Mbar-Log-2017-03-06 (11-46-18)

Malwarebytes Anti-Rootkit BETA 1.9.3.
1001
www.malwarebytes.org
Database version:
main: v2017.03.06.04
rootkit: v2017.02.27.01
Windows 10 x64 NTFS
Internet Explorer 11.576.14393.0
AmyDerp :: DESKTOP-GRFVR0K [administrator]
3/6/2017 11:46:18 AM
mbar-log-2017-03-06 (11-46-18).txt
Scan type: Quick scan
Scan options enabled: Anti-Rootkit | MBR | Memory | Startup | Registry | File Sy
stem | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled: Drivers | Physical Sectors
Objects scanned: 332368
Time elapsed: 35 minute(s), 25 second(s)
Memory Processes Detected: 10
C:\Users\AmyDerp\AppData\Roaming\Kyubey\Kyubey.exe (Trojan.Downloader) -> 2756 -
> Delete on reboot. [6d5f1caadccc3ff7f5c2fa7b57aa728e]
C:\Program Files (x86)\amuleCexx\ed2k.exe (Adware.Elex) -> 8048 -> Delete on reb
oot. [517bc8fea1071224ab13db1fdb257090]
C:\Program Files (x86)\Birdjob\Application\chrome.exe (Adware.Ghokswa) -> 4188 -
> Delete on reboot. [408c666001a7989ee42d9c25629fe917]
Memory Modules Detected: 21
C:\ProgramData\Apple\Apple Application Support\Support.dll (Adware.Elex) -> Dele
te on reboot. [e6e6fccae3c546f002816debc23f58a8]
C:\Program Files (x86)\Birdjob\Application\chrome.dll (Adware.Ghokswa) -> Delete
on reboot. [408c666001a7989ee42d9c25629fe917]
C:\Program Files (x86)\Birdjob\Application\chrome_child.dll (Adware.Ghokswa) ->
Delete on reboot. [408c666001a7989ee42d9c25629fe917]
C:\Program Files (x86)\Birdjob\Application\chrome_elf.dll (Adware.Ghokswa) -> De
lete on reboot. [408c666001a7989ee42d9c25629fe917]
C:\Program Files (x86)\Birdjob\Application\chrome_watcher.dll (Adware.Ghokswa) -
C:\Program Files (x86)\Birdjob\Application\d3dcompiler_47.dll (Adware.Ghokswa) -
C:\Program Files (x86)\Birdjob\Application\libegl.dll (Adware.Ghokswa) -> Delete
C:\Program Files (x86)\Birdjob\Application\libglesv2.dll (Adware.Ghokswa) -> Del
ete on reboot. [408c666001a7989ee42d9c25629fe917]
C:\Users\AmyDerp\AppData\Roaming\WinSAPSvc\WinSAP.dll (Adware.Elex) -> Delete on
reboot. [884476509e0a082e12487e5f60a1a957]
Registry Keys Detected: 10
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Kyubey (Trojan.Downloader) -> Delete on r
eboot. [6d5f1caadccc3ff7f5c2fa7b57aa728e]
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\ed2kidle (Adware.Elex) -> Delete on reboo
t. [517bc8fea1071224ab13db1fdb257090]
HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{541F
4F10-DC82-4F14-93C9-15EC22545EDC} (Adware.Elex) -> Delete on reboot. [6d5fc006ea
bee74f236c0bc4837d7c84]
HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Milimi
li (Adware.Elex) -> Delete on reboot. [21abe0e66e3a67cfe76ee7e8827e639d]
HKLM\SOFTWARE\WOW6432NODE\{84416237-6490-494D-9AD6-4994DD978971} (Adware.Elex) -
> Delete on reboot. [a02cd8ee80284cea72d9a02ed031639d]
HKLM\SYSTEM\CURRENTCONTROLSET\CONTROL\PRINT\PROVIDERS\87E4BJR1 (Adware.Sasquor.S
PL) -> Delete on reboot. [04c860669d0b2f076eff0185ef11a45c]
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Apple_Cfg (Adware.Elex) -> Delete on rebo
ot. [428a3393acfcd165457f4312dc25b54b]
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WinSnare (Adware.Elex) -> Delete on reboo
t. [29a38b3b990fd95dbb768d5ef20e8080]
HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\C
HROME.EXE (Adware.Ghokswa) -> Delete on reboot. [408c666001a7989ee42d9c25629fe91
7]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTI
ON OPTIONS\CHROME.EXE (Adware.Ghokswa) -> Delete on reboot. [408c666001a7989ee42
d9c25629fe917]
Registry Values Detected: 3
HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{541F
4F10-DC82-4F14-93C9-15EC22545EDC}|Path (Adware.Elex) -> Data: \Milimili -> Delet
e on reboot. [6d5fc006eabee74f236c0bc4837d7c84]
HKLM\SYSTEM\CURRENTCONTROLSET\CONTROL\PRINT\PROVIDERS\87e4bjr1|Name (Adware.Sasq
uor.SPL) -> Data: C:\Program Files (x86)\Voterph Debuger\local64spl.dll -> Delet
e on reboot. [04c860669d0b2f076eff0185ef11a45c]
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\ED2KIDLE|ImagePath (Adware.Elex) -> Data:
"C:\Program Files (x86)\amuleCexx\ed2k.exe" -downloadwhenidle -> Delete on rebo
ot. [dfed1ea85d4bbe78a6f2817944bc03fd]
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 216
C:\Program Files (x86)\Voterph Debuger (Adware.Elex.Generic) -> Delete on reboot
. [fbd1378fc0e885b15b73b2f903fd3ac6]
C:\Program Files (x86)\amuleCexx (Adware.Elex) -> Delete on reboot. [517bc8fea10
71224ab13db1fdb257090]
C:\Program Files (x86)\amuleCexx\docs (Adware.Elex) -> Delete on reboot. [517bc8
fea1071224ab13db1fdb257090]
C:\Program Files (x86)\amuleCexx\locale (Adware.Elex) -> Delete on reboot. [517b
c8fea1071224ab13db1fdb257090]
C:\Program Files (x86)\amuleCexx\locale\ar (Adware.Elex) -> Delete on reboot. [5
17bc8fea1071224ab13db1fdb257090]
C:\Program Files (x86)\amuleCexx\locale\ast (Adware.Elex) -> Delete on reboot. [
517bc8fea1071224ab13db1fdb257090]
C:\Program Files (x86)\amuleCexx\locale\bg (Adware.Elex) -> Delete on reboot. [5
17bc8fea1071224ab13db1fdb257090]
C:\Program Files (x86)\amuleCexx\locale\ca (Adware.Elex) -> Delete on reboot. [5
17bc8fea1071224ab13db1fdb257090]
C:\Program Files (x86)\amuleCexx\locale\cs (Adware.Elex) -> Delete on reboot. [5
17bc8fea1071224ab13db1fdb257090]
C:\Program Files (x86)\amuleCexx\locale\da (Adware.Elex) -> Delete on reboot. [5
17bc8fea1071224ab13db1fdb257090]
C:\Program Files (x86)\amuleCexx\locale\de (Adware.Elex) -> Delete on reboot. [5
17bc8fea1071224ab13db1fdb257090]
C:\Program Files (x86)\amuleCexx\locale\el (Adware.Elex) -> Delete on reboot. [5
17bc8fea1071224ab13db1fdb257090]
C:\Program Files (x86)\amuleCexx\locale\en_GB (Adware.Elex) -> Delete on reboot.
[517bc8fea1071224ab13db1fdb257090]
C:\Program Files (x86)\amuleCexx\locale\es (Adware.Elex) -> Delete on reboot. [5
17bc8fea1071224ab13db1fdb257090]
C:\Program Files (x86)\amuleCexx\locale\et_EE (Adware.Elex) -> Delete on reboot.
[517bc8fea1071224ab13db1fdb257090]
C:\Program Files (x86)\amuleCexx\locale\eu (Adware.Elex) -> Delete on reboot. [5
17bc8fea1071224ab13db1fdb257090]
C:\Program Files (x86)\amuleCexx\locale\fi (Adware.Elex) -> Delete on reboot. [5
17bc8fea1071224ab13db1fdb257090]
C:\Program Files (x86)\amuleCexx\locale\fr (Adware.Elex) -> Delete on reboot. [5
17bc8fea1071224ab13db1fdb257090]
C:\Program Files (x86)\amuleCexx\locale\gl (Adware.Elex) -> Delete on reboot. [5
17bc8fea1071224ab13db1fdb257090]
C:\Program Files (x86)\amuleCexx\locale\he (Adware.Elex) -> Delete on reboot. [5
17bc8fea1071224ab13db1fdb257090]
C:\Program Files (x86)\amuleCexx\locale\hr (Adware.Elex) -> Delete on reboot. [5
17bc8fea1071224ab13db1fdb257090]
C:\Program Files (x86)\amuleCexx\locale\hu (Adware.Elex) -> Delete on reboot. [5
17bc8fea1071224ab13db1fdb257090]
C:\Program Files (x86)\amuleCexx\locale\it (Adware.Elex) -> Delete on reboot. [5
17bc8fea1071224ab13db1fdb257090]
C:\Program Files (x86)\amuleCexx\locale\it_CH (Adware.Elex) -> Delete on reboot.
