<?xml version="1.0" encoding="UTF-16" ?>
<mbam-log>
<header>
<date>2015/10/07 08:36:10 +0200</date>
<logfile>mbam-log-2015-10-07 (08-35-18).xml</logfile>
<isadmin>yes</isadmin>
</header>
<engine>
<version>2.1.8.1057</version>
<malware-database>v2015.10.07.01</malware-database>
<rootkit-database>v2015.10.06.01</rootkit-database>
<license>trial</license>
<file-protection>enabled</file-protection>
<web-protection>enabled</web-protection>
<self-protection>disabled</self-protection>
</engine>
<system>
<osversion>Windows 7 Service Pack 1</osversion>
<arch>x64</arch>
<username>Fam van Dalen</username>
<filesys>NTFS</filesys>
</system>
<summary>
<type>threat</type>
<result>completed</result>
<objects>406276</objects>
<time>2650</time>
<processes>0</processes>
<modules>0</modules>
<keys>75</keys>
<values>4</values>
<datas>0</datas>
<folders>9</folders>
<files>42</files>
<sectors>0</sectors>
</summary>
<options>
<memory>enabled</memory>
<startup>enabled</startup>
<filesystem>enabled</filesystem>
<archives>enabled</archives>
<rootkits>disabled</rootkits>
<deeprootkit>disabled</deeprootkit>
<heuristics>enabled</heuristics>
<pup>enabled</pup>
<pum>enabled</pum>
</options>
<items>
<key><path>HKLM\SOFTWARE\CLASSES\APPID\{14B1B6D0-D25F-4418-94E3-EC2B5AEE9756}</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>f02d70e44f3c7cbaad5f6d8337cb38c8</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\TYPELIB\{14B1B6D0-D25F-4418-94E3-EC2B5AEE9756}</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>f02d70e44f3c7cbaad5f6d8337cb38c8</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{14B1B6D0-D25F-4418-94E3-EC2B5AEE9756}</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>f02d70e44f3c7cbaad5f6d8337cb38c8</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{14B1B6D0-D25F-4418-94E3-EC2B5AEE9756}</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>f02d70e44f3c7cbaad5f6d8337cb38c8</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{14B1B6D0-D25F-4418-94E3-EC2B5AEE9756}</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>f02d70e44f3c7cbaad5f6d8337cb38c8</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\{14B1B6D0-D25F-4418-94E3-EC2B5AEE9756}</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>f02d70e44f3c7cbaad5f6d8337cb38c8</hash></key>
<key><path>HKU\S-1-5-21-3773947598-2971562229-1871698840-1001_Classes\APPID\{D2083641-E57F-4eab-BB85-0582424F4A29}</path><vendor>Adware.HotBar.CP</vendor><action>success</action><hash>a9740f456d1e64d20508834d9e64e020</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{2C141B4C-B5BA-4E89-BE73-F71ED4A208CF}</path><vendor>PUP.Optional.MixiDJToolbar</vendor><action>success</action><hash>69b4c3919cef60d61c0585749171ca36</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{2C141B4C-B5BA-4E89-BE73-F71ED4A208CF}</path><vendor>PUP.Optional.MixiDJToolbar</vendor><action>success</action><hash>69b4c3919cef60d61c0585749171ca36</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{7D0EE142-0642-4FDD-AF73-7399C04E1041}</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>ac71bd975d2e3cfa62a605ebf80a8e72</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\esrv.mixidjESrvc.1</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>ac71bd975d2e3cfa62a605ebf80a8e72</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\esrv.mixidjESrvc</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>ac71bd975d2e3cfa62a605ebf80a8e72</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\esrv.mixidjESrvc</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>ac71bd975d2e3cfa62a605ebf80a8e72</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\WOW6432NODE\esrv.mixidjESrvc</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>ac71bd975d2e3cfa62a605ebf80a8e72</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\esrv.mixidjESrvc.1</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>ac71bd975d2e3cfa62a605ebf80a8e72</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\WOW6432NODE\esrv.mixidjESrvc.1</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>ac71bd975d2e3cfa62a605ebf80a8e72</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{7D0EE142-0642-4FDD-AF73-7399C04E1041}</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>ac71bd975d2e3cfa62a605ebf80a8e72</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{C3F978C3-0594-4397