Jump to content

Removal instructions for FastSearch

Metallica
 Share

Recommended Posts

  • Staff
Metallica

Metallica

Posted
  • Staff
Posted

What is FastSearch?

 

The Malwarebytes research team has determined that FastSearch is adware. These adware applications display advertisements not originating from the sites you are browsing.

 

How do I know if my computer is affected by FastSearch?

You may see this entry in your list of installed programs:

 

warning4.png

and this warning during install:

warning1.png

and this Scheduled Task :

warning3.png

 

How did FastSearch get on my computer?

 

Adware applications use different methods for distributing themselves. This particular one was bundled with other software.

 

How do I remove FastSearch?

 

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted program.

  • Please download Malwarebytes Anti-Malware to your desktop.
  • Double-click mbam-setup-version.exe and follow the prompts to install the program.
  • At the end, be sure a check-mark is placed next to the following:
    • Enable free trial of Malwarebytes Anti-Malware Premium
    • Launch Malwarebytes Anti-Malware
  • Then click Finish.
  • If an update is found, you will be prompted to download and install the latest version.
  • Once the program has loaded, select Scan now. Or select the Threat Scan from the Scan menu.
  • When the scan is complete , make sure that everything is set to "Quarantine", and click Apply Actions.
  • Reboot your computer if prompted.
Is there anything else I need to do to get rid of FastSearch?
  • This PUP creates a scheduled task. You can read here how to check for and, if necessary, remove Scheduled Tasks.
  • You may be prompted twice to reboot after removal. Malwarebytes Anti-Malware needs to restore your connection after removing this LSP-hijacker.

    2reboot.png

How would the full version of Malwarebytes Anti-Malware help protect me?

 

We hope our application and this guide have helped you eradicate this hijacker.  

 

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the FastSearch adware. It would have warned you before the rogue could install itself, giving you a chance to stop it before it became too late.

 

protection1.png

Technical details for experts

 

You will see these signs in a HijackThis log:

O10 - Unknown file in Winsock LSP: c:\windows\system32\abengine.dllO10 - Unknown file in Winsock LSP: c:\windows\system32\abengine.dllO10 - Unknown file in Winsock LSP: c:\windows\system32\abengine.dllO10 - Unknown file in Winsock LSP: c:\windows\system32\abengine.dllO10 - Unknown file in Winsock LSP: c:\windows\system32\abengine.dllO23 - Service: abengine - Abengine - C:\Program Files (x86)\FastSearch\abengine.exe
 

You may see these signs in FRST logs:

 (Abengine) C:\Program Files (x86)\FastSearch\abengine.exe Winsock: Catalog9 01 C:\Windows\SysWOW64\abengine.dll [342192 2015-06-30] (Abengine) Winsock: Catalog9 02 C:\Windows\SysWOW64\abengine.dll [342192 2015-06-30] (Abengine) Winsock: Catalog9 03 C:\Windows\SysWOW64\abengine.dll [342192 2015-06-30] (Abengine) Winsock: Catalog9 04 C:\Windows\SysWOW64\abengine.dll [342192 2015-06-30] (Abengine) Winsock: Catalog9 15 C:\Windows\SysWOW64\abengine.dll [342192 2015-06-30] (Abengine) Winsock: Catalog9-x64 01 C:\Windows\system32\abengine64.dll [408456 2015-06-30] (Abengine) Winsock: Catalog9-x64 02 C:\Windows\system32\abengine64.dll [408456 2015-06-30] (Abengine) Winsock: Catalog9-x64 03 C:\Windows\system32\abengine64.dll [408456 2015-06-30] (Abengine) Winsock: Catalog9-x64 04 C:\Windows\system32\abengine64.dll [408456 2015-06-30] (Abengine) Winsock: Catalog9-x64 15 C:\Windows\system32\abengine64.dll [408456 2015-06-30] (Abengine) R2 abengine; C:\Program Files (x86)\FastSearch\abengine.exe [1926632 2015-06-23] (Abengine) [File not signed] C:\Windows\SysWOW64\abengineOff.ini C:\Windows\system32\abengineOff.ini C:\Windows\System32\Tasks\tet3008 C:\Program Files (x86)\FastSearch (Abengine) C:\Windows\system32\abengine64.dll (Abengine) C:\Windows\SysWOW64\abengine.dllFastSearch (HKLM-x32\...\FastSearch) (Version: 3.0.0.8 - FastSearch)Task: {C1D892F0-F999-49A1-A182-1EAE53DCDE1A} - System32\Tasks\tet3008 => C:\Program Files (x86)\FastSearch\tet3008.exe [2015-06-23] ()HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\abengine => ""="service"
 

 

Alterations made by the installer:

File system details [View: All details] (Selection)---------------------------------------------------    Adds the folder C:\Program Files (x86)\FastSearch       Adds the file ABDLL.dll"="23/06/2015 22:58, 183400 bytes, A       Adds the file ABDLL64.dll"="23/06/2015 22:58, 218576 bytes, A       Adds the file ABDLL64.exe"="23/06/2015 22:58, 176568 bytes, A       Adds the file abengine.dll"="23/06/2015 22:58, 342192 bytes, A       Adds the file abengine.exe"="23/06/2015 22:58, 1926632 bytes, A       Adds the file abengine.tlb"="23/06/2015 22:58, 49048 bytes, A       Adds the file abengine64.dll"="23/06/2015 22:58, 408456 bytes, A       Adds the file abenginecert.dll"="23/06/2015 22:57, 368568 bytes, A       Adds the file abenginep.exe"="23/06/2015 22:58, 450448 bytes, A       Adds the file abenginew.exe"="23/06/2015 22:58, 398584 bytes, A       Adds the file abenginewd.dll"="23/06/2015 22:58, 285224 bytes, A       Adds the file freebl3.dll"="30/08/2013 12:11, 303104 bytes, A       Adds the file lengine.exe"="23/06/2015 22:57, 387128 bytes, A       Adds the file lengine.ini"="19/07/2013 16:58, 116 bytes, A       Adds the file lengine64.exe"="23/06/2015 22:57, 341528 bytes, A       Adds the file libnspr4.dll"="30/08/2013 12:11, 295424 bytes, A       Adds the file libplc4.dll"="30/08/2013 12:11, 48640 bytes, A       Adds the file libplds4.dll"="30/08/2013 12:11, 46080 bytes, A       Adds the file nss3.dll"="30/08/2013 12:11, 854528 bytes, A       Adds the file nssckbi.dll"="30/08/2013 12:11, 417280 bytes, A       Adds the file nssdbm3.dll"="30/08/2013 12:11, 164352 bytes, A       Adds the file nssutil3.dll"="30/08/2013 12:11, 135680 bytes, A       Adds the file slite.exe"="11/07/2013 16:58, 465408 bytes, A       Adds the file smime3.dll"="30/08/2013 12:11, 132608 bytes, A       Adds the file softokn3.dll"="30/08/2013 12:11, 230400 bytes, A       Adds the file sqlite3.dll"="30/08/2013 12:11, 455168 bytes, A       Adds the file ssl3.dll"="30/08/2013 12:11, 228352 bytes, A       Adds the file term.txt"="20/11/2014 22:09, 0 bytes, A       Adds the file tet3008.exe"="23/06/2015 23:53, 60017 bytes, A       Adds the file uninstall.exe"="30/06/2015 13:10, 64991 bytes, A    In the existing folder C:\Windows\System32       Adds the file abengine64.dll"="23/06/2015 22:58, 408456 bytes, A       Adds the file abengineOff.ini"="30/06/2015 13:10, 8432 bytes, A    In the existing folder C:\Windows\System32\Tasks       Adds the file tet3008"="30/06/2015 13:10, 3096 bytes, A    In the existing folder C:\Windows\SysWOW64       Adds the file abengine.dll"="23/06/2015 22:58, 342192 bytes, A       Adds the file abengineOff.ini"="30/06/2015 13:10, 8432 bytes, A    Adds the folder C:\Windows\SysWOW64\config\systemprofile\AppData\Local\abengine       Adds the file abengine.ini"="30/06/2015 13:10, 10547 bytes, ARegistry details [View: All details] (Selection)------------------------------------------------    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.DataContainer]       "(Default)"="REG_SZ", "DataContainer Class"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.DataContainer\CLSID]       "(Default)"="REG_SZ", "{879F721E-7F23-4B7F-B65B-F5A8F518864A}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.DataContainer\CurVer]       "(Default)"="REG_SZ", "abengineLib.DataContainer.1"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.DataContainer.1]       "(Default)"="REG_SZ", "DataContainer Class"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.DataContainer.1\CLSID]       "(Default)"="REG_SZ", "{879F721E-7F23-4B7F-B65B-F5A8F518864A}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.DataController]       "(Default)"="REG_SZ", "DataController Class"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.DataController\CLSID]       "(Default)"="REG_SZ", "{51F7DE65-A990-4213-BDB9-C2657FA7F3F4}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.DataController\CurVer]       "(Default)"="REG_SZ", "abengineLib.DataController.1"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.DataController.1]       "(Default)"="REG_SZ", "DataController Class"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.DataController.1\CLSID]       "(Default)"="REG_SZ", "{51F7DE65-A990-4213-BDB9-C2657FA7F3F4}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.DataTable]       "(Default)"="REG_SZ", "DataTable Class"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.DataTable\CLSID]       "(Default)"="REG_SZ", "{B9EE49F9-62A3-408D-858F-4ED9A23BAA24}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.DataTable\CurVer]       "(Default)"="REG_SZ", "abengineLib.DataTable.1"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.DataTable.1]       "(Default)"="REG_SZ", "DataTable Class"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.DataTable.1\CLSID]       "(Default)"="REG_SZ", "{B9EE49F9-62A3-408D-858F-4ED9A23BAA24}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.DataTableFields       "(Default)"="REG_SZ", "DataTableFields Class"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.DataTableFields\CLSID]       "(Default)"="REG_SZ", "{A5544F7B-C413-4CAC-8DB4-9A8D1986DD86}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.DataTableFields\CurVer]       "(Default)"="REG_SZ", "abengineLib.DataTableFields.1"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.DataTableFields.1]       "(Default)"="REG_SZ", "DataTableFields Class"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.DataTableFields.1\CLSID]       "(Default)"="REG_SZ", "{A5544F7B-C413-4CAC-8DB4-9A8D1986DD86}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.DataTableHolder]       "(Default)"="REG_SZ", "DataTableHolder Class"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.DataTableHolder\CLSID]       "(Default)"="REG_SZ", "{028F96B8-C73A-4C60-B82F-3944A19B046E}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.DataTableHolder\CurVer]       "(Default)"="REG_SZ", "abengineLib.DataTableHolder.1"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.DataTableHolder.1]       "(Default)"="REG_SZ", "DataTableHolder Class"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.DataTableHolder.1\CLSID]       "(Default)"="REG_SZ", "{028F96B8-C73A-4C60-B82F-3944A19B046E}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.LSPLogic]       "(Default)"="REG_SZ", "LSPLogic Class"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.LSPLogic\CLSID]       "(Default)"="REG_SZ", "{BF6D8439-BAC1-4E73-94FE-9910D098AE00}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.LSPLogic\CurVer]       "(Default)"="REG_SZ", "abengineLib.LSPLogic.1"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.LSPLogic.1]       "(Default)"="REG_SZ", "LSPLogic Class"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.LSPLogic.1\CLSID]       "(Default)"="REG_SZ", "{BF6D8439-BAC1-4E73-94FE-9910D098AE00}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.ReadOnlyManager]       "(Default)"="REG_SZ", "ReadOnlyManager Class"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.ReadOnlyManager\CLSID]       "(Default)"="REG_SZ", "{D4F14684-336F-44FC-8D9E-8A73DAE003EC}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.ReadOnlyManager\CurVer]       "(Default)"="REG_SZ", "abengineLib.ReadOnlyManager.1"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.ReadOnlyManager.1]       "(Default)"="REG_SZ", "ReadOnlyManager Class"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\abengineLib.ReadOnlyManager.1\CLSID]       "(Default)"="REG_SZ", "{D4F14684-336F-44FC-8D9E-8A73DAE003EC}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{D1AACF27-6B3D-47D7-AF24-5D48828C0953}]       "(Default)"="REG_SZ", "abengine"       "InstallingUser"="REG_SZ", "bQBlAHQAYQBsAGwAaQBjAGEALQBwAGMAXABtAGUAdABhAGwAbABpAGMAYQAAAA=="       "kp1"="REG_DWORD", 0       "LaunchPermission"="REG_BINARY, ..L.\...0................................. ....... ...       "LocalService"="REG_SZ", "abengine"       "ServiceParameters"="REG_SZ", "-Service"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\abengine.EXE]       "AppID"="REG_SZ", "{D1AACF27-6B3D-47D7-AF24-5D48828C0953}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{025EEF9C-90F5-417E-9196-09FA4AAB4C92}]       "(Default)"="REG_SZ", "IDataTableFields"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{025EEF9C-90F5-417E-9196-09FA4AAB4C92}\ProxyStubClsid32]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{025EEF9C-90F5-417E-9196-09FA4AAB4C92}\TypeLib]       "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}"       "Version"="REG_SZ", "1.0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{03F13205-38FF-4361-BECE-EE939A002FA2}]       "(Default)"="REG_SZ", "IWFPController"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{03F13205-38FF-4361-BECE-EE939A002FA2}\ProxyStubClsid32]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{03F13205-38FF-4361-BECE-EE939A002FA2}\TypeLib]       "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}"       "Version"="REG_SZ", "1.0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1FAAF6AB-B931-4D05-BA12-B0ECCCCE2D0F}]       "(Default)"="REG_SZ", "ISSHController"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1FAAF6AB-B931-4D05-BA12-B0ECCCCE2D0F}\ProxyStubClsid32]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1FAAF6AB-B931-4D05-BA12-B0ECCCCE2D0F}\TypeLib]       "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}"       "Version"="REG_SZ", "1.0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{4AEC2270-2E5F-40C8-BE5A-E5A5264714C0}]       "(Default)"="REG_SZ", "IDataStatistics"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{4AEC2270-2E5F-40C8-BE5A-E5A5264714C0}\ProxyStubClsid32]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{4AEC2270-2E5F-40C8-BE5A-E5A5264714C0}\TypeLib]       "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}"       "Version"="REG_SZ", "1.0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{52E8E39B-2773-448F-BC20-547CD8DA4685}]       "(Default)"="REG_SZ", "IParentalControlController"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{52E8E39B-2773-448F-BC20-547CD8DA4685}\ProxyStubClsid32]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{52E8E39B-2773-448F-BC20-547CD8DA4685}\TypeLib]       "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}"       "Version"="REG_SZ", "1.0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{62163814-0C94-4DC3-BA99-5E9E2420C914}]       "(Default)"="REG_SZ", "IDataController"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{62163814-0C94-4DC3-BA99-5E9E2420C914}\ProxyStubClsid32]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{62163814-0C94-4DC3-BA99-5E9E2420C914}\TypeLib]       "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}"       "Version"="REG_SZ", "1.0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{68AEA825-D48B-4A56-87F0-6FCE988A2C48}]       "(Default)"="REG_SZ", "IDataContainer"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{68AEA825-D48B-4A56-87F0-6FCE988A2C48}\ProxyStubClsid32]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{68AEA825-D48B-4A56-87F0-6FCE988A2C48}\TypeLib]       "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}"       "Version"="REG_SZ", "1.0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6A0F07D3-F28E-4F45-8D4C-BBF8000F5BB8}]       "(Default)"="REG_SZ", "IReadOnlyManager"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6A0F07D3-F28E-4F45-8D4C-BBF8000F5BB8}\ProxyStubClsid32]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6A0F07D3-F28E-4F45-8D4C-BBF8000F5BB8}\TypeLib]       "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}"       "Version"="REG_SZ", "1.0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7AF435BC-80A9-466E-938B-32E4482EBD65}]       "(Default)"="REG_SZ", "ILSPLogic"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7AF435BC-80A9-466E-938B-32E4482EBD65}\ProxyStubClsid32]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7AF435BC-80A9-466E-938B-32E4482EBD65}\TypeLib]       "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}"       "Version"="REG_SZ", "1.0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{85CEBABD-A775-41E2-8B67-FE06104F06ED}]       "(Default)"="REG_SZ", "IWatchDog"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{85CEBABD-A775-41E2-8B67-FE06104F06ED}\ProxyStubClsid32]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{85CEBABD-A775-41E2-8B67-FE06104F06ED}\TypeLib]       "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}"       "Version"="REG_SZ", "1.0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{AE92A5AB-E575-4487-BCC0-96D333E5346C}]       "(Default)"="REG_SZ", "IDataTableHolder"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{AE92A5AB-E575-4487-BCC0-96D333E5346C}\ProxyStubClsid32]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{AE92A5AB-E575-4487-BCC0-96D333E5346C}\TypeLib]       "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}"       "Version"="REG_SZ", "1.0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{C622315B-3049-43D4-9B41-D4B2DC2CD706}]       "(Default)"="REG_SZ", "IParentalControl"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{C622315B-3049-43D4-9B41-D4B2DC2CD706}\ProxyStubClsid32]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{C622315B-3049-43D4-9B41-D4B2DC2CD706}\TypeLib]       "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}"       "Version"="REG_SZ", "1.0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{CDB85458-AE08-4106-B699-B946FF4A61CD}]       "(Default)"="REG_SZ", "IDataTable"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{CDB85458-AE08-4106-B699-B946FF4A61CD}\ProxyStubClsid32]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{CDB85458-AE08-4106-B699-B946FF4A61CD}\TypeLib]       "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}"       "Version"="REG_SZ", "1.0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}\1.0]       "(Default)"="REG_SZ", "abengine 1.0 Type Library"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}\1.0\0\win32]       "(Default)"="REG_SZ", "C:\Program Files (x86)\FastSearch\abengine.tlb"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}\1.0\FLAGS]       "(Default)"="REG_SZ", "0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}\1.0\HELPDIR]       "(Default)"="REG_SZ", "C:\Program Files (x86)\FastSearch"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{028F96B8-C73A-4C60-B82F-3944A19B046E}]       "(Default)"="REG_SZ", "DataTableHolder Class"       "AppID"="REG_SZ", "{D1AACF27-6B3D-47D7-AF24-5D48828C0953}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{028F96B8-C73A-4C60-B82F-3944A19B046E}\LocalServer32]       "(Default)"="REG_SZ", ""C:\Program Files (x86)\FastSearch\abengine.exe""    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{028F96B8-C73A-4C60-B82F-3944A19B046E}\ProgID]       "(Default)"="REG_SZ", "abengineLib.DataTableHolder.1"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{028F96B8-C73A-4C60-B82F-3944A19B046E}\Programmable]    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{028F96B8-C73A-4C60-B82F-3944A19B046E}\TypeLib]       "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{028F96B8-C73A-4C60-B82F-3944A19B046E}\VersionIndependentProgID]       "(Default)"="REG_SZ", "abengineLib.DataTableHolder"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{51F7DE65-A990-4213-BDB9-C2657FA7F3F4}]       "(Default)"="REG_SZ", "DataController Class"       "AppID"="REG_SZ", "{D1AACF27-6B3D-47D7-AF24-5D48828C0953}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{51F7DE65-A990-4213-BDB9-C2657FA7F3F4}\LocalServer32]       "(Default)"="REG_SZ", ""C:\Program Files (x86)\FastSearch\abengine.exe""    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{51F7DE65-A990-4213-BDB9-C2657FA7F3F4}\ProgID]       "(Default)"="REG_SZ", "abengineLib.DataController.1"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{51F7DE65-A990-4213-BDB9-C2657FA7F3F4}\Programmable]    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{51F7DE65-A990-4213-BDB9-C2657FA7F3F4}\TypeLib]       "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{51F7DE65-A990-4213-BDB9-C2657FA7F3F4}\VersionIndependentProgID]       "(Default)"="REG_SZ", "abengineLib.DataController"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{879F721E-7F23-4B7F-B65B-F5A8F518864A}]       "(Default)"="REG_SZ", "DataContainer Class"       "AppID"="REG_SZ", "{D1AACF27-6B3D-47D7-AF24-5D48828C0953}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{879F721E-7F23-4B7F-B65B-F5A8F518864A}\LocalServer32]       "(Default)"="REG_SZ", ""C:\Program Files (x86)\FastSearch\abengine.exe""    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{879F721E-7F23-4B7F-B65B-F5A8F518864A}\ProgID]       "(Default)"="REG_SZ", "abengineLib.DataContainer.1"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{879F721E-7F23-4B7F-B65B-F5A8F518864A}\Programmable]    