6\md5.js"
ult\extensions\chrome\content\id_imbooster4web_v6\minibrowser.js"
ult\extensions\chrome\content\id_imbooster4web_v6\minibrowser.xul"
ult\extensions\chrome\content\id_imbooster4web_v6\mozilla.xul"
ult\extensions\chrome\content\id_imbooster4web_v6\tabs.htm"
ult\extensions\chrome\content\id_imbooster4web_v6\tb.css"
ult\extensions\chrome\content\id_imbooster4web_v6\tb.js"
ult\extensions\chrome\content\id_imbooster4web_v6\tb.xsl"
ult\extensions\chrome\content\id_imbooster4web_v6\tb.xul"
ult\extensions\chrome\content\id_imbooster4web_v6\TbCommonUtils.dll"
c8nj36s2.default\extensions\chrome\content\id_imbooster4web_v6\tbcore3.dll"
ult\extensions\chrome\content\id_imbooster4web_v6\tbcore3.inf"
ult\extensions\chrome\content\id_imbooster4web_v6\tbhelper.dll"
ult\extensions\chrome\content\id_imbooster4web_v6\TbHelper2.exe"
ult\extensions\chrome\content\id_imbooster4web_v6\uninstall.exe"
ult\extensions\chrome\content\id_imbooster4web_v6\update.exe"
ult\extensions\chrome\content\id_imbooster4web_v6\url_processor.htm"

ult\extensions\chrome\content\id_imbooster4web_v6\version.txt"
ult\extensions\components\Engine.dll"
ult\extensions\components\Engine.xpt"
ult\extensions\components\setup_widget_serv.exe"
ult\extensions\staged\DrMNLa@8.edu\bootstrap.js"
ult\extensions\staged\DrMNLa@8.edu\chrome.manifest"
ult\extensions\staged\DrMNLa@8.edu\install.rdf"
ult\extensions\staged\WebSiteRecommendation@weknownet.com\chrome\content\common.
js"
ult\extensions\staged\WebSiteRecommendation@weknownet.com\chrome\content\jquery1.8.3.min.js"
sh=0000000000000000000000000000000000000000 ft=- fh=0000000000000000 vn="" ac=S
ult\extensions\staged\WebSiteRecommendation@weknownet.com\chrome\content\options
.js"
.xul"
ult\extensions\staged\WebSiteRecommendation@weknownet.com\chrome\content\overlay
.js"
.xul"
ult\extensions\staged\WebSiteRecommendation@weknownet.com\chrome\content\popup.h
tml"
ult\extensions\staged\WebSiteRecommendation@weknownet.com\chrome\content\popup.j
s"
ult\extensions\staged\WebSiteRecommendation@weknownet.com\chrome\content\tabs_li
stener.js"
ult\extensions\staged\WebSiteRecommendation@weknownet.com\chrome\locale\en-US\se
ttings.dtd"
ult\extensions\staged\WebSiteRecommendation@weknownet.com\chrome\skin\classic\ma
in.css"
ult\extensions\staged\WebSiteRecommendation@weknownet.com\chrome\skin\classic\ov
erlay.css"
ult\extensions\staged\WebSiteRecommendation@weknownet.com\chrome\skin\classic\we
bsiterecommendation.css"
ult\extensions\staged\WebSiteRecommendation@weknownet.com\chrome.manifest"
ult\extensions\staged\WebSiteRecommendation@weknownet.com\install.rdf"
sh=0000000000000000000000000000000000000000 ft=- fh=0000000000000000 vn="" ac=S
ult\extensions\staged\WebSiteRecommendation@weknownet.com\readme.txt"
="C:\Users\luis alberto\AppData\Roaming\Mozilla\Firefox\Profiles\c8nj36s2.defaul
t\extensions\youtube-e2l@jetpack\content\overlay.js"
ult\extensions\youtube-e2l@jetpack\content\overlay.xul"
ult\extensions\youtube-e2l@jetpack\chrome.manifest"
ult\extensions\youtube-e2l@jetpack\install.rdf"
t\extensions\{FDD8ECF0-451A-414D-8C8F-7B7F78B0ECD3}\content\overlay.js"
ult\extensions\{FDD8ECF0-451A-414D-8C8F-7B7F78B0ECD3}\content\overlay.xul"
ult\extensions\{FDD8ECF0-451A-414D-8C8F-7B7F78B0ECD3}\chrome.manifest"
ult\extensions\{FDD8ECF0-451A-414D-8C8F-7B7F78B0ECD3}\install.rdf"
ult\extensions\chrome.manifest"
ult\extensions\install.rdf"
ult\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}.xpi"
sh=9A632BC7623B8DC7A6DECFE47E953DFAEEED4288 ft=1 fh=0000000000031000 vn="Win32/A
dware.ActiveCollector.AA application (cleaned by deleting)" ac=C fn="C:\Users\lu
is alberto\AppData\Roaming\Mozilla\Firefox\{5cea9a87-a3a5-4c2a-b08d-8a1876d4931c
}\components\ACFFComponent.dll"
sh=64F52D0F082C758DBE89032616A5D6ABA9CCE9AC ft=1 fh=000000000009d608 vn="Win32/S
ystweak.G potentially unwanted application (deleted)" ac=C fn="C:\Users\luis alb
erto\AppData\Roaming\Systweak\ssd\SSDPTstub.exe"
sh=F415283B5DB67BBA300F318DBE88C5DEFEBB4129 ft=1 fh=00000000000db919 vn="Win32/T
oolbar.Babylon potentially unwanted application (deleted)" ac=C fn="C:\Users\lui
s alberto\AppData\Roaming\VideoLAN\bbtsetup.exe"
sh=89092BB29B0608D09B6B0346320032F39159FC86 ft=1 fh=00000000003d2929 vn="multipl
e threats,Win32/Adware.ActiveCollector application,Win64/Adware.ActiveCollector
application,a variant of Win32/Adware.ActiveCollector.AA application (cleaned by
deleting)" ac=C fn="C:\Users\luis alberto\AppData\Roaming\VideoLAN\lastupdate.e
xe"
sh=9AA260061369FFAA8550B417CB125E732749365A ft=1 fh=00000000001c47a0 vn="a varia
nt of Win32/Toolbar.CrossRider.CB potentially unwanted application (cleaned by d
eleting)" ac=C fn="C:\Users\luis alberto\AppData\Roaming\AMMYCCM.exe"
sh=F9E0B4266C015CF0B7369D5A9B8FFCC26AF23ACC ft=1 fh=00000000001553a8 vn="a varia
nt of Win32/Toolbar.CrossRider.AX potentially unwanted application (cleaned by d
eleting)" ac=C fn="C:\Users\luis alberto\AppData\Roaming\KKAA.exe"
sh=1F066FD533416EE481FE0E61534AEEC759DC5409 ft=1 fh=00000000001cc3a8 vn="a varia
nt of Win32/Toolbar.CrossRider.BN potentially unwanted application (cleaned by d
eleting)" ac=C fn="C:\Users\luis alberto\AppData\Roaming\RAGEZ.exe"
sh=2EE020C0DE473A7B4247542C0A5FAA85E0499DBF ft=1 fh=000000000014e3a0 vn="a varia
eleting)" ac=C fn="C:\Users\luis alberto\AppData\Roaming\YQTSKPY.exe"
sh=BF2F2487AF0440F495459080A76FBD40BCA69307 ft=1 fh=0000000000fb91a0 vn="Win32/S
omoto.Q potentially unwanted application (deleted)" ac=C fn="C:\Users\luis alber
to\Desktop\aTube_Catcher_SFT_7980.exe"
sh=7838A1A25A4903937722A1F5C2D48A1B7A362901 ft=1 fh=000000000005b2c0 vn="Win32/S
oftonicDownloader.E potentially unwanted application (cleaned by deleting)" ac=C
fn="C:\Users\luis alberto\Desktop\SoftonicDownloader_para_atube-catcher.exe"
sh=73DC066C7857E9151303F64F64ABB22FC2298AD6 ft=1 fh=00000000001025e0 vn="a varia
nt of Win32/SoftPulse.Q potentially unwanted application (cleaned by deleting)"
ac=C fn="C:\Users\luis alberto\Downloads\atube catcher.exe"
sh=D656E2DD8CD1479CC766C44E4D864B642DF89A3C ft=1 fh=00000000000a9858 vn="a varia
nt of Win32/SoftPulse.V potentially unwanted application (cleaned by deleting)"
ac=C fn="C:\Users\luis alberto\Downloads\Java.exe"
sh=2CB266EA202CC4B75EB30CEF29A73332C904B4BC ft=1 fh=000000000009eb78 vn="a varia
nt of Win32/SoftPulse.AH potentially unwanted application (cleaned by deleting)"
ac=C fn="C:\Users\luis alberto\Downloads\Setup.exe"
sh=46D69A4DD532E91014B6362D705D2FF4B6F3E2C5 ft=1 fh=000000000000eae8 vn="Win64/M
PCCleaner.A potentially unwanted application (cleaned by deleting)" ac=C fn="C:\
Windows\system32\drivers\MPCKpt.sys"
sh=741518CA17409E0C108EA202464829E6C664ED1E ft=1 fh=000000000000b930 vn="a varia
nt of MSIL/DomaIQ.A potentially unwanted application (cleaned by deleting)" ac=C
fn="C:\Program Files\Uninstaller\Uninstall.exe"
sh=02E9282CC4E21309AA99104ED8D95E40BFC6416B ft=1 fh=000000000004a17e vn="a varia
nt of Win32/Amonetize.X potentially unwanted application (deleted)" ac=C fn="C:\
Program Files (x86)\AmiExt\flashEnhancer\uninstall.exe"
sh=8412296D2832D41331AE581C1E300D0812251002 ft=1 fh=000000000002fb90 vn="a varia
nt of Win32/AdWare.EasySpeedCheck.A application (cleaned by deleting)" ac=C fn="
C:\Program Files (x86)\Easy Speed Check\easyspeedcheck.exe"
sh=DF4FB1B2D51A6D5F64FA31858598711134756D63 ft=1 fh=00000000000d9098 vn="a varia
nt of Win32/Toolbar.Babylon.A potentially unwanted application (cleaned by delet
ing)" ac=C fn="C:\Program Files (x86)\Installer\babylonnn.exe"
sh=7BBA403FF536FCD057B03BC6C6DD60B30818E26F ft=1 fh=0000000000007168 vn="a varia
nt of Win32/MPCCleaner.A potentially unwanted application (cleaned by deleting)"
ac=C fn="C:\Program Files (x86)\MPC Cleaner\Drivers\MPCBase_32.sys"
Program Files (x86)\MPC Cleaner\Drivers\MPCKpt.sys"
sh=75862FCA547282A04952F2AD1235A86A244D5BF5 ft=1 fh=000000000000cee8 vn="a varia

ac=C fn="C:\Program Files (x86)\MPC Cleaner\Drivers\MPCKpt_vista_32.sys"
sh=659F5A30DA39FEAE4B3EE7F0C40A24222AA3E27E ft=1 fh=000000000000d2e8 vn="a varia
ac=C fn="C:\Program Files (x86)\MPC Cleaner\Drivers\MPCKpt_xp_32.sys"
sh=7FA3746CD92CF822FFA1D3AF4F0304655A7FA69F ft=1 fh=000000000046b748 vn="a varia
ac=C fn="C:\Program Files (x86)\MPC Cleaner\Exe\ADC_qd00000.exe"
sh=27E6143704C268FD62E0184A7CFD9A5C3D2F411F ft=1 fh=0000000000038be8 vn="a varia
ac=C fn="C:\Program Files (x86)\MPC Cleaner\Microsoft.VC90.CRT\msvcm90.dll"
sh=B00D7D54417F83530AB41C1D45CECB48DC796FCF ft=1 fh=00000000000195e0 vn="a varia
nt of Win32/MPCCleaner.A potentially unwanted application (cleaned by deleting (
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\AdbWinApi.
dll"
sh=5ADCA9DD3BF59F20C0B0CBB12D35F2EF0849982A ft=1 fh=0000000000010be0 vn="a varia
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\AdbWinUsbA
pi.dll"
sh=A0876F1786A56B0F15553C3ED921BD9796B1F309 ft=1 fh=000000000000c5e0 vn="a varia
ac=C fn="C:\Program Files (x86)\MPC Cleaner\AdcManager.dll"
sh=1A61B312A4C24359798ED1DCA279564AB10A4809 ft=1 fh=00000000000159e0 vn="a varia
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\AndriodSer
ver.dll"
sh=9B3DB936D99C7E4068AB0EE40D01A3EA12F93516 ft=1 fh=000000000004f3e0 vn="a varia
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\BrowserPlu
gIn.dll"
sh=E87299615DD3E4BBB830A1C5BCB1740F84918F36 ft=1 fh=00000000000373e0 vn="a varia
ac=C fn="C:\Program Files (x86)\MPC Cleaner\CeBase.dll"
sh=47B0D6CD29DDD112644FDBEEFC5FBA12BD4454F0 ft=1 fh=0000000000053de0 vn="a varia
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\Cleaner.dl
l"
sh=7F8A85698C0E04C809EB165A6E5BCB49D436F4C0 ft=1 fh=000000000002efe0 vn="a varia
ac=C fn="C:\Program Files (x86)\MPC Cleaner\CrashReport.exe"
sh=523D9F4DD4F306213D7F391E5F09ED617AB8AC9E ft=1 fh=00000000000251e0 vn="a varia
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\Database.d
ll"
sh=41D812F8C628FD41FAB616F2663CE46042C72A18 ft=1 fh=000000000010fde0 vn="a varia
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\isafechlp.
dll"
sh=563CA7FA5E43EF24D45268B58AA2678C69D4979D ft=1 fh=0000000000025be0 vn="a varia
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\LogReport.
dll"
sh=43A933E2395C4A3C1A70EF0120B7F32FB614E15B ft=1 fh=00000000000229e0 vn="a varia
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\LpcManager
.dll"
sh=F528FF67BE3F6A16A83A8B83985CCB745C29440F ft=1 fh=00000000000e69e0 vn="a varia
ac=C fn="C:\Program Files (x86)\MPC Cleaner\MainFrame.dll"
sh=E50E257A2772B05ABDC5B1301348F3A7BCD31037 ft=1 fh=00000000000201e0 vn="a varia

after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\Monitor.dl
l"
sh=92C399BF4685ACAB45D637C8CC3374BAEE33B6F6 ft=1 fh=0000000000028de0 vn="a varia
ac=C fn="C:\Program Files (x86)\MPC Cleaner\MPC.exe"
sh=91A4B01891B52EFC7216F580089BDF9316595670 ft=1 fh=00000000000451e0 vn="a varia
ac=C fn="C:\Program Files (x86)\MPC Cleaner\MPCAutoClean.exe"
sh=E6E86E548502CEE2140887ABAA15E1D33CAB0369 ft=1 fh=00000000000e1fe0 vn="a varia
ac=C fn="C:\Program Files (x86)\MPC Cleaner\MPCBS.dll"
sh=A54EA6483D2EBE28F90745F64A484BC8BA78621B ft=1 fh=0000000000019de0 vn="a varia
ac=C fn="C:\Program Files (x86)\MPC Cleaner\MPCCheckDump.exe"
sh=B6C8B991C4E32E63FDAB176AE73BB82C2E99758F ft=1 fh=00000000000425e0 vn="a varia
ac=C fn="C:\Program Files (x86)\MPC Cleaner\MPCNews.exe"
sh=38AC9F35E07275308456A86AB74010ACFBE697C4 ft=1 fh=00000000000559e0 vn="a varia
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\MPCProtect
Service.exe"
sh=D8369B07B0B92C86C7DECE8665EA79940841BA10 ft=1 fh=000000000000d5e0 vn="a varia
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\MpcSafeDll
.dll"
sh=73D9CF58402E2A780E175B88518645DEC6FC4468 ft=1 fh=000000000000cfe0 vn="a varia
64.dll"
sh=CE917EF310695BFC3C19525A70DC038762257053 ft=1 fh=00000000000275e0 vn="a varia
ac=C fn="C:\Program Files (x86)\MPC Cleaner\MPCSecurity.exe"
sh=E66376388A51D1EA9485236795500EBB328E56F7 ft=1 fh=00000000000385e0 vn="a varia
ac=C fn="C:\Program Files (x86)\MPC Cleaner\MPCSetting.exe"
sh=937836780BB991A61B3FC9EE896D85933B0B931F ft=1 fh=0000000000028de0 vn="a varia
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\MPCTray.ex
e"
sh=803B51C4D42E07BB41210CD4E01DFC213C9901DA ft=1 fh=0000000000019de0 vn="a varia
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\MPCTray64.
exe"
ac=C fn="C:\Program Files (x86)\MPC Cleaner\msvcm90.dll"
sh=1CADB36329505892F0578833C2910E84C716269E ft=1 fh=00000000000105e0 vn="a varia
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\Report.dll
"
sh=47BEF3747FF0703C5710E292DC6FA29E1739425F ft=1 fh=00000000000497e0 vn="a varia
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\SafeNavi.d
ll"
sh=37CB7B8ECF1AC40532B00988BD3141724AEE6AA4 ft=1 fh=00000000000895e0 vn="a varia
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\SafeNavi64
.dll"
sh=1370B0833D91FA5D4734629896AD2A8A6BC7E66C ft=1 fh=0000000000076fe0 vn="a varia