[517bc8fea1071224ab13db1fdb257090]
C:\Program Files (x86)\amuleCexx\locale\ja (Adware.Elex) -> Delete on reboot. [5
17bc8fea1071224ab13db1fdb257090]
C:\Program Files (x86)\amuleCexx\locale\ko_KR (Adware.Elex) -> Delete on reboot.
[517bc8fea1071224ab13db1fdb257090]
C:\Program Files (x86)\amuleCexx\locale\lt (Adware.Elex) -> Delete on reboot. [5
17bc8fea1071224ab13db1fdb257090]
C:\Program Files (x86)\amuleCexx\locale\nl (Adware.Elex) -> Delete on reboot. [5
17bc8fea1071224ab13db1fdb257090]
C:\Program Files (x86)\amuleCexx\locale\nn (Adware.Elex) -> Delete on reboot. [5
17bc8fea1071224ab13db1fdb257090]
C:\Program Files (x86)\amuleCexx\locale\pl (Adware.Elex) -> Delete on reboot. [5
17bc8fea1071224ab13db1fdb257090]
C:\Program Files (x86)\amuleCexx\locale\pt_BR (Adware.Elex) -> Delete on reboot.
[517bc8fea1071224ab13db1fdb257090]
C:\Program Files (x86)\amuleCexx\locale\pt_PT (Adware.Elex) -> Delete on reboot.
[517bc8fea1071224ab13db1fdb257090]
C:\Program Files (x86)\amuleCexx\locale\ru (Adware.Elex) -> Delete on reboot. [5
17bc8fea1071224ab13db1fdb257090]
C:\Program Files (x86)\amuleCexx\locale\sl (Adware.Elex) -> Delete on reboot. [5
17bc8fea1071224ab13db1fdb257090]
C:\Program Files (x86)\amuleCexx\locale\sq (Adware.Elex) -> Delete on reboot. [5
17bc8fea1071224ab13db1fdb257090]
C:\Program Files (x86)\amuleCexx\locale\sv (Adware.Elex) -> Delete on reboot. [5
17bc8fea1071224ab13db1fdb257090]
C:\Program Files (x86)\amuleCexx\locale\tr (Adware.Elex) -> Delete on reboot. [5
17bc8fea1071224ab13db1fdb257090]
C:\Program Files (x86)\amuleCexx\locale\uk (Adware.Elex) -> Delete on reboot. [5
17bc8fea1071224ab13db1fdb257090]
C:\Program Files (x86)\amuleCexx\locale\zh_CN (Adware.Elex) -> Delete on reboot.
[517bc8fea1071224ab13db1fdb257090]
C:\Program Files (x86)\amuleCexx\locale\zh_TW (Adware.Elex) -> Delete on reboot.
[517bc8fea1071224ab13db1fdb257090]
C:\Program Files (x86)\amuleCexx\skins (Adware.Elex) -> Delete on reboot. [517bc
8fea1071224ab13db1fdb257090]
C:\Program Files\f09er35s (Adware.Elex) -> Delete on reboot. [2ca0c7ffbdeb1620d7
72f5d247b9b749]
C:\Program Files\f09er35s\{1C4F8672-F7F9-4226-9460-3B379284F771} (Adware.Elex) -
> Delete on reboot. [2ca0c7ffbdeb1620d772f5d247b9b749]
C:\Program Files\f09er35s\{5820AB8C-F230-44EA-913C-C23AFC4E4BBB} (Adware.Elex) -
C:\Program Files\f09er35s\{958A2A26-F828-454E-9240-8690EC033DA4} (Adware.Elex) -
C:\Program Files\f09er35s\{BFEF18F7-0A6E-4C66-84B1-7DE3ED43CC23} (Adware.Elex) -
C:\Program Files\f09er35s\{C81E8914-382E-4B7F-AD01-D98C00DC18AE} (Adware.Elex) -
C:\Program Files\f09er35s\{CF2B2B13-4969-45D9-B9CB-7CC57E145CF8} (Adware.Elex) -
C:\Program Files\f09er35s\{F0EC79E0-FF11-4BA2-8E94-643C54E2488B} (Adware.Elex) -
C:\Users\AmyDerp\AppData\Roaming\WinSnare (Adware.Elex) -> Delete on reboot. [fd
cf9b2bf1b73df921ef32b83ec2f709]
C:\Program Files (x86)\WinSnare(4.2.3) (Adware.Elex) -> Delete on reboot. [1bb1a
c1ac8e04cea8d3d2e29fe03a759]
C:\Users\AmyDerp\AppData\Local\Birdjob (Adware.Ghokswa) -> Delete on reboot. [0e
be2c9a1e8a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data (Adware.Ghokswa) -> Delete on r
eboot. [0ebe2c9a1e8a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\CertificateTransparency (Adware
.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\CertificateTransparency\316 (Ad
ware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\CertificateTransparency\316\_pl
atform_specific (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853f
b069c64]
atform_specific\all (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416
853fb069c64]
atform_specific\all\sths (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a3
0c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Crashpad (Adware.Ghokswa) -> De
lete on reboot. [0ebe2c9a1e8a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default (Adware.Ghokswa) -> Del
ete on reboot. [0ebe2c9a1e8a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Cache (Adware.Ghokswa)
-> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\databases (Adware.Ghoks
wa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\data_reduction_proxy_le
veldb (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Extension Rules (Adware
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Extension State (Adware
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Extensions (Adware.Ghok
swa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Extensions\bpiopmneeadf
apifejkfpahpljkicpik (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c41
6853fb069c64]
apifejkfpahpljkicpik\1.1.6_0 (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a
93a30c416853fb069c64]
apifejkfpahpljkicpik\1.1.6_0\background (Adware.Ghokswa) -> Delete on reboot. [0
ebe2c9a1e8a93a30c416853fb069c64]
apifejkfpahpljkicpik\1.1.6_0\content (Adware.Ghokswa) -> Delete on reboot. [0ebe
2c9a1e8a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Extensions\nmmhkkegccag
dldgiimedpiccmgmieda (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c41
6853fb069c64]
dldgiimedpiccmgmieda\1.0.0.1_0 (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e
8a93a30c416853fb069c64]
dldgiimedpiccmgmieda\1.0.0.1_0\css (Adware.Ghokswa) -> Delete on reboot. [0ebe2c
9a1e8a93a30c416853fb069c64]
dldgiimedpiccmgmieda\1.0.0.1_0\html (Adware.Ghokswa) -> Delete on reboot. [0ebe2
c9a1e8a93a30c416853fb069c64]
dldgiimedpiccmgmieda\1.0.0.1_0\images (Adware.Ghokswa) -> Delete on reboot. [0eb
e2c9a1e8a93a30c416853fb069c64]
dldgiimedpiccmgmieda\1.0.0.1_0\_locales (Adware.Ghokswa) -> Delete on reboot. [0
ebe2c9a1e8a93a30c416853fb069c64]
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\bg (Adware.Ghokswa) -> Delete on reboot.
[0ebe2c9a1e8a93a30c416853fb069c64]
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\ca (Adware.Ghokswa) -> Delete on reboot.
[0ebe2c9a1e8a93a30c416853fb069c64]
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\cs (Adware.Ghokswa) -> Delete on reboot.
[0ebe2c9a1e8a93a30c416853fb069c64]
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\da (Adware.Ghokswa) -> Delete on reboot.
[0ebe2c9a1e8a93a30c416853fb069c64]
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\de (Adware.Ghokswa) -> Delete on reboot.
[0ebe2c9a1e8a93a30c416853fb069c64]
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\el (Adware.Ghokswa) -> Delete on reboot.
[0ebe2c9a1e8a93a30c416853fb069c64]
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\en (Adware.Ghokswa) -> Delete on reboot.
[0ebe2c9a1e8a93a30c416853fb069c64]
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\en_GB (Adware.Ghokswa) -> Delete on rebo
ot. [0ebe2c9a1e8a93a30c416853fb069c64]
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\es (Adware.Ghokswa) -> Delete on reboot.
[0ebe2c9a1e8a93a30c416853fb069c64]
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\es_419 (Adware.Ghokswa) -> Delete on reb
oot. [0ebe2c9a1e8a93a30c416853fb069c64]
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\et (Adware.Ghokswa) -> Delete on reboot.
[0ebe2c9a1e8a93a30c416853fb069c64]
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\fi (Adware.Ghokswa) -> Delete on reboot.
[0ebe2c9a1e8a93a30c416853fb069c64]
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\fil (Adware.Ghokswa) -> Delete on reboot
. [0ebe2c9a1e8a93a30c416853fb069c64]
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\fr (Adware.Ghokswa) -> Delete on reboot.
[0ebe2c9a1e8a93a30c416853fb069c64]
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\hi (Adware.Ghokswa) -> Delete on reboot.
[0ebe2c9a1e8a93a30c416853fb069c64]
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\hr (Adware.Ghokswa) -> Delete on reboot.
[0ebe2c9a1e8a93a30c416853fb069c64]
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\hu (Adware.Ghokswa) -> Delete on reboot.
[0ebe2c9a1e8a93a30c416853fb069c64]
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\id (Adware.Ghokswa) -> Delete on reboot.
