pup optional conduit

joet2919
Full Member

Posts: 102

pup optional conduit Apr 16, 2019 17:09:25 GMT -5

Quote

Post by joet2919 on Apr 16, 2019 17:09:25 GMT -5

i ran malware bytes found 8 of these pest i have managed to remove all but one .i went to setting other search engines found it there deleted . i did run superantispyware at this point i have one i cant get rid of it is in user app for some reason i cant copy it to show scan
how do i rid the last one might i add i did the reboot
this is s a s r scan Application Version : 8.0.1038

Database Version : 15447

Scan type : Complete Scan

Total Scan Time : 01:07:34

Operating System Information

Windows 10 Professional 64-bit (Build 10.00.17134)

UAC On - Limited User

Memory items scanned : 1138

Memory items detected : 0

Registry items scanned : 67873

Registry items detected : 0

File items scanned : 80774

File items detected : 962

Adware.Tracking Cookie

C:\Users\McDowell\AppData\Local\Microsoft\Windows\INetCookies\deprecated.cookieC:\Users\McDowell\AppData\Local\Microsoft\Windows\INetCookies\deprecated.cookie [ /360yield.com ]

.1rx.io\1r_dsp [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.1rx.io\_rxuuid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.33across.com\33x_ps [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.33across.com\__cfduid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.360yield.com\tuuid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.360yield.com\tuuid_lu [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.360yield.com\um [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.360yield.com\umeh [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.3lift.com\sync [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.3lift.com\tlcookieable [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.3lift.com\tluid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.50136351.log.optimizely.com\end_user_id [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.a.wishabi.com\gid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.abbviecommercial.demdex.net\abbviecommercial [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.abmr.net\01AI [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.acuityplatform.com\auid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.acuityplatform.com\bv-315469 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.acuityplatform.com\bv-333571 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.acuityplatform.com\bv-346457 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.acuityplatform.com\bv-346497 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.acuityplatform.com\bv-350611 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.acuityplatform.com\bv-353513 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.acuityplatform.com\bv-357655 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.acuityplatform.com\bv-358827 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.acuityplatform.com\bv-359785 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.acuityplatform.com\bv-365219 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.acuityplatform.com\bv-365413 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.acuityplatform.com\bv-367019 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.acuityplatform.com\bv-374107 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.acuityplatform.com\bv-374801 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.addthis.com\loc [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.addthis.com\mus [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.addthis.com\na_id [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.addthis.com\na_tc [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.addthis.com\ouid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.addthis.com\ssc [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.addthis.com\uid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.addthis.com\uvc [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.adentifi.com\adtheorent[cuid] [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.adform.net\uid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.adgrx.com\ADGRX_UID [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.adhigh.net\appnexus_sync [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.adhigh.net\bsw_sync [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.adhigh.net\gi_u [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.adhigh.net\id5_sync [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.adhigh.net\pubmatic_sync [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.adhigh.net\rubicon_sync [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.adhigh.net\tpl_sync [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.adkernel.com\ADKUID [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.admanmedia.com\acuity_id [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.admanmedia.com\admtr [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.admanmedia.com\bidswitch_id [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.admixer.net\am-uid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.adnxs.com\anj [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.adnxs.com\icu [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.adnxs.com\uids [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.adnxs.com\usersync [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.adnxs.com\uuid2 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.adobe.demdex.net\adobe [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.adrizer.com\__cfduid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.adrta.com\__aavi [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.adrta.com\__aavt [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.ads.linkedin.com\BizoID [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.ads.yieldmo.com\ptrbsw [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.ads.yieldmo.com\ptrcriteo [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.adsafety.net\ct_did [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.adsafety.net\ct_idt [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.adsafety.net\ct_uid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.adsrvr.org\TDCPM [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.adsrvr.org\TDID [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.adstanding.com\_adstanding_id [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.adsymptotic.com\A [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.adsymptotic.com\U [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.adsymptotic.com\__cfduid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.adtag.primetime.adobe.com\UID [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.adtag.primetime.adobe.com\aam_uuid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.adtechus.com\APIDTS [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.adtechus.com\eAPID [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.adtelligent.com\vmuid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.adventive.com\ADV_u_id [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.adventori.com\sync_16248314 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.adventori.com\tk_ui [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.adventori.com\tk_ui_third [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.agkn.com\aa [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.agkn.com\ab [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.agkn.com\ae [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.agkn.com\u [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.altitude-arena.com\um [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.amazon-adsystem.com\ad-id [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.amazon-adsystem.com\ad-privacy [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.api-v3.tinypass.com\__cfduid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.apxlv.com\dc_id [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.autozone.com\RES_TRACKINGID [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.b.wishabi.com\xgid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.betweendigital.com\dc [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.betweendigital.com\tuuid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.betweendigital.com\ut [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.bidr.io\bito [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.bidswitch.net\c [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.bidswitch.net\tuuid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.bidswitch.net\tuuid_lu [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.bizrate.com\_ga [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.bizrate.com\br [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.bizrate.com\p13n_id [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.bluecava.com\acx [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.bluecava.com\idx [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.bluecava.com\lv [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.bluekai.com\bkdc [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.bluekai.com\bku [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.boehringer.demdex.net\boehringer [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.boncom.demdex.net\boncom [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.bravenet.com\HASCOOKIES [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.bs.serving-sys.com\eyeblaster [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.bumlam.com\suuid3 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.buy.tinypass.com\__cfduid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.buy.tinypass.com\_ga [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.c3tag.com\C3UID [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.c3tag.com\C3UID-562 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.c3tag.com\C3UID-593 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.c3tag.com\C3UID-793 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.capitaloneservices.tt.omtrdc.net\mboxPC [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.cardlytics.com\mv3 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.carnivalbrands.demdex.net\carnivalbrands [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.cdn.dynamicyield.com\__cfduid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.cdn.tinypass.com\__cfduid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.cdn.viglink.com\__cfduid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.cdns.us1.gigya.com\gig_loginToken_3_12rmu_h66tmqQ-OmY6Xgs-tw0GJR6PupdaAfQj4tMWnwdZ5JQajTwvt2t5KGaAv5 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.cdns.us1.gigya.com\gig_loginToken_3_12rmu_h66tmqQ-OmY6Xgs-tw0GJR6PupdaAfQj4tMWnwdZ5JQajTwvt2t5KGaAv5_exp [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.cdns.us1.gigya.com\gig_loginToken_3_12rmu_h66tmqQ-OmY6Xgs-tw0GJR6PupdaAfQj4tMWnwdZ5JQajTwvt2t5KGaAv5_visited [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.cdns.us1.gigya.com\gig_loginToken_3_nwoEpOX2NQ5sZqoGQNqusDIsEjT-2hL5YgqaS-aNDenPyS4X1uV_h1JlZ3Qh6KUZ [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.cdns.us1.gigya.com\gig_loginToken_3_nwoEpOX2NQ5sZqoGQNqusDIsEjT-2hL5YgqaS-aNDenPyS4X1uV_h1JlZ3Qh6KUZ_exp [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.cdns.us1.gigya.com\gig_loginToken_3_nwoEpOX2NQ5sZqoGQNqusDIsEjT-2hL5YgqaS-aNDenPyS4X1uV_h1JlZ3Qh6KUZ_visited [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.choice.demdex.net\choice [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.christianbook.com\RES_TRACKINGID [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.civicscience.com\ballotbox/respondent_id [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.civicscience.com\core-att/484 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.civicscience.com\core-att/7078 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.clickagy.com\cb [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.clickcertain.com\__cfduid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.cogocast.net\dc_id [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.comcast.demdex.net\comcast [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.company-target.com\iuuid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.company-target.com\tuuid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.company-target.com\tuuid_lu [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.config.parsely.com\parsely_network_uuid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.connectad.io\__cfduid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.connectad.io\uid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.connexity.net\COu [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.content.ad\user30 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.contextweb.com\V [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.contextweb.com\pb_rtb_ev [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.creative-serving.com\tuuid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.creative-serving.com\tuuid_lu [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.criteo.com\uid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.crsspxl.com\id_amb [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.crsspxl.com\mwid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.crsspxl.com\re [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.crsspxl.com\uid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.crsspxl.com\uuid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.crwdcntrl.net\_cc_dc [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.crwdcntrl.net\_cc_domain [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.crwdcntrl.net\_cc_id [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.cxense.com\gckp [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.d41.co\D41ID [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.dashboard.tinypass.com\__cfduid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.dc-storm.com\rmuid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.deepintent.com\107 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.deepintent.com\108 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.deepintent.com\110 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.deepintent.com\112 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.deepintent.com\113 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.deepintent.com\114 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.deepintent.com\116 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.deepintent.com\117 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.deepintent.com\118 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.deepintent.com\119 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.deepintent.com\120 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.deepintent.com\121 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.deepintent.com\122 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.deepintent.com\CDIUSER [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.dellinc.tt.omtrdc.net\mboxPC [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.demandwarecrocs.demdex.net\demandwarecrocs [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.demdex.net\DST [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.demdex.net\demdex [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.demdex.net\dextp [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.dianomi.com\__cfduid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.dianomi.com\session [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.dianomi.com\session2 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.digitru.st\DigiTrust.v1.identity [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.dlx.addthis.com\na_rn [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.dlx.addthis.com\na_sc_e [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.dlx.addthis.com\na_sc_x [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.dlx.addthis.com\na_sr [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.dotomi.com\DotomiSync [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.dotomi.com\DotomiUser [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.dotomi.com\cjae [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.dpm.demdex.net\dpm [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.dynamicyield.com\DYID [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.dyntrk.com\dyn_u [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.ebayinc.demdex.net\ebayinc [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.ebdr3.com\guid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.edigitalsurvey.com\__cfduid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.em.licasd.com\emchk [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.emxdgt.com\apn_id [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.emxdgt.com\dt [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.emxdgt.com\ps [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.emxdgt.com\uid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.eqads.com\EQUser [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.everesttech.net\_tmae [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.everesttech.net\ev_sync_ax [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.everesttech.net\ev_sync_dd [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.everesttech.net\ev_sync_ix [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.everesttech.net\ev_sync_nx [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.everesttech.net\ev_sync_yh [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.everesttech.net\everest_g_v2 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.exelator.com\EE [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.exelator.com\ud [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.experience.tinypass.com\__cfduid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.extend.tv\extendtv_user_id [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.eyeota.net\mako_uid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.eyereturn.com\er_guid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.eyeviewads.com\__ev_uid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.fg8dgt.com\tuuid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.fg8dgt.com\tuuid_lu [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.fidelity-media.com\OAID [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.flashtalking.com\_D9J [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.flashtalking.com\flashtalkingad1 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.fwmrm.net\_uid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.g00.ranker.com\com.advertising.$M [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.g00.ranker.com\com.advertising.adaptv.$M [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.g00.ranker.com\com.eyeviewads.$M [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.g00.ranker.com\com.serving-sys.$M [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.g00.ranker.com\com.smartadserver.$M [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.g00.ranker.com\net.adform.$M [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.g00.ranker.com\net.doubleclick.$M [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.g01.msn.com\com.advertising.$M [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.g01.msn.com\com.advertising.adaptv.$M [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.g01.msn.com\com.amazon-adsystem.$M [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.g01.msn.com\com.atwola.$M [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.g01.msn.com\com.basebanner.$M [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.g01.msn.com\com.casalemedia.$M [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.g01.msn.com\com.eyeviewads.$M [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.g01.msn.com\com.imrworldwide.$M [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.g01.msn.com\com.stickyadstv.ads$M [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.g01.msn.com\net.adform.$M [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.g01.msn.com\net.doubleclick.$M [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.gigya.com\apiDomain_2_iWsMDu4Cet-wL4cnhYjt8QrF0601c5VNEiF5aUF5UZKgpbv2PLrlUuwZzp9wlxSH [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.gigya.com\apiDomain_3_12rmu_h66tmqQ-OmY6Xgs-tw0GJR6PupdaAfQj4tMWnwdZ5JQajTwvt2t5KGaAv5 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.gigya.com\apiDomain_3_nwoEpOX2NQ5sZqoGQNqusDIsEjT-2hL5YgqaS-aNDenPyS4X1uV_h1JlZ3Qh6KUZ [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.gigya.com\gig_hasGmid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.gigya.com\gmid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.gigya.com\hasGmid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.gigya.com\ucid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.glotgrx.com\__cfduid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.gm.demdex.net\gm [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.go.sonobi.com\__uig [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.go.sonobi.com\__uin_bw [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.go.sonobi.com\_usd_wwf.zynga.com [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.googleadservices.com\AID [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.gotquestions.org\_ga [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.gotquestions.org\_sp_id.d093 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.gssprt.jp\criteo [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.gssprt.jp\gid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.gssprt.jp\tone [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.gumgum.com\vst [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.gwallet.com\ra1_pd [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.gwallet.com\ra1_uid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.hash.qualia.id\hparg [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.homedepot.com\RES_TRACKINGID [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.homedepot.demdex.net\homedepot [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.hrblock.demdex.net\hrblock [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.hubspot.com\__cfduid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.iasds01.com\AC [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.iasds01.com\DMADT [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.iasds01.com\UT [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.ib.mookie1.com\ibkukinet [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.ib.mookie1.com\ibkukiuno [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.ibclick.stream\__cfduid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.id.tinypass.com\__cfduid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.igodigital.com\igodigitaltc2 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.imrworldwide.com\IMRID [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.infolinks.com\ANUSERCOOKIE [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.infolinks.com\DIPIUSERCOOKIE [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.infolinks.com\__cfduid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.insightexpressai.com\DW [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.insightexpressai.com\DW_Time [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.insightexpressai.com\IXAI31425 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.insightexpressai.com\IXAI31468 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.insightexpressai.com\IXAI31509 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.insightexpressai.com\IXAI31560 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.insightexpressai.com\IXAI32524 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.insightexpressai.com\IXAI32942 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.insightexpressai.com\IXAI34000 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.insightexpressai.com\IXAI36762 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.insightexpressai.com\IXAI37431 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.insightexpressai.com\IXAI37517 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.insightexpressai.com\IXAI37899 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.insightexpressai.com\IXAI38126 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.insightexpressai.com\IXAI38223 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.insightexpressai.com\IXAI38308 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.insightexpressai.com\IXAI38455 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.insightexpressai.com\IXAI38594 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.insightexpressai.com\IXAI38629 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.insightexpressai.com\IXAI38709 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.insightexpressai.com\IXAI39058 [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.insightexpressai.com\TID [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.inspectlet.com\__cfduid [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.intentiq.com\ASDT [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.intentiq.com\AWSELB [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.intentiq.com\CSDT [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.intentiq.com\IQMID [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.intentiq.com\IQPData [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.intentiq.com\IQadv [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.intentiq.com\IQpavs [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.intentiq.com\IQver [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.intentiq.com\intentIQ [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