-B8E6-3F9D9BE6A7B9}</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>fb223c18602b50e63ccdc62a11f17c84</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{C3F978C3-0594-4397-B8E6-3F9D9BE6A7B9}</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>fb223c18602b50e63ccdc62a11f17c84</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{F9221CC8-22DF-4CEF-B8ED-BA87F1F09878}</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>ca53a1b3f497f2445dae7c74d42e44bc</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\m</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>ca53a1b3f497f2445dae7c74d42e44bc</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\m</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>ca53a1b3f497f2445dae7c74d42e44bc</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\WOW6432NODE\m</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>ca53a1b3f497f2445dae7c74d42e44bc</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{F9221CC8-22DF-4CEF-B8ED-BA87F1F09878}</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>ca53a1b3f497f2445dae7c74d42e44bc</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\TYPELIB\{8BA772A8-AC4F-4954-9B5E-433CA6DC506F}</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>b76675df74178caa1df0737d877b56aa</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\INTERFACE\{108F5878-71F9-4B5C-9EC0-58CEC29E8124}</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>b76675df74178caa1df0737d877b56aa</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\INTERFACE\{27588682-6FCC-4061-B2BB-7176E03359B8}</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>b76675df74178caa1df0737d877b56aa</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\INTERFACE\{2EEFF6A3-9828-48F2-A7BF-1A5365D7DA32}</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>b76675df74178caa1df0737d877b56aa</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\INTERFACE\{38F830AF-C844-48BD-86CF-75AB9A5C3FC2}</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>b76675df74178caa1df0737d877b56aa</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\INTERFACE\{4CA33941-B476-46A4-94EB-3DBA21B2D76D}</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>b76675df74178caa1df0737d877b56aa</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\INTERFACE\{57C854B7-3DE0-406B-83F1-D218481BD1FA}</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>b76675df74178caa1df0737d877b56aa</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\INTERFACE\{6390CA4B-8D70-47EA-90F5-21E2FEADD997}</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>b76675df74178caa1df0737d877b56aa</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\INTERFACE\{794DC34A-1D5E-4205-80BE-FC9D8E19E7F8}</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>b76675df74178caa1df0737d877b56aa</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\INTERFACE\{7E23FCAB-83EE-4012-B6A0-1EC68554956F}</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>b76675df74178caa1df0737d877b56aa</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\INTERFACE\{888C8994-107B-4CFB-9E42-7AA96230C1E0}</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>b76675df74178caa1df0737d877b56aa</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\INTERFACE\{9FD6DE57-31C7-4EB4-87AF-495DEEA4ECBD}</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>b76675df74178caa1df0737d877b56aa</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\INTERFACE\{DBEFF714-9A11-45DC-80FC-B86EAE86641A}</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>b76675df74178caa1df0737d877b56aa</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\INTERFACE\{DEFC8918-B440-4CEB-8BFD-140AE24DCABB}</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>b76675df74178caa1df0737d877b56aa</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{108F5878-71F9-4B5C-9EC0-58CEC29E8124}</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>b76675df74178caa1df0737d877b56aa</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{27588682-6FCC-4061-B2BB-7176E03359B8}</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>b76675df74178caa1df0737d877b56aa</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{2EEFF6A3-9828-48F2-A7BF-1A5365D7DA32}</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>b76675df74178caa1df0737d877b56aa</