[0ebe2c9a1e8a93a30c416853fb069c64]
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\it (Adware.Ghokswa) -> Delete on reboot.
[0ebe2c9a1e8a93a30c416853fb069c64]
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\ja (Adware.Ghokswa) -> Delete on reboot.
[0ebe2c9a1e8a93a30c416853fb069c64]
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\ko (Adware.Ghokswa) -> Delete on reboot.
[0ebe2c9a1e8a93a30c416853fb069c64]
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\lt (Adware.Ghokswa) -> Delete on reboot.
[0ebe2c9a1e8a93a30c416853fb069c64]
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\lv (Adware.Ghokswa) -> Delete on reboot.
[0ebe2c9a1e8a93a30c416853fb069c64]
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\nb (Adware.Ghokswa) -> Delete on reboot.
[0ebe2c9a1e8a93a30c416853fb069c64]
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\nl (Adware.Ghokswa) -> Delete on reboot.
[0ebe2c9a1e8a93a30c416853fb069c64]
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\pl (Adware.Ghokswa) -> Delete on reboot.
[0ebe2c9a1e8a93a30c416853fb069c64]
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\pt_BR (Adware.Ghokswa) -> Delete on rebo
ot. [0ebe2c9a1e8a93a30c416853fb069c64]
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\pt_PT (Adware.Ghokswa) -> Delete on rebo
ot. [0ebe2c9a1e8a93a30c416853fb069c64]
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\ro (Adware.Ghokswa) -> Delete on reboot.
[0ebe2c9a1e8a93a30c416853fb069c64]
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\ru (Adware.Ghokswa) -> Delete on reboot.
[0ebe2c9a1e8a93a30c416853fb069c64]
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\sk (Adware.Ghokswa) -> Delete on reboot.
[0ebe2c9a1e8a93a30c416853fb069c64]
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\sl (Adware.Ghokswa) -> Delete on reboot.
[0ebe2c9a1e8a93a30c416853fb069c64]
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\sr (Adware.Ghokswa) -> Delete on reboot.
[0ebe2c9a1e8a93a30c416853fb069c64]
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\sv (Adware.Ghokswa) -> Delete on reboot.
[0ebe2c9a1e8a93a30c416853fb069c64]
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\th (Adware.Ghokswa) -> Delete on reboot.
[0ebe2c9a1e8a93a30c416853fb069c64]
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\tr (Adware.Ghokswa) -> Delete on reboot.
[0ebe2c9a1e8a93a30c416853fb069c64]
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\uk (Adware.Ghokswa) -> Delete on reboot.
[0ebe2c9a1e8a93a30c416853fb069c64]
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\vi (Adware.Ghokswa) -> Delete on reboot.
[0ebe2c9a1e8a93a30c416853fb069c64]
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\zh_CN (Adware.Ghokswa) -> Delete on rebo
ot. [0ebe2c9a1e8a93a30c416853fb069c64]
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\zh_TW (Adware.Ghokswa) -> Delete on rebo
ot. [0ebe2c9a1e8a93a30c416853fb069c64]
dldgiimedpiccmgmieda\1.0.0.1_0\_metadata (Adware.Ghokswa) -> Delete on reboot. [
0ebe2c9a1e8a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Extensions\pkedcjkdefgp
delpbcmbmeomcjbeemfm (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c41
6853fb069c64]
delpbcmbmeomcjbeemfm\5616.1121.0.3_0 (Adware.Ghokswa) -> Delete on reboot. [0ebe
2c9a1e8a93a30c416853fb069c64]
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\cast_setup (Adware.Ghokswa) -> Delete on re
boot. [0ebe2c9a1e8a93a30c416853fb069c64]
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\cloud_route_details (Adware.Ghokswa) -> Del
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales (Adware.Ghokswa) -> Delete on rebo
ot. [0ebe2c9a1e8a93a30c416853fb069c64]
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\iw (Adware.Ghokswa) -> Delete on r
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\am (Adware.Ghokswa) -> Delete on r
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\ar (Adware.Ghokswa) -> Delete on r
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\bg (Adware.Ghokswa) -> Delete on r
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\bn (Adware.Ghokswa) -> Delete on r
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\ca (Adware.Ghokswa) -> Delete on r
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\cs (Adware.Ghokswa) -> Delete on r
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\da (Adware.Ghokswa) -> Delete on r
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\de (Adware.Ghokswa) -> Delete on r
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\el (Adware.Ghokswa) -> Delete on r
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\en (Adware.Ghokswa) -> Delete on r
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\es (Adware.Ghokswa) -> Delete on r
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\et (Adware.Ghokswa) -> Delete on r
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\fa (Adware.Ghokswa) -> Delete on r
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\fi (Adware.Ghokswa) -> Delete on r
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\fil (Adware.Ghokswa) -> Delete on
reboot. [0ebe2c9a1e8a93a30c416853fb069c64]
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\fr (Adware.Ghokswa) -> Delete on r
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\gu (Adware.Ghokswa) -> Delete on r
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\hi (Adware.Ghokswa) -> Delete on r
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\hr (Adware.Ghokswa) -> Delete on r
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\hu (Adware.Ghokswa) -> Delete on r
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\id (Adware.Ghokswa) -> Delete on r
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\it (Adware.Ghokswa) -> Delete on r
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\ja (Adware.Ghokswa) -> Delete on r
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\kn (Adware.Ghokswa) -> Delete on r
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\ko (Adware.Ghokswa) -> Delete on r
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\lt (Adware.Ghokswa) -> Delete on r
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\lv (Adware.Ghokswa) -> Delete on r
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\ml (Adware.Ghokswa) -> Delete on r
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\mr (Adware.Ghokswa) -> Delete on r
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\ms (Adware.Ghokswa) -> Delete on r
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\nb (Adware.Ghokswa) -> Delete on r
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\nl (Adware.Ghokswa) -> Delete on r
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\pl (Adware.Ghokswa) -> Delete on r
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\pt (Adware.Ghokswa) -> Delete on r
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\pt_BR (Adware.Ghokswa) -> Delete o
n reboot. [0ebe2c9a1e8a93a30c416853fb069c64]
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\pt_PT (Adware.Ghokswa) -> Delete o
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\ro (Adware.Ghokswa) -> Delete on r
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\ru (Adware.Ghokswa) -> Delete on r
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\sk (Adware.Ghokswa) -> Delete on r
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\sl (Adware.Ghokswa) -> Delete on r
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\sr (Adware.Ghokswa) -> Delete on r
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\sv (Adware.Ghokswa) -> Delete on r
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\sw (Adware.Ghokswa) -> Delete on r
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\ta (Adware.Ghokswa) -> Delete on r
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\te (Adware.Ghokswa) -> Delete on r
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\th (Adware.Ghokswa) -> Delete on r
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\tr (Adware.Ghokswa) -> Delete on r
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\uk (Adware.Ghokswa) -> Delete on r
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\vi (Adware.Ghokswa) -> Delete on r
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\zh (Adware.Ghokswa) -> Delete on r
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\zh_TW (Adware.Ghokswa) -> Delete o
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_metadata (Adware.Ghokswa) -> Delete on reb
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Extensions\Temp (Adware
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Media Cache (Adware.Gho
kswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Platform Notifications
(Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Service Worker (Adware.
Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Service Worker\Database
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Service Worker\ScriptCa
che (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c64]
che\index-dir (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb0
69c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Session Storage (Adware
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Sync Extension Settings
\pkedcjkdefgpdelpbcmbmeomcjbeemfm (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9
a1e8a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\GCM Store (Adware.Ghoks
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\GCM Store\Encryption (A
dware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\IndexedDB (Adware.Ghoks
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\IndexedDB\https_www.fac
ebook.com_0.indexeddb.leveldb (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8
a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\JumpListIcons (Adware.G
hokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\JumpListIconsOld (Adwar
e.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Local Storage (Adware.G
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\EVWhitelist (Adware.Ghokswa) ->
Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\EVWhitelist\7 (Adware.Ghokswa)
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\EVWhitelist\7\_metadata (Adware
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\EVWhitelist\7\_platform_specifi
c (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c64]
c\all (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\FileTypePolicies (Adware.Ghoksw
a) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\FileTypePolicies\8 (Adware.Ghok
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\OriginTrials (Adware.Ghokswa) -
> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\PepperFlash (Adware.Ghokswa) ->
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\PepperFlash\24.0.0.221 (Adware.
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\ShaderCache (Adware.Ghokswa) ->
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\ShaderCache\GPUCache (Adware.Gh
okswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\SwiftShader (Adware.Ghokswa) ->
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\SwiftShader\3.3.0.1 (Adware.Gho
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\SwReporter (Adware.Ghokswa) ->
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\SwReporter\17.94.0 (Adware.Ghok
C:\Program Files (x86)\Birdjob (Adware.Ghokswa) -> Delete on reboot. [408c666001
a7989ee42d9c25629fe917]
C:\Program Files (x86)\Birdjob\Application (Adware.Ghokswa) -> Delete on reboot.