after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\SafeProtec
t.dll"
sh=E3136ECC7F2BB03FB1C452F0B6F67B87FE828C37 ft=1 fh=0000000000027de0 vn="a varia
ac=C fn="C:\Program Files (x86)\MPC Cleaner\SetupFrame.dll"
sh=53D8EE4FB02CAACC0253A6BFA01D309B437D7D20 ft=1 fh=00000000000a21e0 vn="a varia
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\Support.dl
l"
sh=E0FC6B43F8FAC1C0D1037887E5EAF7B1F9C5F86A ft=1 fh=00000000000ce5e0 vn="a varia
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\TrayFrame.
dll"
sh=E364F40928C63A03E07C47EA66AD832F935DAF71 ft=1 fh=00000000000271e0 vn="a varia
ac=C fn="C:\Program Files (x86)\MPC Cleaner\Uninstall.exe"
sh=001C01C16A3087ECA4029C816FF50DE2E083B974 ft=1 fh=00000000000215e0 vn="a varia
ac=C fn="C:\Program Files (x86)\MPC Cleaner\UninstallFrame.dll"
sh=A29E3225E8E005B477E1237D5390D34684239937 ft=1 fh=0000000000030be0 vn="a varia
ac=C fn="C:\Program Files (x86)\MPC Cleaner\UninstDelete.exe"
sh=9FA4D99DE311E69F934643135F8EE32E44A98C41 ft=1 fh=00000000000421e0 vn="a varia
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\Update.dll
"
sh=D75E7481BF43F7EFB55867032D8E93A886717528 ft=1 fh=00000000000491e0 vn="a varia
ac=C fn="C:\Program Files (x86)\MPC Cleaner\UpdateHost.exe"
sh=F9B4481ACF194E4CAF80A92B5F120A7471F93744 ft=1 fh=00000000000071e0 vn="a varia
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\Upgrade.dl
l"
sh=82C95690C090EC05FDE21F4372A8013DC9E7A281 ft=1 fh=000000000014f3e0 vn="a varia
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\Utility.dl
l"
sh=86C97042F4A378EBA06C0F54D825F096B04CFC91 ft=1 fh=000000000003f5e0 vn="a varia
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\Web.dll"
sh=F46740D4E2A0F7748FD7CACDFA827A93EE1E28C3 ft=1 fh=0000000000008fe0 vn="a varia
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\WinService
.dll"
sh=77A677D732B2F9FCE206017D2B4F65358D89854A ft=1 fh=00000000000f8be0 vn="a varia
ac=C fn="C:\Program Files (x86)\MPC Cleaner\xadb.exe"
sh=28EA52315FD6208C147068209C15A8CC69D2BFBE ft=1 fh=00000000000187e0 vn="a varia
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\XBus.dll"
sh=A53E3FDC66DD1978D4B1E8C589BD42AAF81EA52A ft=1 fh=000000000000a3e0 vn="a varia
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\XProcessBu
s.dll"
sh=73014EDE7B750F44B574947F3EDA1DB2BDB7344E ft=1 fh=000000000010a9e0 vn="a varia
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\XSkin.dll"
sh=C8F1E3F28152C6C010B7AE8FA4D167E3C388FF0C ft=1 fh=000000000005ff38 vn="Win32/S
weetIM.K potentially unwanted application (cleaned by deleting)" ac=C fn="C:\Pro

gram Files (x86)\SweetIM\Communicator\resources\sqlite\mgSqlite3.dll"
sh=23B3E5F508EB6FC76D67A873A5AAC2D34C3CE5E1 ft=1 fh=000000000009ed58 vn="a varia
nt of Win32/SweetIM.L potentially unwanted application (cleaned by deleting)" ac
=C fn="C:\Program Files (x86)\SweetIM\Communicator\mgcommon.dll"
sh=7DB65607A18C67C0C8C0310E0FF23A202AB3F070 ft=1 fh=000000000000a158 vn="a varia
=C fn="C:\Program Files (x86)\SweetIM\Communicator\mgcommunication.dll"
sh=3176C30E3A30990C42C968951B6BB2ADFD0B1C00 ft=1 fh=0000000000011758 vn="a varia
=C fn="C:\Program Files (x86)\SweetIM\Communicator\mgsimcommon.dll"
sh=08647AB20AED7B8385931FDF5B4A48165131A061 ft=1 fh=000000000000ef58 vn="a varia
=C fn="C:\Program Files (x86)\SweetIM\Communicator\mgxml_wrapper.dll"
sh=C6A9FB024D614702667E0768E0B673BA3A31F504 ft=1 fh=0000000000038958 vn="a varia
nt of Win32/SweetIM.F potentially unwanted application (cleaned by deleting)" ac
=C fn="C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe"
gram Files (x86)\SweetIM\Messenger\resources\sqlite\mgSqlite3.dll"
sh=D09F832544B921CD7C61A7DB193F29EF6638AD88 ft=1 fh=0000000000023158 vn="a varia
=C fn="C:\Program Files (x86)\SweetIM\Messenger\ContentPackagesActivationHandler
.exe"
sh=C6E3F8034D197C34D61701AC146694B6DBEC36CD ft=1 fh=0000000000006958 vn="a varia
=C fn="C:\Program Files (x86)\SweetIM\Messenger\mgAdaptersProxy.dll"
sh=FC883B83DA2A9ED93AC2A4CEC9936268A6B264C2 ft=1 fh=0000000000015158 vn="a varia
=C fn="C:\Program Files (x86)\SweetIM\Messenger\mgArchive.dll"
sh=F3001B5F58A6C6AB8DD7E6E63CB89D20F74EF228 ft=1 fh=000000000007e158 vn="a varia
=C fn="C:\Program Files (x86)\SweetIM\Messenger\mgcommon.dll"
sh=2CF3C9FBCBEBAA6D75DE43CCC487D62954538F81 ft=1 fh=0000000000008f58 vn="a varia
=C fn="C:\Program Files (x86)\SweetIM\Messenger\mgcommunication.dll"
sh=60FCD298549E0383DFACBE66420DC922D6BAAF84 ft=1 fh=0000000000010158 vn="a varia
=C fn="C:\Program Files (x86)\SweetIM\Messenger\mgconfig.dll"
sh=531A5D492B39076AA7990DD76F41B762258B86A7 ft=1 fh=0000000000025158 vn="a varia
=C fn="C:\Program Files (x86)\SweetIM\Messenger\mgFlashPlayer.dll"
sh=AE57E26160449200540B1FD8E839F1BD5A30327A ft=1 fh=0000000000029158 vn="a varia
=C fn="C:\Program Files (x86)\SweetIM\Messenger\mghooking.dll"
sh=B6E78443D25AF8B978DC24D515DF7B2F673629CC ft=1 fh=000000000002a158 vn="a varia
=C fn="C:\Program Files (x86)\SweetIM\Messenger\mgICQAuto.dll"
sh=42B14A7D72C6EDAF5140A2C7B95149B92473853C ft=1 fh=000000000004a158 vn="a varia
=C fn="C:\Program Files (x86)\SweetIM\Messenger\mgICQMessengerAdapter.dll"
sh=87FF2D9A36B50B5A7DF4D08F87B92BEA86D7DAB7 ft=1 fh=0000000000014158 vn="a varia
=C fn="C:\Program Files (x86)\SweetIM\Messenger\mgMediaPlayer.dll"
sh=055E7A147AB9DCB141FDF58A0D3CCD825AE8B361 ft=1 fh=0000000000065158 vn="a varia
=C fn="C:\Program Files (x86)\SweetIM\Messenger\mgMsnMessengerAdapter.dll"
sh=C786E62AB09C10B6277F3E9CFC34207FE56E1FFA ft=1 fh=000000000009d158 vn="a varia
=C fn="C:\Program Files (x86)\SweetIM\Messenger\mgSweetIM.dll"
sh=07695C8842935A01310F52C83BAB364950419841 ft=1 fh=0000000000049158 vn="a varia

=C fn="C:\Program Files (x86)\SweetIM\Messenger\mgUpdateSupport.dll"
sh=093FB06E67DB8C5562A823E389853340405B8724 ft=1 fh=0000000000012158 vn="a varia
=C fn="C:\Program Files (x86)\SweetIM\Messenger\mgxml_wrapper.dll"
sh=A679EB39BB32DD88C09E150B0E5F7BAED12467A6 ft=1 fh=0000000000016158 vn="a varia
=C fn="C:\Program Files (x86)\SweetIM\Messenger\mgYahooAuto.dll"
sh=9B45902B8B791A84EC6F7D1AD2E8099410D1A467 ft=1 fh=000000000002e158 vn="a varia
=C fn="C:\Program Files (x86)\SweetIM\Messenger\mgYahooMessengerAdapter.dll"
02:53:38 EOS report sent
02:53:38 Finalizing Scanner
02:53:38 Finalizing DetectAV
7902a8602d76ed&user_token=1180273625337362&report={"report_type": "REBOOT_PROMPT
",}&report_sig=2B0E1C581CDD0706BF99A0BF6D229F80&fwd_ip=127.0.0.1&version=4.5.0.2
902:53:38
02:53:38 FB Restart Prompt sent
# version=8
# FBAV_user_token=1180273625337362
# FBAV_attack_id=940201966078273
# FBAV_status=0
# flags=3
# ESET.exe=4.5.0.29
# engine=29475
# end=finished
# remove_checked=true
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# sfx_checked=true
# utc_time=2016-05-15 06:24:32
# country="Mexico"
# lang=1033
# compatibility_mode_1='Microsoft Security Essentials'
# compatibility_mode=5895 16777213 100 100 6782939 157364824 0 0
# scanned=69278
# found=370
# cleaned=370
# scan_time=5080
sh=0000000000000000000000000000000000000000 ft=- fh=0000000000000000 vn="a varia
nt of Win32/SweetIM.L potentially unwanted application,a variant of Win32/MPCCle
aner.A potentially unwanted application (deleted (after the next restart))" ac=C
fn="${Memory}"

sh=0000000000000000000000000000000000000000 ft=- fh=0000000000000000 vn="" ac=S
ensions\plmeednkcpcefcjniehbglhgjcjfmlkb\5.2\sT9.js"
sh=0000000000000000000000000000000000000000 ft=- fh=0000000000000000 vn="" ac=S
ons\plmeednkcpcefcjniehbglhgjcjfmlkb\5.2\sT9.js"
sh=0000000000000000000000000000000000000000 ft=- fh=0000000000000000 vn="" ac=S
ons\plmeednkcpcefcjniehbglhgjcjfmlkb\5.2\sT9.js"
sh=0000000000000000000000000000000000000000 ft=- fh=0000000000000000 vn="" ac=S
ensions\plmeednkcpcefcjniehbglhgjcjfmlkb\5.2\sT9.js"
ednkcpcefcjniehbglhgjcjfmlkb\5.2\background.html"
ednkcpcefcjniehbglhgjcjfmlkb\5.2\content.js"
ednkcpcefcjniehbglhgjcjfmlkb\5.2\lsdb.js"
sh=0000000000000000000000000000000000000000 ft=- fh=0000000000000000 vn="" ac=S
ednkcpcefcjniehbglhgjcjfmlkb\5.2\sT9.js"
sh=E1C99225C4C16710DE3AF3D52300E1E943F7C84F ft=1 fh=00000000000de510 vn="a varia
=C fn="C:\Users\All Users\SweetIM\Messenger\update\sweetimsetup.exe"

sh=0000000000000000000000000000000000000000 ft=- fh=0000000000000000 vn="" ac=S
ns\plmeednkcpcefcjniehbglhgjcjfmlkb\5.2\sT9.js"
sh=0000000000000000000000000000000000000000 ft=- fh=0000000000000000 vn="" ac=S
lmeednkcpcefcjniehbglhgjcjfmlkb\5.2\sT9.js"
sh=0000000000000000000000000000000000000000 ft=- fh=0000000000000000 vn="" ac=S
lmeednkcpcefcjniehbglhgjcjfmlkb\5.2\sT9.js"
sh=0000000000000000000000000000000000000000 ft=- fh=0000000000000000 vn="" ac=S
pcefcjniehbglhgjcjfmlkb\5.2\background.html"
pcefcjniehbglhgjcjfmlkb\5.2\content.js"
pcefcjniehbglhgjcjfmlkb\5.2\lsdb.js"
sh=0000000000000000000000000000000000000000 ft=- fh=0000000000000000 vn="" ac=S
pcefcjniehbglhgjcjfmlkb\5.2\sT9.js"
sh=763A1C3053CA7D5AE9459683F9D7628BAA0B3499 ft=0 fh=0000000000001140 vn="" ac=S

fonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9297_0\scripts\libs\angular-sanitize.min.j
s"
fonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9297_0\scripts\libs\angular.min.js"
fonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9297_0\scripts\libs\sienium.remoteCoordina
tor.js"
sh=674AA80585EFDD1E247284AF8C53F4747CE67A1E ft=0 fh=0000000000000e2d vn="" ac=S
fonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9297_0\scripts\coreApp.js"
sh=D80955A1EF7D497A190FBCB3A364C0BD145EE189 ft=0 fh=0000000000001bbe vn="" ac=S
fonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9297_0\scripts\facebookSidebarController.j
s"
sh=644B72E285C75BF6FF6C1686C5EC2CFD3200940B ft=0 fh=00000000000018cb vn="" ac=S
fonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9297_0\scripts\linkSliderController.js"
sh=F40A2D8C5E038C4DD2846C33547B41D0A195876D ft=0 fh=0000000000005318 vn="" ac=S
fonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9297_0\styles\fonts\OpenSans-Bold.woff"
sh=9361285CDCB438D671847BA0B01B93D2BE43FB92 ft=0 fh=00000000000054f0 vn="" ac=S
fonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9297_0\styles\fonts\OpenSans-Light.woff"
sh=D8721A797492D3DD8A5F5A419A386E69246D15ED ft=0 fh=0000000000005040 vn="" ac=S
fonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9297_0\styles\fonts\OpenSans-Regular.woff"
fonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9297_0\styles\angular-csp.css"
fonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9297_0\styles\cssreset-min.css"
sh=BDA955EEBD69346CCCD0EDB3BDAB0CC8A704AA8A ft=0 fh=000000000000235a vn="" ac=S
fonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9297_0\styles\facebookSidebar.css"
sh=CD3560E5B8187A675F5963B0C998FD4FF1EA4DD5 ft=0 fh=0000000000000243 vn="" ac=S
fonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9297_0\styles\font.css"
sh=6EDA66B78F1AF67DFAA3A9D5D6C4001C86D91829 ft=0 fh=0000000000000886 vn="" ac=S
fonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9297_0\styles\linkSlider.css"
sh=947DADB00D2C01CC5BCF8D235F407A14EDA12CE6 ft=0 fh=000000000000154b vn="" ac=S
fonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9297_0\styles\main.css"
sh=29A85B8CBD994B65486CE34E8A2F31C22382444C ft=0 fh=0000000000000b19 vn="" ac=S
fonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9297_0\styles\offerscreenFacebook.css"
sh=46E1D59734C4A70902AE27F94979EA1752C6018E ft=0 fh=0000000000000b33 vn="" ac=S
fonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9297_0\views\facebookSidebar.html"
sh=E2FFCB5D8D6093319B84EDECE75F8AACE35B9B95 ft=0 fh=00000000000006bd vn="" ac=S
fonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9297_0\views\linkSlider.html"
sh=0000000000000000000000000000000000000000 ft=- fh=0000000000000000 vn="" ac=S
fonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9297_0\background.js"
sh=943804A8971C223127655CF71B5B9381653B342D ft=0 fh=0000000000001b51 vn="" ac=S