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{38F830AF-C844-48BD-86CF-75AB9A5C3FC2}</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>b76675df74178caa1df0737d877b56aa</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{4CA33941-B476-46A4-94EB-3DBA21B2D76D}</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>b76675df74178caa1df0737d877b56aa</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{57C854B7-3DE0-406B-83F1-D218481BD1FA}</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>b76675df74178caa1df0737d877b56aa</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{6390CA4B-8D70-47EA-90F5-21E2FEADD997}</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>b76675df74178caa1df0737d877b56aa</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{794DC34A-1D5E-4205-80BE-FC9D8E19E7F8}</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>b76675df74178caa1df0737d877b56aa</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{7E23FCAB-83EE-4012-B6A0-1EC68554956F}</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>b76675df74178caa1df0737d877b56aa</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{888C8994-107B-4CFB-9E42-7AA96230C1E0}</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>b76675df74178caa1df0737d877b56aa</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{9FD6DE57-31C7-4EB4-87AF-495DEEA4ECBD}</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>b76675df74178caa1df0737d877b56aa</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{DBEFF714-9A11-45DC-80FC-B86EAE86641A}</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>b76675df74178caa1df0737d877b56aa</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{DEFC8918-B440-4CEB-8BFD-140AE24DCABB}</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>b76675df74178caa1df0737d877b56aa</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{108F5878-71F9-4B5C-9EC0-58CEC29E8124}</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>b76675df74178caa1df0737d877b56aa</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{27588682-6FCC-4061-B2BB-7176E03359B8}</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>b76675df74178caa1df0737d877b56aa</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{2EEFF6A3-9828-48F2-A7BF-1A5365D7DA32}</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>b76675df74178caa1df0737d877b56aa</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{38F830AF-C844-48BD-86CF-75AB9A5C3FC2}</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>b76675df74178caa1df0737d877b56aa</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{4CA33941-B476-46A4-94EB-3DBA21B2D76D}</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>b76675df74178caa1df0737d877b56aa</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{57C854B7-3DE0-406B-83F1-D218481BD1FA}</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>b76675df74178caa1df0737d877b56aa</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{6390CA4B-8D70-47EA-90F5-21E2FEADD997}</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>b76675df74178caa1df0737d877b56aa</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{794DC34A-1D5E-4205-80BE-FC9D8E19E7F8}</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>b76675df74178caa1df0737d877b56aa</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{7E23FCAB-83EE-4012-B6A0-1EC68554956F}</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>b76675df74178caa1df0737d877b56aa</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{888C8994-107B-4CFB-9E42-7AA96230C1E0}</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>b76675df74178caa1df0737d877b56aa</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{9FD6DE57-31C7-4EB4-87AF-495DEEA4ECBD}</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>b76675df74178caa1df0737d877b56aa</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{DBEFF714-9A11-45DC-80FC-B86EAE86641A}</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>b76675df74178caa1df0737d877b56aa</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{DEFC8918-B440-4CEB-8BFD-140AE24DCABB}</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>b76675df74178caa1df0737d877b56aa</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{8BA772A8-AC4F-4954-9B5E-433CA6DC506F}</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>b76675df74178caa1df0737d