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{879F721E-7F23-4B7F-B65B-F5A8F518864A}\TypeLib]       "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{879F721E-7F23-4B7F-B65B-F5A8F518864A}\VersionIndependentProgID]       "(Default)"="REG_SZ", "abengineLib.DataContainer"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A5544F7B-C413-4CAC-8DB4-9A8D1986DD86}]       "(Default)"="REG_SZ", "DataTableFields Class"       "AppID"="REG_SZ", "{D1AACF27-6B3D-47D7-AF24-5D48828C0953}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A5544F7B-C413-4CAC-8DB4-9A8D1986DD86}\LocalServer32]       "(Default)"="REG_SZ", ""C:\Program Files (x86)\FastSearch\abengine.exe""    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A5544F7B-C413-4CAC-8DB4-9A8D1986DD86}\ProgID]       "(Default)"="REG_SZ", "abengineLib.DataTableFields.1"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A5544F7B-C413-4CAC-8DB4-9A8D1986DD86}\Programmable]    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A5544F7B-C413-4CAC-8DB4-9A8D1986DD86}\TypeLib]       "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A5544F7B-C413-4CAC-8DB4-9A8D1986DD86}\VersionIndependentProgID]       "(Default)"="REG_SZ", "abengineLib.DataTableFields"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B9EE49F9-62A3-408D-858F-4ED9A23BAA24}]       "(Default)"="REG_SZ", "DataTable Class"       "AppID"="REG_SZ", "{D1AACF27-6B3D-47D7-AF24-5D48828C0953}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B9EE49F9-62A3-408D-858F-4ED9A23BAA24}\LocalServer32]       "(Default)"="REG_SZ", ""C:\Program Files (x86)\FastSearch\abengine.exe""    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B9EE49F9-62A3-408D-858F-4ED9A23BAA24}\ProgID]       "(Default)"="REG_SZ", "abengineLib.DataTable.1"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B9EE49F9-62A3-408D-858F-4ED9A23BAA24}\Programmable]    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B9EE49F9-62A3-408D-858F-4ED9A23BAA24}\TypeLib]       "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B9EE49F9-62A3-408D-858F-4ED9A23BAA24}\VersionIndependentProgID]       "(Default)"="REG_SZ", "abengineLib.DataTable"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{BF6D8439-BAC1-4E73-94FE-9910D098AE00}]       "(Default)"="REG_SZ", "LSPLogic Class"       "AppID"="REG_SZ", "{D1AACF27-6B3D-47D7-AF24-5D48828C0953}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{BF6D8439-BAC1-4E73-94FE-9910D098AE00}\LocalServer32]       "(Default)"="REG_SZ", ""C:\Program Files (x86)\FastSearch\abengine.exe""    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{BF6D8439-BAC1-4E73-94FE-9910D098AE00}\ProgID]       "(Default)"="REG_SZ", "abengineLib.LSPLogic.1"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{BF6D8439-BAC1-4E73-94FE-9910D098AE00}\Programmable]    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{BF6D8439-BAC1-4E73-94FE-9910D098AE00}\TypeLib]       "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{BF6D8439-BAC1-4E73-94FE-9910D098AE00}\VersionIndependentProgID]       "(Default)"="REG_SZ", "abengineLib.LSPLogic"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4F14684-336F-44FC-8D9E-8A73DAE003EC}]       "(Default)"="REG_SZ", "ReadOnlyManager Class"       "AppID"="REG_SZ", "{D1AACF27-6B3D-47D7-AF24-5D48828C0953}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4F14684-336F-44FC-8D9E-8A73DAE003EC}\LocalServer32]       "(Default)"="REG_SZ", ""C:\Program Files (x86)\FastSearch\abengine.exe""    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4F14684-336F-44FC-8D9E-8A73DAE003EC}\ProgID]       "(Default)"="REG_SZ", "abengineLib.ReadOnlyManager.1"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4F14684-336F-44FC-8D9E-8A73DAE003EC}\Programmable]    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4F14684-336F-44FC-8D9E-8A73DAE003EC}\TypeLib]       "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4F14684-336F-44FC-8D9E-8A73DAE003EC}\VersionIndependentProgID]       "(Default)"="REG_SZ", "abengineLib.ReadOnlyManager"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{025EEF9C-90F5-417E-9196-09FA4AAB4C92}]       "(Default)"="REG_SZ", "IDataTableFields"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{025EEF9C-90F5-417E-9196-09FA4AAB4C92}\ProxyStubClsid32]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{025EEF9C-90F5-417E-9196-09FA4AAB4C92}\TypeLib]       "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}"       "Version"="REG_SZ", "1.0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{03F13205-38FF-4361-BECE-EE939A002FA2}]       "(Default)"="REG_SZ", "IWFPController"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{03F13205-38FF-4361-BECE-EE939A002FA2}\ProxyStubClsid32]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{03F13205-38FF-4361-BECE-EE939A002FA2}\TypeLib]       "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}"       "Version"="REG_SZ", "1.0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1FAAF6AB-B931-4D05-BA12-B0ECCCCE2D0F}]       "(Default)"="REG_SZ", "ISSHController"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1FAAF6AB-B931-4D05-BA12-B0ECCCCE2D0F}\ProxyStubClsid32]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1FAAF6AB-B931-4D05-BA12-B0ECCCCE2D0F}\TypeLib]       "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}"       "Version"="REG_SZ", "1.0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{4AEC2270-2E5F-40C8-BE5A-E5A5264714C0}]       "(Default)"="REG_SZ", "IDataStatistics"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{4AEC2270-2E5F-40C8-BE5A-E5A5264714C0}\ProxyStubClsid32]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{4AEC2270-2E5F-40C8-BE5A-E5A5264714C0}\TypeLib]       "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}"       "Version"="REG_SZ", "1.0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{52E8E39B-2773-448F-BC20-547CD8DA4685}]       "(Default)"="REG_SZ", "IParentalControlController"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{52E8E39B-2773-448F-BC20-547CD8DA4685}\ProxyStubClsid32]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{52E8E39B-2773-448F-BC20-547CD8DA4685}\TypeLib]       "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}"       "Version"="REG_SZ", "1.0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{62163814-0C94-4DC3-BA99-5E9E2420C914}]       "(Default)"="REG_SZ", "IDataController"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{62163814-0C94-4DC3-BA99-5E9E2420C914}\ProxyStubClsid32]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{62163814-0C94-4DC3-BA99-5E9E2420C914}\TypeLib]       "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}"       "Version"="REG_SZ", "1.0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{68AEA825-D48B-4A56-87F0-6FCE988A2C48}]       "(Default)"="REG_SZ", "IDataContainer"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{68AEA825-D48B-4A56-87F0-6FCE988A2C48}\ProxyStubClsid32]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{68AEA825-D48B-4A56-87F0-6FCE988A2C48}\TypeLib]       "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}"       "Version"="REG_SZ", "1.0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6A0F07D3-F28E-4F45-8D4C-BBF8000F5BB8}]       "(Default)"="REG_SZ", "IReadOnlyManager"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6A0F07D3-F28E-4F45-8D4C-BBF8000F5BB8}\ProxyStubClsid32]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6A0F07D3-F28E-4F45-8D4C-BBF8000F5BB8}\TypeLib]       "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}"       "Version"="REG_SZ", "1.0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{7AF435BC-80A9-466E-938B-32E4482EBD65}]       "(Default)"="REG_SZ", "ILSPLogic"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{7AF435BC-80A9-466E-938B-32E4482EBD65}\ProxyStubClsid32]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{7AF435BC-80A9-466E-938B-32E4482EBD65}\TypeLib]       "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}"       "Version"="REG_SZ", "1.0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{85CEBABD-A775-41E2-8B67-FE06104F06ED}]       "(Default)"="REG_SZ", "IWatchDog"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{85CEBABD-A775-41E2-8B67-FE06104F06ED}\ProxyStubClsid32]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{85CEBABD-A775-41E2-8B67-FE06104F06ED}\TypeLib]       "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}"       "Version"="REG_SZ", "1.0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{AE92A5AB-E575-4487-BCC0-96D333E5346C}]       "(Default)"="REG_SZ", "IDataTableHolder"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{AE92A5AB-E575-4487-BCC0-96D333E5346C}\ProxyStubClsid32]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{AE92A5AB-E575-4487-BCC0-96D333E5346C}\TypeLib]       "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}"       "Version"="REG_SZ", "1.0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{C622315B-3049-43D4-9B41-D4B2DC2CD706}]       "(Default)"="REG_SZ", "IParentalControl"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{C622315B-3049-43D4-9B41-D4B2DC2CD706}\ProxyStubClsid32]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{C622315B-3049-43D4-9B41-D4B2DC2CD706}\TypeLib]       "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}"       "Version"="REG_SZ", "1.0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{CDB85458-AE08-4106-B699-B946FF4A61CD}]       "(Default)"="REG_SZ", "IDataTable"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{CDB85458-AE08-4106-B699-B946FF4A61CD}\ProxyStubClsid32]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{CDB85458-AE08-4106-B699-B946FF4A61CD}\TypeLib]       "(Default)"="REG_SZ", "{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}"       "Version"="REG_SZ", "1.0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\FastSearch]       "affid"="REG_SZ", ""       "Path"="REG_SZ", "C:\Program Files (x86)\FastSearch"       "uid"="REG_SZ", "7D5BAFA943AD43BF9BAED2823A38F2CB"       "ver"="REG_SZ", "3.0.0.8"    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\FastSearch\Components]       "Main"="REG_SZ", "1"    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\FastSearch]       "DisplayIcon"="REG_SZ", "C:\Program Files (x86)\FastSearch\uninstall.exe"       "DisplayName"="REG_SZ", "FastSearch"       "DisplayVersion"="REG_SZ", "3.0.0.8"       "NoModify"="REG_DWORD", 1       "NoRepair"="REG_DWORD", 1       "Publisher"="REG_SZ", "FastSearch"       "UninstallString"="REG_SZ", "C:\Program Files (x86)\FastSearch\uninstall.exe"       "URLInfoAbout"="REG_SZ", "http://www.Fast-Search.info"    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\abengine]       "(Default)"="REG_SZ", "service"    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\abengine]       "DependOnService"="REG_MULTI_SZ, "RPCSS "       "Description"="REG_SZ", "AbEngine protects your browser"       "DisplayName"="REG_SZ", "abengine"       "ErrorControl"="REG_DWORD", 1       "FailureActions"="REG_BINARY, ......................       "ImagePath"="REG_EXPAND_SZ, "C:\Program Files (x86)\FastSearch\abengine.exe"       "ObjectName"="REG_SZ", "LocalSystem"       "Start"="REG_DWORD", 2       "Type"="REG_DWORD", 16       "WOW64"="REG_DWORD", 1
Malwarebytes Anti-Malware log:

Malwarebytes Anti-Malwarewww.malwarebytes.orgScan Date: 30/06/2015Scan Time: 13:26Logfile: mbamFastSearch.txtAdministrator: YesVersion: 2.1.8.1057Malware Database: v2015.06.30.02Rootkit Database: v2015.06.26.01License: PremiumMalware Protection: EnabledMalicious Website Protection: EnabledSelf-protection: DisabledOS: Windows 7 Service Pack 1CPU: x64File System: NTFSUser: {username}Scan Type: Threat ScanResult: CompletedObjects Scanned: 332482Time Elapsed: 4 min, 11 secMemory: EnabledStartup: EnabledFilesystem: EnabledArchives: EnabledRootkits: DisabledHeuristics: EnabledPUP: EnabledPUM: EnabledProcesses: 1PUP.Optional.Winsock.HijackBoot.A, C:\Program Files (x86)\FastSearch\abengine.exe, 3880, Delete-on-Reboot, [f1e901bfe1a95cdad7825a018e74fb05]Modules: 8PUP.Optional.Winsock.HijackBoot.A, C:\Program Files (x86)\FastSearch\abenginecert.dll, Delete-on-Reboot, [0fcbb0100e7c5bdbba9faead34ce1be5], PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch\freebl3.dll, Delete-on-Reboot, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch\libnspr4.dll, Delete-on-Reboot, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch\libplc4.dll, Delete-on-Reboot, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch\libplds4.dll, Delete-on-Reboot, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch\nss3.dll, Delete-on-Reboot, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch\nssutil3.dll, Delete-on-Reboot, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch\smime3.dll, Delete-on-Reboot, [16c42d93206aae8889539205ce370cf4], Registry Keys: 76PUP.Optional.Winsock.HijackBoot.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\abengine, Quarantined, [f1e901bfe1a95cdad7825a018e74fb05], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\TYPELIB\{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\INTERFACE\{025EEF9C-90F5-417E-9196-09FA4AAB4C92}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\INTERFACE\{03F13205-38FF-4361-BECE-EE939A002FA2}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\INTERFACE\{1FAAF6AB-B931-4D05-BA12-B0ECCCCE2D0F}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\INTERFACE\{4AEC2270-2E5F-40C8-BE5A-E5A5264714C0}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\INTERFACE\{52E8E39B-2773-448F-BC20-547CD8DA4685}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\INTERFACE\{62163814-0C94-4DC3-BA99-5E9E2420C914}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\INTERFACE\{68AEA825-D48B-4A56-87F0-6FCE988A2C48}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\INTERFACE\{6A0F07D3-F28E-4F45-8D4C-BBF8000F5BB8}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\INTERFACE\{7AF435BC-80A9-466E-938B-32E4482EBD65}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\INTERFACE\{85CEBABD-A775-41E2-8B67-FE06104F06ED}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\INTERFACE\{AE92A5AB-E575-4487-BCC0-96D333E5346C}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\INTERFACE\{C622315B-3049-43D4-9B41-D4B2DC2CD706}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\INTERFACE\{CDB85458-AE08-4106-B699-B946FF4A61CD}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{025EEF9C-90F5-417E-9196-09FA4AAB4C92}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{03F13205-38FF-4361-BECE-EE939A002FA2}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{1FAAF6AB-B931-4D05-BA12-B0ECCCCE2D0F}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{4AEC2270-2E5F-40C8-BE5A-E5A5264714C0}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{52E8E39B-2773-448F-BC20-547CD8DA4685}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{62163814-0C94-4DC3-BA99-5E9E2420C914}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{68AEA825-D48B-4A56-87F0-6FCE988A2C48}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{6A0F07D3-F28E-4F45-8D4C-BBF8000F5BB8}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{7AF435BC-80A9-466E-938B-32E4482EBD65}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{85CEBABD-A775-41E2-8B67-FE06104F06ED}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{AE92A5AB-E575-4487-BCC0-96D333E5346C}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{C622315B-3049-43D4-9B41-D4B2DC2CD706}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{CDB85458-AE08-4106-B699-B946FF4A61CD}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{025EEF9C-90F5-417E-9196-09FA4AAB4C92}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{03F13205-38FF-4361-BECE-EE939A002FA2}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{1FAAF6AB-B931-4D05-BA12-B0ECCCCE2D0F}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{4AEC2270-2E5F-40C8-BE5A-E5A5264714C0}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{52E8E39B-2773-448F-BC20-547CD8DA4685}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{62163814-0C94-4DC3-BA99-5E9E2420C914}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{68AEA825-D48B-4A56-87F0-6FCE988A2C48}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{6A0F07D3-F28E-4F45-8D4C-BBF8000F5BB8}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{7AF435BC-80A9-466E-938B-32E4482EBD65}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{85CEBABD-A775-41E2-8B67-FE06104F06ED}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{AE92A5AB-E575-4487-BCC0-96D333E5346C}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{C622315B-3049-43D4-9B41-D4B2DC2CD706}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{CDB85458-AE08-4106-B699-B946FF4A61CD}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\FastSearch, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Abengine.A, HKLM\SOFTWARE\CLASSES\abengineLib.DataContainer, Quarantined, [ba2006ba64263600446c9863cb38b64a], PUP.Optional.Abengine.A, HKLM\SOFTWARE\CLASSES\abengineLib.DataContainer.1, Quarantined, [e0fa8f3108821c1a7e32a6556c97d32d], PUP.Optional.Abengine.A, HKLM\SOFTWARE\CLASSES\abengineLib.DataController, Quarantined, [c3171da39bef82b4bff1fffc5ca73cc4], PUP.Optional.Abengine.A, HKLM\SOFTWARE\CLASSES\abengineLib.DataController.1, Quarantined, [17c3645ce8a29f97a01096658d76b64a], PUP.Optional.Abengine.A, HKLM\SOFTWARE\CLASSES\abengineLib.DataTable, Quarantined, [4793a020d8b26accbcf485766c97e21e], PUP.Optional.Abengine.A, HKLM\SOFTWARE\CLASSES\abengineLib.DataTable.1, Quarantined, [94460eb2404a290da30db04bdd26e917], PUP.Optional.Abengine.A, HKLM\SOFTWARE\CLASSES\abengineLib.DataTableFields, Quarantined, [c614f0d08109e254cde3b546db288e72], PUP.Optional.Abengine.A, HKLM\SOFTWARE\CLASSES\abengineLib.DataTableFields.1, Quarantined, [f6e4e0e0078388aeae0207f414ef7e82], PUP.Optional.Abengine.A, HKLM\SOFTWARE\CLASSES\abengineLib.DataTableHolder, Quarantined, [b02a516f8901b581892734c71ae96a96], PUP.Optional.Abengine.A, HKLM\SOFTWARE\CLASSES\abengineLib.DataTableHolder.1, Quarantined, [3aa08739adddd660555bef0c2fd4b050], PUP.Optional.Abengine.A, HKLM\SOFTWARE\CLASSES\abengineLib.LSPLogic, Quarantined, [04d6e9d75f2b072ff1bfd6258a797f81], PUP.Optional.Abengine.A, HKLM\SOFTWARE\CLASSES\abengineLib.LSPLogic.1, Quarantined, [4b8f0cb4c7c360d64a66a55605fe12ee], PUP.Optional.Abengine.A, HKLM\SOFTWARE\CLASSES\abengineLib.ReadOnlyManager, Quarantined, [835720a051396bcb991784775da62ad6], PUP.Optional.Abengine.A, HKLM\SOFTWARE\CLASSES\abengineLib.ReadOnlyManager.1, Quarantined, [9f3b338d503a3bfb6b457784649f8e72], PUP.Optional.Abengine.A, HKLM\SOFTWARE\CLASSES\APPID\abengine.EXE, Quarantined, [ac2ec0007d0d26106ea46135be47ad53], PUP.Optional.Abengine.