Jump to content

Search the Community

Showing results for tags 'Mindspark'.

  • Search By Tags

    Type tags separated by commas.
  • Search By Author

Content Type


Forums

  • Announcements
    • Malwarebytes News
    • Beta Testing Program
  • Malware Removal Help
    • Windows Malware Removal Help & Support
    • Mac Malware Removal Help & Support
    • Mobile Malware Removal Help & Support
    • Malware Removal Self-Help Guides
  • Malwarebytes for Home Support
    • Malwarebytes for Windows Support Forum
    • Malwarebytes for Mac Support Forum
    • Malwarebytes for Android Support Forum
    • Malwarebytes for iOS Support
    • Malwarebytes Privacy
    • Malwarebytes Browser Guard
    • False Positives
    • Comments and Suggestions
  • Malwarebytes for Business Support
    • Malwarebytes Endpoint Protection
    • Malwarebytes Incident Response (includes Breach Remediation)
    • Malwarebytes Endpoint Security
    • Malwarebytes Business Products Comments and Suggestions
  • Malwarebytes Tools and Other Products
    • Malwarebytes AdwCleaner
    • Malwarebytes Junkware Removal Tool Support
    • Malwarebytes Anti-Rootkit BETA Support
    • Malwarebytes Techbench USB (Legacy)
    • Malwarebytes Secure Backup discontinued
    • Other Tools
    • Malwarebytes Tools Comments and Suggestions
  • General Computer Help and Security Updates
    • BSOD, Crashes, Kernel Debugging
    • General Windows PC Help
  • Research Center
    • Newest Rogue-Ransomware Threats
    • Newest Malware Threats
    • Newest Mobile Threats
    • Newest IP or URL Threats
    • Newest Mac Threats
    • Report Scam Phone Numbers
  • General
    • General Chat
    • Forums Announcements & Feedback

Find results in...

Find results that contain...


Date Created

  • Start

    End


Last Updated

  • Start

    End


Filter by number of...

