PUP aircraft_instruments

*file
C\Program Files\aircraft_instruments\aircraft_instrumentsToolbarHelper.exe
C\Program Files\aircraft_instruments\UNWISE.EXE

*reg_key

HKCU\Software\AppDataLow\Software\aircraft_instruments
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9CA9AA5F-8D88-4CE7-88CA-994511ACA89E}
HKLM\SOFTWARE\aircraft_instruments
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\aircraft_instruments Toolbar
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9ca9aa5f-8d88-4ce7-88ca-994511aca89e}
HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks | {9ca9aa5f-8d88-4ce7-88ca-994511aca89e}
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar | {9ca9aa5f-8d88-4ce7-88ca-994511aca89e}
HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks | {9ca9aa5f-8d88-4ce7-88ca-994511aca89e}
 

*reg_val

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main | Start Page ,  http://search.conduit.com/

http://search.conduit.com -> use start page URL
 
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes : DefaultScope , {afdbddaa-5d3f-42ee-b79c-185a7020515b}
{afdbddaa-5d3f-42ee-b79c-185a7020515b} -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} : google search suggestions

HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes | DefaultScope , {afdbddaa-5d3f-42ee-b79c-185a7020515b}
{afdbddaa-5d3f-42ee-b79c-185a7020515b} -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} : google search suggestions

 

 

 

 

PUP.Ask Toolbar Chrome.exe

 

*file
C:\Program Files\Google\Chrome\Application\Ask Toolbar Chrome.exe
C:\Program Files\Google\Chrome\Application\Ask Toolbar Chrome.lnk
 
*reg_val
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run|Ask Toolbar Chrome