sh=F4868E75E21D37FCBC9A5871B6B120EB3E4600DF ft=0 fh=0000000000005110 vn="JS/Tool
bar.Crossrider.O potentially unwanted application (cleaned by deleting)" ac=C fn
="C:\Users\luis alberto\AppData\Local\BoBrowser\User Data\Default\Extensions\ebp
eonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\extensionData\plugins\14.js"
sh=38D00461C6AAE76E8D28F1B29256E854E240C868 ft=0 fh=00000000000137f8 vn="" ac=S
sh=59418B96ED4D653FE8F4C66E5E95BAE9ED93C808 ft=0 fh=0000000000000569 vn="JS/Tool
bar.Crossrider.J potentially unwanted application (cleaned by deleting)" ac=C fn
sh=32FE8D811A0CD3B7424FD03880F6FE6C32781264 ft=0 fh=0000000000001c9e vn="JS/Tool
bar.Crossrider.G potentially unwanted application (cleaned by deleting)" ac=C fn
sh=E7E3EEBCDE7D08E92E4DA1492D0198D99EB8347F ft=0 fh=0000000000000329 vn="JS/Tool
sh=E9CFDDDFB63F66D63EF97015966FAF5BE2854550 ft=0 fh=00000000000022bb vn="" ac=S
sh=D3F5F1CA2B7DB6EA0081432DB9F3F7290193A8A2 ft=0 fh=0000000000000435 vn="JS/Tool
sh=BA2B61F97B433E61EB2DF4A6FBE657BA83BA4ADA ft=0 fh=00000000000001ed vn="JS/Tool
sh=E9DD2C03F93A35E32413CBB3B87CA74D1430D8D7 ft=0 fh=00000000000001e5 vn="JS/Tool
sh=EEC37C06483A1CC592AEBB925056B8C66C782438 ft=0 fh=0000000000000389 vn="JS/Tool
sh=A4019FBB278A4876B965482CC7AE25C4981A8AED ft=0 fh=000000000001723d vn="" ac=S
sh=DF5417C02F7DA3C534D2FC914C88D491810188B7 ft=0 fh=0000000000001e7e vn="JS/Tool
bar.Crossrider.M potentially unwanted application (cleaned by deleting)" ac=C fn
sh=BDCFA8379825B1BC17A13BDF73B7384DE46E7C3B ft=0 fh=0000000000000898 vn="JS/Tool
bar.Crossrider.P potentially unwanted application (cleaned by deleting)" ac=C fn
sh=89B0A0DFD4DF451FEEC433683868EE588C08EC51 ft=0 fh=0000000000000c73 vn="" ac=S
sh=2CEA208F2CC82921DF8F3DEBC3D3FF68D338CE13 ft=0 fh=000000000000003e vn="" ac=S
sh=03517F89D3F20D2D4E2B1A956F8248C9DA9FFC18 ft=0 fh=000000000002c8f1 vn="JS/Tool
bar.Crossrider.B potentially unwanted application (cleaned by deleting)" ac=C fn
sh=49BBE5AC7BA9C32FE3C5B24F1074385D2C60FA38 ft=0 fh=00000000000003b9 vn="JS/Tool
sh=778B8C980A33D3679264BE3920E6F15D75731E06 ft=0 fh=0000000000000c55 vn="JS/Tool
bar.Crossrider.N potentially unwanted application (cleaned by deleting)" ac=C fn
sh=289C4B4BF748758CE24013FB6A712DB4E0037264 ft=0 fh=00000000000003fc vn="" ac=S
bpeonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\extensionData\userCode\background.js"
sh=2FB786E17F7F77C2E84E08AAC6FE03267586FEEF ft=0 fh=0000000000000203 vn="" ac=S
bpeonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\extensionData\userCode\extension.js"
sh=89CAC5FB6F99DBB54FD2409D9302D161232345B6 ft=0 fh=00000000000006b4 vn="" ac=S
bpeonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\extensionData\manifest.xml"
sh=AF15C2CD390979ACF65E9210C6DB0E85252F6052 ft=0 fh=0000000000000ab8 vn="JS/Tool
eonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\js\api\17cfec9a91fbf67bb9dfd4747c2f9b74.
js"
sh=40D8A5CBA5987152A8DFAC467C672EF1CC430939 ft=0 fh=00000000000009d7 vn="" ac=S
bpeonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\js\api\36dfb01775344ea98fb928a370e764c
9.js"
sh=832ADA6E9B2673CA1DE314A566FF76316F0A2997 ft=0 fh=0000000000002ceb vn="JS/Tool
eonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\js\api\6129332779167e26ffb504f4c2994729.
js"
sh=B959D7BE74EBA2B82B780E14A213BB132451990B ft=0 fh=0000000000001f1d vn="JS/Tool
eonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\js\api\a4cd58af0ee58212a12964c260359cc2.
js"
sh=F4FE303A5886572113DF4DA3579956CEBB907F56 ft=0 fh=0000000000002ddf vn="JS/Tool
eonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\js\api\a7b875912687a6178295a12938cc9e09.
js"
sh=B7CF98A7E98785EE5C4412B62DA49AA2CCA5FC6E ft=0 fh=00000000000006c9 vn="" ac=S
bpeonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\js\api\pageAction.js"
sh=8F30AFD1319EBF5F58B2F53EF737A26A92614C59 ft=0 fh=0000000000000028 vn="" ac=S
bpeonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\js\lib\popupResource\newPopup.js"
sh=D8F5FAEB15E6CD653955E1D45C8DE0C6C87E1D23 ft=0 fh=000000000000002d vn="" ac=S
bpeonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\js\lib\popupResource\popup.js"
sh=902E327ADBC89F0A47999D10E7F6F6554CFCC0F4 ft=0 fh=00000000000001e0 vn="JS/Tool
eonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\js\lib\04963cf5b2204f65f3b6d8e8fa745897.
js"
sh=08D58C3894EBE6ACECBBB854F1F2E05B7400A6C0 ft=0 fh=00000000000001ad vn="" ac=S
bpeonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\js\lib\133af6a538a475a11e853980d9fb760
4.js"
sh=F7B2040B9EB935D0FFB1571CC0184FED6B7D7583 ft=0 fh=00000000000013e4 vn="JS/Tool

eonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\js\lib\3411c845947e8025b4d7bb36939c158e.
js"
sh=D88F73897D0415B880A52D98AACBCBA8372956B2 ft=0 fh=0000000000000a8b vn="JS/Tool
eonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\js\lib\5013be69beb3f1fd11a5ba58c5bb21cd.
js"
sh=6B8D57805A81A0C2A68E87C410FF89D15BB71CC9 ft=0 fh=0000000000001711 vn="JS/Tool
bar.Crossrider.H potentially unwanted application (cleaned by deleting)" ac=C fn
eonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\js\lib\6084f51bf303cfdc08e37b7f48bb0b5e.
js"
sh=EDB82EF0A2AC160256F1A5C49F0778E3A42AC559 ft=0 fh=000000000000167d vn="JS/Tool
eonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\js\lib\61924c323df868d2d7bdbe8a61c4925d.
js"
sh=17A2876D4B9F9108CDEE3B9F698A5C054E7B3971 ft=0 fh=00000000000002fd vn="" ac=S
bpeonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\js\lib\99434304477ed65ec7bc082f3bcac28
7.js"
sh=CAC2FC420F4819373AA1C871E7DDA0F33F11B9C5 ft=0 fh=0000000000000387 vn="" ac=S
bpeonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\js\lib\a02d595bfe2b499ab027b2b57d08cd8
0.js"
sh=83D52B954331FF588BF95ACF190E40A9C28128A1 ft=0 fh=00000000000007d2 vn="" ac=S
bpeonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\js\lib\a1b9768c5a2bbf5a1f9ab44457cafec
0.js"
sh=21997B73E3432F6719F64E595FA7F4CAE082EC01 ft=0 fh=00000000000020d3 vn="" ac=S
bpeonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\js\lib\a7a1cbf95302ebb23d8d85ff7b5d7ef
9.js"
sh=DB89F46344CECC785277E46A5AF6C0C2F7177E62 ft=0 fh=0000000000001a29 vn="" ac=S
bpeonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\js\lib\app_api.js"
sh=3E6E49061DC4C0339624D1BD4C5972D2D6988DA4 ft=0 fh=0000000000001402 vn="JS/Tool
eonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\js\lib\be877e7223e5c0646deecc350c111a5b.
js"
sh=87F0A95E563A9119567248A593244440843E134B ft=0 fh=0000000000001aa1 vn="" ac=S
bpeonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\js\lib\c787e5b445793b24400e7aa53b63812
8.js"
sh=B3ABD3CAA6ADACF7A87576C3F949A2C023F51456 ft=0 fh=0000000000001279 vn="JS/Tool
eonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\js\lib\cf9e78da1e6dea50b071526f3af2a945.
js"
sh=F60E85FECE253870FBF3E77FB088F546688FB9AF ft=0 fh=00000000000003b0 vn="" ac=S
bpeonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\js\lib\f57e0d49f0be762bf25f6fc53276e62
6.js"
sh=A83E4FF8F350598A0B7CC3E1388AAF0C4A738782 ft=0 fh=0000000000000630 vn="" ac=S
bpeonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\js\lib\installer.js"
sh=0A9451EFBC63BD32E5E797E0546804BACDE4F91B ft=0 fh=0000000000000199 vn="" ac=S

bpeonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\js\23e9c206a501d715e2ea1fca3804453d.js
"
sh=908310927982C1DFD45B8CBBF669A940C0CE7CC6 ft=0 fh=00000000000086c0 vn="JS/Tool
bar.Crossrider.E potentially unwanted application (cleaned by deleting)" ac=C fn
eonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\js\82dc7dc4446ce7191795dcd54715f384.js"
sh=D7FE306EB39D64F7994917931E25229A5B156640 ft=0 fh=000000000000212b vn="JS/Tool
bar.Crossrider.R potentially unwanted application (cleaned by deleting)" ac=C fn
eonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\js\main.js"
sh=E5D0657F1319601059FF7A5D9819F3A9B8DFF354 ft=0 fh=0000000000000887 vn="" ac=S
bpeonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\background.html"
sh=E36EEA4B539B5F4710D5A0ED6FF9663CD8BD776D ft=0 fh=000000000000032c vn="" ac=S
bpeonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\chromeCoreFilesIndex.txt"
sh=F0F5DB5C87CD2BA7181DDEEEDF87353894C31A94 ft=0 fh=000000000000008b vn="" ac=S
bpeonjdeofpjegbdiibbdjlgfohngee\1.26.14_0\popup.html"
fmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.9480_0\css\angular-csp.css"
fmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.9480_0\css\cssreset-min.css"
sh=37BC0A7F3898C216017428CDD8CD01B7B1028A66 ft=0 fh=0000000000000766 vn="" ac=S
fmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.9480_0\css\followedProducts.css"
sh=5AF0FDCFCD08C9E6C73B7B7FDFA77669C19E41D5 ft=0 fh=000000000000013a vn="" ac=S
fmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.9480_0\css\offerscreen.css"
sh=0F3ABF92D892889090477B2D99202B2F32D619A8 ft=0 fh=0000000000003f70 vn="" ac=S
fmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.9480_0\scripts\background\background.js"
sh=28DD9F5BA4BC403C4F0BE4061F6A5F22F3DE37D1 ft=0 fh=0000000000000256 vn="" ac=S
fmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.9480_0\scripts\content\handle.css"
sh=02A507DC19B268AC8F2F9DAD1850FD53767B43F0 ft=0 fh=0000000000000aad vn="" ac=S
fmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.9480_0\scripts\content\handleHelper.js"
sh=63B8C91672775A8A9D1641AF128B88DB0B1A9B3F ft=0 fh=000000000000076b vn="JS/Clar
aLab.A potentially unwanted application (cleaned by deleting)" ac=C fn="C:\Users
\luis alberto\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecp
paeocifplgmepgcpcbi\1.3.0.9480_0\scripts\content\montiera.js"
sh=97898ECAC314C9A42FCC8C2088D5E5CF278A6D73 ft=0 fh=00000000000008e9 vn="" ac=S
fmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.9480_0\scripts\content\offerscreen.js"
sh=57C872446FAA34F3C1403986702F9177DFC0A7D0 ft=0 fh=0000000000002409 vn="JS/Clar
aLab.A potentially unwanted application (cleaned by deleting)" ac=C fn="C:\Users
\luis alberto\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecp
paeocifplgmepgcpcbi\1.3.0.9480_0\scripts\content\scriptInjection.js"
sh=E0FCECF1563BB705B6646D5C5FBE041094F539EC ft=0 fh=0000000000001141 vn="" ac=S
fmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.9480_0\scripts\libs\angular-sanitize.min.j
s"
fmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.9480_0\scripts\libs\angular.min.js"
sh=9CEF0FAA1417E642CDF4618861C1283ADB5E34FB ft=0 fh=00000000000068b6 vn="" ac=S

fmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.9480_0\scripts\libs\sienium.js"
fmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.9480_0\scripts\libs\sienium.remoteCoordina
tor.js"
sh=C56269593A7F4F80B7056E160907EA3369D17F52 ft=0 fh=0000000000000171 vn="" ac=S
fmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.9480_0\scripts\tools\analytics.js"
sh=BEDF17CA621F882BFF4388B9C812C9050C36EA2C ft=0 fh=000000000000cc55 vn="" ac=S
fmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.9480_0\scripts\tools\config.js"
sh=AA355CD362543211D7818C56F88ACC19895CF218 ft=0 fh=0000000000000c5b vn="" ac=S
fmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.9480_0\scripts\tools\tracking.js"
sh=363CB05DF766B4D4953D316F8EA1322885CEC87C ft=0 fh=00000000000005b0 vn="" ac=S
fmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.9480_0\scripts\offerscreenController.js"
sh=3CA53737E85229D8EFC8E0B95859F5F25DD1597B ft=0 fh=0000000000000191 vn="" ac=S
fmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.9480_0\views\adView.html"
sh=E4637C39869BD0C6DE079A41702A8C3D6210218F ft=0 fh=0000000000000a6e vn="" ac=S
fmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.9480_0\views\followedproducts.html"
sh=ABA15127FCDF9AF071A22F295A6A04523CB15A5C ft=0 fh=00000000000016ab vn="" ac=S
fmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.9480_0\views\offerscreen.html"
sh=04B79722DF4F9A2AA2C09FC3F5F03391B97D8A47 ft=0 fh=0000000000000186 vn="" ac=S
fmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.9480_0\views\offershop.html"
sh=75ADE48350AAB78B74DF44E1A104967C6CD80968 ft=0 fh=000000000000055c vn="" ac=S
fmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.9480_0\background.html"
sh=24457D0D2FD8210E66CE7C7977B0BFC6EB40006E ft=0 fh=000000000000116e vn="" ac=S
dlpmjkeahlbfeiclkokomifjfnkghpg\1.0.0.9393_0\scripts\backendservice.js"
sh=D647B11ACB45078FECDDA537ABF09301F69E2C86 ft=0 fh=00000000000004d7 vn="" ac=S
dlpmjkeahlbfeiclkokomifjfnkghpg\1.0.0.9393_0\scripts\background.js"
sh=9F5B09D622F71D7B26C2C48AE7A0B2EA53E8C790 ft=0 fh=000000000000d0e1 vn="" ac=S
dlpmjkeahlbfeiclkokomifjfnkghpg\1.0.0.9393_0\scripts\lunr.js"
sh=F22BA8E5ED3C3E5BAFBE3792CBAC87A90F187465 ft=0 fh=0000000000000811 vn="" ac=S
dlpmjkeahlbfeiclkokomifjfnkghpg\1.0.0.9393_0\scripts\suggestionEngine.js"
sh=1FF8050D62B8DD2261B5C0A2F33E2F95E1FDC595 ft=0 fh=00000000000018b6 vn="" ac=S
dlpmjkeahlbfeiclkokomifjfnkghpg\1.0.0.9393_0\scripts\util.js"
sh=72F21A6F3BCACF56ECF7B08B88F43F0695693757 ft=0 fh=0000000000000642 vn="" ac=S
dlpmjkeahlbfeiclkokomifjfnkghpg\1.0.0.9393_0\scripts\uuid.core.js"
sh=0000000000000000000000000000000000000000 ft=- fh=0000000000000000 vn="" ac=S
nsions\plmeednkcpcefcjniehbglhgjcjfmlkb\5.2\sT9.js"
sh=0000000000000000000000000000000000000000 ft=- fh=0000000000000000 vn="" ac=S
ns\aohghmighlieiainnegkcijnfilokake\0.9_1\main.html"
sh=FFE9A28CDE2E130F64CCB51A76DF3A453464BE19 ft=0 fh=000000000000005b vn="" ac=S
ns\aohghmighlieiainnegkcijnfilokake\0.9_1\main.js"
ns\felcaaldnbdncclmgdcncolpebgiejap\1.1_1\main.html"
sh=C905665276FF5DBA2D052AD4C11588C3172F81F8 ft=0 fh=000000000000005f vn="" ac=S
ns\felcaaldnbdncclmgdcncolpebgiejap\1.1_1\main.js"
sh=21B7C28AF08A4BF167223B2BB153B34F3752EAFC ft=0 fh=0000000000001103 vn="" ac=S
ns\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_0\contentscript_bin_prod.js"
sh=113B1B3703874BDD7BAFF97496FC2E49A85CEFB5 ft=0 fh=0000000000005b6c vn="" ac=S
ns\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_0\eventpage_bin_prod.js"
sh=A5190F975F481AAEB69D10C0FFF0EC3624146C4F ft=0 fh=00000000000000e0 vn="" ac=S
ns\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_0\page_embed_script.js"
sh=A4AC74DD258E8E0689034FAA1B15A5C7C56DC3BB ft=0 fh=00000000000006cd vn="" ac=S
ns\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\css\craw_window.css"
sh=8B4EAA74D31EED5B0BABA3CA5460201F6B10DA46 ft=0 fh=000000000000032a vn="" ac=S
ns\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\html\craw_window.html"
sh=6AB94577F592645D1393BCA769B1A5D5298A720B ft=0 fh=000000000002f358 vn="" ac=S
ns\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\craw_background.js"
sh=B40A227CF98B3DE19F22EFA64A28EC2CD88F89DD ft=0 fh=0000000000036a0f vn="" ac=S
ns\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\craw_window.js"
sh=0000000000000000000000000000000000000000 ft=- fh=0000000000000000 vn="" ac=S
nsions\plmeednkcpcefcjniehbglhgjcjfmlkb\5.2\sT9.js"
sh=936593F198322272B771B8FAA4B8548C838DD80B ft=1 fh=0000000000020814 vn="Win32/A
monetize.MB potentially unwanted application,a variant of Win32/Amonetize.MB pot
entially unwanted application (deleted)" ac=C fn="C:\Users\luis alberto\AppData\
Local\Setup Wizard\7d02c01e-e37d-494d-950e-fee3361dd5db\bundle_operaww.exe"
sh=7BCCF11BF9C645E1D9F1F9DC47F8D39131A89551 ft=1 fh=0000000000b20f20 vn="a varia
ac=C fn="C:\Users\luis alberto\AppData\Local\Setup Wizard\a587e10d-eb04-4b37-a4
ce-530c85e95115\mpc_3.2.9124.0113.exe"
sh=40969E053E001937C71D74EA719F78BF9A5FEF2A ft=1 fh=000000000014cb28 vn="Win32/T
oolbar.Babylon potentially unwanted application (cleaned by deleting)" ac=C fn="
C:\Users\luis alberto\AppData\Local\Temp\162219DE-BAB0-7891-B012-846EC131534E\My
BabylonTB.exe"
sh=5F437ECC88A691B6161B1D168B3F4A93624F5832 ft=1 fh=00000000001b8470 vn="Win32/T
C:\Users\luis alberto\AppData\Local\Temp\162219DE-BAB0-7891-B012-846EC131534E\Se
tup.exe"
sh=E1C99225C4C16710DE3AF3D52300E1E943F7C84F ft=1 fh=00000000000de510 vn="a varia
=C fn="C:\Users\luis alberto\AppData\Local\Temp\2827278562\chromeupdaterfull.exe
"
sh=899627D87F55AD031DD739E3C37BD465707EF67B ft=1 fh=000000000099abc6 vn="a varia
nt of MSIL/NewPlayer.A potentially unwanted application,JS/Superfish.A potential
ly unwanted application,a variant of MSIL/NewPlayer.C potentially unwanted appli
cation (deleted)" ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\332Etmp\newv
ideoplayersetup.exe"
sh=AF023CD20C85601E6874CB788BCAA49AE325A40D ft=1 fh=0000000000012058 vn="Win32/M
yPCBackup.A potentially unwanted application (deleted)" ac=C fn="C:\Users\luis a
lberto\AppData\Local\Temp\337Dtmp\cloud_backup_setup.exe"
sh=FE22CBD28636A728C9531A3EF0927CE666FE370B ft=1 fh=0000000000046ff3 vn="a varia
nt of Win32/Adware.ConvertAd.KZ.gen application (cleaned by deleting)" ac=C fn="
C:\Users\luis alberto\AppData\Local\Temp\33EBtmp\vopackage.exe"
sh=8F983A9242C9C393DBA6966974362A97818A2C91 ft=1 fh=00000000003444e0 vn="Win32/S
ystweak potentially unwanted application (cleaned by deleting)" ac=C fn="C:\User
s\luis alberto\AppData\Local\Temp\344Atmp\fastagainsetup.exe"
sh=D4AACD403AD962D4B594857BE81745262678CF8C ft=1 fh=00000000000d1b88 vn="a varia
nt of Win32/Toolbar.Montiera.M potentially unwanted application (cleaned by dele
ting)" ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\34B8tmp\mysearchs_1.3.1
1.0_cn.exe"
sh=C51EF66203096B84260F8084D68517D8DE02AFDE ft=1 fh=0000000000911cf8 vn="a varia
nt of Win32/Toolbar.CrossRider.BM potentially unwanted application (cleaned by d
eleting)" ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\3517tmp\setup.exe"
C:\Users\luis alberto\AppData\Local\Temp\4A7F813C-BAB0-7891-9261-142306741FB8\My
BabylonTB.exe"
C:\Users\luis alberto\AppData\Local\Temp\4A7F813C-BAB0-7891-9261-142306741FB8\Se
tup.exe"
sh=26A6BAF6D8BA592DC62EFD38CE10F939840CA550 ft=1 fh=0000000000c77c82 vn="a varia
nt of MSIL/NewPlayer.A potentially unwanted application,a variant of MSIL/NewPla
yer.C potentially unwanted application (deleted)" ac=C fn="C:\Users\luis alberto
\AppData\Local\Temp\4c091cef-50da-49a4-8b18-bcad1130d221\fastplayersetup.exe"
C:\Users\luis alberto\AppData\Local\Temp\5C5A6922-BAB0-7891-A76A-2BD21A2325DB\My
BabylonTB.exe"
C:\Users\luis alberto\AppData\Local\Temp\5C5A6922-BAB0-7891-A76A-2BD21A2325DB\Se
tup.exe"
sh=C63ED0FFD28904C40BC8E77F3B9627343F40141D ft=1 fh=000000000005122c vn="a varia
C:\Users\luis alberto\AppData\Local\Temp\5d039561-6889-4919-b07d-095fbd1135a1\vo
package.exe"
C:\Users\luis alberto\AppData\Local\Temp\601947AF-BAB0-7891-B4D4-982EB5B08E7D\My
BabylonTB.exe"
C:\Users\luis alberto\AppData\Local\Temp\601947AF-BAB0-7891-B4D4-982EB5B08E7D\Se
tup.exe"
C:\Users\luis alberto\AppData\Local\Temp\6C198122-BAB0-7891-A9DC-E562B92B6177\My
BabylonTB.exe"
C:\Users\luis alberto\AppData\Local\Temp\6C198122-BAB0-7891-A9DC-E562B92B6177\Se
tup.exe"
lberto\AppData\Local\Temp\7482feb9-67bb-419b-b0b1-4e2d0221fea8\cloud_backup_setu
p.exe"
sh=51A0E61B7550B03A36052A6603741510B21E7169 ft=1 fh=0000000000001400 vn="a varia
nt of Win32/Toolbar.Babylon.E potentially unwanted application (cleaned by delet
ing)" ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\7B6DDEA0-BAB0-7891-B5BED61D702691DD\Latest\IECookieLow.dll"
sh=1296CC646637D9A06A5A62159188CFE00686751D ft=1 fh=0000000000001800 vn="a varia
ing)" ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\7B6DDEA0-BAB0-7891-B5BED61D702691DD\Latest\IEHelper.dll"
sh=17D3694A2723DD486A0CFC5C2D832152C552E1F9 ft=1 fh=00000000001a79ac vn="Win32/T
oolbar.Montiera.I potentially unwanted application,a variant of Win32/Toolbar.Ba
bylon.AA potentially unwanted application,a variant of Win32/Toolbar.Babylon pot
entially unwanted application,Win32/Toolbar.Montiera.J potentially unwanted appl
ication,a variant of Win32/Toolbar.Babylon.K potentially unwanted application (d
eleted)" ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\7B6DDEA0-BAB0-7891-B5
BE-D61D702691DD\Latest\MyBabylonTB.exe"
sh=CB32EB27A195FD774A8D357000AAACB9099284D7 ft=1 fh=00000000001c0a98 vn="a varia
ing)" ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\7B6DDEA0-BAB0-7891-B5BED61D702691DD\Latest\Setup.exe"
sh=2F7F92F0EEB0C8353BACB26BC12FED71822DE7E9 ft=1 fh=00000000001bc098 vn="a varia
ing)" ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\7B6DDEA0-BAB0-7891-B5BED61D702691DD\Setup.exe"
C:\Users\luis alberto\AppData\Local\Temp\9774B48A-BAB0-7891-8337-424DCA117223\My
BabylonTB.exe"
C:\Users\luis alberto\AppData\Local\Temp\9774B48A-BAB0-7891-8337-424DCA117223\Se
tup.exe"
sh=4CCFD8881EC408130C36D96D0D9C9911ABA66AF4 ft=1 fh=00000000009658e9 vn="a varia
nt of MSIL/NewPlayer.A potentially unwanted application,MSIL/Tuguu.C potentially
unwanted application,MSIL/NewPlayer.A potentially unwanted application (deleted
)" ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\9BC7tmp\newvideoplayersetup

.exe"
sh=1A9C2CE8C1F539AC8546D67C9F924AEA8D2A84C2 ft=1 fh=0000000000012050 vn="Win32/M
lberto\AppData\Local\Temp\9BD8tmp\cloud_backup_setup.exe"
sh=139889165B745A4C8B5D6FD7FE121234A25922D9 ft=1 fh=00000000007e17c8 vn="Win32/P
acked.ScrambleWrapper.M potentially unwanted application,a variant of Win32/Pack
ed.ScrambleWrapper.N potentially unwanted application (deleted)" ac=C fn="C:\Use
rs\luis alberto\AppData\Local\Temp\9BD9tmp\setup.exe"
sh=AD122982090B4113012D8C8833928DAFF2940DC4 ft=1 fh=0000000000385340 vn="multipl
e threats,a variant of Win32/AdWare.EoRezo.AU application,a variant of Win32/Adw
are.EoRezo.AJ application,Win32/Adware.EoRezo.AS application,Win32/AdWare.EoRezo
.AW application (cleaned by deleting)" ac=C fn="C:\Users\luis alberto\AppData\Lo
cal\Temp\9BDAtmp\freesofttoday.exe"
sh=88816AA2C09F734F46B1B5814F1F98569039521A ft=1 fh=00000000000465e8 vn="Win32/A
dware.ConvertAd.AQ application (cleaned by deleting)" ac=C fn="C:\Users\luis alb
erto\AppData\Local\Temp\9BDBtmp\vopackage.exe"
sh=FF18CDC9E0B682908C8FB73C11F89D8210E88472 ft=1 fh=0000000000073a58 vn="a varia
nt of Win64/BrowseFox.BQ potentially unwanted application (cleaned by deleting)"
ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\9BDCtmp\findopolissetup.exe"
sh=8F983A9242C9C393DBA6966974362A97818A2C91 ft=1 fh=00000000003444e0 vn="Win32/S
ystweak potentially unwanted application (cleaned by deleting)" ac=C fn="C:\User
s\luis alberto\AppData\Local\Temp\9BDDtmp\fastagainsetup.exe"
C:\Users\luis alberto\AppData\Local\Temp\9E092E25-BAB0-7891-B220-0EAF1496C011\My
BabylonTB.exe"
C:\Users\luis alberto\AppData\Local\Temp\9E092E25-BAB0-7891-B220-0EAF1496C011\Se
tup.exe"
sh=85580759D40D48EDB8CD54EFB49803B470C43FAB ft=1 fh=00000000000a2cb8 vn="a varia
nt of Win32/4Shared.P potentially unwanted application (cleaned by deleting)" ac
=C fn="C:\Users\luis alberto\AppData\Local\Temp\@3E4B.tmp\clowermod by rugalxper
ia20.exe"
sh=B337FE0F551D86881F58F1B4BC6C06105BFD9858 ft=1 fh=00000000000a2cb8 vn="a varia
nt of Win32/4Shared.P potentially unwanted application (cleaned by deleting)" ac
=C fn="C:\Users\luis alberto\AppData\Local\Temp\@BF5.tmp\clowermod by rugalxperi
a20.exe"
sh=F9772BC76EB869504E02B64CB70479D7ECAA8BCE ft=1 fh=00000000000267e0 vn="a varia
nt of Win32/Toolbar.CrossRider.BS potentially unwanted application (cleaned by d
eleting)" ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\a53d5ecd-7dc7-4bd6-b
043-d4234892f6bc\setup.exe"
C:\Users\luis alberto\AppData\Local\Temp\A88CBAC3-BAB0-7891-A8EA-83379294FDC1\Se
tup.exe"
C:\Users\luis alberto\AppData\Local\Temp\A9F4E62A-BAB0-7891-B100-F3E6EC664DBD\My
BabylonTB.exe"
C:\Users\luis alberto\AppData\Local\Temp\A9F4E62A-BAB0-7891-B100-F3E6EC664DBD\Se
tup.exe"
sh=AD96374831F6F2AC92BD0526B8D30FEBD03EE246 ft=1 fh=00000000000263e0 vn="a varia
eleting)" ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\abe6cc59-4f44-4e07-9
978-5327e313b820\setup.exe"
sh=D2EAFFAD45CC86DE6E07E9D8E42440CD25DA5754 ft=1 fh=0000000000012070 vn="Win32/M

lberto\AppData\Local\Temp\ac3c1492-9787-43a0-937d-1b1d829b2020\software\Cloud_Ba
ckup_Setup.exe"
sh=63279B567E8763B837483E6D3FDB8E7D70B011A5 ft=1 fh=0000000000038e98 vn="a varia
nt of Win64/BrowseFox.AN potentially unwanted application (cleaned by deleting)"
ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\ac3c1492-9787-43a0-937d-1b1d8
29b2020\software\FortunitasSetup.exe"
sh=711837BD6EC881D91000BC2E90EC6A8D789E287B ft=1 fh=00000000000dec00 vn="a varia
nt of Win32/AdWare.Lollipop.R application (cleaned by deleting)" ac=C fn="C:\Use
rs\luis alberto\AppData\Local\Temp\ac3c1492-9787-43a0-937d-1b1d829b2020\software
\LollipopInstaller_14656.exe"
sh=0D3CABFEDF9FA892436405F03E5ABE44831C157D ft=1 fh=0000000000966648 vn="a varia
nt of MSIL/NewPlayer.A potentially unwanted application,MSIL/Tuguu.C potentially
unwanted application,MSIL/NewPlayer.A potentially unwanted application (deleted
)" ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\ac3c1492-9787-43a0-937d-1b1
d829b2020\software\New_Player.exe"
sh=B7FA63CF43058435806FA9204B0C4F3994C59EF0 ft=1 fh=00000000006a5008 vn="Win32/S
peedingUpMyPC.I application (cleaned by deleting)" ac=C fn="C:\Users\luis albert
o\AppData\Local\Temp\ac3c1492-9787-43a0-937d-1b1d829b2020\software\OptimizerPro.
exe"
sh=7FD47F71324C0A482E45D8704F688C1AE3F0C70F ft=1 fh=00000000005fa575 vn="Win32/P
acked.ScrambleWrapper.M potentially unwanted application,a variant of Win32/Pack
ed.ScrambleWrapper.K potentially unwanted application (deleted)" ac=C fn="C:\Use
rs\luis alberto\AppData\Local\Temp\ac3c1492-9787-43a0-937d-1b1d829b2020\software
\play_in_hance_.exe"
sh=88849C2AC0F262B72E9AF3B5A7944EE5724C172B ft=1 fh=00000000000fc420 vn="multipl
e threats,a variant of Win32/Adware.Vitruvian.F application,a variant of Win32/A
dWare.Vitruvian.D application (cleaned by deleting)" ac=C fn="C:\Users\luis albe
rto\AppData\Local\Temp\c77dc27a-5ab9-49ea-8b9d-e570f14dc3b5\wordproser-setup-1.1
0.0.6.exe"
sh=AFD3B6A87144943D1CEDCC59D06B5D36F8E0FB38 ft=0 fh=000000000028437d vn="Win32/T
oolbar.Montiera.E potentially unwanted application,Win32/Toolbar.Montiera.B pote
nwanted application,a variant of Win32/Toolbar.Montiera.F potentially unwanted a
pplication,Win32/Toolbar.Montiera.AA potentially unwanted application (deleted)"
ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\cnpy\pkg.zip"
sh=671B38AF7420D1904A24E44A5890C1242D320D32 ft=1 fh=000000000028754e vn="Win32/T
nwanted application,a variant of Win32/Toolbar.Montiera.F potentially unwanted a
pplication,Win32/Toolbar.Montiera.AA potentially unwanted application (deleted)"
ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\cnpy\Softonic_chr_1.8.28.14.e
xe"
sh=0E7CC420B0BE38296EF8516DC3786361119F1F5F ft=1 fh=0000000000011ca8 vn="Win32/A
lteredSoftware.A potentially unwanted application (cleaned by deleting)" ac=C fn
="C:\Users\luis alberto\AppData\Local\Temp\comh.155291\GoogleCrashHandler.exe"
sh=01C53FBC0030066FE9032FEC431D9EA26B5811CC ft=1 fh=0000000000010c00 vn="Win32/A
lteredSoftware.C potentially unwanted application (cleaned by deleting)" ac=C fn
="C:\Users\luis alberto\AppData\Local\Temp\comh.155291\GoogleUpdate.exe"
sh=A565AA91F7873179776579995E9F4D2B2894AE5A ft=1 fh=000000000000b400 vn="a varia
nt of Win32/AlteredSoftware.B potentially unwanted application (cleaned by delet
ing)" ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\comh.155291\GoogleUpdate
Broker.exe"
sh=F1A0D0D29F924A24AF0F0521CF6F9A9150A10ECC ft=1 fh=000000000000b400 vn="a varia
OnDemand.exe"
sh=E648CC103467FC8C29E683E66FB8A7EC3A49D85C ft=1 fh=00000000000ba000 vn="a varia
nt of Win32/AlteredSoftware.A potentially unwanted application (cleaned by delet
ing)" ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\comh.155291\goopdate.dll
"
sh=2B2FFD8B3B659BD0963BF2A8DA7D4C10E4DBD8AC ft=1 fh=00000000000068a8 vn="a varia
ing)" ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\comh.155291\goopdateres_
en.dll"
sh=C7529B6B7A22C22646623D695434236AE6DBA8CD ft=1 fh=0000000000035e00 vn="a varia
nt of Win32/AlteredSoftware.E potentially unwanted application (cleaned by delet
ing)" ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\comh.155291\npGoogleUpda
te4.dll"
sh=EDB4A6C7E75E18ACB805418EFFD78267BB2F37C4 ft=1 fh=0000000000026000 vn="a varia
nt of Win32/AlteredSoftware.G potentially unwanted application (cleaned by delet
ing)" ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\comh.155291\psmachine.dl
l"
sh=399CE73FBD27EABB303FD899656E3C66C55B3F29 ft=1 fh=0000000000026000 vn="a varia
ing)" ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\comh.155291\psuser.dll"
ing)" ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\comh.16322\GoogleUpdateB
roker.exe"
ing)" ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\comh.16322\GoogleUpdateO
nDemand.exe"
sh=7FA369CC6AF80F935BF91646DCC78E5F746C2CE4 ft=1 fh=00000000000ba000 vn="a varia
ing)" ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\comh.16322\goopdate.dll"
sh=0AF2E82F7417A67B57353FB38DC0DFB51A33004A ft=1 fh=00000000000068a8 vn="Win32/A
="C:\Users\luis alberto\AppData\Local\Temp\comh.16322\goopdateres_en.dll"
sh=E66ACE4EECF64CCE06DAB2D2AC00AA48774C4B1E ft=1 fh=0000000000035e00 vn="a varia
ing)" ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\comh.16322\npGoogleUpdat
e4.dll"
ing)" ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\comh.16322\psmachine.dll
"
Broker.exe"
OnDemand.exe"
sh=0669296CED9211F09C502F5A029929E091C94897 ft=1 fh=00000000000ba000 vn="a varia
"
sh=1ED252403096CA2177A1D06065515B08B3424BA2 ft=1 fh=00000000000068a8 vn="a varia
en.dll"
sh=178B8961AE76020E95A4EFE67393AA4D73A85B23 ft=1 fh=0000000000035e00 vn="a varia
te4.dll"
l"
Broker.exe"
OnDemand.exe"
sh=1922C6C9BE376B48DCA4E9CDCB4F398FD4588D7F ft=1 fh=00000000000ba000 vn="a varia
"
sh=CAD24D6941B07E51808468EFF1EE3F03FD485F0D ft=1 fh=00000000000068a8 vn="Win32/A
lteredSoftware.B potentially unwanted application (cleaned by deleting)" ac=C fn
="C:\Users\luis alberto\AppData\Local\Temp\comh.233071\goopdateres_en.dll"
sh=909359BCFF2D312C1D19ED883DA584D33B1E863A ft=1 fh=0000000000035e00 vn="a varia
te4.dll"
l"

