Malwarebytes Anti-Malware (Trial) 1.75.0.1300 www.malwarebytes.org Database version: v2013.06.11.07 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 9.0.8112.16421 wml11 :: WML11-PC [administrator] Protection: Enabled 6/11/2013 4:07:07 PM mbam-log-2013-06-11 (16-07-07).txt Scan type: Full scan (C:\|) Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM Scan options disabled: P2P Objects scanned: 605766 Time elapsed: 1 hour(s), 17 minute(s), 19 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 2 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Savings Sidekick (PUP.CrossRider.SSK) -> Quarantined and deleted successfully. HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\215 APPS (PUP.CrossFire.SA) -> Quarantined and deleted successfully. Registry Values Detected: 1 HKCU\Software\InstalledBrowserExtensions\215 Apps|5060 (PUP.CrossFire.SA) -> Data: Savings Sidekick -> Quarantined and deleted successfully. Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 2 C:\ProgramData\IBUpdaterService (PUP.InstallBrain) -> Quarantined and deleted successfully. C:\Program Files (x86)\Savings Sidekick (PUP.CrossRider.SSK) -> Quarantined and deleted successfully. Files Detected: 14 C:\Program Files (x86)\Savings Sidekick\Uninstall.exe (PUP.CrossRider.SSK) -> Quarantined and deleted successfully. C:\Program Files (x86)\Uninstall Information\ib_uninst_514\uninstall.exe (PUP.BundleInstaller.IB) -> Quarantined and deleted successfully. C:\Program Files (x86)\Uninstall Information\ib_uninst_566\uninstall.exe (PUP.BundleInstaller.IB) -> Quarantined and deleted successfully. C:\Program Files (x86)\Uninstall Information\ib_uninst_569\uninstall.exe (PUP.BundleInstaller.IB) -> Quarantined and deleted successfully. C:\Users\wml11\AppData\Local\Temp\softonic_ssk_conduit.exe (PUP.BundleInstaller.IB) -> Quarantined and deleted successfully. C:\Users\wml11\AppData\Local\Temp\ibtmpf564504\component_566 (PUP.CrossRider.SSK) -> Quarantined and deleted successfully. C:\Users\wml11\AppData\Roaming\FBDownloader\revert.dll (Trojan.StartPage.) -> Quarantined and deleted successfully. C:\Users\wml11\Downloads\softwares\DownloadManager_Setup.exe (PUP.Bundle.Installer.OI) -> Quarantined and deleted successfully. C:\ProgramData\IBUpdaterService\repository.xml (PUP.InstallBrain) -> Quarantined and deleted successfully. C:\Program Files (x86)\Savings Sidekick\Savings SidekickInstaller.log (PUP.CrossRider.SSK) -> Quarantined and deleted successfully. C:\Program Files (x86)\Savings Sidekick\Savings Sidekick.ico (PUP.CrossRider.SSK) -> Quarantined and deleted successfully. C:\Program Files (x86)\Savings Sidekick\Savings Sidekick.ini (PUP.CrossRider.SSK) -> Quarantined and deleted successfully. C:\Users\wml11\Local Settings\Application Data\Savings Sidekick\Chrome\Savings Sidekick.crx (PUP.CrossRider.SSK) -> Quarantined and deleted successfully. C:\Users\wml11\AppData\Local\Savings Sidekick\Chrome\Savings Sidekick.crx (PUP.CrossRider.SSK) -> Quarantined and deleted successfully. (end)