Joined

  • Start

    End


Group


AIM


MSN


Website URL


ICQ


Yahoo


Jabber


Location


Interests

Found 12 results

  1. In our organiztion we are continually experiencing hundreds/thousands of log entries for PUP.Option.MindSpark in various forms within Chrome. Wondering how best to either block these or if this is something we need to worry about? Below is a sample from a Management Console report. Please let me know if I should be looking in a different area. Thank you PUP.Optional.MindSpark 02/27/2019 14:13 Quarantined C:\Users\sagerval\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk Anti-Malware PUP.Optional.MindSpark 02/27/2019 14:13 Quarantined C:\Users\sagerval\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\13.855.14.50873_0 Anti-Malware PUP.Optional.MindSpark 02/27/2019 14:13 Quarantined C:\Users\sagerval\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\13.855.14.50873_0\config Anti-Malware PUP.Optional.MindSpark 02/27/2019 14:13 Quarantined C:\Users\sagerval\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\13.855.14.50873_0\icons Anti-Malware PUP.Optional.MindSpark 02/27/2019 14:13 Quarantined C:\Users\sagerval\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\13.855.14.50873_0\js Anti-Malware PUP.Optional.MindSpark 02/27/2019 14:13 Quarantined C:\Users\sagerval\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\13.855.14.50873_0\_locales Anti-Malware PUP.Optional.MindSpark 02/27/2019 14:13 Quarantined C:\Users\sagerval\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\13.855.14.50873_0\_locales\en Anti-Malware PUP.Optional.MindSpark 02/27/2019 14:13 Quarantined C:\Users\sagerval\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\13.855.14.50873_0\_metadata Anti-Malware PUP.Optional.MindSpark 02/27/2019 14:13 Quarantined C:\Users\sagerval\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mallpejgeafdahhflmliiahjdpgbegpk Anti-Malware PUP.Optional.MindSpark.Generic 02/27/2019 14:13 Quarantined C:\Users\sagerval\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajldmnbefgjhdcpcgppaiimhbdfjoedp\13.855.14.53017_0\config Anti-Malware PUP.Optional.MindSpark.Generic 02/27/2019 14:13 Quarantined C:\Users\sagerval\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajldmnbefgjhdcpcgppaiimhbdfjoedp\13.855.14.53017_0 Anti-Malware PUP.Optional.MindSpark.Generic 02/27/2019 14:13 Quarantined C:\Users\sagerval\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajldmnbefgjhdcpcgppaiimhbdfjoedp\13.855.14.53017_0\icons Anti-Malware PUP.Optional.MindSpark.Generic 02/27/2019 14:13 Quarantined C:\Users\sagerval\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajldmnbefgjhdcpcgppaiimhbdfjoedp\13.855.14.53017_0\js Anti-Malware PUP.Optional.MindSpark.Generic 02/27/2019 14:13 Quarantined C:\Users\sagerval\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajldmnbefgjhdcpcgppaiimhbdfjoedp\13.855.14.53017_0\_locales Anti-Malware PUP.Optional.MindSpark.Generic 02/27/2019 14:13 Quarantined C:\Users\sagerval\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajldmnbefgjhdcpcgppaiimhbdfjoedp\13.855.14.53017_0\_locales\en Anti-Malware PUP.Optional.MindSpark.Generic 02/27/2019 14:13 Quarantined C:\Users\sagerval\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajldmnbefgjhdcpcgppaiimhbdfjoedp\13.855.14.53017_0\_metadata Anti-Malware
  2. What is DailyFunnyWorld?The Malwarebytes research team has determined that DailyFunnyWorld is a browser NewTab. These so-called "NewTabs" can manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice.DailyFunnyWorld is a member of the Mindspark/Ask family now known as IAC Applications.How do I know if my computer is affected by DailyFunnyWorld?You may see these browser extensions/add-ons:these warnings during install:You may see this entry in your list of installed software:this icon in the menubar of some of the affected browsers:and this new homepage in the affected browsers:How did DailyFunnyWorld get on my computer?Browser hijackers use different methods for distributing themselves. This particular one was downloaded from their website.How do I remove DailyFunnyWorld?Our program Malwarebytes can detect and remove this potentially unwanted program.You can use their own uninstall instructions first, but I would advise to follow the steps below anyway. Please download Malwarebytes to your desktop. Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program. Then click Finish. Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu. If another update of the definitions is available, it will be implemented before the rest of the scanning procedure. When the scan is complete, make sure that all Threats are selected, and click Remove Selected. Restart your computer when prompted to do so. Is there anything else I need to do to get rid of DailyFunnyWorld? No, Malwarebytes' Anti-Malware removes DailyFunnyWorld completely. If your browsers have been hijacked, you should read our Restore Browser page. You can read there how to fix additional browser redirect methods. How would the full version of Malwarebytes help protect me?We hope our application and this guide have helped you eradicate this hijacker.As you can see below the full version of Malwarebytes would have protected you against the DailyFunnyWorld hijacker. It would have warned you before the hijacker could install itself, giving you a chance to stop it before it became too late. and it blocks traffic to some of their domains: Technical details for expertsPossible signs in a FRST log: HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp.myway.com/dailyfunnyworld/ttab02/index.html?n={n}&p2={p2}&ptb={ptb}&coid={coid} FF HomepageOverride: Mozilla\Firefox\Profiles\{profile}.default -> Enabled: _roMembers_@free.dailyfunnyworld.com FF NewTabOverride: Mozilla\Firefox\Profiles\{profile}.default -> Enabled: _roMembers_@free.dailyfunnyworld.com FF Extension: (DailyFunnyWorld) - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\Extensions\_roMembers_@free.dailyfunnyworld.com.xpi [2019-02-28] [UpdateUrl:hxxps:\/\/updates.tb.ask.com\/updateXpi.json?id=239939196&version=8.885.14.36697&track=TTAB02&trackRevision=1&fromId=_roMembers_%40free.dailyfunnyworld.com&isBridgeExtension=false] CHR NewTab: Default -> Active:"chrome-extension://oiedaodjjdfnkfjaphcklblcolefkigc/newtabproduct.html" CHR Extension: (DailyFunnyWorld) - C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc [2019-02-28] C:\Users\{username}\AppData\Local\DailyFunnyWorldTooltab DailyFunnyWorld Internet Explorer Homepage and New Tab (HKCU\...\DailyFunnyWorldTooltab Uninstall Internet Explorer) (Version: - Mindspark Interactive Network, Inc.) <==== ATTENTION Significant changes made by the installers: File system details [View: All details] (Selection) --------------------------------------------------- Adds the folder C:\Users\{username}\AppData\Local\DailyFunnyWorldTooltab Adds the file TooltabExtension.dll"="6/22/2018 6:22 PM, 266864 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0 Adds the file manifest.json"="2/28/2019 9:00 AM, 2699 bytes, A Adds the file newtabproduct.html"="2/8/2019 3:01 PM, 1349 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\_locales Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\_metadata Adds the file computed_hashes.json"="2/28/2019 9:00 AM, 5641 bytes, A Adds the file verified_contents.json"="2/8/2019 3:01 PM, 7177 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\config Adds the file config.json"="2/8/2019 3:01 PM, 1499 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\icons Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\js Adds the file ajax.js"="2/8/2019 3:01 PM, 3263 bytes, A Adds the file babAPI.js"="2/8/2019 3:01 PM, 5703 bytes, A Adds the file babClickHandler.js"="2/8/2019 3:01 PM, 11414 bytes, A Adds the file babContentScript.js"="2/8/2019 3:01 PM, 3275 bytes, A Adds the file babContentScriptAPI.js"="2/8/2019 3:01 PM, 5934 bytes, A Adds the file background.js"="2/8/2019 3:01 PM, 22384 bytes, A Adds the file browserUtils.js"="2/8/2019 3:01 PM, 1532 bytes, A Adds the file chrome.js"="2/8/2019 3:01 PM, 146 bytes, A Adds the file contentScriptConnectionManager.js"="2/8/2019 3:01 PM, 22629 bytes, A Adds the file dateTimeUtils.js"="2/8/2019 3:01 PM, 1213 bytes, A Adds the file dlp.js"="2/8/2019 3:01 PM, 5815 bytes, A Adds the file dlpHelper.js"="2/8/2019 3:01 PM, 1835 bytes, A Adds the file extensionDetect.js"="2/8/2019 3:01 PM, 4354 bytes, A Adds the file index.js"="2/8/2019 3:01 PM, 49 bytes, A Adds the file localStorageContentScript.js"="2/8/2019 3:01 PM, 2236 bytes, A Adds the file logger.js"="2/8/2019 3:01 PM, 516 bytes, A Adds the file meta.js"="2/8/2019 3:01 PM, 516 bytes, A Adds the file offerService.js"="2/8/2019 3:01 PM, 16950 bytes, A Adds the file pageUtils.js"="2/8/2019 3:01 PM, 3577 bytes, A Adds the file PartnerId.js"="2/8/2019 3:01 PM, 16402 bytes, A Adds the file polyfill.js"="2/8/2019 3:01 PM, 875 bytes, A Adds the file product.js"="2/8/2019 3:01 PM, 8604 bytes, A Adds the file remoteConfigLoader.js"="2/8/2019 3:01 PM, 4961 bytes, A Adds the file splashPageLocalStorageSetter.js"="2/8/2019 3:01 PM, 88 bytes, A Adds the file splashPageRedirectHandler.js"="2/8/2019 3:01 PM, 2868 bytes, A Adds the file storageUtils.js"="2/8/2019 3:01 PM, 1718 bytes, A Adds the file TemplateParser.js"="2/8/2019 3:01 PM, 3153 bytes, A Adds the file ul.js"="2/8/2019 3:01 PM, 3969 bytes, A Adds the file urlFragmentActions.js"="2/8/2019 3:01 PM, 2498 bytes, A Adds the file urlUtils.js"="2/8/2019 3:01 PM, 5906 bytes, A Adds the file util.js"="2/8/2019 3:01 PM, 2779 bytes, A Adds the file webtooltabAPI.js"="2/8/2019 3:01 PM, 9768 bytes, A Adds the file webTooltabAPIProxy.js"="2/8/2019 3:01 PM, 7589 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oiedaodjjdfnkfjaphcklblcolefkigc Adds the file 000003.log"="2/28/2019 9:02 