.intentiq.com\intentIQCDate [ C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

Last Edit: Apr 16, 2019 17:19:36 GMT -5 by joet2919

jholland1964
Administrator

Posts: 2,722

Former World Start Member: Yes

pup optional conduit Apr 16, 2019 17:18:57 GMT -5

Quote

Post by jholland1964 on Apr 16, 2019 17:18:57 GMT -5

We don't want the SUPERAntispyware log we want and MUST see the entire Malwarebytes' log from top to bottom.

Based on the number of tracking cookies found you don't have your browsers configured correctly to block those and you obviously have not used CCleaner.

Did you follow the instructions given in our Preliminary Cleanup Steps?

Following each and every step to the letter Is required in order for us to give you proper assistance.

Inspiron 15 5510 Windows 11 64bit
Vivaldi; EDGE; Mailbird; Windows Defender, Windows Firewall, MBAM FREE, SpywareBlaster

Inspiron 7591; Windows 10 64bit; Same programs as above.

joet2919
Full Member

Posts: 102

pup optional conduit Apr 16, 2019 17:20:13 GMT -5

Quote

Post by joet2919 on Apr 16, 2019 17:20:13 GMT -5

Malwarebytes

www.malwarebytes.com

-Log Details-

Scan Date: 4/16/19

Scan Time: 4:43 PM

Log File: a113f920-6090-11e9-9ffb-b083fe52d751.json

-Software Information-

Version: 3.7.1.2839

Components Version: 1.0.563

Update Package Version: 1.0.10198

License: Free

-System Information-

OS: Windows 10 (Build 17134.706)

CPU: x64

File System: NTFS

User: McDowell-PC\McDowell

-Scan Summary-

Scan Type: Threat Scan

Scan Initiated By: Manual

Result: Completed

Objects Scanned: 325661

Threats Detected: 1

Threats Quarantined: 0

Time Elapsed: 10 min, 51 sec

-Scan Options-

Memory: Enabled

Startup: Enabled

Filesystem: Enabled

Archives: Enabled

Rootkits: Enabled

Heuristics: Enabled

PUP: Detect

PUM: Detect

-Scan Details-

Process: 0

(No malicious items detected)

Module: 0

(No malicious items detected)

Registry Key: 0

(No malicious items detected)

Registry Value: 0

(No malicious items detected)

Registry Data: 0

(No malicious items detected)

Data Stream: 0

(No malicious items detected)

Folder: 0

(No malicious items detected)

File: 1

PUP.Optional.Conduit, C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, No Action By User, [210], [454832],1.0.10198

Physical Sector: 0

(No malicious items detected)

WMI: 0

(No malicious items detected)

(end)

joet2919
Full Member

Posts: 102

pup optional conduit Apr 16, 2019 17:21:53 GMT -5

Quote

Post by joet2919 on Apr 16, 2019 17:21:53 GMT -5

Malwarebytes

www.malwarebytes.com

-Log Details-

Scan Date: 4/16/19

Scan Time: 4:43 PM

Log File: a113f920-6090-11e9-9ffb-b083fe52d751.json

-Software Information-

Version: 3.7.1.2839

Components Version: 1.0.563

Update Package Version: 1.0.10198

License: Free

-System Information-

OS: Windows 10 (Build 17134.706)

CPU: x64

File System: NTFS

User: McDowell-PC\McDowell

-Scan Summary-

Scan Type: Threat Scan

Scan Initiated By: Manual

Result: Completed

Objects Scanned: 325661

Threats Detected: 1

Threats Quarantined: 0

Time Elapsed: 10 min, 51 sec

-Scan Options-

Memory: Enabled

Startup: Enabled

Filesystem: Enabled

Archives: Enabled

Rootkits: Enabled

Heuristics: Enabled

PUP: Detect

PUM: Detect

-Scan Details-

Process: 0

(No malicious items detected)

Module: 0

(No malicious items detected)

Registry Key: 0

(No malicious items detected)

Registry Value: 0

(No malicious items detected)

Registry Data: 0

(No malicious items detected)

Data Stream: 0

(No malicious items detected)

Folder: 0

(No malicious items detected)

File: 1

PUP.Optional.Conduit, C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, No Action By User, [210], [454832],1.0.10198

Physical Sector: 0

(No malicious items detected)

WMI: 0

(No malicious items detected)

(end)

jholland1964
Administrator

Posts: 2,722

Former World Start Member: Yes

pup optional conduit Apr 16, 2019 17:24:41 GMT -5

Quote

Post by jholland1964 on Apr 16, 2019 17:24:41 GMT -5

Thanks for that log. One PUP is not something to panic over. You don't want them of course but one is just that, one. BUT...you also didn't have Malwarebytes' clean. It clearly says:

PUP.Optional.Conduit, C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, No Action By User, [210], [454832],1.0.10198

Run Malwarebytes' again and this time be absolutely certain you choose to clean that file. Then Reboot the Computer

After that I would like you to do is run AdwCleaner.

Download Malwarebytes AdwCleaner from this link:

www.malwarebytes.com/adwcleaner/

This will give you the executable file itself. Save it to your desktop where you can easily find it.

When CLEANING IS REQUIRED, THERE ARE TWO STEPS REQUIRED IN ONE RUN OF THE TOOL.