877b56aa</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{8BA772A8-AC4F-4954-9B5E-433CA6DC506F}</path><vendor>PUP.Optional.Delta.ShrtCln</vendor><action>success</action><hash>b76675df74178caa1df0737d877b56aa</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A105B30B-D103-4781-B18C-E8DF93B6EBD0}</path><vendor>PUP.Optional.MixiDJ</vendor><action>success</action><hash>df3e342090fbb68049cc2bcecc367d83</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MyWebFace_5a</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>a677282c8a01ac8a7aed9f1d4db7e917</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2263BE11-ACB7-49D9-8313-6B1D5CC42FAA}</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>47d64a0af19a5ed8b58401bb6c9849b7</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6372C122-1E82-494A-9D5A-DE31ED303036}</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>d7465bf9dfacfd3994a548743bc904fc</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{768AF043-5C5B-408B-A3E0-671B60E3FCD3}</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>ac7186cee5a6ac8a40f94c70778d9868</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{97FC5555-8BDC-40EA-8DE2-B1E46B9EA629}</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>6eaff361602bc4723801ae0e63a128d8</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS\@MyWebFace_5a.com/Plugin</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>6db0c88cf09b88ae242e605cb153ad53</hash></key>
<key><path>HKU\S-1-5-21-3773947598-2971562229-1871698840-1001\SOFTWARE\APPDATALOW\SOFTWARE\MyWebFace_5a</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>0716b2a2612af3439f07fbbf30d436ca</hash></key>
<key><path>HKU\S-1-5-21-3773947598-2971562229-1871698840-1001_Classes\APPID\MenuButtonIE.DLL</path><vendor>Adware.ClickPotato</vendor><action>success</action><hash>869703517417999d6242efd6b2516898</hash></key>
<value><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2263be11-acb7-49d9-8313-6b1d5cc42faa}</path><valuename>AppPath</valuename><vendor>PUP.Optional.MindSpark</vendor><action>success</action><valuedata>C:\Program Files (x86)\MyWebFace_5a\bar\1.bin</valuedata><hash>47d64a0af19a5ed8b58401bb6c9849b7</hash></value>
<value><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6372c122-1e82-494a-9d5a-de31ed303036}</path><valuename>AppPath</valuename><vendor>PUP.Optional.MindSpark</vendor><action>success</action><valuedata>C:\Program Files (x86)\MyWebFace_5a\bar\1.bin</valuedata><hash>d7465bf9dfacfd3994a548743bc904fc</hash></value>
<value><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{768af043-5c5b-408b-a3e0-671b60e3fcd3}</path><valuename>AppPath</valuename><vendor>PUP.Optional.MindSpark</vendor><action>success</action><valuedata>C:\Program Files (x86)\MyWebFace_5a\bar\1.bin</valuedata><hash>ac7186cee5a6ac8a40f94c70778d9868</hash></value>
<value><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{97fc5555-8bdc-40ea-8de2-b1e46b9ea629}</path><valuename>AppPath</valuename><vendor>PUP.Optional.MindSpark</vendor><action>success</action><valuedata>C:\Program Files (x86)\MyWebFace_5a\bar\1.bin</valuedata><hash>6eaff361602bc4723801ae0e63a128d8</hash></value>
<folder><path>C:\Users\Fam van Dalen\AppData\LocalLow\MyWebFace_5a</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>21fc0d47157646f048f644eb36cd28d8</hash></folder>
<folder><path>C:\Users\Fam van Dalen\AppData\LocalLow\MyWebFace_5a\bar</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>21fc0d47157646f048f644eb36cd28d8</hash></folder>
<folder><path>C:\Users\Fam van Dalen\AppData\LocalLow\MyWebFace_5a\bar\Cache</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>21fc0d47157646f048f644eb36cd28d8</hash></folder>
<folder><path>C:\Users\Fam van Dalen\AppData\LocalLow\MyWebFace_5a\bar\History</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>21fc0d47157646f048f644eb36cd28d8</hash></folder>
<folder><path>C:\Users\Fam van Dalen\AppData\LocalLow\MyWebFace_5a\bar\Message</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>21fc0d47157646f048f644eb36cd28d8</hash></folder>
<folder><path>C:\Users\Fam van Dalen\AppData\LocalLow\MyWebFace_5a\bar\Message\COMMON</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>21fc0d47157646f048f644eb36cd28d8</hash></folder>