AM, 5821 bytes, A Adds the file CURRENT"="2/28/2019 9:00 AM, 16 bytes, A Adds the file LOCK"="2/28/2019 9:00 AM, 0 bytes, A Adds the file LOG"="2/28/2019 9:02 AM, 412 bytes, A Adds the file LOG.old"="2/28/2019 9:00 AM, 184 bytes, A Adds the file MANIFEST-000001"="2/28/2019 9:00 AM, 41 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\browser-extension-data\_roMembers_@free.dailyfunnyworld.com Adds the file storage.js"="2/28/2019 9:02 AM, 2723 bytes, A In the existing folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions Adds the file _roMembers_@free.dailyfunnyworld.com.xpi"="2/28/2019 8:57 AM, 95523 bytes, A Registry details [View: All details] (Selection) ------------------------------------------------ [HKEY_CURRENT_USER\Software\DailyFunnyWorld] "Start Page"="REG_SZ", "http://hp.myway.com/dailyfunnyworld/ttab02/index.html?n={n}&p2={p2}&ptb={ptb}&coid={coid}" "UnInstallSurveyUrl"="REG_SZ", "http://@{downloadDomain}.dl.myway.com/uninstall.jhtml?surveyUrl=http%3A%2F%2Fwww.research.net%2Fr%2FHYSCVNM%3Fc%3D{ptb}%26ptb%3D{p2}" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page" ==> REG_SZ, "http://hp.myway.com/dailyfunnyworld/ttab02/index.html?n={n}&p2={p2}&ptb={ptb}&coid={coid}" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\DailyFunnyWorldTooltab Uninstall Internet Explorer] "DisplayName"="REG_SZ", "DailyFunnyWorld Internet Explorer Homepage and New Tab" "HelpLink"="REG_SZ", "http://support.mindspark.com/" "Publisher"="REG_SZ", "Mindspark Interactive Network, Inc." "UninstallString"="REG_SZ", "Rundll32.exe "C:\Users\{username}\AppData\Local\DailyFunnyWorldTooltab\TooltabExtension.dll" U uninstall:DailyFunnyWorld" "URLInfoAbout"="REG_SZ", "http://support.mindspark.com/" The Malwarebytes scan log: Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 2/28/19 Scan Time: 9:10 AM Log File: 4e1e18fd-3b30-11e9-9c2d-00ffdcc6fdfc.json -Software Information- Version: 3.7.1.2839 Components Version: 1.0.538 Update Package Version: 1.0.9480 License: Premium -System Information- OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: {computername}\{username} -Scan Summary- Scan Type: Threat Scan Scan Initiated By: Manual Result: Completed Objects Scanned: 236086 Threats Detected: 90 Threats Quarantined: 90 Time Elapsed: 5 min, 32 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Enabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 1 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\DailyFunnyWorldTooltab\TooltabExtension.dll, Quarantined, [1727], [356944],1.0.9480 Registry Key: 2 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\DailyFunnyWorldTooltab Uninstall Internet Explorer, Quarantined, [1727], [356944],1.0.9480 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\DailyFunnyWorld, Quarantined, [1727], [444113],1.0.9480 Registry Value: 3 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\DailyFunnyWorld|START PAGE, Quarantined, [1727], [444113],1.0.9480 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\DailyFunnyWorldTooltab Uninstall Internet Explorer|PUBLISHER, Quarantined, [612], [352442],1.0.9480 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\GOOGLE\CHROME\PREFERENCEMACS\Default\extensions.settings|oiedaodjjdfnkfjaphcklblcolefkigc, Quarantined, [1727], [443121],1.0.9480 Registry Data: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, Replaced, [612], [293497],1.0.9480 Data Stream: 0 (No malicious items detected) Folder: 19 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\DailyFunnyWorldTooltab, Quarantined, [1727], [356944],1.0.9480 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\BROWSER-EXTENSION-DATA\_roMembers_@free.dailyfunnyworld.com, Quarantined, [1727], [468075],1.0.9480 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Local Extension Settings\oiedaodjjdfnkfjaphcklblcolefkigc, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\_locales\es_419, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\_locales\pt_BR, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\_locales\pt_PT, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\_locales\de, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\_locales\en, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\_locales\es, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\_locales\fr, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\_locales\it, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\_locales\ja, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\_metadata, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\_locales, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\config, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\icons, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\js, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\OIEDAODJJDFNKFJAPHCKLBLCOLEFKIGC, Quarantined, [1727], [443121],1.0.9480 File: 64 