CLOSE ALL other programs you have running....browsers, email programs. Letting those run while clean up tools to run slows the clean up immensely AND may not allow full clean up because many, if not most tools, cannot clean an open program. So close all that. Only open browser window AFTER the a tool has been run and used to clean, reboots the system and produces a log. Then open the one window and come back here and post the logs required.

Double click AdwCleaner to open it.
1. Hit the Scan button to have AdwCleaner to search your computer for unwanted programs and then display a log showing the various files, folders, and registry entries used by these programs. Once this search is complete IF MALWARE IS FOUND you will see the words “PENDING” and the SCAN button will change to a CLEAN button and you must immediately move on to step 2.

2. NEXT Click on the Clean button, which will cause AdwCleaner to reboot your computer and remove the files and registry entries associated with the various adware that you are removing. On reboot, AdwCleaner will display a log showing the files, folders, and registry entries that were removed. Copy/paste that log here.

Please NOTE, when using AdwCleaner If no malware is found with your SCAN run of AdwCleaner you will receive a message that nothing was found but it you choose you can run Basic Repair which will reset Winsock and other settings to their default values. This is your option and if you would prefer not to do this just hit the Skip Basic Repair button and close the program.

BUT REMEMBER, IF MALWARE IS FOUND there are TWO steps needed so sure to absolutely complete BOTH steps.

Now once you have completed all of the above steps then please post that log in this thread.

Last Edit: Apr 16, 2019 17:51:31 GMT -5 by jholland1964

Inspiron 15 5510 Windows 11 64bit
Vivaldi; EDGE; Mailbird; Windows Defender, Windows Firewall, MBAM FREE, SpywareBlaster

Inspiron 7591; Windows 10 64bit; Same programs as above.

joet2919
Full Member

Posts: 102

pup optional conduit Apr 16, 2019 18:00:38 GMT -5

Quote

Post by joet2919 on Apr 16, 2019 18:00:38 GMT -5

Malwarebytes AdwCleaner 7.3.0.0
# -------------------------------
# Build: 04-04-2019
# Database: 2019-04-15.1 (Cloud)
# Support: www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 04-16-2019
# Duration: 00:00:07
# OS: Windows 10 Pro
# Cleaned: 103
# Failed: 0

***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

Deleted C:\Program Files (x86)\Yahoo!\Companion
Deleted C:\ProgramData\Yahoo! Companion
Deleted C:\Users\McDowell\AppData\LocalLow\Yahoo! Companion
Deleted C:\Users\McDowell\AppData\LocalLow\Yahoo!\Companion
Deleted C:\Users\McDowell\AppData\Roaming\Yahoo!\Companion