<folder><path>C:\Users\Fam van Dalen\AppData\LocalLow\MyWebFace_5a\bar\Settings</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>21fc0d47157646f048f644eb36cd28d8</hash></folder>
<folder><path>C:\Users\Fam van Dalen\AppData\LocalLow\MyWebFace_5a\MyWebFace_5a</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>21fc0d47157646f048f644eb36cd28d8</hash></folder>
<folder><path>C:\Users\Fam van Dalen\AppData\LocalLow\MyWebFace_5a\MyWebFace_5a\Cache</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>21fc0d47157646f048f644eb36cd28d8</hash></folder>
<file><path>C:\Users\Fam van Dalen\AppData\LocalLow\MyWebFace_5a\bar\Cache\02579B60</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>21fc0d47157646f048f644eb36cd28d8</hash></file>
<file><path>C:\Users\Fam van Dalen\AppData\LocalLow\MyWebFace_5a\bar\Cache\02579F95</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>21fc0d47157646f048f644eb36cd28d8</hash></file>
<file><path>C:\Users\Fam van Dalen\AppData\LocalLow\MyWebFace_5a\bar\Cache\0257A1F5.bmp</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>21fc0d47157646f048f644eb36cd28d8</hash></file>
<file><path>C:\Users\Fam van Dalen\AppData\LocalLow\MyWebFace_5a\bar\Cache\0257A291.bmp</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>21fc0d47157646f048f644eb36cd28d8</hash></file>
<file><path>C:\Users\Fam van Dalen\AppData\LocalLow\MyWebFace_5a\bar\Cache\0257A2DF.bmp</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>21fc0d47157646f048f644eb36cd28d8</hash></file>
<file><path>C:\Users\Fam van Dalen\AppData\LocalLow\MyWebFace_5a\bar\Cache\0257A34C.bmp</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>21fc0d47157646f048f644eb36cd28d8</hash></file>
<file><path>C:\Users\Fam van Dalen\AppData\LocalLow\MyWebFace_5a\bar\Cache\0257A3AA.bmp</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>21fc0d47157646f048f644eb36cd28d8</hash></file>
<file><path>C:\Users\Fam van Dalen\AppData\LocalLow\MyWebFace_5a\bar\Cache\0257A407.bmp</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>21fc0d47157646f048f644eb36cd28d8</hash></file>
<file><path>C:\Users\Fam van Dalen\AppData\LocalLow\MyWebFace_5a\bar\Cache\0257A455.bmp</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>21fc0d47157646f048f644eb36cd28d8</hash></file>
<file><path>C:\Users\Fam van Dalen\AppData\LocalLow\MyWebFace_5a\bar\Cache\0257A494.bmp</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>21fc0d47157646f048f644eb36cd28d8</hash></file>
<file><path>C:\Users\Fam van Dalen\AppData\LocalLow\MyWebFace_5a\bar\Cache\0257A4E2.bmp</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>21fc0d47157646f048f644eb36cd28d8</hash></file>
<file><path>C:\Users\Fam van Dalen\AppData\LocalLow\MyWebFace_5a\bar\Cache\0257B43D.jhtml</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>21fc0d47157646f048f644eb36cd28d8</hash></file>
<file><path>C:\Users\Fam van Dalen\AppData\LocalLow\MyWebFace_5a\bar\Cache\0257DB5C</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>21fc0d47157646f048f644eb36cd28d8</hash></file>
<file><path>C:\Users\Fam van Dalen\AppData\LocalLow\MyWebFace_5a\bar\Cache\0257EF0B.bmp</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>21fc0d47157646f048f644eb36cd28d8</hash></file>
<file><path>C:\Users\Fam van Dalen\AppData\LocalLow\MyWebFace_5a\bar\Cache\files.ini</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>21fc0d47157646f048f644eb36cd28d8</hash></file>
<file><path>C:\Users\Fam van Dalen\AppData\LocalLow\MyWebFace_5a\bar\History\search3</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>21fc0d47157646f048f644eb36cd28d8</hash></file>
<file><path>C:\Users\Fam van Dalen\AppData\LocalLow\MyWebFace_5a\bar\Message\COMMON\8_step1.gif</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>21fc0d47157646f048f644eb36cd28d8</hash></file>
<file><path>C:\Users\Fam van Dalen\AppData\LocalLow\MyWebFace_5a\bar\Message\COMMON\anemone.js</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>21fc0d47157646f048f644eb36cd28d8</hash></file>
<file><path>C:\Users\Fam van Dalen\AppData\LocalLow\MyWebFace_5a\bar\Message\COMMON\bd_grad.gif</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>21fc0d47157646f048f644eb36cd28d8</hash></file>
<file><path>C:\Users\Fam van Dalen\AppData\LocalLow\MyWebFace_5a\bar\Message\COMMON\hpguard.js</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>21fc0d47157646f048f644eb36cd28d8</hash></file>