Broker.exe"
OnDemand.exe"
sh=E648CC103467FC8C29E683E66FB8A7EC3A49D85C ft=1 fh=00000000000ba000 vn="a varia
"
sh=4492E60A333CA1E9275EC950D724972085D05486 ft=1 fh=00000000000068a8 vn="a varia
en.dll"
sh=C7529B6B7A22C22646623D695434236AE6DBA8CD ft=1 fh=0000000000035e00 vn="a varia
te4.dll"
l"
Broker.exe"
OnDemand.exe"
sh=83D00CA09F4781F0CD31FF3A00E854611FE7EA41 ft=1 fh=00000000000ba000 vn="a varia
"
sh=77156AF2231F093A6771BFB93F0281DD7B07FB0C ft=1 fh=00000000000068a8 vn="a varia
en.dll"
sh=2E0C043BE68E17341B5D896EF2809F56C9B76B20 ft=1 fh=0000000000035e00 vn="a varia
te4.dll"
l"
Broker.exe"
OnDemand.exe"
sh=22EE3B28D9BE685F9DBF611F949090B840D11F1E ft=1 fh=00000000000ba000 vn="a varia
"
sh=4FBFED3DB6F08069145F07AE81F724A64687EFEE ft=1 fh=00000000000068a8 vn="a varia
en.dll"
sh=6F1CE1B8BE0773CD98215DACD6BDD8EA0B547AD3 ft=1 fh=0000000000035e00 vn="a varia
te4.dll"
l"
Broker.exe"
OnDemand.exe"
"
sh=68103E967FBEBFB7AF8FBB3517517A1CE41F6C49 ft=1 fh=00000000000068a8 vn="a varia
en.dll"
te4.dll"
l"
Broker.exe"
OnDemand.exe"
sh=1922C6C9BE376B48DCA4E9CDCB4F398FD4588D7F ft=1 fh=00000000000ba000 vn="a varia
"
sh=C9E1FBE5F2F9672DC93EFC20C5FAFB225410AE7A ft=1 fh=00000000000068a8 vn="a varia
en.dll"
sh=909359BCFF2D312C1D19ED883DA584D33B1E863A ft=1 fh=0000000000035e00 vn="a varia
te4.dll"
l"
ing)" ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\comh.55956\GoogleUpdateB
roker.exe"
ing)" ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\comh.55956\GoogleUpdateO
nDemand.exe"
ing)" ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\comh.55956\goopdate.dll"
sh=D2B108F97FF96C8AA1BEC9D2D8CF6871C2887020 ft=1 fh=00000000000068a8 vn="a varia
ing)" ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\comh.55956\goopdateres_e
n.dll"
ing)" ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\comh.55956\npGoogleUpdat

e4.dll"
ing)" ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\comh.55956\psmachine.dll
"
C:\Users\luis alberto\AppData\Local\Temp\D7959402-BAB0-7891-A7F2-DCB266894B40\Se
tup.exe"
sh=D2EAFFAD45CC86DE6E07E9D8E42440CD25DA5754 ft=1 fh=0000000000012070 vn="Win32/M
lberto\AppData\Local\Temp\DM\software\Cloud_Backup_Setup.exe"
sh=AB09CEF4810D297C4BC12733E2628DCAEBEB097F ft=1 fh=00000000001397f8 vn="Win32/D
omaIQ.BC potentially unwanted application,MSIL/Tuguu.C potentially unwanted appl
ication (deleted)" ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\DM\software
\Java7.exe"
sh=B6EB6DC43642454A0528F3A32AB1CCC69BAC54A0 ft=1 fh=0000000000642e50 vn="a varia
nt of Win32/AdWare.SpeedingUpMyPC.E application (cleaned by deleting)" ac=C fn="
C:\Users\luis alberto\AppData\Local\Temp\DM\software\OptimizerPro.exe"
sh=B172D4E792B9A8E63C8C37FBBB5E94A15C0C62E8 ft=1 fh=000000000002acc0 vn="a varia
nt of Win64/BrowseFox.CA potentially unwanted application (cleaned by deleting)"
ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\DM\software\SaltarSmart_tg.ex
e"
sh=9ECD4199149DC88F4C9961B2A44B08AB70476EE8 ft=1 fh=0000000000087670 vn="a varia
nt of Win32/DomaIQ.AK potentially unwanted application (cleaned by deleting)" ac
=C fn="C:\Users\luis alberto\AppData\Local\Temp\DM\parent.txt"
sh=3F255DE0A82AE831E0D580D5805A968609CCDC08 ft=1 fh=0000000000019a00 vn="a varia
nt of MSIL/DomaIQ.H potentially unwanted application (cleaned by deleting)" ac=C
fn="C:\Users\luis alberto\AppData\Local\Temp\DM\setup.exe"
sh=3AECE9F55A309C1CAD0A1BAF4E68291889C6A4E5 ft=1 fh=0000000000b76600 vn="a varia
eleting)" ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\DwlTempFolder\temp.e
xe"
sh=9B72604832B83A5508824184D19DF2E98B654EA4 ft=1 fh=0000000000278da8 vn="Win32/C
onduit.SearchProtect.Q potentially unwanted application (cleaned by deleting)" a
c=C fn="C:\Users\luis alberto\AppData\Local\Temp\E405tmp\spidentifierimpl.exe"
sh=766CFB2B90CED3EABE35959526F8BC219FB41852 ft=1 fh=000000000013e228 vn="Win32/S
peedUpMyPC.A potentially unwanted application,a variant of Win32/UniBlue.F poten
tially unwanted application (deleted)" ac=C fn="C:\Users\luis alberto\AppData\Lo
cal\Temp\e4a54edf-8eec-47e7-984b-52f3e171eca8\speedupmypc.exe"
lberto\AppData\Local\Temp\E686tmp\cloud_backup_setup.exe"
sh=E6DA542AD885B2A345F94F94065FB28B6CBA4B5C ft=1 fh=000000000004842a vn="a varia
C:\Users\luis alberto\AppData\Local\Temp\E696tmp\vopackage.exe"
sh=771DFDE2DAEFA812748B36EEBB0E095BC1A9C1FA ft=1 fh=000000000000f2f8 vn="Win32/S
peedingUpMyPC.R application (cleaned by deleting)" ac=C fn="C:\Users\luis albert
o\AppData\Local\Temp\E6A8tmp\easyspeedpc.exe"
sh=834507A888BC83583741864D1468250190EDF32D ft=1 fh=0000000000118848 vn="multipl
e threats,a variant of Win32/Adware.Vitruvian.F application,a variant of Win32/A
dWare.Vitruvian.C application,a variant of Win64/Adware.Vitruvian.B application,
a variant of Win32/AdWare.Vitruvian.D application (cleaned by deleting)" ac=C fn
="C:\Users\luis alberto\AppData\Local\Temp\E6A9tmp\wordproser-setup-1.10.0.2.exe
"
sh=108B171932483044072C4AA737231BC4C219485C ft=1 fh=0000000000c16758 vn="a varia

eleting)" ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\E6F8tmp\setup.exe"
sh=35B21F8E30C52C943B437503DA1628EA0BCA86FC ft=1 fh=0000000000001400 vn="a varia
ing)" ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\F6C69B18-BAB0-7891-A6ADE7DBEE8DF764\Latest\IECookieLow.dll"
sh=DE696B137DA4D58DBD567EA3815AC29C48B29A38 ft=1 fh=0000000000001800 vn="a varia
ing)" ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\F6C69B18-BAB0-7891-A6ADE7DBEE8DF764\Latest\IEHelper.dll"
sh=4D284D71880CACD1975902DE6861FA86AB76972A ft=1 fh=00000000001c4368 vn="Win32/T
oolbar.Montiera.I potentially unwanted application,a variant of Win32/Toolbar.Es
cort.A potentially unwanted application,a variant of Win32/Toolbar.Montiera.A po
tentially unwanted application,Win32/Toolbar.Funmoods potentially unwanted appli
cation,a variant of Win32/Toolbar.Montiera.F potentially unwanted application (d
eleted)" ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\F6C69B18-BAB0-7891-A6
AD-E7DBEE8DF764\Latest\MyBabylonTB.exe"
sh=3AEAFFB61DCD95E75DE93AFD17C83FE262E27AFD ft=1 fh=00000000001c1498 vn="a varia
ing)" ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\F6C69B18-BAB0-7891-A6ADE7DBEE8DF764\Latest\Setup.exe"
sh=E17439583212C06773999FC1D7348BEE61D3CC37 ft=1 fh=00000000001bb698 vn="a varia
ing)" ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\F6C69B18-BAB0-7891-A6ADE7DBEE8DF764\Setup.exe"
C:\Users\luis alberto\AppData\Local\Temp\F92CD951-BAB0-7891-A875-A967CC56F79C\My
BabylonTB.exe"
C:\Users\luis alberto\AppData\Local\Temp\F92CD951-BAB0-7891-A875-A967CC56F79C\Se
tup.exe"
sh=B05753F6C31379618E73C03411D835B464D3651A ft=0 fh=00000000000007cc vn="JS/Tool
bar.Crossrider.T potentially unwanted application (deleted)" ac=C fn="C:\Users\l
uis alberto\AppData\Local\Temp\FBScanner_335111803\FIREFOX_EXT738233984\03338033
5.xpi"
sh=FF8F61439166B8291D4107BCC55C4E7FDD1723FE ft=0 fh=00000000001eb73c vn="a varia
nt of Win32/Toolbar.Softomate.A potentially unwanted application,JS/Toolbar.Cros
srider.T potentially unwanted application (deleted)" ac=C fn="C:\Users\luis albe
rto\AppData\Local\Temp\FBScanner_335111803\FIREFOX_EXT738233984\247114115.xpi"
sh=E7519D4C2339935CDD919E9781EA3BCE402F306E ft=0 fh=0000000000000790 vn="JS/Tool
0.xpi"
0.xpi"
3.xpi"
2.xpi"
8.xpi"
5.xpi"
1.xpi"
sh=7862938B7A639175A3CBE408D57D646450865477 ft=1 fh=00000000000c9762 vn="a varia
Users\luis alberto\AppData\Local\Temp\flashEnhancer1\Install\flashEnhancerInstal
ler.exe"
sh=93038352AE6F16C82AB36F1992DFDE2A628FEC49 ft=1 fh=00000000002be393 vn="a varia
nt of Win32/Thinknice.B potentially unwanted application,Win64/Thinknice.A poten
tially unwanted application,Win32/Thinknice.H potentially unwanted application,a
variant of Win64/Thinknice.B potentially unwanted application,Win32/Thinknice.A
potentially unwanted application,Win32/ELEX.AR potentially unwanted application
,a variant of Win32/ELEX.AD potentially unwanted application,JS/Lightning.A pote
ntially unwanted application (deleted)" ac=C fn="C:\Users\luis alberto\AppData\L
ocal\Temp\fullpackage_temp1395531080\tmp\SupTab.exe"
sh=A57A0DBBB1F4509E15617380DE4A0D02B2751622 ft=1 fh=0000000000079400 vn="a varia
nt of Win32/ELEX.AE potentially unwanted application (cleaned by deleting)" ac=C
fn="C:\Users\luis alberto\AppData\Local\Temp\fullpackage_temp1395531080\tmp\wpm
.exe"
sh=9B5BDE3B379EC16FAAC5455565708E782924DD58 ft=0 fh=00000000000759cc vn="JS/Ligh
tning.A potentially unwanted application (deleted)" ac=C fn="C:\Users\luis alber
to\AppData\Local\Temp\fullpackage_temp1395531080\lpd#3.1.4.xpi"
sh=4D27DD49F9BF02F688967ED730EF5C57409F6DBD ft=0 fh=0000000000052b9b vn="JS/Ligh
tning.A potentially unwanted application (deleted)" ac=C fn="C:\Users\luis alber
to\AppData\Local\Temp\fullpackage_temp1395531080\newtabv3#3.1.9.crx"
sh=E7DCD85054FC16EA0A541B4C6F766CF8A4F7782C ft=0 fh=00000000002179c2 vn="a varia
nt of Win32/ELEX.CP potentially unwanted application,a variant of Win32/ELEX.BF
potentially unwanted application,JS/Lightning.A potentially unwanted application
(deleted)" ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\fullpackage_temp13
95531080\package1.zip"
sh=4C6D5E1FE6B56C9EB6C1C66701665ADA3569C601 ft=1 fh=00000000001aa800 vn="a varia
nt of Win32/ELEX.CP potentially unwanted application (cleaned by deleting)" ac=C
fn="C:\Users\luis alberto\AppData\Local\Temp\fullpackage_temp1395531080\Uninsta
llManager.exe"
sh=7DB9EA75F40FFB76CBE20E5374E18E11C281D19D ft=1 fh=000000000120bee0 vn="Win32/U
niBlue.E potentially unwanted application,Win32/UniBlue.D potentially unwanted a
pplication,Win32/SpeedUpMyPC.A potentially unwanted application,a variant of Win
32/UniBlue.F potentially unwanted application (deleted)" ac=C fn="C:\Users\luis
alberto\AppData\Local\Temp\is-3TNBU.tmp\sp-standalone-setup.exe"
sh=0E57D0A73E257D660FFD9BC2F061FF70F4D00B65 ft=1 fh=0000000000045ee8 vn="Win32/S
omoto.G potentially unwanted application (deleted)" ac=C fn="C:\Users\luis alber
to\AppData\Local\Temp\is-DI46Q.tmp\bi.exe"
sh=CCD90EE6E9B1ADFF9657E8F2C126BC6CB5C2EB24 ft=1 fh=00000000002bc9d8 vn="a varia