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\abengine.EXE, Quarantined, [27b3c1ffcbbfce681101811532d340c0], PUP.Optional.Abengine.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\abengineLib.DataContainer, Quarantined, [5b7fa7196f1b59dd4c64d229c241d32d], PUP.Optional.Abengine.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\abengineLib.DataContainer.1, Quarantined, [4a907e429ceef73fcfe128d3cd36c63a], PUP.Optional.Abengine.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\abengineLib.DataController, Quarantined, [dcfec4fc6129fd39911f26d5c73c0000], PUP.Optional.Abengine.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\abengineLib.DataController.1, Quarantined, [a832cff19af0e254139d6398897af60a], PUP.Optional.Abengine.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\abengineLib.DataTable, Quarantined, [10ca80408406ad89832d78838a79be42], PUP.Optional.Abengine.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\abengineLib.DataTable.1, Quarantined, [cf0bfac683078bab9c1416e58a79f709], PUP.Optional.Abengine.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\abengineLib.DataTableFields, Quarantined, [6872e5dbb9d181b5f7b9e11aa65d08f8], PUP.Optional.Abengine.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\abengineLib.DataTableFields.1, Quarantined, [efebd3ed5b2f0c2afeb2609bad5623dd], PUP.Optional.Abengine.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\abengineLib.DataTableHolder, Quarantined, [24b64d7324662016a907a853e91acb35], PUP.Optional.Abengine.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\abengineLib.DataTableHolder.1, Quarantined, [35a5d9e7741641f5911f0eed12f156aa], PUP.Optional.Abengine.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\abengineLib.LSPLogic, Quarantined, [9149cdf37a1006305060629993704eb2], PUP.Optional.Abengine.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\abengineLib.LSPLogic.1, Quarantined, [d4069030fa90aa8cbcf467941de6e818], PUP.Optional.Abengine.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\abengineLib.ReadOnlyManager, Quarantined, [d40608b8b6d40531347cb04b5da67c84], PUP.Optional.Abengine.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\abengineLib.ReadOnlyManager.1, Quarantined, [0fcb9927e5a5e74f565a4bb052b103fd], PUP.Optional.Abengine.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\abengine.EXE, Quarantined, [d2088f31058572c49d75b6e046bf0cf4], PUP.Optional.FastSearch.A, HKLM\SOFTWARE\WOW6432NODE\FASTSEARCH, Quarantined, [f9e1239d62288babb024eea96d987789], Registry Values: 1PUP.Optional.FastSearch.A, HKLM\SOFTWARE\WOW6432NODE\FASTSEARCH|affid, Quarantined, [f9e1239d62288babb024eea96d987789], Registry Data: 0(No malicious items detected)Folders: 1PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch, Delete-on-Reboot, [16c42d93206aae8889539205ce370cf4], Files: 38PUP.Optional.Winsock.HijackBoot.A, C:\Program Files (x86)\FastSearch\abengine.exe, Delete-on-Reboot, [f1e901bfe1a95cdad7825a018e74fb05], PUP.Optional.Winsock.HijackBoot.A, C:\Program Files (x86)\FastSearch\abenginecert.dll, Delete-on-Reboot, [0fcbb0100e7c5bdbba9faead34ce1be5], PUP.Optional.Winsock.HijackBoot.A, C:\Users\{username}\Desktop\Fast Search (LSP Hijacker).exe, Quarantined, [1fbb586895f5e6501247b6a5d52df50b], PUP.Optional.Winsock.HijackBoot.A, C:\Program Files (x86)\FastSearch\ABDLL.dll, Quarantined, [f9e1f5cb7b0fba7c5603b2a944be51af], PUP.Optional.Winsock.HijackBoot.A, C:\Program Files (x86)\FastSearch\ABDLL64.dll, Quarantined, [6b6f5769e8a200368fca61fa10f246ba], PUP.Optional.Winsock.HijackBoot.A, C:\Program Files (x86)\FastSearch\ABDLL64.exe, Quarantined, [30aad5ebabdf8bab6dec3f1c4bb7c13f], PUP.Optional.Winsock.HijackBoot.A, C:\Program Files (x86)\FastSearch\abengine.dll, Quarantined, [18c2932df991a096ea6f0c4ffb07ef11], PUP.Optional.Winsock.HijackBoot.A, C:\Program Files (x86)\FastSearch\abengine64.dll, Quarantined, [b525734d266462d4a2b7da81e61ca060], PUP.Optional.Winsock.HijackBoot.A, C:\Program Files (x86)\FastSearch\abenginep.exe, Quarantined, [8d4dccf48802e452b4a59ebdc43ec33d], PUP.Optional.Winsock.HijackBoot.A, C:\Program Files (x86)\FastSearch\abenginew.exe, Quarantined, [58827050c5c562d4154479e290722ad6], PUP.Optional.Winsock.HijackBoot.A, C:\Program Files (x86)\FastSearch\abenginewd.dll, Quarantined, [b7239d23444634024613a7b414eeea16], PUP.Optional.Winsock.HijackBoot.A, C:\Windows\System32\abengine64.dll, Delete-on-Reboot, [c119bd038802c571194064f700023ec2], PUP.Optional.Winsock.HijackBoot.A, C:\Windows\SysWOW64\abengine.dll, Delete-on-Reboot, [26b4c7f97713d5612039203b738fdb25], PUP.Optional.ABEngine.A, C:\Users\{username}\AppData\Local\Temp\abengine.log, Quarantined, [d505556b52389f9725cdb75048bcca36], PUP.Optional.ABEngine.A, C:\Windows\Temp\abengine.log, Delete-on-Reboot, [86547749781289ad14ded532cd37a55b], PUP.Optional.Winsock.HijackBoot, C:\Windows\System32\abengineOff.ini, Quarantined, [c416764aed9dc175788ba4680ff557a9], PUP.Optional.Winsock.HijackBoot, C:\Windows\SysWOW64\abengineOff.ini, Quarantined, [c713ebd51575102690737993a65ea15f], PUP.Optional.Abengine.A, C:\Users\{username}\AppData\Local\Temp\lengine.ini.log, Quarantined, [ae2c9b255a3083b35a39236f778e2bd5], PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch\abengine.tlb, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch\lengine.ini, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch\freebl3.dll, Delete-on-Reboot, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch\lengine.exe, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch\lengine64.exe, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch\libnspr4.dll, Delete-on-Reboot, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch\libplc4.dll, Delete-on-Reboot, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch\libplds4.dll, Delete-on-Reboot, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch\nss3.dll, Delete-on-Reboot, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch\nssckbi.dll, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch\nssdbm3.dll, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch\nssutil3.dll, Delete-on-Reboot, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch\slite.exe, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch\smime3.dll, Delete-on-Reboot, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch\softokn3.dll, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch\sqlite3.dll, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch\ssl3.dll, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch\term.txt, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch\tet3008.exe, Quarantined, [16c42d93206aae8889539205ce370cf4], PUP.Optional.Winsock.HijackBoot, C:\Program Files (x86)\FastSearch\uninstall.exe, Quarantined, [16c42d93206aae8889539205ce370cf4], Physical Sectors: 0(No malicious items detected)(end)
As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.

We use different ways of protecting your computer(s):

  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.
Link to post
Share on other sites
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.