<file><path>C:\Users\Fam van Dalen\AppData\LocalLow\MyWebFace_5a\bar\Message\COMMON\hpguard1.htm</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>21fc0d47157646f048f644eb36cd28d8</hash></file>
<file><path>C:\Users\Fam van Dalen\AppData\LocalLow\MyWebFace_5a\bar\Message\COMMON\hpguard2.htm</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>21fc0d47157646f048f644eb36cd28d8</hash></file>
<file><path>C:\Users\Fam van Dalen\AppData\LocalLow\MyWebFace_5a\bar\Message\COMMON\hpp_ok.png</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>21fc0d47157646f048f644eb36cd28d8</hash></file>
<file><path>C:\Users\Fam van Dalen\AppData\LocalLow\MyWebFace_5a\bar\Message\COMMON\hpp_x.png</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>21fc0d47157646f048f644eb36cd28d8</hash></file>
<file><path>C:\Users\Fam van Dalen\AppData\LocalLow\MyWebFace_5a\bar\Message\COMMON\hpp_x2.png</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>21fc0d47157646f048f644eb36cd28d8</hash></file>
<file><path>C:\Users\Fam van Dalen\AppData\LocalLow\MyWebFace_5a\bar\Message\COMMON\index.htm</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>21fc0d47157646f048f644eb36cd28d8</hash></file>
<file><path>C:\Users\Fam van Dalen\AppData\LocalLow\MyWebFace_5a\bar\Message\COMMON\mid_dots.gif</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>21fc0d47157646f048f644eb36cd28d8</hash></file>
<file><path>C:\Users\Fam van Dalen\AppData\LocalLow\MyWebFace_5a\bar\Message\COMMON\mws_logo.gif</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>21fc0d47157646f048f644eb36cd28d8</hash></file>
<file><path>C:\Users\Fam van Dalen\AppData\LocalLow\MyWebFace_5a\bar\Message\COMMON\protect.htm</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>21fc0d47157646f048f644eb36cd28d8</hash></file>
<file><path>C:\Users\Fam van Dalen\AppData\LocalLow\MyWebFace_5a\bar\Message\COMMON\rebut4b.htm</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>21fc0d47157646f048f644eb36cd28d8</hash></file>
<file><path>C:\Users\Fam van Dalen\AppData\LocalLow\MyWebFace_5a\bar\Message\COMMON\shield.png</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>21fc0d47157646f048f644eb36cd28d8</hash></file>
<file><path>C:\Users\Fam van Dalen\AppData\LocalLow\MyWebFace_5a\bar\Message\COMMON\stop.gif</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>21fc0d47157646f048f644eb36cd28d8</hash></file>
<file><path>C:\Users\Fam van Dalen\AppData\LocalLow\MyWebFace_5a\bar\Message\COMMON\systrayp.htm</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>21fc0d47157646f048f644eb36cd28d8</hash></file>
<file><path>C:\Users\Fam van Dalen\AppData\LocalLow\MyWebFace_5a\bar\Message\COMMON\tp_grad.gif</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>21fc0d47157646f048f644eb36cd28d8</hash></file>
<file><path>C:\Users\Fam van Dalen\AppData\LocalLow\MyWebFace_5a\bar\Settings\prevcfg2.htm</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>21fc0d47157646f048f644eb36cd28d8</hash></file>
<file><path>C:\Users\Fam van Dalen\AppData\LocalLow\MyWebFace_5a\bar\Settings\setting3.htm</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>21fc0d47157646f048f644eb36cd28d8</hash></file>
<file><path>C:\Users\Fam van Dalen\AppData\LocalLow\MyWebFace_5a\bar\Settings\setting3.htm.bak</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>21fc0d47157646f048f644eb36cd28d8</hash></file>
<file><path>C:\Users\Fam van Dalen\AppData\LocalLow\MyWebFace_5a\bar\Settings\s_w1.dat</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>21fc0d47157646f048f644eb36cd28d8</hash></file>
<file><path>C:\Users\Fam van Dalen\AppData\LocalLow\MyWebFace_5a\bar\Settings\s_w1.dat.bak</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>21fc0d47157646f048f644eb36cd28d8</hash></file>
<file><path>C:\Users\Fam van Dalen\AppData\LocalLow\MyWebFace_5a\bar\Settings\s_w2.dat</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>21fc0d47157646f048f644eb36cd28d8</hash></file>
<file><path>C:\Users\Fam van Dalen\AppData\LocalLow\MyWebFace_5a\bar\Settings\s_w2.dat.bak</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>21fc0d47157646f048f644eb36cd28d8</hash></file>
<file><path>C:\Users\Fam van Dalen\AppData\LocalLow\MyWebFace_5a\MyWebFace_5a\Cache\PopupProperties210740922.html</path><vendor>PUP.Optional.MindSpark</vendor><action>success</action><hash>21fc0d47157646f048f644eb36cd28d8</hash></file>
</items>
</mbam-log>