nt of Win32/SProtector.E potentially unwanted application (cleaned by deleting)"
ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\is-OJ51T.tmp\OptProCrash.dll"
sh=BD62D52CBAEB77D2EB16F9B893C6B65F48506F8D ft=1 fh=0000000000b3c0be vn="multipl
e threats,a variant of Win32/Adware.EoRezo.AY application,a variant of MSIL/Adwa
re.EoRezo.A application (cleaned by deleting)" ac=C fn="C:\Users\luis alberto\Ap
pData\Local\Temp\is-RC02A.tmp\gentlemjmp_ilatam.exe"
sh=3E10BCDDD1A5AB0FCA613292848DBDFE8C04A6B1 ft=1 fh=0000000000094779 vn="Win32/V
OPackage.BC potentially unwanted application,Win32/AnyProtect.E potentially unwa
nted application (deleted)" ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\is
45637729\161628_stp\AnyProtectScannerSetup.exe"
sh=D12DB4438118C857E220AA0C932CEC1E9D49B561 ft=1 fh=0000000000430938 vn="Win32/S
ystweak.B potentially unwanted application (deleted)" ac=C fn="C:\Users\luis alb
erto\AppData\Local\Temp\is45637729\44457607_stp\rcpsetup_adppi14_adppi14.exe"
sh=DFC645C0499FA3D105D98F1F0BBEC97CC01D146F ft=1 fh=00000000004d79b1 vn="a varia
nt of MSIL/Solimba.AC potentially unwanted application (deleted)" ac=C fn="C:\Us
ers\luis alberto\AppData\Local\Temp\n2468\FLVMPlayerSetup-c45490cb.exe"
sh=DDF811F21E6C066B644D03E6751E16EFB0FBECCE ft=1 fh=0000000000066cc0 vn="a varia
nt of MSIL/Solimba.AC potentially unwanted application (cleaned by deleting)" ac
=C fn="C:\Users\luis alberto\AppData\Local\Temp\n2468\s2468.exe"
sh=A57303F4797EA963609055693DDA90CE3969F31C ft=1 fh=0000000000073a58 vn="a varia
nt of Win64/BrowseFox.BW potentially unwanted application (cleaned by deleting)"
ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\n2468\Zebar_0104-57366623.exe
"
sh=163C1373C5F57FD72FCB708B1A760500FDB7FD3A ft=1 fh=00000000000ccc00 vn="a varia
nt of Win32/Adware.CognosAds.C application (cleaned by deleting)" ac=C fn="C:\Us
ers\luis alberto\AppData\Local\Temp\nso3988.tmp\bbsetup.exe"
sh=F2DD5CE5FD028C4E3E96FC7127EBD5BD9DA075D1 ft=1 fh=00000000000263e0 vn="a varia
eleting)" ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\nso3988.tmp\GOPSetup
.exe"
sh=7D54BE264410B1EEE9ABF3671565D28685AC704E ft=1 fh=00000000000dda78 vn="a varia
nt of Win32/Toolbar.Iminent.C potentially unwanted application (cleaned by delet
ing)" ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\nso3988.tmp\IminentSetup
.exe"
sh=088E0FC07617DB3CE47104E0E79F73349CBE96F0 ft=1 fh=000000000008e4e0 vn="a varia
nt of Win32/BrowseFox.U potentially unwanted application (cleaned by deleting)"
ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\U1058.tmp\UNT1069.tmp.exe"
sh=752349A64E2310481BCBEC55A416F1A1699ADF12 ft=1 fh=0000000000032e00 vn="a varia
nt of Win32/Kryptik.DUK trojan (cleaned by deleting)" ac=C fn="C:\Users\luis alb
erto\AppData\Local\Temp\U108B.tmp\UNT108C.tmp.exe"
sh=068B9D8991990B11033EEF556E7A1B25AFE2A030 ft=1 fh=000000000004d5d8 vn="a varia
C:\Users\luis alberto\AppData\Local\Temp\U109C.tmp\UNT109D.tmp.exe"
sh=8C26F1B547794054E89AFFC6BBF473F81F9829B1 ft=1 fh=0000000000068e51 vn="Win32/S
to\AppData\Local\Temp\U10CF.tmp\UNT10D0.tmp.exe"
sh=068B9D8991990B11033EEF556E7A1B25AFE2A030 ft=1 fh=000000000004d5d8 vn="a varia
C:\Users\luis alberto\AppData\Local\Temp\U42CD.tmp\UNT42DE.tmp.exe"
sh=DB5E4E4F64BAA359255F230C658BE286E266892A ft=1 fh=000000000064bd90 vn="multipl
e threats,a variant of Win32/SpeedingUpMyPC application,a variant of Win32/Adwar
e.SpeedingUpMyPC.AG application,Win32/Adware.SpeedingUpMyPC.V application,a vari

ant of Win32/Adware.SpeedingUpMyPC.C application,a variant of Win32/Adware.Speed
ingUpMyPC.X application,a variant of Win32/Adware.SpeedingUpMyPC.AL application,
a variant of Win32/AdWare.SpeedingUpMyPC.D application,a variant of Win32/SProte
ctor.E potentially unwanted application (cleaned by deleting)" ac=C fn="C:\Users
\luis alberto\AppData\Local\Temp\{6B3860E6-AC0B-4341-8283-568F7CB9F0CA}\setup.ex
e"
sh=A87B7647DC34B5B6186209377786E946B677C574 ft=1 fh=0000000000620ed8 vn="multipl
e threats,a variant of Win32/SpeedingUpMyPC.O application,a variant of Win32/Adw
are.SpeedingUpMyPC.AG application,a variant of Win32/Adware.SpeedingUpMyPC.V app
lication,a variant of Win32/Adware.SpeedingUpMyPC.C application,a variant of Win
32/Adware.SpeedingUpMyPC.X application,a variant of Win32/Adware.SpeedingUpMyPC.
AL application,a variant of Win32/AdWare.SpeedingUpMyPC.D application,a variant
of Win32/SProtector.E potentially unwanted application (cleaned by deleting)" ac
=C fn="C:\Users\luis alberto\AppData\Local\Temp\{C825E75E-A9FE-4CF0-89FE-5E86A43
E8A63}\setup.exe"
sh=8167D0E47C043F866866C812050FCB2A765EA999 ft=1 fh=0000000000069048 vn="a varia
nt of Generik.JWLSFWD potentially unwanted application (cleaned by deleting)" ac
=C fn="C:\Users\luis alberto\AppData\Local\Temp\75517.exe.exe"
sh=B1AB5F65FFF8C5B82EBB9E8D774922C9A1CDD16A ft=0 fh=000000000003cba0 vn="JS/Tool
bar.Crossrider.O potentially unwanted application,JS/Toolbar.Crossrider.J potent
ially unwanted application,JS/Toolbar.Crossrider.G potentially unwanted applicat
ion,JS/Toolbar.Crossrider.M potentially unwanted application,JS/Toolbar.Crossrid
er.P potentially unwanted application,JS/Toolbar.Crossrider.B potentially unwant
ed application,JS/Toolbar.Crossrider.N potentially unwanted application,JS/Toolb
ar.Crossrider.E potentially unwanted application,JS/Toolbar.Crossrider.H potenti
ally unwanted application,JS/Toolbar.Crossrider.R potentially unwanted applicati
on (deleted)" ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\AE7B.tmp"
sh=4495024B25F21088902FBD82FC915E621187FE85 ft=1 fh=0000000000048ac8 vn="MSIL/My
PCBackup.D potentially unwanted application (deleted)" ac=C fn="C:\Users\luis al
berto\AppData\Local\Temp\BackupSetup.exe"
ing)" ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\Bootstrapper.exe"
sh=79BFCDB99DACD02FF72765DF0D27F1019EB78CE9 ft=1 fh=000000000008e720 vn="a varia
nt of Win32/BrowseFox.AO potentially unwanted application (cleaned by deleting)"
ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\CD70.tmp"
sh=3D139ABD97A38EE4BA22DEC2B587F771E46BC485 ft=1 fh=0000000000025470 vn="a varia
nt of Win32/Adware.CognosAds.B application (cleaned by deleting)" ac=C fn="C:\Us
ers\luis alberto\AppData\Local\Temp\ce98ac2e-20c0-4a93-86f6-bdb3e61caf55.exe"
sh=EAB3A867FD239AD7D1D5416E8139D3D71F4140FA ft=1 fh=00000000000bd5f0 vn="a varia
ing)" ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\DeltaTB.exe"
sh=C90D76176EB464711C7ACB923C3631B6E3E5C773 ft=1 fh=000000000005e158 vn="Win32/A
dware.1ClickDownload.AY application (cleaned by deleting)" ac=C fn="C:\Users\lui
s alberto\AppData\Local\Temp\flv.exe"
sh=5C8AA300C2D5B333E336B807272BD744405627B6 ft=1 fh=000000000004e800 vn="a varia
nt of MSIL/Adware.Imali.C application (cleaned by deleting)" ac=C fn="C:\Users\l
uis alberto\AppData\Local\Temp\hib5806.exe"
sh=D2937911230F09ED1A6529A451EA026AD67D7567 ft=1 fh=000000000008f850 vn="a varia
nt of Win32/InstallCore.PK potentially unwanted application (cleaned by deleting
)" ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\ICReinstall_nsq2CBC.tmp"
ing)" ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\IminentUninstall.exe320d
8"
sh=67A17016E34B66C77DC54CA1826373247644D82F ft=1 fh=0000000000aec630 vn="a varia
nt of Win32/Injector.BHCG trojan (cleaned by deleting)" ac=C fn="C:\Users\luis a
lberto\AppData\Local\Temp\Installer.exe"
sh=9F5FE3D8BC47A98AF4555A15B588164D21C8F27F ft=1 fh=00000000000f14f8 vn="a varia
nt of Win32/Adware.Genieo.A application (cleaned by deleting)" ac=C fn="C:\Users

\luis alberto\AppData\Local\Temp\InstallGenieo.exe"
weetIM.K potentially unwanted application (cleaned by deleting)" ac=C fn="C:\Use
rs\luis alberto\AppData\Local\Temp\mgsqlite3.dll"
sh=117B708AA171989B1C23FF89FD01EE49CA792876 ft=1 fh=0000000000049a28 vn="Win32/V
OPackage.BS potentially unwanted application (deleted)" ac=C fn="C:\Users\luis a
lberto\AppData\Local\Temp\nsi8966.tmp"
sh=B4D76FDD22197E4ED1942C9FA056820E616D4FA6 ft=1 fh=00000000000346d5 vn="a varia
nt of Win32/Adware.ConvertAd.QS application (cleaned by deleting)" ac=C fn="C:\U
sers\luis alberto\AppData\Local\Temp\nsi9442.tmp"
sh=A85B5DCD611400CB2733EFFF1739BA70823C3449 ft=1 fh=0000000000186573 vn="multipl
e threats,Win32/Adware.ConvertAd.AQ application,a variant of Win32/Adware.Conver
tAd.QH application (cleaned by deleting)" ac=C fn="C:\Users\luis alberto\AppData
\Local\Temp\nsnC001.tmp"
sh=D2937911230F09ED1A6529A451EA026AD67D7567 ft=1 fh=000000000008f850 vn="a varia
)" ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\nsq2CBC.tmp"
lberto\AppData\Local\Temp\nst6025.tmp"
sh=3498A713581543958CA44D2B3AA1C6687F128526 ft=1 fh=000000000008f850 vn="a varia
)" ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\nsx85A5.tmp"
sh=723B4E944AC6658DBE6E6B5A1005796BD8B10A34 ft=1 fh=000000000008f850 vn="a varia
)" ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\nsy49EA.tmp"
sh=B84640CD4BA66F8FEA925ECB03681902EBFF692B ft=1 fh=000000000002fe00 vn="a varia
nt of Win32/Toolbar.Montiera.AB potentially unwanted application (cleaned by del
eting)" ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\res.dll"
sh=71E59B27F713BEA299C36235638BA484807C6FD0 ft=1 fh=0000000000002200 vn="MSIL/Ri
skware.ShimChanger.A application (cleaned by deleting)" ac=C fn="C:\Users\luis a
lberto\AppData\Local\Temp\Runner2.exe"
sh=04A46249F8F23E18D30AA6CB05C776BDE234F9D5 ft=1 fh=0000000000002400 vn="MSIL/Ri
skware.ShimChanger.A application (cleaned by deleting)" ac=C fn="C:\Users\luis a
lberto\AppData\Local\Temp\Runner4.exe"
sh=FDEAF723C9EF7D4E8D5C24FA3764934D9FC94928 ft=1 fh=0000000000c7dd38 vn="a varia
eleting)" ac=C fn="C:\Users\luis alberto\AppData\Local\Temp\s4s15.exe"
sh=AC80343516F0432760A49BD8E709AF31398B6773 ft=1 fh=00000000000d5878 vn="a varia
nt of Win32/Adware.CognosAds.C application (cleaned by deleting)" ac=C fn="C:\Us
ers\luis alberto\AppData\Local\Temp\setup.exe"
sh=D60F6EBE31E049C5236DBCE204F82B3CC16AE311 ft=1 fh=0000000000761958 vn="a varia
nt of Win32/SweetIM.C potentially unwanted application (cleaned by deleting)" ac
=C fn="C:\Users\luis alberto\AppData\Local\Temp\Shortcut_bundlesweetimsetup.exe"
sh=D60F6EBE31E049C5236DBCE204F82B3CC16AE311 ft=1 fh=0000000000761958 vn="a varia
nt of Win32/SweetIM.C potentially unwanted application (cleaned by deleting)" ac
=C fn="C:\Users\luis alberto\AppData\Local\Temp\Shortcut_mirna (1).exe"
sh=93384EECA6F412B277C9772D96467586723A7E00 ft=1 fh=0000000000248848 vn="Win32/T
nwanted application,a variant of Win32/Toolbar.Escort.A potentially unwanted app
lication,Win32/Toolbar.Funmoods potentially unwanted application,a variant of Wi
n32/Toolbar.Montiera.F potentially unwanted application (deleted)" ac=C fn="C:\U
sers\luis alberto\AppData\Local\Temp\Softonic_chr_1-8-19-3.exe"
sh=2DD3DE8A6B21DFD3340CA0A8CDFD35513408035B ft=1 fh=00000000001268a0 vn="a varia
nt of Win32/Adware.CognosAds.A application (cleaned by deleting)" ac=C fn="C:\Us
ers\luis alberto\AppData\Local\Temp\uninstall.exe320e8"
dnkcpcefcjniehbglhgjcjfmlkb\5.2\background.html"
dnkcpcefcjniehbglhgjcjfmlkb\5.2\content.js"
dnkcpcefcjniehbglhgjcjfmlkb\5.2\lsdb.js"
sh=0000000000000000000000000000000000000000 ft=- fh=0000000000000000 vn="" ac=S
dnkcpcefcjniehbglhgjcjfmlkb\5.2\sT9.js"
nted application (deleted)" ac=C fn="C:\Users\luis alberto\AppData\Local\AnyProt
ectScannerSetup.exe"
lberto\AppData\Local\nsi8966.tmp"
lberto\AppData\Local\nst6025.tmp"
extensions\AppGraffiti@AppGraffiti.com\chrome\AppGraffiti.jar"
extensions\AppGraffiti@AppGraffiti.com\chrome.manifest"
extensions\AppGraffiti@AppGraffiti.com\ini.xml"
extensions\AppGraffiti@AppGraffiti.com\install.rdf"
extensions\AppGraffiti@AppGraffiti.com\install.xml"
extensions\chrome\content\id_imbooster4web_v6\ask_settings.xul"
extensions\chrome\content\id_imbooster4web_v6\basis.xml"
extensions\chrome\content\id_imbooster4web_v6\bubble.js"
extensions\chrome\content\id_imbooster4web_v6\bubble.xul"
extensions\chrome\content\id_imbooster4web_v6\contents.rdf"
extensions\chrome\content\id_imbooster4web_v6\icons.bmp"
extensions\chrome\content\id_imbooster4web_v6\IMBooster4Web_v6.dll"
extensions\chrome\content\id_imbooster4web_v6\info.txt"
extensions\chrome\content\id_imbooster4web_v6\jscontainer.htm"
extensions\chrome\content\id_imbooster4web_v6\md5.js"
extensions\chrome\content\id_imbooster4web_v6\minibrowser.js"
extensions\chrome\content\id_imbooster4web_v6\minibrowser.xul"
extensions\chrome\content\id_imbooster4web_v6\mozilla.xul"
extensions\chrome\content\id_imbooster4web_v6\tabs.htm"
extensions\chrome\content\id_imbooster4web_v6\tb.css"
extensions\chrome\content\id_imbooster4web_v6\tb.js"
extensions\chrome\content\id_imbooster4web_v6\tb.xsl"
extensions\chrome\content\id_imbooster4web_v6\tb.xul"
extensions\chrome\content\id_imbooster4web_v6\TbCommonUtils.dll"
41A66E7E5EE1\extensions\chrome\content\id_imbooster4web_v6\tbcore3.dll"
extensions\chrome\content\id_imbooster4web_v6\tbcore3.inf"
extensions\chrome\content\id_imbooster4web_v6\tbhelper.dll"
extensions\chrome\content\id_imbooster4web_v6\TbHelper2.exe"
extensions\chrome\content\id_imbooster4web_v6\uninstall.exe"
extensions\chrome\content\id_imbooster4web_v6\update.exe"
extensions\chrome\content\id_imbooster4web_v6\url_processor.htm"
extensions\chrome\content\id_imbooster4web_v6\version.txt"
extensions\components\Engine.dll"

