ww

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 12/12/2014
Scan Time: 2:46:33 PM
Logfile: 
Administrator: Yes

Version: 2.00.4.1028
Malware Database: v2014.12.12.04
Rootkit Database: v2014.12.08.03
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: P

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 306796
Time Elapsed: 7 min, 45 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 6
PUP.Optional.Linkey.A, HKU\S-1-5-21-814374935-1555606041-778361887-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47}, Quarantined, [eb092e330c70bb7b54c079583ac841bf], 
PUP.Optional.DefaultSearch, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}, Quarantined, [955fe08167154aec112a53780df737c9], 
PUP.Optional.SettingsManager.A, HKLM\SOFTWARE\WOW6432NODE\SmdmF, Quarantined, [d81cf869c8b484b27a5da1c009fa659b], 
PUP.Optional.DefaultSearch, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}, Quarantined, [82728dd4b4c8c274093202c96a9a0ef2], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-814374935-1555606041-778361887-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [728288d947355ed8c3f87a3f57adb44c], 
PUP.Optional.DefaultSearch, HKU\S-1-5-21-814374935-1555606041-778361887-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}, Quarantined, [1dd7352cbfbd4ceabb8197348d77817f], 

Registry Values: 3
PUP.Optional.DefaultSearch, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}|DisplayName, default-search.net, Quarantined, [955fe08167154aec112a53780df737c9]
PUP.Optional.DefaultSearch, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}|DisplayName, default-search.net, Quarantined, [82728dd4b4c8c274093202c96a9a0ef2]
PUP.Optional.DefaultSearch, HKU\S-1-5-21-814374935-1555606041-778361887-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}|DisplayName, default-search.net, Quarantined, [1dd7352cbfbd4ceabb8197348d77817f]

Registry Data: 1
PUP.Optional.DefaultSearch.A, HKU\S-1-5-21-814374935-1555606041-778361887-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://www.default-search.net?sid=503&aid=112&itype=n&ver=13986&tm=499&src=hmp, Good: (www.google.com), Bad: (http://www.default-search.net?sid=503&aid=112&itype=n&ver=13986&tm=499&src=hmp),Replaced,[955fa4bdd1abb97d085cc998ed18857b]

Folders: 0
(No malicious items detected)

Files: 2
PUP.Optional.Linkey.A, C:\Users\P\AppData\Roaming\RHEng\3F8A4E33F86D4AC8923FD71D08DE87FC\SettingsManagerSetup.exe, Quarantined, [fbf9f26fc0bcf640fd2c149010f1a957], 
Heuristics.Reserved.Word.Exploit, C:\rundll32.exe, Quarantined, [a252392897e52c0ad01be18c7d8851af], 

Physical Sectors: 0
(No malicious items detected)


(end)