9-lab Removal Tool 1.0.0.39 BETA 9-lab.com Database version: 204.56225 Windows 7 Service Pack 1 (Version 6.1, Build 7601, 64-bit Edition) Internet Explorer 9.11.9600.19080 ANOVI :: ANOVI-KOMPUTER 2018-07-13 17:52:39 9lab-log-2018-07-13 (17-52-39).txt Scan type: Full Objects scanned: 58633 Time Elapsed: 1 h 19 m Registry Keys detected: 2 Adware.RPL.InstallCore.vl [HKEY_CURRENT_USER\SOFTWARE\dobreprogramy] Adware.RPL.DNSKeep.vl [HKEY_CURRENT_USER\SOFTWARE\BESTplayer] Files detected: 79 [4A2D55615F60C3A00E03ECFD39224EC5] Adware.FPL.Gen.vl [c:\extensions\engine@conduit.com\chrome\conduitengine.jar] [FB4FB67AF5AE0F446647362B9B2DAEF9] Adware.FPL.Gen.vl [c:\extensions\engine@conduit.com\chrome.manifest] [FA0D9E1396C227B8697E41996A95912B] Adware.FPL.Gen.vl [c:\extensions\engine@conduit.com\components\ConduitAutoCompleteSearch.js] [806EA6CC4DCBF88A20AA3331BCDC9918] Adware.FPL.Gen.vl [c:\extensions\engine@conduit.com\components\ConduitAutoCompleteSearch.xpt] [33D4D4337895FCA507DF937B5980D41A] Adware.FPL.Gen.vl [c:\extensions\engine@conduit.com\components\ConduitToolbar.idl] [6A2C72DF1348F39C0CE44E1B8C10F5CE] Adware.FPL.Gen.vl [c:\extensions\engine@conduit.com\components\ConduitToolbar.js] [DFFE26916941DE0A33E503FD38008290] Adware.FPL.Gen.vl [c:\extensions\engine@conduit.com\components\ConduitToolbar.xpt] [34C084B321EA0308C58EED1CF6B5FB02] Adware.FPL.Gen.vl [c:\extensions\engine@conduit.com\components\RadioWMPCore.dll] [2A48E243F2AC646748BB5EC3B7B2E5DF] Adware.FPL.Gen.vl [c:\extensions\engine@conduit.com\components\RadioWMPCore.xpt] [696F6787818300362F15485D654F6887] Adware.FPL.Gen.vl [c:\extensions\engine@conduit.com\components\RadioWMPCoreGecko19.dll] [142E7E54CAE0F32DB31BB9C925083F1F] Adware.FPL.Gen.vl [c:\extensions\engine@conduit.com\defaults\alertSettingsComponent.xml] [F710D2DA1AEB8682807678FF766126CF] Adware.FPL.Gen.vl [c:\extensions\engine@conduit.com\defaults\appContextMenu.xml] [D36423CECBFE5F806725E13ED7101201] Adware.FPL.Gen.vl [c:\extensions\engine@conduit.com\defaults\engineContextMenu.xml] [39DA2F75064ACF526E17560B37C04CA7] Adware.FPL.Gen.vl [c:\extensions\engine@conduit.com\defaults\engineSettings.json] [02BEB29F12EF02D4FB4CEB94A02F2071] Adware.FPL.Gen.vl [c:\extensions\engine@conduit.com\defaults\fbAlert.js] [3148FD84DC8488FC64550F10F08619E8] Adware.FPL.Gen.vl [c:\extensions\engine@conduit.com\defaults\getAppsContextMenu.xml] [F91B18B99F48375B2691AE99BA082BE7] Adware.FPL.Gen.vl [c:\extensions\engine@conduit.com\defaults\postAppsContextMenu.xml] [B7A49067B8FD5AC047844F330B490011] Adware.FPL.Gen.vl [c:\extensions\engine@conduit.com\defaults\toolbarContextMenu.xml] [645FD5668ED4C90069F2084D37386749] Adware.FPL.Gen.vl [c:\extensions\engine@conduit.com\defaults\unsharedAppsContextMenu.xml] [60D0CBFFDE7F893393B1D39876A6A81A] Adware.FPL.Gen.vl [c:\extensions\engine@conduit.com\DualPackage\install.rdf] [54C97B3F9E70B2FA1F6A4096D7F94BF8] Adware.FPL.Gen.vl [c:\extensions\engine@conduit.com\install.rdf] [36BDE4497FC37A83BE0706FFE0D3DE2C] Adware.FPL.Gen.vl [c:\extensions\engine@conduit.com\lib\xpcom.js] [F6EDF8CAA5B12FE9598C478F988C83CB] Adware.FPL.Gen.vl [c:\extensions\engine@conduit.com\META-INF\manifest.mf] [D4E6D0CC92C948187BD1E16703D0E9CC] Adware.FPL.Gen.vl [c:\extensions\engine@conduit.com\META-INF\zigbert.rsa] [189AD942347C35EB7929CA1BF83E5424] Adware.FPL.Gen.vl [c:\extensions\engine@conduit.com\META-INF\zigbert.sf] [225B6898AE7D6E0CE88B3FE57BD750F2] Adware.FPL.Gen.vl [c:\extensions\engine@conduit.com\searchplugin\conduit.gif] [A23164BA794BE61799C67423F56C9163] Adware.FPL.Gen.vl [c:\extensions\engine@conduit.com\searchplugin\conduit.ico] [AF3A51D0B8D6F04EE33307A654560DBE] Adware.FPL.Gen.vl [c:\extensions\engine@conduit.com\searchplugin\conduit.PNG] [43317CC423A502C077AD68F838249117] Adware.FPL.Gen.vl [c:\extensions\engine@conduit.com\searchplugin\conduit.src] [4E45A93B99F44F41EADFB167FB85FB02] Adware.FPL.Gen.vl [c:\extensions\engine@conduit.com\searchplugin\conduit.xml] [BEDD0892ECD2A0690A48F4B19059C96C] Adware.FPL.Gen.vl [c:\extensions\engine@conduit.com\setup.ini] [4C48E4AB084C8712F86091220C332BB4] Adware.FPL.Gen.vl [c:\extensions\engine@conduit.com\version.txt] [6CEA0343813ACF271705A320976B5945] Adware.FPL.Gen.vl [c:\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\chrome\utorrentbar.jar] [19E518FBD85E5FD3D1221BB727D2E28F] Adware.FPL.Gen.vl [c:\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\chrome.manifest] [467C3FEB6421FFDE5CD545B21DCD4696] Adware.FPL.Gen.vl [c:\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\components\ConduitAutoCompleteSearch.js] [806EA6CC4DCBF88A20AA3331BCDC9918] Adware.FPL.Gen.vl [c:\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\components\ConduitAutoCompleteSearch.xpt] [C2AD81A8CB014376DCC05257BC31CA23] Adware.FPL.Gen.vl [c:\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\components\RadioWMPCore.dll] [2A48E243F2AC646748BB5EC3B7B2E5DF] Adware.FPL.Gen.vl [c:\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\components\RadioWMPCore.xpt] [696F6787818300362F15485D654F6887] Adware.FPL.Gen.vl [c:\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\components\RadioWMPCoreGecko19.dll] [142E7E54CAE0F32DB31BB9C925083F1F] Adware.FPL.Gen.vl [c:\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\defaults\alertSettingsComponent.xml] [F710D2DA1AEB8682807678FF766126CF] Adware.FPL.Gen.vl [c:\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\defaults\appContextMenu.xml] [D36423CECBFE5F806725E13ED7101201] Adware.FPL.Gen.vl [c:\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\defaults\engineContextMenu.xml] [39DA2F75064ACF526E17560B37C04CA7] Adware.FPL.Gen.vl [c:\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\defaults\engineSettings.json] [02BEB29F12EF02D4FB4CEB94A02F2071] Adware.FPL.Gen.vl [c:\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\defaults\fbAlert.js] [3148FD84DC8488FC64550F10F08619E8] Adware.FPL.Gen.vl [c:\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\defaults\getAppsContextMenu.xml] [F91B18B99F48375B2691AE99BA082BE7] Adware.FPL.Gen.vl [c:\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\defaults\postAppsContextMenu.xml] [B7A49067B8FD5AC047844F330B490011] Adware.FPL.Gen.vl [c:\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\defaults\toolbarContextMenu.xml] [645FD5668ED4C90069F2084D37386749] Adware.FPL.Gen.vl [c:\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\defaults\unsharedAppsContextMenu.xml] [0DFAE60BFD15F99014644E66D39493F9] Adware.FPL.Gen.vl [c:\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\install.rdf] [D48EC5B80194A528977749512362AEB9] Adware.FPL.Gen.vl [c:\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\META-INF\manifest.mf] [B92AF888EFD81032A2DF038AE0487AED] Adware.FPL.Gen.vl [c:\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\META-INF\zigbert.rsa] [537846C1286DF213AC6F684B860439DF] Adware.FPL.Gen.vl [c:\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\META-INF\zigbert.sf] [9513879AC4242602CEA679ED0913A940] Adware.FPL.Gen.vl [c:\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\modules\Chat.jsm] [A243B8020C11C503C4167EE8EA9C0F94] Adware.FPL.Gen.vl [c:\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\modules\DataStructures.jsm] [1227F8E3A6458A53F29D2D1D720F0246] Adware.FPL.Gen.vl [c:\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\modules\EBEncryption.jsm] [DAEEF97A4293C9604138692CE4982566] Adware.FPL.Gen.vl [c:\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\modules\ExternalLibraryLoader.jsm] [44B0FB92284587124E235F7FB553F015] Adware.FPL.Gen.vl [c:\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\modules\HTTP.jsm] [07462C5B959267344758EBD51368A7DA] Adware.FPL.Gen.vl [c:\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\modules\IO.jsm] [3846F6264B8B4244C982DA3776A8FBFE] Adware.FPL.Gen.vl [c:\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\modules\Log.jsm] [467FEBCC2A4279B1FFF987475C4F56B4] Adware.FPL.Gen.vl [c:\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\modules\MainSingleton.jsm] [749F05E73C112B698FFF46451C9A466C] Adware.FPL.Gen.vl [c:\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\modules\MD5.jsm] [C13859C3DD393F2196A660E4E6E16A95] Adware.FPL.Gen.vl [c:\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\modules\Notifications.jsm] [4EC1425688CA6CF41F7E1D7CF65E5E3A] Adware.FPL.Gen.vl [c:\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\modules\ObserversAndEvents.jsm] [F56B2D1267098DC050AE66E74C348BC2] Adware.FPL.Gen.vl [c:\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\modules\Prefs.jsm] [605831CFA9C795DB2D95E24FAD91A1FA] Adware.FPL.Gen.vl [c:\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\modules\SearchSuggestIO.jsm] [58892A46F68593047389B98BD0E8194C] Adware.FPL.Gen.vl [c:\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\modules\String.jsm] [3041EDE7CA32C483711DD8476493B9BE] Adware.FPL.Gen.vl [c:\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\modules\TEAEncryption.jsm] [B014DDEFE046880C2A27423BE6AF7E40] Adware.FPL.Gen.vl [c:\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\modules\Timer.jsm] [42502EDEC489D66BDA31A59926B8F7D8] Adware.FPL.Gen.vl [c:\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\modules\Twitter.jsm] [B92653EDD83CC5546E387E2E8F99025B] Adware.FPL.Gen.vl [c:\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\modules\URL.jsm] [87A64956587E7B3B514020B6575B0465] Adware.FPL.Gen.vl [c:\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\modules\Windows.jsm] [F4394E519D12E8F0D5B05449D9213241] Adware.FPL.Gen.vl [c:\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\modules\XML.jsm] [9899FF3D3FB322748631B08B248D8055] Adware.FPL.Gen.vl [c:\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\searchplugin\conduit.xml] [BEDD0892ECD2A0690A48F4B19059C96C] Adware.FPL.Gen.vl [c:\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\setup.ini] [C99FCA22E2E29C5CC29C1171E88C54A2] Adware.FPL.Gen.vl [c:\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\version.txt] [C58D1D0CA5551BE55E5D2C14E16CDBF4] Adware.PL.Gen.vl [c:\user.js] [AD74CCA501DA08EF395E520D9C258F81] PUP.Win32.Ask.vl!i [C:\Program Files (x86)\Avira\AntiVir Desktop\apntoolbarinstaller.exe] [A15838A6DF87FAF336B7E05E32E3DEB3] Malware.Win32.Gen.cs1 [C:\Users\ANOVI\Downloads\Nero 7\Nero 7 Keygen from Embrace\keygen.exe] [34C2655578D8678E882954521FEF2462] Cert2-Malware.Win32.Pack.1799!se [J:\BACKUP\C-Users\ANOVI\AppData\Local\Temp\HYD2ECF.tmp.1458087865_permissionsCopy\updates\3.3.1_29963.exe]