[408c666001a7989ee42d9c25629fe917]
C:\Program Files (x86)\Birdjob\Application\bin (Adware.Ghokswa) -> Delete on reb
oot. [408c666001a7989ee42d9c25629fe917]
C:\Program Files (x86)\Birdjob\Application\Dictionaries (Adware.Ghokswa) -> Dele
te on reboot. [408c666001a7989ee42d9c25629fe917]
C:\Program Files (x86)\Birdjob\Application\locales (Adware.Ghokswa) -> Delete on
reboot. [408c666001a7989ee42d9c25629fe917]
C:\Program Files (x86)\Birdjob\Application\VisualElements (Adware.Ghokswa) -> De
C:\Users\AmyDerp\AppData\Roaming\WinSAPSvc (Adware.Elex) -> Delete on reboot. [8
84476509e0a082e12487e5f60a1a957]
C:\Users\AmyDerp\AppData\Roaming\WinSAPSvc\winsap_update (Adware.Elex) -> Delete
on reboot. [884476509e0a082e12487e5f60a1a957]
Files Detected: 657
C:\Users\AmyDerp\AppData\Roaming\Kyubey\Kyubey.exe (Trojan.Downloader) -> Delete
on reboot. [6d5f1caadccc3ff7f5c2fa7b57aa728e]
C:\Windows\Temp\nsi2210.tmp\Downloader_ie8.exe (Adware.Elex) -> Delete on reboot
. [dcf0873f44644ceaad91252c1be6a35d]
C:\Windows\Temp\nsi2210.tmp\MIO.exe (Adware.Elex) -> Delete on reboot. [329ad1f5
fbad5dd95a48ffcea45c30d0]
C:\Windows\Temp\nsi2210.tmp\yacqq.exe (Adware.Elex) -> Delete on reboot. [1bb10c
ba2f79a39387aa98368e7212ee]
C:\Windows\Temp\nsi4A29.tmp\Downloader_ie8.exe (Adware.Elex) -> Delete on reboot
. [339974529c0c83b363db7fd214ed49b7]
C:\Windows\Temp\nsi4A29.tmp\MIO.exe (Adware.Elex) -> Delete on reboot. [5c70eed8
4e5a56e0406215b834cccd33]
C:\Windows\Temp\nsi4A29.tmp\yacqq.exe (Adware.Elex) -> Delete on reboot. [c4081b
abb3f5ac8a0829d0fe37c9c739]
C:\Windows\Temp\nsiA6F4.tmp\Downloader_ie8.exe (Adware.Elex) -> Delete on reboot
. [26a621a5c2e63df9e45a2b2649b89d63]
C:\Windows\Temp\nsiA6F4.tmp\MIO.exe (Adware.Elex) -> Delete on reboot. [65674482
88201026742e587534cce51b]
C:\Windows\Temp\nsiA6F4.tmp\yacqq.exe (Adware.Elex) -> Delete on reboot. [a3299e
28d5d3d56185ac4d81669ab848]
C:\Program Files (x86)\Voterph Debuger\local64spl.dll.ini (Adware.Elex.Generic)
-> Delete on reboot. [fbd1378fc0e885b15b73b2f903fd3ac6]
C:\Windows\System32\Tasks\Milimili (Adware.Elex) -> Delete on reboot. [9933c7ffd
2d6c96d3cce9141bd433ec2]
C:\Program Files (x86)\amuleCexx\ed2k.exe (Adware.Elex) -> Delete on reboot. [51
7bc8fea1071224ab13db1fdb257090]
C:\Program Files (x86)\amuleCexx\aMule.exe (Adware.Elex) -> Delete on reboot. [5
17bc8fea1071224ab13db1fdb257090]
C:\Program Files (x86)\amuleCexx\amule.ico (Adware.Elex) -> Delete on reboot. [5
17bc8fea1071224ab13db1fdb257090]
C:\Program Files (x86)\amuleCexx\docs\amulesig.txt (Adware.Elex) -> Delete on re
boot. [517bc8fea1071224ab13db1fdb257090]
C:\Program Files (x86)\amuleCexx\docs\AUTHORS.txt (Adware.Elex) -> Delete on reb
C:\Program Files (x86)\amuleCexx\docs\Changelog.txt (Adware.Elex) -> Delete on r
eboot. [517bc8fea1071224ab13db1fdb257090]
C:\Program Files (x86)\amuleCexx\docs\EC_Protocol.txt (Adware.Elex) -> Delete on
reboot. [517bc8fea1071224ab13db1fdb257090]
C:\Program Files (x86)\amuleCexx\docs\license.txt (Adware.Elex) -> Delete on reb
C:\Program Files (x86)\amuleCexx\docs\README.txt (Adware.Elex) -> Delete on rebo
ot. [517bc8fea1071224ab13db1fdb257090]
C:\Program Files (x86)\amuleCexx\docs\TODO (Adware.Elex) -> Delete on reboot. [5
17bc8fea1071224ab13db1fdb257090]
C:\Program Files (x86)\amuleCexx\locale\ar\amule.mo (Adware.Elex) -> Delete on r
C:\Program Files (x86)\amuleCexx\locale\ast\amule.mo (Adware.Elex) -> Delete on
C:\Program Files (x86)\amuleCexx\locale\bg\amule.mo (Adware.Elex) -> Delete on r
C:\Program Files (x86)\amuleCexx\locale\ca\amule.mo (Adware.Elex) -> Delete on r
C:\Program Files (x86)\amuleCexx\locale\cs\amule.mo (Adware.Elex) -> Delete on r
C:\Program Files (x86)\amuleCexx\locale\da\amule.mo (Adware.Elex) -> Delete on r
C:\Program Files (x86)\amuleCexx\locale\de\amule.mo (Adware.Elex) -> Delete on r
C:\Program Files (x86)\amuleCexx\locale\el\amule.mo (Adware.Elex) -> Delete on r
C:\Program Files (x86)\amuleCexx\locale\en_GB\amule.mo (Adware.Elex) -> Delete o
n reboot. [517bc8fea1071224ab13db1fdb257090]
C:\Program Files (x86)\amuleCexx\locale\es\amule.mo (Adware.Elex) -> Delete on r
C:\Program Files (x86)\amuleCexx\locale\et_EE\amule.mo (Adware.Elex) -> Delete o
C:\Program Files (x86)\amuleCexx\locale\eu\amule.mo (Adware.Elex) -> Delete on r
C:\Program Files (x86)\amuleCexx\locale\fi\amule.mo (Adware.Elex) -> Delete on r
C:\Program Files (x86)\amuleCexx\locale\fr\amule.mo (Adware.Elex) -> Delete on r
C:\Program Files (x86)\amuleCexx\locale\gl\amule.mo (Adware.Elex) -> Delete on r
C:\Program Files (x86)\amuleCexx\locale\he\amule.mo (Adware.Elex) -> Delete on r
C:\Program Files (x86)\amuleCexx\locale\hr\amule.mo (Adware.Elex) -> Delete on r
C:\Program Files (x86)\amuleCexx\locale\hu\amule.mo (Adware.Elex) -> Delete on r
C:\Program Files (x86)\amuleCexx\locale\it\amule.mo (Adware.Elex) -> Delete on r
C:\Program Files (x86)\amuleCexx\locale\it_CH\amule.mo (Adware.Elex) -> Delete o
C:\Program Files (x86)\amuleCexx\locale\ja\amule.mo (Adware.Elex) -> Delete on r
C:\Program Files (x86)\amuleCexx\locale\ko_KR\amule.mo (Adware.Elex) -> Delete o
C:\Program Files (x86)\amuleCexx\locale\lt\amule.mo (Adware.Elex) -> Delete on r
C:\Program Files (x86)\amuleCexx\locale\nl\amule.mo (Adware.Elex) -> Delete on r
C:\Program Files (x86)\amuleCexx\locale\nn\amule.mo (Adware.Elex) -> Delete on r
C:\Program Files (x86)\amuleCexx\locale\pl\amule.mo (Adware.Elex) -> Delete on r
C:\Program Files (x86)\amuleCexx\locale\pt_BR\amule.mo (Adware.Elex) -> Delete o
C:\Program Files (x86)\amuleCexx\locale\pt_PT\amule.mo (Adware.Elex) -> Delete o
C:\Program Files (x86)\amuleCexx\locale\ru\amule.mo (Adware.Elex) -> Delete on r
C:\Program Files (x86)\amuleCexx\locale\sl\amule.mo (Adware.Elex) -> Delete on r
C:\Program Files (x86)\amuleCexx\locale\sq\amule.mo (Adware.Elex) -> Delete on r
C:\Program Files (x86)\amuleCexx\locale\sv\amule.mo (Adware.Elex) -> Delete on r
C:\Program Files (x86)\amuleCexx\locale\tr\amule.mo (Adware.Elex) -> Delete on r
C:\Program Files (x86)\amuleCexx\locale\uk\amule.mo (Adware.Elex) -> Delete on r
C:\Program Files (x86)\amuleCexx\locale\zh_CN\amule.mo (Adware.Elex) -> Delete o
C:\Program Files (x86)\amuleCexx\locale\zh_TW\amule.mo (Adware.Elex) -> Delete o
C:\Program Files (x86)\amuleCexx\skins\gnome.zip (Adware.Elex) -> Delete on rebo
ot. [517bc8fea1071224ab13db1fdb257090]
C:\Program Files (x86)\amuleCexx\skins\kde4.zip (Adware.Elex) -> Delete on reboo
t. [517bc8fea1071224ab13db1fdb257090]
C:\Program Files (x86)\amuleCexx\skins\Mac_Gray.zip (Adware.Elex) -> Delete on r
C:\Program Files (x86)\amuleCexx\skins\priscilla.zip (Adware.Elex) -> Delete on
C:\Program Files (x86)\amuleCexx\skins\tango.zip (Adware.Elex) -> Delete on rebo
ot. [517bc8fea1071224ab13db1fdb257090]
C:\Program Files (x86)\amuleCexx\skins\xfce.zip (Adware.Elex) -> Delete on reboo
t. [517bc8fea1071224ab13db1fdb257090]
C:\ProgramData\Apple\Apple Application Support\Support.dll (Adware.Elex) -> Dele
te on reboot. [e6e6fccae3c546f002816debc23f58a8]
C:\Program Files\f09er35s\{1C4F8672-F7F9-4226-9460-3B379284F771}\9ur4zpzx.h1d (A
dware.Elex) -> Delete on reboot. [2ca0c7ffbdeb1620d772f5d247b9b749]
C:\Program Files\f09er35s\{5820AB8C-F230-44EA-913C-C23AFC4E4BBB}\9ur4zpzx.h1d (A
C:\Program Files\f09er35s\{958A2A26-F828-454E-9240-8690EC033DA4}\9ur4zpzx.h1d (A
C:\Program Files\f09er35s\{BFEF18F7-0A6E-4C66-84B1-7DE3ED43CC23}\9ur4zpzx.h1d (A
C:\Program Files\f09er35s\{C81E8914-382E-4B7F-AD01-D98C00DC18AE}\9ur4zpzx.h1d (A
C:\Program Files\f09er35s\{CF2B2B13-4969-45D9-B9CB-7CC57E145CF8}\9ur4zpzx.h1d (A
C:\Program Files\f09er35s\{F0EC79E0-FF11-4BA2-8E94-643C54E2488B}\9ur4zpzx.h1d (A
C:\Users\AmyDerp\AppData\Roaming\WinSnare\WinSnare.dll (Adware.Elex) -> Delete o
n reboot. [fdcf9b2bf1b73df921ef32b83ec2f709]
C:\Program Files (x86)\WinSnare(4.2.3)\LICENSE.txt (Adware.Elex) -> Delete on re
boot. [1bb1ac1ac8e04cea8d3d2e29fe03a759]
C:\Program Files (x86)\WinSnare(4.2.3)\openweb.bat (Adware.Elex) -> Delete on re
C:\Program Files (x86)\WinSnare(4.2.3)\SnareWindowsInstallSupport.dll (Adware.El
ex) -> Delete on reboot. [1bb1ac1ac8e04cea8d3d2e29fe03a759]
C:\Program Files (x86)\WinSnare(4.2.3)\stopweb.bat (Adware.Elex) -> Delete on re
C:\Program Files (x86)\WinSnare(4.2.3)\s_32.ico (Adware.Elex) -> Delete on reboo
t. [1bb1ac1ac8e04cea8d3d2e29fe03a759]
C:\Program Files (x86)\WinSnare(4.2.3)\WinSnare.dll (Adware.Elex) -> Delete on r
eboot. [1bb1ac1ac8e04cea8d3d2e29fe03a759]
C:\Program Files (x86)\WinSnare(4.2.3)\WinSnare64.dll (Adware.Elex) -> Delete on
reboot. [1bb1ac1ac8e04cea8d3d2e29fe03a759]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Certificate Revocation Lists (A
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\en-US-7-1.bdic (Adware.Ghokswa)