***** [ Files ] *****

Deleted C:\Program Files (x86)\Yahoo!\Common\unyt.exe

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

Deleted HKCU\Software\AppDataLow\Software\Yahoo\Companion
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Deleted HKCU\Software\Yahoo\Companion
Deleted HKCU\Software\Yahoo\YFriendsBar
Deleted HKLM\SOFTWARE\Classes\AppID\yt.DLL
Deleted HKLM\SOFTWARE\Classes\AppID\ytbbroker.EXE
Deleted HKLM\Software\Classes\AppID\{1CAE874F-F5C7-4BCC-BA46-9AD26DF35B93}
Deleted HKLM\Software\Classes\AppID\{7375D127-3955-4654-8E7D-1949A7A9C902}
Deleted HKLM\Software\Classes\AppID\{EFC0651C-B6D7-49CD-A6E0-B1CE9AB5FE46}
Deleted HKLM\Software\Classes\Interface\{12D3E096-0FDF-42CC-8F44-04944F9C1648}
Deleted HKLM\Software\Classes\Interface\{22389F39-2CF4-47C4-B8B2-273BB16BF70C}
Deleted HKLM\Software\Classes\Interface\{23E3CEB3-D63A-433E-A5D0-4DB1C501B915}
Deleted HKLM\Software\Classes\Interface\{26A3152F-CF87-4C5B-8093-4D4B9EC084EB}
Deleted HKLM\Software\Classes\Interface\{29E3319C-4B3C-479F-8692-BDD2CA30BEDD}
Deleted HKLM\Software\Classes\Interface\{367BD1CD-74A3-451F-B1A4-6A2DE4129A2D}
Deleted HKLM\Software\Classes\Interface\{371AD4A5-1520-4AA2-A8A4-F9AD3BAC6957}
Deleted HKLM\Software\Classes\Interface\{47A1DF02-BCE4-40C3-AE47-E3EA09A65E4A}
Deleted HKLM\Software\Classes\Interface\{49F018EE-F362-4B5B-8EC8-BCF9246ABF21}
Deleted HKLM\Software\Classes\Interface\{63B73044-FC1A-4FE1-991B-FDBD4CDAA868}
Deleted HKLM\Software\Classes\Interface\{7207E52B-821E-4C05-A8D6-2965B2BE77CF}
Deleted HKLM\Software\Classes\Interface\{7F124846-5453-4BB8-A41D-E11481FFC9DF}
Deleted HKLM\Software\Classes\Interface\{863FCF5D-DC39-4DA9-AF32-CB0025990EEE}
Deleted HKLM\Software\Classes\Interface\{8FD65019-BF09-45DA-AD81-E95AE911F1FD}
Deleted HKLM\Software\Classes\Interface\{B09E015A-4D4E-4F8D-A436-95E19140947D}
Deleted HKLM\Software\Classes\Interface\{B1E712C4-03AA-495F-B0F5-0F057E126E2A}
Deleted HKLM\Software\Classes\Interface\{D13DC65C-C77B-4986-9078-DEA3D34C71BB}
Deleted HKLM\Software\Classes\Interface\{F56ACA29-1C99-40F1-AC64-2E44C4F6BC71}
Deleted HKLM\Software\Classes\Interface\{FA7B2795-C0C8-4A58-8672-3F8D80CC0270}
Deleted HKLM\Software\Classes\Sample.BrowserHandler
Deleted HKLM\Software\Classes\Sample.YTBPartnerSample
Deleted HKLM\Software\Classes\TypeLib\{003028C2-EA1C-4676-A316-B5CB50917002}
Deleted HKLM\Software\Classes\TypeLib\{1112F282-7099-4624-A439-DB29D6551552}
Deleted HKLM\Software\Classes\TypeLib\{61A2027D-B837-4080-A925-6E30E10DEF32}
Deleted HKLM\Software\Classes\TypeLib\{F6C2BABA-9E4C-425F-9AEC-24AB8F2B640D}
Deleted HKLM\Software\Classes\yt.CacheLoader
Deleted HKLM\Software\Classes\yt.Clickstream
Deleted HKLM\Software\Classes\yt.YTHelper
Deleted HKLM\Software\Classes\yt.YToolbarBand
Deleted HKLM\Software\Wow6432Node\Yahoo\Companion
Deleted HKLM\Software\Wow6432Node\\Classes\AppID\yt.DLL
Deleted HKLM\Software\Wow6432Node\\Classes\AppID\ytbbroker.EXE
Deleted HKLM\Software\Wow6432Node\\Classes\AppID\{1CAE874F-F5C7-4BCC-BA46-9AD26DF35B93}
Deleted HKLM\Software\Wow6432Node\\Classes\AppID\{7375D127-3955-4654-8E7D-1949A7A9C902}
Deleted HKLM\Software\Wow6432Node\\Classes\AppID\{EFC0651C-B6D7-49CD-A6E0-B1CE9AB5FE46}
Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{058F0E48-61CA-4964-9FBA-1978A1BB060D}
Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{18F33C35-8EF2-40D7-8BA4-932B0121B472}
Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{1E57256D-9F39-4267-AB39-D7813D644C5A}
Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{31371420-098D-4C0E-A11E-EBEC2305DD01}
Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{3A06AA27-D94B-48C2-BB55-9FD0FF2120E3}
Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{3C16E079-E4C7-493C-BE9F-E0F2BB0B7430}
Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{46140CE4-76FE-440E-AE88-4C2272BC05C7}
Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{47A1DF02-BCE4-40C3-AE47-E3EA09A65E4A}
Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{6EB4349D-4333-442F-ACA4-4C72AF28B6ED}
Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{7DB8B625-DBF0-4491-B544-5A06F7B17BB4}
Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{81017EA9-9AA8-4A6A-9734-7AF40E7D593F}
Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{8E74A0AE-F0ED-47ED-A940-A8E99687646B}
Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{9DE77B51-89F6-468E-9402-16050382E950}
Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{9F9C4C5C-2BA8-4E00-A697-9F710BB1026B}
Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{B9D64D3B-BE75-4FA2-B94A-C4AE772A0146}
Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{C60CCE95-6AF9-4E74-B66B-3212D19F1D2F}
Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{FBE30D66-39A2-4b72-8B43-6D4C335A6F34}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{12D3E096-0FDF-42CC-8F44-04944F9C1648}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{22389F39-2CF4-47C4-B8B2-273BB16BF70C}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{23E3CEB3-D63A-433E-A5D0-4DB1C501B915}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{26A3152F-CF87-4C5B-8093-4D4B9EC084EB}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{29E3319C-4B3C-479F-8692-BDD2CA30BEDD}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{367BD1CD-74A3-451F-B1A4-6A2DE4129A2D}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{371AD4A5-1520-4AA2-A8A4-F9AD3BAC6957}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{47A1DF02-BCE4-40C3-AE47-E3EA09A65E4A}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{49F018EE-F362-4B5B-8EC8-BCF9246ABF21}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{63B73044-FC1A-4FE1-991B-FDBD4CDAA868}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{7207E52B-821E-4C05-A8D6-2965B2BE77CF}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{7F124846-5453-4BB8-A41D-E11481FFC9DF}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{863FCF5D-DC39-4DA9-AF32-CB0025990EEE}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{8FD65019-BF09-45DA-AD81-E95AE911F1FD}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{B09E015A-4D4E-4F8D-A436-95E19140947D}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{B1E712C4-03AA-495F-B0F5-0F057E126E2A}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{D13DC65C-C77B-4986-9078-DEA3D34C71BB}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{F56ACA29-1C99-40F1-AC64-2E44C4F6BC71}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{FA7B2795-C0C8-4A58-8672-3F8D80CC0270}
Deleted HKLM\Software\Wow6432Node\\Classes\TypeLib\{003028C2-EA1C-4676-A316-B5CB50917002}
Deleted HKLM\Software\Wow6432Node\\Classes\TypeLib\{1112F282-7099-4624-A439-DB29D6551552}
Deleted HKLM\Software\Wow6432Node\\Classes\TypeLib\{61A2027D-B837-4080-A925-6E30E10DEF32}
Deleted HKLM\Software\Wow6432Node\\Classes\TypeLib\{F6C2BABA-9E4C-425F-9AEC-24AB8F2B640D}
Deleted HKLM\Software\Wow6432Node\\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EFC0651C-B6D7-49CD-A6E0-B1CE9AB5FE46}
Deleted HKLM\Software\Wow6432Node\\Microsoft\Internet Explorer\Toolbar|{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Deleted HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Deleted HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Ext\Preapproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Deleted HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Ext\Preapproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Deleted HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\Yahoo! Companion
Deleted HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\Yahoo! Toolbar

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

Deleted search.conduit.com/?ctid=CT3320218&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=4&UP=SP4BE31594-921F-44C0-B6F7-575C88D56DEB&SSPV=

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [12159 octets] - [16/04/2019 17:55:15]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

jholland1964 Administrator Posts: 2,722 Former World Start Member: Yes	pup optional conduit Apr 16, 2019 18:03:57 GMT -5 Quote Select Post Deselect Post Link to Post Member Give Gift Back to Top Post by jholland1964 on Apr 16, 2019 18:03:57 GMT -5 Whoops! Sorry. Now run a New Malwarbytes' scan and if something is found have it clean. Post back here with the new log.
	Last Edit: Apr 16, 2019 18:06:33 GMT -5 by jholland1964 Inspiron 15 5510 Windows 11 64bit Vivaldi; EDGE; Mailbird; Windows Defender, Windows Firewall, MBAM FREE, SpywareBlaster Inspiron 7591; Windows 10 64bit; Same programs as above.

joet2919 Full Member Posts: 102	pup optional conduit Apr 16, 2019 18:29:57 GMT -5 Quote Select Post Deselect Post Link to Post Member Give Gift Back to Top Post by joet2919 on Apr 16, 2019 18:29:57 GMT -5 still there i quarantined it again .what the heck am i missing?

jholland1964 Administrator Posts: 2,722 Former World Start Member: Yes	pup optional conduit Apr 16, 2019 18:47:33 GMT -5 Quote Select Post Deselect Post Link to Post Member Give Gift Back to Top Post by jholland1964 on Apr 16, 2019 18:47:33 GMT -5 Apr 16, 2019 18:29:57 GMT -5 joet2919 said: still there i quarantined it again .what the heck am i missing? Well I am missing WHERE you are seeing this because nothing shows in your logs.
	Inspiron 15 5510 Windows 11 64bit Vivaldi; EDGE; Mailbird; Windows Defender, Windows Firewall, MBAM FREE, SpywareBlaster Inspiron 7591; Windows 10 64bit; Same programs as above.