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\DailyFunnyWorldTooltab\TooltabExtension.dll, Quarantined, [1727], [356944],1.0.9480 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\EXTENSIONS\_roMembers_@free.dailyfunnyworld.com.xpi, Quarantined, [1727], [457930],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\browser-extension-data\_roMembers_@free.dailyfunnyworld.com\storage.js, Quarantined, [1727], [468075],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oiedaodjjdfnkfjaphcklblcolefkigc\000003.log, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oiedaodjjdfnkfjaphcklblcolefkigc\CURRENT, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oiedaodjjdfnkfjaphcklblcolefkigc\LOCK, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oiedaodjjdfnkfjaphcklblcolefkigc\LOG, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oiedaodjjdfnkfjaphcklblcolefkigc\LOG.old, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oiedaodjjdfnkfjaphcklblcolefkigc\MANIFEST-000001, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Replaced, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Preferences, Replaced, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\OIEDAODJJDFNKFJAPHCKLBLCOLEFKIGC\13.855.14.51548_0\MANIFEST.JSON, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\config\config.json, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\icons\icon128.png, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\icons\icon16.png, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\icons\icon19disabled.png, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\icons\icon19on.png, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\icons\icon48.png, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\js\meta.js, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\js\ajax.js, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\js\babAPI.js, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\js\babClickHandler.js, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\js\babContentScript.js, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\js\babContentScriptAPI.js, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\js\background.js, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\js\browserUtils.js, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\js\chrome.js, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\js\contentScriptConnectionManager.js, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\js\dateTimeUtils.js, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\js\dlp.js, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\js\dlpHelper.js, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\js\extensionDetect.js, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\js\index.js, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\js\localStorageContentScript.js, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\js\logger.js, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\js\offerService.js, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\js\pageUtils.js, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\js\PartnerId.js, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\js\polyfill.js, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\js\product.js, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\js\remoteConfigLoader.js, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\js\splashPageLocalStorageSetter.js, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\js\splashPageRedirectHandler.js, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\js\storageUtils.js, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\js\TemplateParser.js, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\js\ul.js, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\js\urlFragmentActions.js, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\js\urlUtils.js, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\js\util.js, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\js\webtooltabAPI.js, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\js\webTooltabAPIProxy.js, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\_locales\de\messages.json, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\_locales\en\messages.json, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\_locales\es\messages.json, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\_locales\es_419\messages.json, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\_locales\fr\messages.json, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\_locales\it\messages.json, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\_locales\ja\messages.json, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\_locales\pt_BR\messages.json, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\_locales\pt_PT\messages.json, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\_metadata\computed_hashes.json, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\_metadata\verified_contents.json, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiedaodjjdfnkfjaphcklblcolefkigc\13.855.14.51548_0\newtabproduct.html, Quarantined, [1727], [443121],1.0.9480 PUP.Optional.MindSpark, C:\USERS\{username}\DESKTOP\DAILYFUNNYWORLD.EXE, Quarantined, [612], [365288],1.0.9480 Physical Sector: 0 (No malicious items detected) WMI: 0 (No malicious items detected) (end) As mentioned before the full version of Malwarebytes could have protected your computer against this threat.We use different ways of protecting your computer(s): Dynamically Blocks Malware Sites & Servers Malware Execution Prevention Save yourself the hassle and get protected.