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\First Run (Adware.Ghokswa) -> D
elete on reboot. [0ebe2c9a1e8a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Local State (Adware.Ghokswa) ->
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\lockfile (Adware.Ghokswa) -> De
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\CertificateTransparency\316\man
ifest.fingerprint (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c41685
3fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\CertificateTransparency\316\man
ifest.json (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c
64]
atform_specific\all\sths\293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e
54547f478.sth (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb0
69c64]
atform_specific\all\sths\34bb6ad6c3df9c03eea8a499ff7891486c9d5e5cac92d01f7bfd1bc
e19db48ef.sth (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb0
69c64]
atform_specific\all\sths\41b2dc2e89e63ce4af1ba7bb29bf68c6dee6f9f1cc047e30dffae3b
3ba259263.sth (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb0
69c64]
atform_specific\all\sths\5614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef94985
5d689d0dd.sth (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb0
69c64]
atform_specific\all\sths\68f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acb
b4f4ffbc4.sth (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb0
69c64]
atform_specific\all\sths\7461b4a09cfb3d41d75159575b2e7649a445a8d27709b0cc564a648
2b7eb41a3.sth (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb0
69c64]
atform_specific\all\sths\a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0
ec80ddc10.sth (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb0
69c64]
atform_specific\all\sths\a577ac9ced7548dd8f025b67a241089df86e0f476ec203c2ecbedb1
85f282638.sth (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb0
69c64]
atform_specific\all\sths\ac3b9aed7fa9674757159e6d7d575672f9d98100941e9bdeffeca13
13b75782d.sth (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb0
69c64]
atform_specific\all\sths\bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a9096643
68e1ed185.sth (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb0
69c64]
atform_specific\all\sths\bc78e1dfc5f63c684649334da10fa15f0979692009c081b4f3f6917
f3ed9b8a5.sth (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb0
69c64]
atform_specific\all\sths\cdb5179b7fc1c046feea31136a3f8f002e6182faf8896fecc8b2f5b
5ab604900.sth (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb0
69c64]
atform_specific\all\sths\ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4c
db6ecbecc.sth (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb0
69c64]
atform_specific\all\sths\ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b8
97aa8fdcb.sth (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb0
69c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Favicons-journal (Adwar
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Secure Preferences (Adw
are.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Cookies (Adware.Ghokswa
) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Cookies-journal (Adware
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Current Session (Adware
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Current Tabs (Adware.Gh
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Favicons (Adware.Ghoksw
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Network Action Predicto
r (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Network Action Predicto
r-journal (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c6
4]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Network Persistent Stat
e (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Origin Bound Certs (Adw
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Origin Bound Certs-jour
nal (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Preferences (Adware.Gho
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\previews_opt_out.db (Ad
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\previews_opt_out.db-jou
rnal (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\QuotaManager (Adware.Gh
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\QuotaManager-journal (A
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\README (Adware.Ghokswa)
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Shortcuts (Adware.Ghoks
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Shortcuts-journal (Adwa
re.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Top Sites (Adware.Ghoks
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Top Sites-journal (Adwa
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\TransportSecurity (Adwa
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Visited Links (Adware.G
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Web Data (Adware.Ghoksw
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Web Data-journal (Adwar
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Google Profile.ico (Adw
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\History (Adware.Ghokswa
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\History-journal (Adware
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Login Data (Adware.Ghok
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Login Data-journal (Adw
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Cache\data_0 (Adware.Gh
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Cache\f_000001 (Adware.
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Cache\f_00000a (Adware.
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Cache\f_00000b (Adware.
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Cache\f_00000c (Adware.
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Cache\f_00000d (Adware.
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Cache\f_00000e (Adware.
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Cache\f_00000f (Adware.
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Cache\f_0000a1 (Adware.
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Cache\f_0000ab (Adware.
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Cache\f_0000ac (Adware.
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Cache\f_0000ad (Adware.
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Cache\f_0000ae (Adware.
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Cache\f_0000af (Adware.
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Cache\f_0000b0 (Adware.
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Cache\f_0000ba (Adware.
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Cache\f_0000bb (Adware.
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Cache\f_0000bc (Adware.
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Cache\f_0000bd (Adware.
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Cache\f_0000be (Adware.
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Cache\f_0000bf (Adware.
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Cache\f_0000c0 (Adware.
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Cache\index (Adware.Gho
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\databases\Databases.db
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\databases\Databases.db-
journal (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c64]
veldb\000003.log (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853
fb069c64]
veldb\CURRENT (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb0
69c64]
veldb\LOCK (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c
64]
veldb\LOG (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c6
4]
veldb\MANIFEST-000001 (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c4
16853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Extension Rules\000003.
log (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Extension Rules\CURRENT
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Extension Rules\LOCK (A
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Extension Rules\LOG (Ad
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Extension Rules\MANIFES
T-000001 (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c64
]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Extension State\000003.
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Extension State\CURRENT
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Extension State\LOCK (A
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Extension State\LOG (Ad
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Extension State\MANIFES
]
apifejkfpahpljkicpik\1.1.6_0\manifest.json (Adware.Ghokswa) -> Delete on reboot.