joet2919 Full Member Posts: 102	pup optional conduit Apr 16, 2019 19:08:44 GMT -5 Quote Select Post Deselect Post Link to Post Member Give Gift Back to Top Post by joet2919 on Apr 16, 2019 19:08:44 GMT -5 when i ran new malware byte scan it showed File: 1 PUP.Optional.Conduit, C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, No Action By User, [210], [454832],1.0.10200

joet2919
Full Member

Posts: 102

pup optional conduit Apr 16, 2019 19:09:40 GMT -5

Quote

Post by joet2919 on Apr 16, 2019 19:09:40 GMT -5

-Log Details-
Scan Date: 4/16/19
Scan Time: 6:52 PM
Log File: a937a356-60a2-11e9-bab3-b083fe52d751.json

-Software Information-
Version: 3.7.1.2839
Components Version: 1.0.563
Update Package Version: 1.0.10200
License: Trial

-System Information-
OS: Windows 10 (Build 17134.706)
CPU: x64
File System: NTFS
User: McDowell-PC\McDowell

-Scan Summary-
Scan Type: Threat Scan
Scan Initiated By: Manual
Result: Completed
Objects Scanned: 325581
Threats Detected: 1
Threats Quarantined: 0
Time Elapsed: 8 min, 44 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 0
(No malicious items detected)

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 0
(No malicious items detected)

File: 1
PUP.Optional.Conduit, C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, No Action By User, [210], [454832],1.0.10200

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)

(end)

jholland1964
Administrator

Posts: 2,722

Former World Start Member: Yes

pup optional conduit Apr 16, 2019 19:11:32 GMT -5

Quote

Post by jholland1964 on Apr 16, 2019 19:11:32 GMT -5

And again it says, "No Action By User"

You said earlier that you looked for it someplace and manually deleted it.

Is this the place you looked?

C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences

Last Edit: Apr 16, 2019 19:12:53 GMT -5 by jholland1964

Inspiron 15 5510 Windows 11 64bit
Vivaldi; EDGE; Mailbird; Windows Defender, Windows Firewall, MBAM FREE, SpywareBlaster

Inspiron 7591; Windows 10 64bit; Same programs as above.

joet2919 Full Member Posts: 102	pup optional conduit Apr 16, 2019 19:19:25 GMT -5 Quote Select Post Deselect Post Link to Post Member Give Gift Back to Top Post by joet2919 on Apr 16, 2019 19:19:25 GMT -5 not sure what your talking about this is the last scan of malware bytes i ran after adware .it shows up in scan log all i know. in fact i ran it twice

jholland1964
Administrator

Posts: 2,722

Former World Start Member: Yes

pup optional conduit Apr 16, 2019 19:25:27 GMT -5

Quote

Post by jholland1964 on Apr 16, 2019 19:25:27 GMT -5

Apr 16, 2019 19:19:25 GMT -5 joet2919 said:

not sure what your talking about this is the last scan of malware bytes i ran after adware .it shows up in scan log all i know. in fact i ran it twice

And both of those logs show you did NOT elect to clean. As is noted in the log:

No Action By User

which means you did not complete the run of the program by putting a check mark in the box which tells it to clean that entry and then rebooting.

You also said this in your very first post:

.i went to setting other search engines found it there deleted .

That is what I was talking about, what were you talking about?

Last Edit: Apr 16, 2019 19:30:07 GMT -5 by jholland1964

Inspiron 15 5510 Windows 11 64bit
Vivaldi; EDGE; Mailbird; Windows Defender, Windows Firewall, MBAM FREE, SpywareBlaster

Inspiron 7591; Windows 10 64bit; Same programs as above.

joet2919
Full Member

Posts: 102

pup optional conduit Apr 16, 2019 19:31:39 GMT -5

Quote

Post by joet2919 on Apr 16, 2019 19:31:39 GMT -5

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 4/16/19
Scan Time: 7:21 PM
Log File: be0de16a-60a6-11e9-b183-b083fe52d751.json

-Software Information-
Version: 3.7.1.2839
Components Version: 1.0.563
Update Package Version: 1.0.10200
License: Trial

-System Information-
OS: Windows 10 (Build 17134.706)
CPU: x64
File System: NTFS
User: McDowell-PC\McDowell

-Scan Summary-
Scan Type: Threat Scan
Scan Initiated By: Manual
Result: Completed
Objects Scanned: 325563
Threats Detected: 1
Threats Quarantined: 0
Time Elapsed: 9 min, 30 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 0
(No malicious items detected)

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 0
(No malicious items detected)

File: 1
PUP.Optional.Conduit, C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, No Action By User, [210], [454832],1.0.10200

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)

(end)

jholland1964 Administrator Posts: 2,722 Former World Start Member: Yes	pup optional conduit Apr 16, 2019 19:32:35 GMT -5 Quote Select Post Deselect Post Link to Post Member Give Gift Back to Top Post by jholland1964 on Apr 16, 2019 19:32:35 GMT -5 No Action By User,
	Inspiron 15 5510 Windows 11 64bit Vivaldi; EDGE; Mailbird; Windows Defender, Windows Firewall, MBAM FREE, SpywareBlaster Inspiron 7591; Windows 10 64bit; Same programs as above.

jholland1964 Administrator Posts: 2,722 Former World Start Member: Yes	pup optional conduit Apr 16, 2019 19:37:45 GMT -5 Quote Select Post Deselect Post Link to Post Member Give Gift Back to Top Post by jholland1964 on Apr 16, 2019 19:37:45 GMT -5 Please post the log for the very FIRST run of Malwarebytes' that originally found the 8 pieces of malware.
	Inspiron 15 5510 Windows 11 64bit Vivaldi; EDGE; Mailbird; Windows Defender, Windows Firewall, MBAM FREE, SpywareBlaster Inspiron 7591; Windows 10 64bit; Same programs as above.

joet2919
Full Member

Posts: 102

pup optional conduit Apr 16, 2019 19:44:31 GMT -5

Quote

Post by joet2919 on Apr 16, 2019 19:44:31 GMT -5

installed new version lost it in process i have did all the steps adware cleaner showed it cleaned yet ,adware bytes shows still there . no conduit in search engine i read up on it in malwarebytes forum i ran avast it turned up clean

jholland1964
Administrator

Posts: 2,722

Former World Start Member: Yes

pup optional conduit Apr 16, 2019 19:50:44 GMT -5

Quote

Post by jholland1964 on Apr 16, 2019 19:50:44 GMT -5

Why, and HOW, would you look in the search engine? That is not where it shows that it is located. It is Not located in a search engine. It is located in this folder,

C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences

It could also be a false positive. But if it is not then this is the ONLY place it would be located and that folder is a hidden folder.