  3. What is MyMapsExpress? The Malwarebytes research team has determined that MyMapsExpress is a browser NewTab. These so-called "NewTabs" can manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. MyMapsExpress is a member of the Mindspark/Ask family now known as IAC Applications. How do I know if my computer is affected by MyMapsExpress? You may see these browser extensions/add-ons: these warnings during install: You may see this entry in your list of installed software: and this new homepage in the affected browsers: How did MyMapsExpress get on my computer? Browser hijackers use different methods for distributing themselves. This particular one was downloaded from their website. How do I remove MyMapsExpress? Our program Malwarebytes can detect and remove this potentially unwanted program. You can use their own uninstall instructions first, but I would advise to follow the steps below anyway. Please download Malwarebytes to your desktop. Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program. Then click Finish. Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu. If another update of the definitions is available, it will be implemented before the rest of the scanning procedure. When the scan is complete, make sure that all Threats are selected, and click Remove Selected. Restart your computer when prompted to do so. Is there anything else I need to do to get rid of MyMapsExpress? If you are using an older version of Malwarebytes, you may have to remove the Chrome extension manually under Tools > More Tools > Extensions. Click on the bin behind the MyMapsExpress entry and confirm Remove in the prompt. If your browsers have been hijacked, you should read our Restore Browser page. You can read there how to fix additional browser redirect methods. How would the full version of Malwarebytes help protect me? We hope our application and this guide have helped you eradicate this hijacker. As you can see below the full version of Malwarebytes would have protected you against the MyMapsExpress hijacker. It would have warned you before the hijacker could install itself, giving you a chance to stop it before it became too late. and it blocks traffic to some of their domains: Technical details for experts Possible signs in a FRST log: HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp.myway.com/mymapsexpress/ttab02/index.html?n={n1}&p2={p2}&ptb={ptb}&coid={coid} FF Extension: No Name - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\Extensions\_k8Members_@www.mymapsexpress.com.xpi [2018-01-16] C:\Users\{username}\AppData\Local\MyMapsExpressTooltab MyMapsExpress Internet Explorer Homepage and New Tab (HKCU\...\MyMapsExpressTooltab Uninstall Internet Explorer) (Version: - Mindspark Interactive Network, Inc.) <==== ATTENTION Most signifiant changes made by the installers: File system details [View: All details] (Selection) --------------------------------------------------- Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\plljhbdegkhnpjnjbhodbjgdmdnnlbcd\13.321.12.18585_0 Adds the file dynamicNewTab.html"="11/9/2017 3:49 PM, 932 bytes, A Adds the file manifest.json"="1/16/2018 9:34 AM, 2482 bytes, A Adds the file product.html"="11/9/2017 3:49 PM, 932 bytes, A Adds the file stubby.html"="11/9/2017 3:49 PM, 932 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\plljhbdegkhnpjnjbhodbjgdmdnnlbcd\13.321.12.18585_0\_metadata Adds the file computed_hashes.json"="1/16/2018 9:34 AM, 3620 bytes, A Adds the file verified_contents.json"="11/9/2017 3:49 PM, 4621 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\plljhbdegkhnpjnjbhodbjgdmdnnlbcd\13.321.12.18585_0\config Adds the file config.json"="11/9/2017 3:49 PM, 1530 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\plljhbdegkhnpjnjbhodbjgdmdnnlbcd\13.321.12.18585_0\icons Adds the file icon128.png"="1/16/2018 9:34 AM, 5516 bytes, A Adds the file icon16.png"="11/9/2017 3:49 PM, 894 bytes, A Adds the file icon19disabled.png"="11/9/2017 3:49 PM, 789 bytes, A Adds the file icon19on.png"="1/16/2018 9:34 AM, 561 bytes, A Adds the file icon48.png"="1/16/2018 9:34 AM, 1800 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\plljhbdegkhnpjnjbhodbjgdmdnnlbcd\13.321.12.18585_0\js Adds the file ajax.js"="11/9/2017 3:49 