Код:
Registry Keys: 10
PUP.Optional.Rubar, HKLM\SOFTWARE\CLASSES\CLSID\{23DD83B5-BDDC-49CE-B77B-514819C6D551}, , [7f2a87815b206ec830a79e7c79893fc1],
PUP.Optional.Rubar, HKU\S-1-5-21-2240531677-1737861183-1858417867-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{C44D2EA2-FCCE-4CE8-8710-5ED0D33F7677}, , [5653c93fe8930c2ac21c031755adde22],
PUP.Optional.Rubar, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{C44D2EA2-FCCE-4CE8-8710-5ED0D33F7677}, , [5653c93fe8930c2ac21c031755adde22],
PUP.Optional.Conduit, HKLM\SOFTWARE\CLASSES\CLSID\{3c471948-f874-49f5-b338-4f214a2ee0b1}, , [852430d8b8c39c9ae7951916d8286799],
PUP.Optional.RelevantKnowledge, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{d08d9f98-1c78-4704-87e6-368b0023d831}, , [85248d7bb9c260d61a00af45936fec14],
PUP.Optional.1ClickDownload.A, HKU\S-1-5-21-2240531677-1737861183-1858417867-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\1ClickDownload, , [07a2d23687f440f62281c6b78b78619f],
Malware.Trace, HKU\S-1-5-21-2240531677-1737861183-1858417867-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DC3_FEXEC, , [47620ff92e4d5cda7df8b454fd0638c8],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-2240531677-1737861183-1858417867-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE\1I1T1Q1S, , [71382fd9087352e4d62f3b2bd929e41c],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-2240531677-1737861183-1858417867-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE, , [bdec8b7daccf23131436f9837c87946c],
PUP.Optional.RegCleanerPro.A, HKU\S-1-5-21-2240531677-1737861183-1858417867-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SYSTWEAK\RegClean Pro, , [9f0a0afe770482b4de29d4aedf2402fe],
Registry Values: 1
PUP.Optional.InstallCore.A, HKU\S-1-5-21-2240531677-1737861183-1858417867-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE|tb, 0Q1O1J1S, , [bdec8b7daccf23131436f9837c87946c]
Folders: 9
Stolen.Data, C:\Users\??????????\AppData\Roaming\dclogs, , [3f6aff092457a690ba7f6ec952b117e9],
Rogue.Multiple, C:\Users\??????????\AppData\Roaming\17033897, , [3970fc0c5b2082b4f07389b659a941bf],
PUP.Optional.MarketScore, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge, , [abfebf492d4e6fc769a37fc96c9607f9],
PUP.Optional.ToolBar.WA, C:\Users\??????????\AppData\Local\Webalta Toolbar, , [446563a5354640f6967b222ce41e60a0],
PUP.Optional.OpenCandy, C:\Users\??????????\AppData\Roaming\OpenCandy, , [b9f00bfdd1aa2610cd44e16e4fb307f9],
PUP.Optional.OpenCandy, C:\Users\??????????\AppData\Roaming\OpenCandy\83A198C988CA44819FF2E44C4072E1C2, , [b9f00bfdd1aa2610cd44e16e4fb307f9],
PUP.Optional.OpenCandy, C:\Users\??????????\AppData\Roaming\OpenCandy\E80971DEC11A43288F2C7FE4E503BF98, , [b9f00bfdd1aa2610cd44e16e4fb307f9],
PUP.Optional.NextLive.A, C:\Users\??????????\AppData\Roaming\newnext.me, , [644561a7621935013991d37da35fae52],
PUP.Optional.NextLive.A, C:\Users\??????????\AppData\Roaming\newnext.me\cache, , [644561a7621935013991d37da35fae52],
Files:
PUP.Optional.Conduit, C:\Program Files\Conduit\Community Alerts\Alert.dll, , [852430d8b8c39c9ae7951916d8286799],
Stolen.Data, C:\Users\??????????\AppData\Roaming\dclogs\2013-10-25-6.dc, , [3f6aff092457a690ba7f6ec952b117e9],
Stolen.Data, C:\Users\??????????\AppData\Roaming\dclogs\2014-02-03-2.dc, , [3f6aff092457a690ba7f6ec952b117e9],
Stolen.Data, C:\Users\??????????\AppData\Roaming\dclogs\2014-03-07-6.dc, , [3f6aff092457a690ba7f6ec952b117e9],
Stolen.Data, C:\Users\??????????\AppData\Roaming\dclogs\2014-03-11-3.dc, , [3f6aff092457a690ba7f6ec952b117e9],
Hijack.Trace, C:\Windows\System32\drivers\etc\h??sts, , [07a2aa5e28532e08562d2f25f40f738d],
PUP.Optional.PCPerformer.A, C:\Windows\System32\roboot.exe, , [cadf9b6dee8de45280c3fe7f37cc936d],
PUP.Optional.MarketScore, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge\About RelevantKnowledge.lnk, , [abfebf492d4e6fc769a37fc96c9607f9],
PUP.Optional.MarketScore, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge\Member of GRID - Goodware Repository Information Database.lnk, , [abfebf492d4e6fc769a37fc96c9607f9],
PUP.Optional.MarketScore, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge\Privacy Policy and User License Agreement.lnk, , [abfebf492d4e6fc769a37fc96c9607f9],
PUP.Optional.MarketScore, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge\Support.lnk, , [abfebf492d4e6fc769a37fc96c9607f9],
PUP.Optional.OpenCandy, C:\Users\??????????\AppData\Roaming\OpenCandy\83A198C988CA44819FF2E44C4072E1C2\TuneUpUtilities2013-2200268-p3v0.exe, , [b9f00bfdd1aa2610cd44e16e4fb307f9],
PUP.Optional.OpenCandy, C:\Users\??????????\AppData\Roaming\OpenCandy\E80971DEC11A43288F2C7FE4E503BF98\hamsterfreeziparchiver.exe, , [b9f00bfdd1aa2610cd44e16e4fb307f9],
PUP.Optional.NextLive.A, C:\Users\??????????\AppData\Roaming\newnext.me\nengine.cookie, , [644561a7621935013991d37da35fae52],
PUP.Optional.NextLive.A, C:\Users\??????????\AppData\Roaming\newnext.me\cache\spark.bin, , [644561a7621935013991d37da35fae52],