[0ebe2c9a1e8a93a30c416853fb069c64]
apifejkfpahpljkicpik\1.1.6_0\background\background.js (Adware.Ghokswa) -> Delete
on reboot. [0ebe2c9a1e8a93a30c416853fb069c64]
apifejkfpahpljkicpik\1.1.6_0\background\funs.js (Adware.Ghokswa) -> Delete on re
apifejkfpahpljkicpik\1.1.6_0\background\g_gg_c.js (Adware.Ghokswa) -> Delete on
apifejkfpahpljkicpik\1.1.6_0\background\ist_bg.js (Adware.Ghokswa) -> Delete on
apifejkfpahpljkicpik\1.1.6_0\background\upalytics_ch.js (Adware.Ghokswa) -> Dele
te on reboot. [0ebe2c9a1e8a93a30c416853fb069c64]
apifejkfpahpljkicpik\1.1.6_0\content\content_scripts.js (Adware.Ghokswa) -> Dele
apifejkfpahpljkicpik\1.1.6_0\content\gli.js (Adware.Ghokswa) -> Delete on reboot
. [0ebe2c9a1e8a93a30c416853fb069c64]
apifejkfpahpljkicpik\1.1.6_0\content\irc.js (Adware.Ghokswa) -> Delete on reboot
. [0ebe2c9a1e8a93a30c416853fb069c64]
apifejkfpahpljkicpik\1.1.6_0\content\ist.js (Adware.Ghokswa) -> Delete on reboot
. [0ebe2c9a1e8a93a30c416853fb069c64]
apifejkfpahpljkicpik\1.1.6_0\content\up.js (Adware.Ghokswa) -> Delete on reboot.
[0ebe2c9a1e8a93a30c416853fb069c64]
dldgiimedpiccmgmieda\1.0.0.1_0\craw_background.js (Adware.Ghokswa) -> Delete on
dldgiimedpiccmgmieda\1.0.0.1_0\craw_window.js (Adware.Ghokswa) -> Delete on rebo
ot. [0ebe2c9a1e8a93a30c416853fb069c64]
dldgiimedpiccmgmieda\1.0.0.1_0\manifest.json (Adware.Ghokswa) -> Delete on reboo
t. [0ebe2c9a1e8a93a30c416853fb069c64]
dldgiimedpiccmgmieda\1.0.0.1_0\css\craw_window.css (Adware.Ghokswa) -> Delete on
dldgiimedpiccmgmieda\1.0.0.1_0\html\craw_window.html (Adware.Ghokswa) -> Delete
on reboot. [0ebe2c9a1e8a93a30c416853fb069c64]
dldgiimedpiccmgmieda\1.0.0.1_0\images\flapper.gif (Adware.Ghokswa) -> Delete on
dldgiimedpiccmgmieda\1.0.0.1_0\images\icon_128.png (Adware.Ghokswa) -> Delete on
dldgiimedpiccmgmieda\1.0.0.1_0\images\icon_16.png (Adware.Ghokswa) -> Delete on
dldgiimedpiccmgmieda\1.0.0.1_0\images\topbar_floating_button.png (Adware.Ghokswa
dldgiimedpiccmgmieda\1.0.0.1_0\images\topbar_floating_button_close.png (Adware.G
dldgiimedpiccmgmieda\1.0.0.1_0\images\topbar_floating_button_hover.png (Adware.G
dldgiimedpiccmgmieda\1.0.0.1_0\images\topbar_floating_button_maximize.png (Adwar
dldgiimedpiccmgmieda\1.0.0.1_0\images\topbar_floating_button_pressed.png (Adware
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\bg\messages.json (Adware.Ghokswa) -> Del
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\ca\messages.json (Adware.Ghokswa) -> Del
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\cs\messages.json (Adware.Ghokswa) -> Del
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\da\messages.json (Adware.Ghokswa) -> Del
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\de\messages.json (Adware.Ghokswa) -> Del
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\el\messages.json (Adware.Ghokswa) -> Del
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\en\messages.json (Adware.Ghokswa) -> Del
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\en_GB\messages.json (Adware.Ghokswa) ->
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\es\messages.json (Adware.Ghokswa) -> Del
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\es_419\messages.json (Adware.Ghokswa) ->
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\et\messages.json (Adware.Ghokswa) -> Del
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\fi\messages.json (Adware.Ghokswa) -> Del
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\fil\messages.json (Adware.Ghokswa) -> De
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\fr\messages.json (Adware.Ghokswa) -> Del
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\hi\messages.json (Adware.Ghokswa) -> Del
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\hr\messages.json (Adware.Ghokswa) -> Del
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\hu\messages.json (Adware.Ghokswa) -> Del
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\id\messages.json (Adware.Ghokswa) -> Del
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\it\messages.json (Adware.Ghokswa) -> Del
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\ja\messages.json (Adware.Ghokswa) -> Del
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\ko\messages.json (Adware.Ghokswa) -> Del
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\lt\messages.json (Adware.Ghokswa) -> Del
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\lv\messages.json (Adware.Ghokswa) -> Del
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\nb\messages.json (Adware.Ghokswa) -> Del
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\nl\messages.json (Adware.Ghokswa) -> Del
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\pl\messages.json (Adware.Ghokswa) -> Del
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\pt_BR\messages.json (Adware.Ghokswa) ->
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\pt_PT\messages.json (Adware.Ghokswa) ->
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\ro\messages.json (Adware.Ghokswa) -> Del
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\ru\messages.json (Adware.Ghokswa) -> Del
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\sk\messages.json (Adware.Ghokswa) -> Del
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\sl\messages.json (Adware.Ghokswa) -> Del
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\sr\messages.json (Adware.Ghokswa) -> Del
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\sv\messages.json (Adware.Ghokswa) -> Del
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\th\messages.json (Adware.Ghokswa) -> Del
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\tr\messages.json (Adware.Ghokswa) -> Del
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\uk\messages.json (Adware.Ghokswa) -> Del
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\vi\messages.json (Adware.Ghokswa) -> Del
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\zh_CN\messages.json (Adware.Ghokswa) ->
dldgiimedpiccmgmieda\1.0.0.1_0\_locales\zh_TW\messages.json (Adware.Ghokswa) ->
dldgiimedpiccmgmieda\1.0.0.1_0\_metadata\verified_contents.json (Adware.Ghokswa)
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\feedback.html (Adware.Ghokswa) -> Delete on
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\angular.js (Adware.Ghokswa) -> Delete on re
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\background_script.js (Adware.Ghokswa) -> De
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\cast_game_sender.js (Adware.Ghokswa) -> Del
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\cast_route_details.html (Adware.Ghokswa) ->
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\cast_route_details.js (Adware.Ghokswa) -> D
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\cast_sender.js (Adware.Ghokswa) -> Delete o
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\common.js (Adware.Ghokswa) -> Delete on reb
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\feedback.css (Adware.Ghokswa) -> Delete on
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\feedback_script.js (Adware.Ghokswa) -> Dele
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\manifest.json (Adware.Ghokswa) -> Delete on
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\material_css_min.css (Adware.Ghokswa) -> De
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\mirroring_cast_streaming.js (Adware.Ghokswa
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\mirroring_common.js (Adware.Ghokswa) -> Del
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\mirroring_hangouts.js (Adware.Ghokswa) -> D
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\mirroring_webrtc.js (Adware.Ghokswa) -> Del
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\cast_setup\cast_app.css (Adware.Ghokswa) ->
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\cast_setup\cast_app.js (Adware.Ghokswa) ->
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\cast_setup\cast_app_redirect.js (Adware.Gho
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\cast_setup\chromecast_logo_grey.png (Adware
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\cast_setup\devices.html (Adware.Ghokswa) ->
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\cast_setup\index.html (Adware.Ghokswa) -> D
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\cast_setup\offers.html (Adware.Ghokswa) ->
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\cast_setup\setup.html (Adware.Ghokswa) -> D
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\cloud_route_details\view.html (Adware.Ghoks
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\cloud_route_details\view.js (Adware.Ghokswa
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\iw\messages.json (Adware.Ghokswa)
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\am\messages.json (Adware.Ghokswa)
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\ar\messages.json (Adware.Ghokswa)
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\bg\messages.json (Adware.Ghokswa)
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\bn\messages.json (Adware.Ghokswa)
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\ca\messages.json (Adware.Ghokswa)
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\cs\messages.json (Adware.Ghokswa)
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\da\messages.json (Adware.Ghokswa)
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\de\messages.json (Adware.Ghokswa)
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\el\messages.json (Adware.Ghokswa)
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\en\messages.json (Adware.Ghokswa)
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\es\messages.json (Adware.Ghokswa)
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\et\messages.json (Adware.Ghokswa)
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\fa\messages.json (Adware.Ghokswa)
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\fi\messages.json (Adware.Ghokswa)
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\fil\messages.json (Adware.Ghokswa)
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\fr\messages.json (Adware.Ghokswa)
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\gu\messages.json (Adware.Ghokswa)
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\hi\messages.json (Adware.Ghokswa)
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\hr\messages.json (Adware.Ghokswa)
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\hu\messages.json (Adware.Ghokswa)
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\id\messages.json (Adware.Ghokswa)
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\it\messages.json (Adware.Ghokswa)
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\ja\messages.json (Adware.Ghokswa)
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\kn\messages.json (Adware.Ghokswa)
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\ko\messages.json (Adware.Ghokswa)
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\lt\messages.json (Adware.Ghokswa)
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\lv\messages.json (Adware.Ghokswa)
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\ml\messages.json (Adware.Ghokswa)
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\mr\messages.json (Adware.Ghokswa)
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\ms\messages.json (Adware.Ghokswa)
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\nb\messages.json (Adware.Ghokswa)
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\nl\messages.json (Adware.Ghokswa)
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\pl\messages.json (Adware.Ghokswa)
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\pt\messages.json (Adware.Ghokswa)
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\pt_BR\messages.json (Adware.Ghoksw
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\pt_PT\messages.json (Adware.Ghoksw
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\ro\messages.json (Adware.Ghokswa)
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\ru\messages.json (Adware.Ghokswa)
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\sk\messages.json (Adware.Ghokswa)
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\sl\messages.json (Adware.Ghokswa)
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\sr\messages.json (Adware.Ghokswa)
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\sv\messages.json (Adware.Ghokswa)
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\sw\messages.json (Adware.Ghokswa)
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\ta\messages.json (Adware.Ghokswa)
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\te\messages.json (Adware.Ghokswa)
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\th\messages.json (Adware.Ghokswa)
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\tr\messages.json (Adware.Ghokswa)
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\uk\messages.json (Adware.Ghokswa)
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\vi\messages.json (Adware.Ghokswa)
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\zh\messages.json (Adware.Ghokswa)
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_locales\zh_TW\messages.json (Adware.Ghoksw
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_metadata\computed_hashes.json (Adware.Ghok
delpbcmbmeomcjbeemfm\5616.1121.0.3_0\_metadata\verified_contents.json (Adware.Gh
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Media Cache\data_0 (Adw
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Media Cache\f_000001 (A
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Media Cache\f_000002 (A
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Media Cache\index (Adwa
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Platform Notifications\
000003.log (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c
64]
CURRENT (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c64]
LOCK (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c64]
LOG (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c64]
MANIFEST-000001 (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853f
b069c64]
\000003.log (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069
c64]
\CURRENT (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c64
]
\LOCK (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c64]
\LOG (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c64]
\MANIFEST-000001 (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853
fb069c64]
che\2cc80dabc69f58b6_0 (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c
416853fb069c64]
che\4cb013792b196a35_0 (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c
416853fb069c64]
che\4cb013792b196a35_1 (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c
416853fb069c64]
che\index (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c6
4]
che\index-dir\the-real-index (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a
93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Session Storage\000005.