extensions\components\Engine.xpt"
extensions\components\setup_widget_serv.exe"
extensions\staged\DrMNLa@8.edu\bootstrap.js"
extensions\staged\DrMNLa@8.edu\chrome.manifest"
extensions\staged\DrMNLa@8.edu\install.rdf"
extensions\staged\WebSiteRecommendation@weknownet.com\chrome\content\common.js"
extensions\staged\WebSiteRecommendation@weknownet.com\chrome\content\jquery-1.8.
3.min.js"
sh=0000000000000000000000000000000000000000 ft=- fh=0000000000000000 vn="" ac=S
extensions\staged\WebSiteRecommendation@weknownet.com\chrome\content\options.js"
extensions\staged\WebSiteRecommendation@weknownet.com\chrome\content\options.xul
"
extensions\staged\WebSiteRecommendation@weknownet.com\chrome\content\overlay.js"
extensions\staged\WebSiteRecommendation@weknownet.com\chrome\content\overlay.xul
"
extensions\staged\WebSiteRecommendation@weknownet.com\chrome\content\popup.html"
extensions\staged\WebSiteRecommendation@weknownet.com\chrome\content\popup.js"
extensions\staged\WebSiteRecommendation@weknownet.com\chrome\content\tabs_listen
er.js"
extensions\staged\WebSiteRecommendation@weknownet.com\chrome\locale\en-US\settin
gs.dtd"
extensions\staged\WebSiteRecommendation@weknownet.com\chrome\skin\classic\main.c
ss"
extensions\staged\WebSiteRecommendation@weknownet.com\chrome\skin\classic\overla
y.css"
extensions\staged\WebSiteRecommendation@weknownet.com\chrome\skin\classic\websit
erecommendation.css"
extensions\staged\WebSiteRecommendation@weknownet.com\chrome.manifest"
extensions\staged\WebSiteRecommendation@weknownet.com\install.rdf"
sh=0000000000000000000000000000000000000000 ft=- fh=0000000000000000 vn="" ac=S
extensions\staged\WebSiteRecommendation@weknownet.com\readme.txt"
tensions\youtube-e2l@jetpack\content\overlay.js"
extensions\youtube-e2l@jetpack\content\overlay.xul"
extensions\youtube-e2l@jetpack\chrome.manifest"
extensions\youtube-e2l@jetpack\install.rdf"
tensions\{FDD8ECF0-451A-414D-8C8F-7B7F78B0ECD3}\content\overlay.js"
extensions\{FDD8ECF0-451A-414D-8C8F-7B7F78B0ECD3}\content\overlay.xul"
extensions\{FDD8ECF0-451A-414D-8C8F-7B7F78B0ECD3}\chrome.manifest"
extensions\{FDD8ECF0-451A-414D-8C8F-7B7F78B0ECD3}\install.rdf"
extensions\chrome.manifest"
extensions\install.rdf"
extensions\{EEE6C361-6118-11DC-9C72-001320C79847}.xpi"
ult\extensions\AppGraffiti@AppGraffiti.com\chrome\AppGraffiti.jar"
ult\extensions\AppGraffiti@AppGraffiti.com\chrome.manifest"
ult\extensions\AppGraffiti@AppGraffiti.com\ini.xml"
ult\extensions\AppGraffiti@AppGraffiti.com\install.rdf"
ult\extensions\AppGraffiti@AppGraffiti.com\install.xml"
ult\extensions\chrome\content\id_imbooster4web_v6\ask_settings.xul"
ult\extensions\chrome\content\id_imbooster4web_v6\basis.xml"
ult\extensions\chrome\content\id_imbooster4web_v6\bubble.js"
ult\extensions\chrome\content\id_imbooster4web_v6\bubble.xul"
ult\extensions\chrome\content\id_imbooster4web_v6\contents.rdf"
ult\extensions\chrome\content\id_imbooster4web_v6\icons.bmp"
ult\extensions\chrome\content\id_imbooster4web_v6\IMBooster4Web_v6.dll"
ult\extensions\chrome\content\id_imbooster4web_v6\info.txt"
ult\extensions\chrome\content\id_imbooster4web_v6\jscontainer.htm"
ult\extensions\chrome\content\id_imbooster4web_v6\md5.js"
ult\extensions\chrome\content\id_imbooster4web_v6\minibrowser.js"
ult\extensions\chrome\content\id_imbooster4web_v6\minibrowser.xul"
ult\extensions\chrome\content\id_imbooster4web_v6\mozilla.xul"
ult\extensions\chrome\content\id_imbooster4web_v6\tabs.htm"
ult\extensions\chrome\content\id_imbooster4web_v6\tb.css"
ult\extensions\chrome\content\id_imbooster4web_v6\tb.js"
ult\extensions\chrome\content\id_imbooster4web_v6\tb.xsl"
ult\extensions\chrome\content\id_imbooster4web_v6\tb.xul"
ult\extensions\chrome\content\id_imbooster4web_v6\TbCommonUtils.dll"

c8nj36s2.default\extensions\chrome\content\id_imbooster4web_v6\tbcore3.dll"
ult\extensions\chrome\content\id_imbooster4web_v6\tbcore3.inf"
ult\extensions\chrome\content\id_imbooster4web_v6\tbhelper.dll"
ult\extensions\chrome\content\id_imbooster4web_v6\TbHelper2.exe"
ult\extensions\chrome\content\id_imbooster4web_v6\uninstall.exe"
ult\extensions\chrome\content\id_imbooster4web_v6\update.exe"
ult\extensions\chrome\content\id_imbooster4web_v6\url_processor.htm"
ult\extensions\chrome\content\id_imbooster4web_v6\version.txt"
ult\extensions\components\Engine.dll"
ult\extensions\components\Engine.xpt"
ult\extensions\components\setup_widget_serv.exe"
ult\extensions\staged\DrMNLa@8.edu\bootstrap.js"
ult\extensions\staged\DrMNLa@8.edu\chrome.manifest"
ult\extensions\staged\DrMNLa@8.edu\install.rdf"
ult\extensions\staged\WebSiteRecommendation@weknownet.com\chrome\content\common.
js"
ult\extensions\staged\WebSiteRecommendation@weknownet.com\chrome\content\jquery1.8.3.min.js"
sh=0000000000000000000000000000000000000000 ft=- fh=0000000000000000 vn="" ac=S
.js"
.xul"
.js"
.xul"
ult\extensions\staged\WebSiteRecommendation@weknownet.com\chrome\content\popup.h
tml"
ult\extensions\staged\WebSiteRecommendation@weknownet.com\chrome\content\popup.j
s"
ult\extensions\staged\WebSiteRecommendation@weknownet.com\chrome\content\tabs_li
stener.js"
ult\extensions\staged\WebSiteRecommendation@weknownet.com\chrome\locale\en-US\se
ttings.dtd"
ult\extensions\staged\WebSiteRecommendation@weknownet.com\chrome\skin\classic\ma
in.css"
ult\extensions\staged\WebSiteRecommendation@weknownet.com\chrome\skin\classic\ov
erlay.css"
ult\extensions\staged\WebSiteRecommendation@weknownet.com\chrome\skin\classic\we
bsiterecommendation.css"
ult\extensions\staged\WebSiteRecommendation@weknownet.com\chrome.manifest"
ult\extensions\staged\WebSiteRecommendation@weknownet.com\install.rdf"
sh=0000000000000000000000000000000000000000 ft=- fh=0000000000000000 vn="" ac=S
ult\extensions\staged\WebSiteRecommendation@weknownet.com\readme.txt"
t\extensions\youtube-e2l@jetpack\content\overlay.js"
ult\extensions\youtube-e2l@jetpack\content\overlay.xul"
ult\extensions\youtube-e2l@jetpack\chrome.manifest"
ult\extensions\youtube-e2l@jetpack\install.rdf"
t\extensions\{FDD8ECF0-451A-414D-8C8F-7B7F78B0ECD3}\content\overlay.js"
ult\extensions\{FDD8ECF0-451A-414D-8C8F-7B7F78B0ECD3}\content\overlay.xul"
ult\extensions\{FDD8ECF0-451A-414D-8C8F-7B7F78B0ECD3}\chrome.manifest"
ult\extensions\{FDD8ECF0-451A-414D-8C8F-7B7F78B0ECD3}\install.rdf"
ult\extensions\chrome.manifest"
ult\extensions\install.rdf"
ult\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}.xpi"
sh=9A632BC7623B8DC7A6DECFE47E953DFAEEED4288 ft=1 fh=0000000000031000 vn="Win32/A
dware.ActiveCollector.AA application (cleaned by deleting)" ac=C fn="C:\Users\lu
is alberto\AppData\Roaming\Mozilla\Firefox\{5cea9a87-a3a5-4c2a-b08d-8a1876d4931c
}\components\ACFFComponent.dll"
sh=64F52D0F082C758DBE89032616A5D6ABA9CCE9AC ft=1 fh=000000000009d608 vn="Win32/S
ystweak.G potentially unwanted application (deleted)" ac=C fn="C:\Users\luis alb
erto\AppData\Roaming\Systweak\ssd\SSDPTstub.exe"
sh=F415283B5DB67BBA300F318DBE88C5DEFEBB4129 ft=1 fh=00000000000db919 vn="Win32/T
oolbar.Babylon potentially unwanted application (deleted)" ac=C fn="C:\Users\lui
s alberto\AppData\Roaming\VideoLAN\bbtsetup.exe"
sh=89092BB29B0608D09B6B0346320032F39159FC86 ft=1 fh=00000000003d2929 vn="multipl
e threats,Win32/Adware.ActiveCollector application,Win64/Adware.ActiveCollector
application,a variant of Win32/Adware.ActiveCollector.AA application (cleaned by
deleting)" ac=C fn="C:\Users\luis alberto\AppData\Roaming\VideoLAN\lastupdate.e
xe"
sh=9AA260061369FFAA8550B417CB125E732749365A ft=1 fh=00000000001c47a0 vn="a varia
nt of Win32/Toolbar.CrossRider.CB potentially unwanted application (cleaned by d
eleting)" ac=C fn="C:\Users\luis alberto\AppData\Roaming\AMMYCCM.exe"
sh=F9E0B4266C015CF0B7369D5A9B8FFCC26AF23ACC ft=1 fh=00000000001553a8 vn="a varia
eleting)" ac=C fn="C:\Users\luis alberto\AppData\Roaming\KKAA.exe"
sh=1F066FD533416EE481FE0E61534AEEC759DC5409 ft=1 fh=00000000001cc3a8 vn="a varia
nt of Win32/Toolbar.CrossRider.BN potentially unwanted application (cleaned by d
eleting)" ac=C fn="C:\Users\luis alberto\AppData\Roaming\RAGEZ.exe"
sh=2EE020C0DE473A7B4247542C0A5FAA85E0499DBF ft=1 fh=000000000014e3a0 vn="a varia
eleting)" ac=C fn="C:\Users\luis alberto\AppData\Roaming\YQTSKPY.exe"
sh=BF2F2487AF0440F495459080A76FBD40BCA69307 ft=1 fh=0000000000fb91a0 vn="Win32/S
to\Desktop\aTube_Catcher_SFT_7980.exe"
sh=7838A1A25A4903937722A1F5C2D48A1B7A362901 ft=1 fh=000000000005b2c0 vn="Win32/S
oftonicDownloader.E potentially unwanted application (cleaned by deleting)" ac=C
fn="C:\Users\luis alberto\Desktop\SoftonicDownloader_para_atube-catcher.exe"
sh=73DC066C7857E9151303F64F64ABB22FC2298AD6 ft=1 fh=00000000001025e0 vn="a varia
nt of Win32/SoftPulse.Q potentially unwanted application (cleaned by deleting)"
ac=C fn="C:\Users\luis alberto\Downloads\atube catcher.exe"
sh=D656E2DD8CD1479CC766C44E4D864B642DF89A3C ft=1 fh=00000000000a9858 vn="a varia
nt of Win32/SoftPulse.V potentially unwanted application (cleaned by deleting)"
ac=C fn="C:\Users\luis alberto\Downloads\Java.exe"
sh=2CB266EA202CC4B75EB30CEF29A73332C904B4BC ft=1 fh=000000000009eb78 vn="a varia
nt of Win32/SoftPulse.AH potentially unwanted application (cleaned by deleting (
after the next restart))" ac=C fn="C:\Users\luis alberto\Downloads\Setup.exe"

Windows\system32\drivers\MPCKpt.sys"
sh=741518CA17409E0C108EA202464829E6C664ED1E ft=1 fh=000000000000b930 vn="a varia
nt of MSIL/DomaIQ.A potentially unwanted application (cleaned by deleting)" ac=C
fn="C:\Program Files\Uninstaller\Uninstall.exe"
sh=02E9282CC4E21309AA99104ED8D95E40BFC6416B ft=1 fh=000000000004a17e vn="a varia
Program Files (x86)\AmiExt\flashEnhancer\uninstall.exe"
sh=8412296D2832D41331AE581C1E300D0812251002 ft=1 fh=000000000002fb90 vn="a varia
nt of Win32/AdWare.EasySpeedCheck.A application (cleaned by deleting)" ac=C fn="
C:\Program Files (x86)\Easy Speed Check\easyspeedcheck.exe"
sh=DF4FB1B2D51A6D5F64FA31858598711134756D63 ft=1 fh=00000000000d9098 vn="a varia
ing)" ac=C fn="C:\Program Files (x86)\Installer\babylonnn.exe"
sh=7BBA403FF536FCD057B03BC6C6DD60B30818E26F ft=1 fh=0000000000007168 vn="a varia
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\Drivers\MP
CBase_32.sys"
Program Files (x86)\MPC Cleaner\Drivers\MPCKpt.sys"
sh=75862FCA547282A04952F2AD1235A86A244D5BF5 ft=1 fh=000000000000cee8 vn="a varia
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\Drivers\MP
CKpt_vista_32.sys"
Program Files (x86)\MPC Cleaner\Drivers\MPCKpt_vista_64.sys"
sh=7FA3746CD92CF822FFA1D3AF4F0304655A7FA69F ft=1 fh=000000000046b748 vn="a varia
ac=C fn="C:\Program Files (x86)\MPC Cleaner\Exe\ADC_qd00000.exe"
ac=C fn="C:\Program Files (x86)\MPC Cleaner\Microsoft.VC90.CRT\msvcm90.dll"
sh=B00D7D54417F83530AB41C1D45CECB48DC796FCF ft=1 fh=00000000000195e0 vn="a varia
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\AdbWinApi.
dll"
sh=5ADCA9DD3BF59F20C0B0CBB12D35F2EF0849982A ft=1 fh=0000000000010be0 vn="a varia
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\AdbWinUsbA
pi.dll"
sh=A0876F1786A56B0F15553C3ED921BD9796B1F309 ft=1 fh=000000000000c5e0 vn="a varia
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\AdcManager
.dll"
sh=1A61B312A4C24359798ED1DCA279564AB10A4809 ft=1 fh=00000000000159e0 vn="a varia
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\AndriodSer
ver.dll"
sh=9B3DB936D99C7E4068AB0EE40D01A3EA12F93516 ft=1 fh=000000000004f3e0 vn="a varia
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\BrowserPlu
gIn.dll"
sh=E87299615DD3E4BBB830A1C5BCB1740F84918F36 ft=1 fh=00000000000373e0 vn="a varia
ac=C fn="C:\Program Files (x86)\MPC Cleaner\CeBase.dll"
sh=47B0D6CD29DDD112644FDBEEFC5FBA12BD4454F0 ft=1 fh=0000000000053de0 vn="a varia
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\Cleaner.dl
l"
sh=7F8A85698C0E04C809EB165A6E5BCB49D436F4C0 ft=1 fh=000000000002efe0 vn="a varia
ac=C fn="C:\Program Files (x86)\MPC Cleaner\CrashReport.exe"
sh=523D9F4DD4F306213D7F391E5F09ED617AB8AC9E ft=1 fh=00000000000251e0 vn="a varia
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\Database.d
ll"
sh=41D812F8C628FD41FAB616F2663CE46042C72A18 ft=1 fh=000000000010fde0 vn="a varia
ac=C fn="C:\Program Files (x86)\MPC Cleaner\isafechlp.dll"
sh=563CA7FA5E43EF24D45268B58AA2678C69D4979D ft=1 fh=0000000000025be0 vn="a varia
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\LogReport.
dll"
sh=43A933E2395C4A3C1A70EF0120B7F32FB614E15B ft=1 fh=00000000000229e0 vn="a varia
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\LpcManager
.dll"
sh=F528FF67BE3F6A16A83A8B83985CCB745C29440F ft=1 fh=00000000000e69e0 vn="a varia
ac=C fn="C:\Program Files (x86)\MPC Cleaner\MainFrame.dll"
sh=E50E257A2772B05ABDC5B1301348F3A7BCD31037 ft=1 fh=00000000000201e0 vn="a varia
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\Monitor.dl
l"
sh=92C399BF4685ACAB45D637C8CC3374BAEE33B6F6 ft=1 fh=0000000000028de0 vn="a varia
ac=C fn="C:\Program Files (x86)\MPC Cleaner\MPC.exe"
sh=91A4B01891B52EFC7216F580089BDF9316595670 ft=1 fh=00000000000451e0 vn="a varia
ac=C fn="C:\Program Files (x86)\MPC Cleaner\MPCAutoClean.exe"
sh=E6E86E548502CEE2140887ABAA15E1D33CAB0369 ft=1 fh=00000000000e1fe0 vn="a varia
ac=C fn="C:\Program Files (x86)\MPC Cleaner\MPCBS.dll"
sh=A54EA6483D2EBE28F90745F64A484BC8BA78621B ft=1 fh=0000000000019de0 vn="a varia
ac=C fn="C:\Program Files (x86)\MPC Cleaner\MPCCheckDump.exe"
sh=B6C8B991C4E32E63FDAB176AE73BB82C2E99758F ft=1 fh=00000000000425e0 vn="a varia
ac=C fn="C:\Program Files (x86)\MPC Cleaner\MPCNews.exe"
sh=38AC9F35E07275308456A86AB74010ACFBE697C4 ft=1 fh=00000000000559e0 vn="a varia
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\MPCProtect
Service.exe"
sh=D8369B07B0B92C86C7DECE8665EA79940841BA10 ft=1 fh=000000000000d5e0 vn="a varia
.dll"
sh=73D9CF58402E2A780E175B88518645DEC6FC4468 ft=1 fh=000000000000cfe0 vn="a varia
64.dll"
sh=CE917EF310695BFC3C19525A70DC038762257053 ft=1 fh=00000000000275e0 vn="a varia
ac=C fn="C:\Program Files (x86)\MPC Cleaner\MPCSecurity.exe"
sh=E66376388A51D1EA9485236795500EBB328E56F7 ft=1 fh=00000000000385e0 vn="a varia
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\MPCSetting
.exe"
sh=937836780BB991A61B3FC9EE896D85933B0B931F ft=1 fh=0000000000028de0 vn="a varia