Last Edit: Apr 16, 2019 19:53:31 GMT -5 by jholland1964

Inspiron 15 5510 Windows 11 64bit
Vivaldi; EDGE; Mailbird; Windows Defender, Windows Firewall, MBAM FREE, SpywareBlaster

Inspiron 7591; Windows 10 64bit; Same programs as above.

joet2919
Full Member

Posts: 102

pup optional conduit Apr 16, 2019 20:00:37 GMT -5

Quote

Post by joet2919 on Apr 16, 2019 20:00:37 GMT -5

Apr 16, 2019 19:50:44 GMT -5 jholland1964 said:

Why, and HOW, would you look in the search engine? That is not where it shows that it is located. It is Not located in a search engine. It is located in this folder,

C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences

It could also be a false positive. But if it is not then this is the ONLY place it would be located and that folder is a hidden folder.

because at first it was shown as search engine i deleted it out .is there any way to find the folder/fil and or remove it and in M.B forum they did mention f/p

jholland1964
Administrator

Posts: 2,722

Former World Start Member: Yes

pup optional conduit Apr 16, 2019 20:20:49 GMT -5

Quote

Post by jholland1964 on Apr 16, 2019 20:20:49 GMT -5

Apr 16, 2019 20:00:37 GMT -5 joet2919 said:

because at first it was shown as search engine i deleted it out .is there any way to find the folder/fil and or remove it and in M.B forum they did mention f/p

First of all, never believe what a piece of malware calls itself.

2nd, have you looked in Programs and Features to be sure that there is no listing for Conduit? If there is then Uninstall it.

Next do this:

Please download HitmanPro to your desktop

Double click on HitmanPro to start the program, if you are experiencing problems while trying to start HitmanPro, you can use the Force Breach mode.
To start HitmanPro in Force Breach mode, hold down the left CTRL-key when you double click on HitmanPro and all non-essential processes will be terminated, including the malware processes.
HitmanPro will start and you’ll need to follow the prompts (by clicking on the Next button) to start a system scan with this program.
The program will start to scan the computer. The scan will typically take no more than 2-3 minutes.
Click on the next button and choose the option activate free license
Click on the next button and the infections where will be deleted.

Click now on the Save Log option and save this log to your desktop.
Click on the next button and restart the computer.

Post back with the Hitman Pro log.

Inspiron 15 5510 Windows 11 64bit
Vivaldi; EDGE; Mailbird; Windows Defender, Windows Firewall, MBAM FREE, SpywareBlaster

Inspiron 7591; Windows 10 64bit; Same programs as above.

joet2919
Full Member

Posts: 102

pup optional conduit Apr 17, 2019 16:00:33 GMT -5

Quote

Post by joet2919 on Apr 17, 2019 16:00:33 GMT -5

Computer name . . . . : MCDOWELL-PC
Windows . . . . . . . : 10.0.0.17134.X64/4
User name . . . . . . : McDowell-PC\McDowell
UAC . . . . . . . . . : Enabled
License . . . . . . . : Free

Scan date . . . . . . : 2019-04-17 15:47:50
Scan mode . . . . . . : Normal
Scan duration . . . . : 6m 47s
Disk access mode . . : Direct disk access (SRB)
Cloud . . . . . . . . : Internet
Reboot . . . . . . . : No

Threats . . . . . . . : 0
Traces . . . . . . . : 19

Objects scanned . . . : 2,603,813
Files scanned . . . . : 182,495
Remnants scanned . . : 927,356 files / 1,493,962 keys

Potential Unwanted Programs _________________________________________________

HKLM\SOFTWARE\Classes\Sample.BrowserHandler.1\ (YahooToolbar)
HKLM\SOFTWARE\Classes\Sample.YTBPartnerSample.1\ (YahooToolbar)
HKLM\SOFTWARE\Classes\YBrowserToolbar.YBrowserToolbar.1\ (YahooToolbar)
HKLM\SOFTWARE\Classes\YBrowserToolbar.YBrowserToolbar\ (YahooToolbar)
HKLM\SOFTWARE\Classes\yt.CacheLoader.1\ (YahooToolbar)
HKLM\SOFTWARE\Classes\yt.Clickstream.1\ (YahooToolbar)
HKLM\SOFTWARE\Classes\yt.YTHelper.2\ (YahooToolbar)
HKLM\SOFTWARE\Classes\ytbbroker.YTBCustomizerAssistant.1\ (YahooToolbar)
HKLM\SOFTWARE\Classes\ytbbroker.YTBCustomizerAssistant\ (YahooToolbar)
HKLM\SOFTWARE\Classes\ytbbroker.YTBMessengerAssistant.1\ (YahooToolbar)
HKLM\SOFTWARE\Classes\ytbbroker.YTBMessengerAssistant\ (YahooToolbar)
HKLM\SOFTWARE\Classes\YTNavAssist.NameSpaceCF.1\ (YahooToolbar)
HKLM\SOFTWARE\Classes\YTNavAssist.NameSpaceCF\ (YahooToolbar)
HKLM\SOFTWARE\Classes\YTNavAssist.NameSpacePP.1\ (YahooToolbar)
HKLM\SOFTWARE\Classes\YTNavAssist.NameSpacePP\ (YahooToolbar)

Cookies _____________________________________________________________________

C:\Users\McDowell\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.playground.xyz
C:\Users\McDowell\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\BAWLNU3O\connexity[1].xml
C:\Users\McDowell\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\V1N8TDJ3\cdn.flashtalking[1].xml
C:\Users\McDowell\AppData\Roaming\Mozilla\Firefox\Profiles\kuuan3y3.default\cookies.sqlite:livejasmin.com

[/code]
rebooting

joet2919 Full Member Posts: 102	pup optional conduit Apr 17, 2019 16:04:21 GMT -5 Quote Select Post Deselect Post Link to Post Member Give Gift Back to Top Post by joet2919 on Apr 17, 2019 16:04:21 GMT -5 back from reboot

joet2919
Full Member

Posts: 102

pup optional conduit Apr 17, 2019 16:17:05 GMT -5

Quote

Post by joet2919 on Apr 17, 2019 16:17:05 GMT -5

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 4/17/19
Scan Time: 4:06 PM
Log File: 9bd08356-6154-11e9-85a7-b083fe52d751.json

-Software Information-
Version: 3.7.1.2839
Components Version: 1.0.563
Update Package Version: 1.0.10216
License: Trial

-System Information-
OS: Windows 10 (Build 17134.706)
CPU: x64
File System: NTFS
User: McDowell-PC\McDowell

-Scan Summary-
Scan Type: Threat Scan
Scan Initiated By: Manual
Result: Completed
Objects Scanned: 325590
Threats Detected: 1
Threats Quarantined: 1
Time Elapsed: 9 min, 44 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 0
(No malicious items detected)

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 0
(No malicious items detected)

File: 1
PUP.Optional.Conduit, C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Replaced, [210], [454832],1.0.10216

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)

(end)

jholland1964
Administrator

Posts: 2,722

Former World Start Member: Yes

pup optional conduit Apr 17, 2019 16:32:14 GMT -5

Quote

Post by jholland1964 on Apr 17, 2019 16:32:14 GMT -5

If you notice, Hitman Pro did NOT find that I am going to guess this is a false positive. AND this latest Malwarebytes' log notes that the file was "Replaced"

If you are still concerned you can manually look for that file by doing this;

Open File Explorer from the taskbar.