ldb (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Session Storage\CURRENT
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Session Storage\LOCK (A
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Session Storage\LOG (Ad
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Session Storage\MANIFES
]
\pkedcjkdefgpdelpbcmbmeomcjbeemfm\000003.log (Adware.Ghokswa) -> Delete on reboo
t. [0ebe2c9a1e8a93a30c416853fb069c64]
\pkedcjkdefgpdelpbcmbmeomcjbeemfm\CURRENT (Adware.Ghokswa) -> Delete on reboot.
[0ebe2c9a1e8a93a30c416853fb069c64]
\pkedcjkdefgpdelpbcmbmeomcjbeemfm\LOCK (Adware.Ghokswa) -> Delete on reboot. [0e
be2c9a1e8a93a30c416853fb069c64]
\pkedcjkdefgpdelpbcmbmeomcjbeemfm\LOG (Adware.Ghokswa) -> Delete on reboot. [0eb
e2c9a1e8a93a30c416853fb069c64]
\pkedcjkdefgpdelpbcmbmeomcjbeemfm\MANIFEST-000001 (Adware.Ghokswa) -> Delete on
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\GCM Store\000003.log (A
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\GCM Store\CURRENT (Adwa
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\GCM Store\LOCK (Adware.
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\GCM Store\LOG (Adware.G
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\GCM Store\MANIFEST-0000
01 (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\GCM Store\Encryption\00
0003.log (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c64
]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\GCM Store\Encryption\CU
RRENT (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\GCM Store\Encryption\LO
CK (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\GCM Store\Encryption\LO
G (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\GCM Store\Encryption\MA
NIFEST-000001 (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb0
69c64]
ebook.com_0.indexeddb.leveldb\000003.log (Adware.Ghokswa) -> Delete on reboot. [
0ebe2c9a1e8a93a30c416853fb069c64]
ebook.com_0.indexeddb.leveldb\CURRENT (Adware.Ghokswa) -> Delete on reboot. [0eb
e2c9a1e8a93a30c416853fb069c64]
ebook.com_0.indexeddb.leveldb\LOCK (Adware.Ghokswa) -> Delete on reboot. [0ebe2c
9a1e8a93a30c416853fb069c64]
ebook.com_0.indexeddb.leveldb\LOG (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9
a1e8a93a30c416853fb069c64]
ebook.com_0.indexeddb.leveldb\MANIFEST-000001 (Adware.Ghokswa) -> Delete on rebo
ot. [0ebe2c9a1e8a93a30c416853fb069c64]
c:\users\amyderp\appdata\local\birdjob\user data\default\jumplisticons\a8ad.tmp
c:\users\amyderp\appdata\local\birdjob\user data\default\jumplisticons\a8ae.tmp
c:\users\amyderp\appdata\local\birdjob\user data\default\jumplisticonsold\1ddf.t
mp (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c64]
c:\users\amyderp\appdata\local\birdjob\user data\default\jumplisticonsold\1de0.t
mp (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Local Storage\https_cli
ents5.google.com_0.localstorage (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1
e8a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Local Storage\chrome-ex
tension_bpiopmneeadfapifejkfpahpljkicpik_0.localstorage (Adware.Ghokswa) -> Dele
tension_bpiopmneeadfapifejkfpahpljkicpik_0.localstorage-journal (Adware.Ghokswa)
tension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage (Adware.Ghokswa) -> Dele
tension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal (Adware.Ghokswa)
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Local Storage\https_cdn
1.f-cdn.com_0.localstorage (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93
a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Local Storage\https_cdn
1.f-cdn.com_0.localstorage-journal (Adware.Ghokswa) -> Delete on reboot. [0ebe2c
9a1e8a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Local Storage\https_cli
ents5.google.com_0.localstorage-journal (Adware.Ghokswa) -> Delete on reboot. [0
ebe2c9a1e8a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Local Storage\https_g8h
3k5e4.ssl.hwcdn.net_0.localstorage (Adware.Ghokswa) -> Delete on reboot. [0ebe2c
9a1e8a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Local Storage\https_g8h
3k5e4.ssl.hwcdn.net_0.localstorage-journal (Adware.Ghokswa) -> Delete on reboot.
[0ebe2c9a1e8a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Local Storage\https_pla
y.google.com_0.localstorage (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a9
3a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Local Storage\https_pla
y.google.com_0.localstorage-journal (Adware.Ghokswa) -> Delete on reboot. [0ebe2
c9a1e8a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Local Storage\https_pst
atic.davebestdeals.com_0.localstorage (Adware.Ghokswa) -> Delete on reboot. [0eb
e2c9a1e8a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Local Storage\https_pst
atic.davebestdeals.com_0.localstorage-journal (Adware.Ghokswa) -> Delete on rebo
ot. [0ebe2c9a1e8a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\Default\Local Storage\https_www
.facebook.com_0.localstorage (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a
93a30c416853fb069c64]
.facebook.com_0.localstorage-journal (Adware.Ghokswa) -> Delete on reboot. [0ebe
2c9a1e8a93a30c416853fb069c64]
.freelancer.com_0.localstorage (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e
8a93a30c416853fb069c64]
.freelancer.com_0.localstorage-journal (Adware.Ghokswa) -> Delete on reboot. [0e
be2c9a1e8a93a30c416853fb069c64]
.google.ro_0.localstorage (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a
30c416853fb069c64]
.google.ro_0.localstorage-journal (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9
a1e8a93a30c416853fb069c64]
.youtube.com_0.localstorage (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a9
3a30c416853fb069c64]
.youtube.com_0.localstorage-journal (Adware.Ghokswa) -> Delete on reboot. [0ebe2
c9a1e8a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\EVWhitelist\7\manifest.fingerpr
int (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\EVWhitelist\7\manifest.json (Ad
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\EVWhitelist\7\_metadata\verifie
d_contents.json (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853f
b069c64]
c\all\ev_hashes_whitelist.bin (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8
a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\FileTypePolicies\8\download_fil
e_types.pb (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c
64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\FileTypePolicies\8\manifest.fin
gerprint (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c64
]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\FileTypePolicies\8\manifest.jso
n (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\PepperFlash\24.0.0.221\manifest
.fingerprint (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb06
9c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\PepperFlash\24.0.0.221\manifest
.json (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\PepperFlash\24.0.0.221\pepflash
player.dll (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c
64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\ShaderCache\GPUCache\data_0 (Ad
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\ShaderCache\GPUCache\index (Adw
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\SwiftShader\3.3.0.1\libEGL.dll
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\SwiftShader\3.3.0.1\libGLESv2.d
