Код:
Ключи реестра: 3
PUP.Optional.Koyote.A, HKU\S-1-5-21-4068737515-2107795561-2880802806-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Free FLV Converter, , [9415e820b1cac175545542f551b09b65],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-4068737515-2107795561-2880802806-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE\1I1T1Q1S, , [3d6c9f69e09bec4a000542249270e51b],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-4068737515-2107795561-2880802806-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE, , [1d8cf6123b40e056400ab6c63bc8956b],
Значения реестра: 1
PUP.Optional.InstallCore.A, HKU\S-1-5-21-4068737515-2107795561-2880802806-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE|tb, 0Q1O1J1S, , [1d8cf6123b40e056400ab6c63bc8956b]
Данные реестра: 1
PUP.Optional.Conduit.A, HKU\S-1-5-21-4068737515-2107795561-2880802806-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://search.conduit.com/?ctid=CT3321908&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=4&UP=SPE5026C82-3904-4B22-A02E-6ACEE3D959D8&SSPV=, Good: (http://www.google.com), Bad: (http://search.conduit.com/?ctid=CT3321908&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=4&UP=SPE5026C82-3904-4B22-A02E-6ACEE3D959D8&SSPV=),,[9118a8603843aa8c2b368c75af55ad53]
Файлы:
PUP.Optional.Somoto, Q:\Users\Marat\AppData\Local\Google\Chrome\User Data\Default\File System\001\t\00\00000000, , [2d7ca66286f5b08692af2a031ce8619f],
PUP.Optional.Somoto, Q:\Users\Marat\AppData\Local\Google\Chrome\User Data\Default\File System\001\t\00\00000001, , [02a73ace53281c1a5be65cd1df2508f8],
PUP.Optional.Conduit.A, Q:\Users\Marat\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3X1JWO78\SPSetup[1].exe, , [b3f60dfbccaf71c5d21581946f9205fb],
PUP.Optional.Conduit.A, Q:\Users\Marat\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G59W7H01\spstub[1].exe, , [8b1eaf59cab184b2b3708c8832cf966a],
PUP.Optional.SearchProtect.A, Q:\Users\Marat\AppData\Local\Temp\nshD9AB.exe, , [3772d5331a612115ab4ca27eb64bea16],
PUP.Optional.SearchProtect.A, Q:\Users\Marat\AppData\Local\Temp\nshE060.exe, , [03a645c36e0d42f4af48f927f40d926e],
PUP.Optional.SearchProtect.A, Q:\Users\Marat\AppData\Local\Temp\nshE4F3.exe, , [a702d5334a31af8750a754ccd928847c],
PUP.Optional.SearchProtect.A, Q:\Users\Marat\AppData\Local\Temp\nsn4032.exe, , [92177890a6d5b97d53a4a9778b76b54b],
PUP.Optional.SearchProtect.A, Q:\Users\Marat\AppData\Local\Temp\nsn4429.exe, , [f0b9e127c0bb6cca8d6a1d0357aa41bf],
PUP.Optional.SearchProtect.A, Q:\Users\Marat\AppData\Local\Temp\nss3B70.exe, , [7633ae5a106bdf579a5d6ab6837e8977],
PUP.Optional.SearchProtect.A, Q:\Users\Marat\AppData\Local\Temp\nsx5CC3.exe, , [852412f68dee89ad7087928e7889a060],
PUP.Optional.Conduit.A, Q:\Users\Marat\AppData\Local\Temp\nsr31B8\SpSetup.exe, , [ebbe2eda0378f1456780ff167091de22],
PUP.Optional.Conduit.A, Q:\Users\Marat\AppData\Roaming\Mozilla\Firefox\Profiles\2d53rkvb.default\searchplugins\conduit-search.xml, , [d9d09d6ba2d990a61da90555d62cc838],