Select View > Options > Change folder and search options.

Select the View tab and, in Advanced settings, select Show hidden files, folders, and drives and OK.

Then navigate to C:\USERS\MCDOWELL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences and see if it is there, if it is then delete it.

Inspiron 15 5510 Windows 11 64bit
Vivaldi; EDGE; Mailbird; Windows Defender, Windows Firewall, MBAM FREE, SpywareBlaster

Inspiron 7591; Windows 10 64bit; Same programs as above.

joet2919
Full Member

Posts: 102

pup optional conduit Apr 17, 2019 17:52:02 GMT -5

Quote

Post by joet2919 on Apr 17, 2019 17:52:02 GMT -5

this latest Malwarebytes' log notes that the file was "Replaced" i noticed that also may i ask what that means... what is crazy is i have a spades game i can play on facebook. since yesterday i can no longer open it it loads up then closes loads again but each load is not fully loaded .. i know lots dont like face book and the games there online games with spades you play with others online ..it is safe ..i am wondering if this conduit is causing this.. either way i appreciate your help

jholland1964
Administrator

Posts: 2,722

Former World Start Member: Yes

pup optional conduit Apr 17, 2019 18:06:25 GMT -5

Quote

Post by jholland1964 on Apr 17, 2019 18:06:25 GMT -5

Apr 17, 2019 17:52:02 GMT -5 joet2919 said:

this latest Malwarebytes' log notes that the file was "Replaced" i noticed that also may i ask what that means... what is crazy is i have a spades game i can play on facebook. since yesterday i can no longer open it it loads up then closes loads again but each load is not fully loaded .. i know lots dont like face book and the games there online games with spades you play with others online ..it is safe ..i am wondering if this conduit is causing this.. either way i appreciate your help

The listing means that the malware file was replaced with a good file, conduit is gone therefore it cannot cause this problem. More likely one of the malware files was in some way also connected to the game.

What is the exact name of the game? I play a couple FB games all the time and only time I have ever had trouble was when FB itself was having major problems, which happened for six days recently.

Please give me the exact name of the game, just calling it "spades" doesn't tell me much. Does this problem happen with ALL of your browsers? Do you play ON Facebook or in the Gameroom? Is this a Zynga game? Does it require the Flash PLayer?

Last Edit: Apr 17, 2019 18:12:54 GMT -5 by jholland1964

Inspiron 15 5510 Windows 11 64bit
Vivaldi; EDGE; Mailbird; Windows Defender, Windows Firewall, MBAM FREE, SpywareBlaster

Inspiron 7591; Windows 10 64bit; Same programs as above.

joet2919
Full Member

Posts: 102

pup optional conduit Apr 17, 2019 18:23:21 GMT -5

Quote

Post by joet2919 on Apr 17, 2019 18:23:21 GMT -5

spades game no i do not use game room i do have a farmtown i dabble with it has to use flash i use chrome i just enable it long enough play . this is first time i ever had trouble with my spades game.. only one that acts up..

jholland1964
Administrator

Posts: 2,722

Former World Start Member: Yes

pup optional conduit Apr 17, 2019 18:33:59 GMT -5

Quote

Post by jholland1964 on Apr 17, 2019 18:33:59 GMT -5

Apr 17, 2019 18:23:21 GMT -5 joet2919 said:

spades game no i do not use game room i do have a farmtown i dabble with it has to use flash i use chrome i just enable it long enough play . this is first time i ever had trouble with my spades game.. only one that acts up..

Does this happen with ALL browsers? Try them all and see. Other than that I have no suggestions

Inspiron 15 5510 Windows 11 64bit
Vivaldi; EDGE; Mailbird; Windows Defender, Windows Firewall, MBAM FREE, SpywareBlaster

Inspiron 7591; Windows 10 64bit; Same programs as above.

joet2919 Full Member Posts: 102	pup optional conduit Apr 17, 2019 18:57:19 GMT -5 Quote Select Post Deselect Post Link to Post Member Give Gift Back to Top Post by joet2919 on Apr 17, 2019 18:57:19 GMT -5 upon farther investigation i just found in a post someone else was having same trouble even posted a you tube video thanks for the help

Admin

Post by joet2919 on Apr 16, 2019 17:09:25 GMT -5

Post by jholland1964 on Apr 16, 2019 17:18:57 GMT -5

Post by joet2919 on Apr 16, 2019 17:20:13 GMT -5

Post by joet2919 on Apr 16, 2019 17:21:53 GMT -5

Post by jholland1964 on Apr 16, 2019 17:24:41 GMT -5

Post by joet2919 on Apr 16, 2019 18:00:38 GMT -5

Post by jholland1964 on Apr 16, 2019 18:03:57 GMT -5

Post by joet2919 on Apr 16, 2019 18:29:57 GMT -5

Post by jholland1964 on Apr 16, 2019 18:47:33 GMT -5

Post by joet2919 on Apr 16, 2019 19:08:44 GMT -5

Post by joet2919 on Apr 16, 2019 19:09:40 GMT -5

Post by jholland1964 on Apr 16, 2019 19:11:32 GMT -5

Post by joet2919 on Apr 16, 2019 19:19:25 GMT -5

Post by jholland1964 on Apr 16, 2019 19:25:27 GMT -5

Post by joet2919 on Apr 16, 2019 19:31:39 GMT -5

Post by jholland1964 on Apr 16, 2019 19:32:35 GMT -5

Post by jholland1964 on Apr 16, 2019 19:37:45 GMT -5

Post by joet2919 on Apr 16, 2019 19:44:31 GMT -5

Post by jholland1964 on Apr 16, 2019 19:50:44 GMT -5

Post by joet2919 on Apr 16, 2019 20:00:37 GMT -5

Post by jholland1964 on Apr 16, 2019 20:20:49 GMT -5

Post by joet2919 on Apr 17, 2019 16:00:33 GMT -5

Post by joet2919 on Apr 17, 2019 16:04:21 GMT -5

Post by joet2919 on Apr 17, 2019 16:17:05 GMT -5

Post by jholland1964 on Apr 17, 2019 16:32:14 GMT -5

Post by joet2919 on Apr 17, 2019 17:52:02 GMT -5

Post by jholland1964 on Apr 17, 2019 18:06:25 GMT -5

Post by joet2919 on Apr 17, 2019 18:23:21 GMT -5

Post by jholland1964 on Apr 17, 2019 18:33:59 GMT -5

Post by joet2919 on Apr 17, 2019 18:57:19 GMT -5