ll (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\SwiftShader\3.3.0.1\manifest.fi
ngerprint (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c6
4]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\SwiftShader\3.3.0.1\manifest.js
on (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\SwReporter\17.94.0\manifest.fin
gerprint (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c64
]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\SwReporter\17.94.0\manifest.jso
n (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb069c64]
C:\Users\AmyDerp\AppData\Local\Birdjob\User Data\SwReporter\17.94.0\software_rep
orter_tool.exe (Adware.Ghokswa) -> Delete on reboot. [0ebe2c9a1e8a93a30c416853fb
069c64]
C:\Program Files (x86)\Birdjob\Application\56.0.2924.87.manifest (Adware.Ghokswa
) -> Delete on reboot. [408c666001a7989ee42d9c25629fe917]
C:\Program Files (x86)\Birdjob\Application\chrome.dll (Adware.Ghokswa) -> Delete
C:\Program Files (x86)\Birdjob\Application\chrome.exe (Adware.Ghokswa) -> Delete
C:\Program Files (x86)\Birdjob\Application\chrome_100_percent.pak (Adware.Ghoksw
a) -> Delete on reboot. [408c666001a7989ee42d9c25629fe917]
C:\Program Files (x86)\Birdjob\Application\chrome_200_percent.pak (Adware.Ghoksw
a) -> Delete on reboot. [408c666001a7989ee42d9c25629fe917]
C:\Program Files (x86)\Birdjob\Application\chrome_watcher.dll (Adware.Ghokswa) -
C:\Program Files (x86)\Birdjob\Application\d3dcompiler_47.dll (Adware.Ghokswa) -
C:\Program Files (x86)\Birdjob\Application\Extensions (Adware.Ghokswa) -> Delete
C:\Program Files (x86)\Birdjob\Application\icudtl.dat (Adware.Ghokswa) -> Delete
C:\Program Files (x86)\Birdjob\Application\libegl.dll (Adware.Ghokswa) -> Delete
C:\Program Files (x86)\Birdjob\Application\libglesv2.dll (Adware.Ghokswa) -> Del
C:\Program Files (x86)\Birdjob\Application\natives_blob.bin (Adware.Ghokswa) ->
C:\Program Files (x86)\Birdjob\Application\resources.pak (Adware.Ghokswa) -> Del
C:\Program Files (x86)\Birdjob\Application\snapshot_blob.bin (Adware.Ghokswa) ->
C:\Program Files (x86)\Birdjob\Application\locales\hi.pak (Adware.Ghokswa) -> De
C:\Program Files (x86)\Birdjob\Application\locales\am.pak (Adware.Ghokswa) -> De
C:\Program Files (x86)\Birdjob\Application\locales\ar.pak (Adware.Ghokswa) -> De
C:\Program Files (x86)\Birdjob\Application\locales\bg.pak (Adware.Ghokswa) -> De
C:\Program Files (x86)\Birdjob\Application\locales\bn.pak (Adware.Ghokswa) -> De
C:\Program Files (x86)\Birdjob\Application\locales\ca.pak (Adware.Ghokswa) -> De
C:\Program Files (x86)\Birdjob\Application\locales\cs.pak (Adware.Ghokswa) -> De
C:\Program Files (x86)\Birdjob\Application\locales\da.pak (Adware.Ghokswa) -> De
C:\Program Files (x86)\Birdjob\Application\locales\de.pak (Adware.Ghokswa) -> De
C:\Program Files (x86)\Birdjob\Application\locales\el.pak (Adware.Ghokswa) -> De
C:\Program Files (x86)\Birdjob\Application\locales\en-GB.pak (Adware.Ghokswa) ->
C:\Program Files (x86)\Birdjob\Application\locales\en-US.pak (Adware.Ghokswa) ->
C:\Program Files (x86)\Birdjob\Application\locales\es-419.pak (Adware.Ghokswa) -
C:\Program Files (x86)\Birdjob\Application\locales\es.pak (Adware.Ghokswa) -> De
C:\Program Files (x86)\Birdjob\Application\locales\et.pak (Adware.Ghokswa) -> De
C:\Program Files (x86)\Birdjob\Application\locales\fa.pak (Adware.Ghokswa) -> De
C:\Program Files (x86)\Birdjob\Application\locales\fi.pak (Adware.Ghokswa) -> De
C:\Program Files (x86)\Birdjob\Application\locales\fil.pak (Adware.Ghokswa) -> D
elete on reboot. [408c666001a7989ee42d9c25629fe917]
C:\Program Files (x86)\Birdjob\Application\locales\fr.pak (Adware.Ghokswa) -> De
C:\Program Files (x86)\Birdjob\Application\locales\gu.pak (Adware.Ghokswa) -> De
C:\Program Files (x86)\Birdjob\Application\locales\he.pak (Adware.Ghokswa) -> De
C:\Program Files (x86)\Birdjob\Application\locales\hr.pak (Adware.Ghokswa) -> De
C:\Program Files (x86)\Birdjob\Application\locales\hu.pak (Adware.Ghokswa) -> De
C:\Program Files (x86)\Birdjob\Application\locales\id.pak (Adware.Ghokswa) -> De
C:\Program Files (x86)\Birdjob\Application\locales\it.pak (Adware.Ghokswa) -> De
C:\Program Files (x86)\Birdjob\Application\locales\ja.pak (Adware.Ghokswa) -> De
C:\Program Files (x86)\Birdjob\Application\locales\kn.pak (Adware.Ghokswa) -> De
C:\Program Files (x86)\Birdjob\Application\locales\ko.pak (Adware.Ghokswa) -> De
C:\Program Files (x86)\Birdjob\Application\locales\lt.pak (Adware.Ghokswa) -> De
C:\Program Files (x86)\Birdjob\Application\locales\lv.pak (Adware.Ghokswa) -> De
C:\Program Files (x86)\Birdjob\Application\locales\ml.pak (Adware.Ghokswa) -> De
C:\Program Files (x86)\Birdjob\Application\locales\mr.pak (Adware.Ghokswa) -> De
C:\Program Files (x86)\Birdjob\Application\locales\ms.pak (Adware.Ghokswa) -> De
C:\Program Files (x86)\Birdjob\Application\locales\nb.pak (Adware.Ghokswa) -> De
C:\Program Files (x86)\Birdjob\Application\locales\nl.pak (Adware.Ghokswa) -> De
C:\Program Files (x86)\Birdjob\Application\locales\pl.pak (Adware.Ghokswa) -> De
C:\Program Files (x86)\Birdjob\Application\locales\pt-BR.pak (Adware.Ghokswa) ->
C:\Program Files (x86)\Birdjob\Application\locales\pt-PT.pak (Adware.Ghokswa) ->
C:\Program Files (x86)\Birdjob\Application\locales\ro.pak (Adware.Ghokswa) -> De
C:\Program Files (x86)\Birdjob\Application\locales\ru.pak (Adware.Ghokswa) -> De
C:\Program Files (x86)\Birdjob\Application\locales\sk.pak (Adware.Ghokswa) -> De
C:\Program Files (x86)\Birdjob\Application\locales\sl.pak (Adware.Ghokswa) -> De
C:\Program Files (x86)\Birdjob\Application\locales\sr.pak (Adware.Ghokswa) -> De
C:\Program Files (x86)\Birdjob\Application\locales\sv.pak (Adware.Ghokswa) -> De
C:\Program Files (x86)\Birdjob\Application\locales\sw.pak (Adware.Ghokswa) -> De
C:\Program Files (x86)\Birdjob\Application\locales\ta.pak (Adware.Ghokswa) -> De
C:\Program Files (x86)\Birdjob\Application\locales\te.pak (Adware.Ghokswa) -> De
C:\Program Files (x86)\Birdjob\Application\locales\th.pak (Adware.Ghokswa) -> De
C:\Program Files (x86)\Birdjob\Application\locales\tr.pak (Adware.Ghokswa) -> De
C:\Program Files (x86)\Birdjob\Application\locales\uk.pak (Adware.Ghokswa) -> De
C:\Program Files (x86)\Birdjob\Application\locales\vi.pak (Adware.Ghokswa) -> De
C:\Program Files (x86)\Birdjob\Application\locales\zh-CN.pak (Adware.Ghokswa) ->
C:\Program Files (x86)\Birdjob\Application\locales\zh-TW.pak (Adware.Ghokswa) ->
C:\Program Files (x86)\Birdjob\Application\VisualElements\logo.png (Adware.Ghoks
wa) -> Delete on reboot. [408c666001a7989ee42d9c25629fe917]
C:\Program Files (x86)\Birdjob\Application\VisualElements\smalllogo.png (Adware.
Ghokswa) -> Delete on reboot. [408c666001a7989ee42d9c25629fe917]
C:\Users\AmyDerp\AppData\Roaming\WinSAPSvc\WinSAP.dll (Adware.Elex) -> Delete on
reboot. [884476509e0a082e12487e5f60a1a957]
C:\Users\AmyDerp\AppData\Roaming\WinSAPSvc\winsap_update\3 (Adware.Elex) -> Dele
te on reboot. [884476509e0a082e12487e5f60a1a957]
C:\Users\AmyDerp\AppData\Roaming\WinSAPSvc\winsap_update\4 (Adware.Elex) -> Dele
te on reboot. [884476509e0a082e12487e5f60a1a957]
Physical Sectors Detected: 0
(No malicious items detected)
(end)

Mbar-Log-2017-03-06 (11-46-18)

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Mbar-Log-2017-03-06 (11-46-18)

Uploaded by

Copyright:

Available Formats

Malwarebytes Anti-Rootkit BETA 1.9.3.

You might also like