after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\MPCTray.ex
e"
sh=803B51C4D42E07BB41210CD4E01DFC213C9901DA ft=1 fh=0000000000019de0 vn="a varia
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\MPCTray64.
exe"
ac=C fn="C:\Program Files (x86)\MPC Cleaner\msvcm90.dll"
sh=1CADB36329505892F0578833C2910E84C716269E ft=1 fh=00000000000105e0 vn="a varia
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\Report.dll
"
sh=47BEF3747FF0703C5710E292DC6FA29E1739425F ft=1 fh=00000000000497e0 vn="a varia
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\SafeNavi.d
ll"
sh=37CB7B8ECF1AC40532B00988BD3141724AEE6AA4 ft=1 fh=00000000000895e0 vn="a varia
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\SafeNavi64
.dll"
sh=1370B0833D91FA5D4734629896AD2A8A6BC7E66C ft=1 fh=0000000000076fe0 vn="a varia
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\SafeProtec
t.dll"
sh=E3136ECC7F2BB03FB1C452F0B6F67B87FE828C37 ft=1 fh=0000000000027de0 vn="a varia
ac=C fn="C:\Program Files (x86)\MPC Cleaner\SetupFrame.dll"
sh=53D8EE4FB02CAACC0253A6BFA01D309B437D7D20 ft=1 fh=00000000000a21e0 vn="a varia
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\Support.dl
l"
sh=E0FC6B43F8FAC1C0D1037887E5EAF7B1F9C5F86A ft=1 fh=00000000000ce5e0 vn="a varia
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\TrayFrame.
dll"
sh=E364F40928C63A03E07C47EA66AD832F935DAF71 ft=1 fh=00000000000271e0 vn="a varia
ac=C fn="C:\Program Files (x86)\MPC Cleaner\Uninstall.exe"
sh=001C01C16A3087ECA4029C816FF50DE2E083B974 ft=1 fh=00000000000215e0 vn="a varia
ac=C fn="C:\Program Files (x86)\MPC Cleaner\UninstallFrame.dll"
sh=A29E3225E8E005B477E1237D5390D34684239937 ft=1 fh=0000000000030be0 vn="a varia
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\UninstDele
te.exe"
sh=9FA4D99DE311E69F934643135F8EE32E44A98C41 ft=1 fh=00000000000421e0 vn="a varia
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\Update.dll
"
sh=D75E7481BF43F7EFB55867032D8E93A886717528 ft=1 fh=00000000000491e0 vn="a varia
ac=C fn="C:\Program Files (x86)\MPC Cleaner\UpdateHost.exe"
sh=F9B4481ACF194E4CAF80A92B5F120A7471F93744 ft=1 fh=00000000000071e0 vn="a varia
ac=C fn="C:\Program Files (x86)\MPC Cleaner\Upgrade.dll"
sh=82C95690C090EC05FDE21F4372A8013DC9E7A281 ft=1 fh=000000000014f3e0 vn="a varia
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\Utility.dl

l"
sh=86C97042F4A378EBA06C0F54D825F096B04CFC91 ft=1 fh=000000000003f5e0 vn="a varia
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\Web.dll"
sh=F46740D4E2A0F7748FD7CACDFA827A93EE1E28C3 ft=1 fh=0000000000008fe0 vn="a varia
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\WinService
.dll"
sh=77A677D732B2F9FCE206017D2B4F65358D89854A ft=1 fh=00000000000f8be0 vn="a varia
ac=C fn="C:\Program Files (x86)\MPC Cleaner\xadb.exe"
sh=28EA52315FD6208C147068209C15A8CC69D2BFBE ft=1 fh=00000000000187e0 vn="a varia
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\XBus.dll"
sh=A53E3FDC66DD1978D4B1E8C589BD42AAF81EA52A ft=1 fh=000000000000a3e0 vn="a varia
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\XProcessBu
s.dll"
sh=73014EDE7B750F44B574947F3EDA1DB2BDB7344E ft=1 fh=000000000010a9e0 vn="a varia
after the next restart))" ac=C fn="C:\Program Files (x86)\MPC Cleaner\XSkin.dll"
gram Files (x86)\SweetIM\Communicator\resources\sqlite\mgSqlite3.dll"
sh=23B3E5F508EB6FC76D67A873A5AAC2D34C3CE5E1 ft=1 fh=000000000009ed58 vn="a varia
=C fn="C:\Program Files (x86)\SweetIM\Communicator\mgcommon.dll"
sh=7DB65607A18C67C0C8C0310E0FF23A202AB3F070 ft=1 fh=000000000000a158 vn="a varia
=C fn="C:\Program Files (x86)\SweetIM\Communicator\mgcommunication.dll"
sh=3176C30E3A30990C42C968951B6BB2ADFD0B1C00 ft=1 fh=0000000000011758 vn="a varia
=C fn="C:\Program Files (x86)\SweetIM\Communicator\mgsimcommon.dll"
sh=08647AB20AED7B8385931FDF5B4A48165131A061 ft=1 fh=000000000000ef58 vn="a varia
=C fn="C:\Program Files (x86)\SweetIM\Communicator\mgxml_wrapper.dll"
sh=C6A9FB024D614702667E0768E0B673BA3A31F504 ft=1 fh=0000000000038958 vn="a varia
=C fn="C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe"
gram Files (x86)\SweetIM\Messenger\resources\sqlite\mgSqlite3.dll"
sh=D09F832544B921CD7C61A7DB193F29EF6638AD88 ft=1 fh=0000000000023158 vn="a varia
=C fn="C:\Program Files (x86)\SweetIM\Messenger\ContentPackagesActivationHandler
.exe"
sh=C6E3F8034D197C34D61701AC146694B6DBEC36CD ft=1 fh=0000000000006958 vn="a varia
nt of Win32/SweetIM.L potentially unwanted application (cleaned by deleting (aft
er the next restart))" ac=C fn="C:\Program Files (x86)\SweetIM\Messenger\mgAdapt
ersProxy.dll"
sh=FC883B83DA2A9ED93AC2A4CEC9936268A6B264C2 ft=1 fh=0000000000015158 vn="a varia
=C fn="C:\Program Files (x86)\SweetIM\Messenger\mgArchive.dll"
sh=F3001B5F58A6C6AB8DD7E6E63CB89D20F74EF228 ft=1 fh=000000000007e158 vn="a varia
=C fn="C:\Program Files (x86)\SweetIM\Messenger\mgcommon.dll"
sh=2CF3C9FBCBEBAA6D75DE43CCC487D62954538F81 ft=1 fh=0000000000008f58 vn="a varia
=C fn="C:\Program Files (x86)\SweetIM\Messenger\mgcommunication.dll"
sh=60FCD298549E0383DFACBE66420DC922D6BAAF84 ft=1 fh=0000000000010158 vn="a varia

=C fn="C:\Program Files (x86)\SweetIM\Messenger\mgconfig.dll"
sh=531A5D492B39076AA7990DD76F41B762258B86A7 ft=1 fh=0000000000025158 vn="a varia
=C fn="C:\Program Files (x86)\SweetIM\Messenger\mgFlashPlayer.dll"
sh=AE57E26160449200540B1FD8E839F1BD5A30327A ft=1 fh=0000000000029158 vn="a varia
=C fn="C:\Program Files (x86)\SweetIM\Messenger\mghooking.dll"
sh=B6E78443D25AF8B978DC24D515DF7B2F673629CC ft=1 fh=000000000002a158 vn="a varia
=C fn="C:\Program Files (x86)\SweetIM\Messenger\mgICQAuto.dll"
sh=42B14A7D72C6EDAF5140A2C7B95149B92473853C ft=1 fh=000000000004a158 vn="a varia
=C fn="C:\Program Files (x86)\SweetIM\Messenger\mgICQMessengerAdapter.dll"
sh=B28C9BCA89A124EBD2EAAF5073370E7E0E87DB4E ft=1 fh=0000000000009358 vn="a varia
=C fn="C:\Program Files (x86)\SweetIM\Messenger\mglogger.dll"
sh=C86CF9524D11A2392A491EA15ED12D2CA890F249 ft=1 fh=000000000000ad58 vn="a varia
=C fn="C:\Program Files (x86)\SweetIM\Messenger\mgMsnAuto.dll"
sh=73987118D6F1799B0B29DB00BF7248B20347BB46 ft=1 fh=0000000000018158 vn="a varia
=C fn="C:\Program Files (x86)\SweetIM\Messenger\mgsimcommon.dll"
sh=07695C8842935A01310F52C83BAB364950419841 ft=1 fh=0000000000049158 vn="a varia
=C fn="C:\Program Files (x86)\SweetIM\Messenger\mgUpdateSupport.dll"
sh=093FB06E67DB8C5562A823E389853340405B8724 ft=1 fh=0000000000012158 vn="a varia
=C fn="C:\Program Files (x86)\SweetIM\Messenger\mgxml_wrapper.dll"
sh=A679EB39BB32DD88C09E150B0E5F7BAED12467A6 ft=1 fh=0000000000016158 vn="a varia
=C fn="C:\Program Files (x86)\SweetIM\Messenger\mgYahooAuto.dll"
sh=9B45902B8B791A84EC6F7D1AD2E8099410D1A467 ft=1 fh=000000000002e158 vn="a varia
=C fn="C:\Program Files (x86)\SweetIM\Messenger\mgYahooMessengerAdapter.dll"
02:53:40 EOS report sent
02:53:40 Finalizing Scanner
02:53:40 Finalizing DetectAV
7902a8602d76ed&user_token=1180273625337362&report={"report_type": "REBOOT_PROMPT
",}&report_sig=2B0E1C581CDD0706BF99A0BF6D229F80&fwd_ip=127.0.0.1&version=4.5.0.2
902:53:40
02:53:40 FB Restart Prompt sent

Log

Hochgeladen von

Dokumentinformationen

Originaltitel

Copyright

Verfügbare Formate

Dieses Dokument teilen

Dokument teilen oder einbetten

Freigabeoptionen

Stufen Sie dieses Dokument als nützlich ein?

Sind diese Inhalte unangemessen?

Copyright:

Verfügbare Formate

Log

Hochgeladen von

Copyright:

Verfügbare Formate

01:24:32 Switches begin

01:24:32 Switches end

01:25:16 Response: 01:25:16 {"status":true}01:25:16

01:27:07 Response: 01:27:07 {"status":true}01:27:07

01:28:43 UPDATED report sent to ESET

01:30:42 Response: 01:30:42 {"status":true}01:30:42

01:32:22 Response: 01:32:22 {"status":true}01:32:22

01:34:03 Response: 01:34:03 {"status":true}01:34:03

01:35:51 Response: 01:35:51 {"status":true}01:35:51

01:37:32 Response: 01:37:32 {"status":true}01:37:32

01:40:55 Response: 01:40:55 {"status":true}01:40:55

01:42:35 Response: 01:42:35 {"status":true}01:42:35

wanted application","sample_id": "JS/Toolbar.Crossrider.J potentially unwanted a

01:44:30 Request body: 01:44:30 access_token=1443300579261932|cfedb1bd1113405e09

wanted application","sample_id": "JS/Toolbar.Crossrider.G potentially unwanted a

01:44:41 Request body: 01:44:41 access_token=1443300579261932|cfedb1bd1113405e09

01:45:56 Request body: 01:45:56 access_token=1443300579261932|cfedb1bd1113405e09

01:46:48 Request body: 01:46:48 access_token=1443300579261932|cfedb1bd1113405e09

01:49:26 Request body: 01:49:26 access_token=1443300579261932|cfedb1bd1113405e09

01:50:16 Request body: 01:50:16 access_token=1443300579261932|cfedb1bd1113405e09

cation","sample_hashes": {"SHA1": "5F437ECC88A691B6161B1D168B3F4A93624F5832",},}

nt of MSIL/NewPlayer.C potentially unwanted application","sample_id": "a variant

01:52:35 Request body: 01:52:35 access_token=1443300579261932|cfedb1bd1113405e09

ly unwanted application","sample_id": "Win32/Toolbar.Babylon potentially unwante

cation","sample_hashes": {"SHA1": "5F437ECC88A691B6161B1D168B3F4A93624F5832",},}

01:53:25 Request body: 01:53:25 access_token=1443300579261932|cfedb1bd1113405e09

,"event_type": "CLEANUP_SUCCESS","sample_name": "a variant of Win32/Toolbar.Baby

01:53:44 Request query: 01:53:44 1443300579261932/malware_scanner01:53:44

,"event_type": "CLEANUP_SUCCESS","sample_name": "a variant of Win64/BrowseFox.BQ

01:55:03 Response: 01:55:03 {"status":true}01:55:03

lbar.CrossRider.BS potentially unwanted application","sample_hashes": {"SHA1": "

01:55:15 Response: 01:55:15 {"status":true}01:55:15

01:56:15 Request body: 01:56:15 access_token=1443300579261932|cfedb1bd1113405e09

f Win32/Toolbar.Montiera.F potentially unwanted application,Win32/Toolbar.Montie

nted application,a variant of Win32/Toolbar.Montiera.A potentially unwanted appl

01:56:54 Request body: 01:56:54 access_token=1443300579261932|cfedb1bd1113405e09

otentially unwanted application","sample_id": "a variant of Win32/AlteredSoftwar

wanted application","sample_id": "Win32/AlteredSoftware.A potentially unwanted a

01:57:16 Request body: 01:57:16 access_token=1443300579261932|cfedb1bd1113405e09

01:57:21 Request body: 01:57:21 access_token=1443300579261932|cfedb1bd1113405e09

otentially unwanted application","sample_id": "a variant of Win32/AlteredSoftwar

01:57:30 Request body: 01:57:30 access_token=1443300579261932|cfedb1bd1113405e09

01:57:33 Request body: 01:57:33 access_token=1443300579261932|cfedb1bd1113405e09

otentially unwanted application","sample_id": "a variant of Win32/AlteredSoftwar

otentially unwanted application","sample_id": "a variant of Win32/AlteredSoftwar

01:57:43 Request body: 01:57:43 access_token=1443300579261932|cfedb1bd1113405e09

otentially unwanted application","sample_id": "a variant of Win32/AlteredSoftwar

otentially unwanted application","sample_id": "a variant of Win32/AlteredSoftwar

01:57:54 Request body: 01:57:54 access_token=1443300579261932|cfedb1bd1113405e09

otentially unwanted application","sample_id": "a variant of Win32/AlteredSoftwar

wanted application","sample_id": "Win32/AlteredSoftware.C potentially unwanted a

01:58:05 Request body: 01:58:05 access_token=1443300579261932|cfedb1bd1113405e09

otentially unwanted application","sample_id": "a variant of Win32/AlteredSoftwar

01:58:16 Request body: 01:58:16 access_token=1443300579261932|cfedb1bd1113405e09

01:58:27 Request query: 01:58:27 1443300579261932/malware_scanner01:58:27

01:59:39 Request query: 01:59:39 1443300579261932/malware_scanner01:59:39

ation,a variant of Win64/Adware.Vitruvian.B application,a variant of Win32/AdWar

.Babylon.E potentially unwanted application","sample_hashes": {"SHA1": "35B21F8E

d. Please retry your request later.","type":"OAuthException","is_transient":true

02:00:32 Request body: 02:00:32 access_token=1443300579261932|cfedb1bd1113405e09

potentially unwanted application,JS/Toolbar.Crossrider.T potentially unwanted a

wanted application","sample_id": "JS/Toolbar.Crossrider.T potentially unwanted a

02:01:07 Request body: 02:01:07 access_token=1443300579261932|cfedb1bd1113405e09