PM, 2250 bytes, A Adds the file background.js"="11/9/2017 3:49 PM, 19608 bytes, A Adds the file chrome.js"="11/9/2017 3:49 PM, 180 bytes, A Adds the file content_script.js"="11/9/2017 3:49 PM, 5917 bytes, A Adds the file dlp.js"="11/9/2017 3:49 PM, 5690 bytes, A Adds the file dlpHelper.js"="11/9/2017 3:49 PM, 1836 bytes, A Adds the file extension_detect.js"="11/9/2017 3:49 PM, 4343 bytes, A Adds the file index.js"="11/9/2017 3:49 PM, 82 bytes, A Adds the file logger.js"="11/9/2017 3:49 PM, 575 bytes, A Adds the file pageUtils.js"="11/9/2017 3:49 PM, 2241 bytes, A Adds the file product.js"="11/9/2017 3:49 PM, 4434 bytes, A Adds the file storage.js"="11/9/2017 3:49 PM, 1675 bytes, A Adds the file TabManager.js"="11/9/2017 3:49 PM, 189 bytes, A Adds the file TemplateParser.js"="11/9/2017 3:49 PM, 3080 bytes, A Adds the file ul.js"="11/9/2017 3:49 PM, 3824 bytes, A Adds the file urlFragmentActions.js"="11/9/2017 3:49 PM, 2521 bytes, A Adds the file urlUtils.js"="11/9/2017 3:49 PM, 5385 bytes, A Adds the file util.js"="11/9/2017 3:49 PM, 3840 bytes, A Adds the file webtooltabAPI.js"="11/9/2017 3:49 PM, 8357 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\plljhbdegkhnpjnjbhodbjgdmdnnlbcd\13.321.12.18585_0\libs Adds the file PartnerId.js"="11/9/2017 3:49 PM, 22130 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\plljhbdegkhnpjnjbhodbjgdmdnnlbcd Adds the file 000003.log"="1/16/2018 9:34 AM, 4609 bytes, A Adds the file CURRENT"="1/16/2018 9:34 AM, 16 bytes, A Adds the file LOCK"="1/16/2018 9:34 AM, 0 bytes, A Adds the file LOG"="1/16/2018 9:36 AM, 412 bytes, A Adds the file LOG.old"="1/16/2018 9:36 AM, 412 bytes, A Adds the file MANIFEST-000001"="1/16/2018 9:34 AM, 41 bytes, A Adds the folder C:\Users\{username}\AppData\Local\MyMapsExpressTooltab Adds the file TooltabExtension.dll"="8/3/2017 11:30 PM, 266864 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\browser-extension-data\_k8Members_@www.mymapsexpress.com Adds the file storage.js"="1/16/2018 9:39 AM, 2279 bytes, A In the existing folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions Adds the file _k8Members_@www.mymapsexpress.com.xpi"="1/16/2018 9:37 AM, 46915 bytes, A Registry details [View: All details] (Selection) ------------------------------------------------ [HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings] "plljhbdegkhnpjnjbhodbjgdmdnnlbcd"="REG_SZ", "76ED3C314B2D2494829B8E65EA4D0CB1006D4A244382816508D0164ED5CDD80E" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page" = REG_SZ, "http://hp.myway.com/mymapsexpress/ttab02/index.html?n={n1}&p2={p2}&ptb={ptb}&coid={coid}" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyMapsExpressTooltab Uninstall Internet Explorer] "DisplayName"="REG_SZ", "MyMapsExpress Internet Explorer Homepage and New Tab" "HelpLink"="REG_SZ", "http://support.mindspark.com/" "Publisher"="REG_SZ", "Mindspark Interactive Network, Inc." "UninstallString"="REG_SZ", "Rundll32.exe "C:\Users\{username}\AppData\Local\MyMapsExpressTooltab\TooltabExtension.dll" U uninstall:MyMapsExpress" "URLInfoAbout"="REG_SZ", "http://support.mindspark.com/" [HKEY_CURRENT_USER\Software\MyMapsExpress] "Start Page"="REG_SZ", "http://hp.myway.com/mymapsexpress/ttab02/index.html?n={n1}&p2={p1}&ptb={ptb}&coid={coid}" "UnInstallSurveyUrl"="REG_SZ", "http://@{downloadDomain}.dl.myway.com/uninstall.jhtml?surveyUrl=http%3A%2F%2Fwww.research.net%2Fr%2F{n}%3Fc%3D{ptb}%26ptb%3D{ptb1}" The Malwarebytes scan log: Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 1/16/18 Scan Time: 9:44 AM Log File: 7f68a311-fa99-11e7-b830-080027750297.json Administrator: Yes -Software Information- Version: 3.3.1.2183 Components Version: 1.0.262 Update Package Version: 1.0.3704 License: Premium -System Information- OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: {computername}\{username} -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 241129 Threats Detected: 60 Threats Quarantined: 60 Time Elapsed: 6 min, 47 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 1 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\MyMapsExpressTooltab\TooltabExtension.dll, Quarantined, [1369], [356944],1.0.3704 Registry Key: 2 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\MyMapsExpressTooltab Uninstall Internet Explorer, Quarantined, [1369], [356944],1.0.3704 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\MyMapsExpress, Quarantined, [1369], [444113],1.0.3704 Registry Value: 2 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\MyMapsExpressTooltab Uninstall Internet Explorer|PUBLISHER, Quarantined, [228], [352442],1.0.3704 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\MyMapsExpress|START PAGE, Quarantined, [1369], [444113],1.0.3704 Registry Data: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, Replaced, [228], [293497],1.0.3704 Data Stream: 0 (No malicious items detected) Folder: 10 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\MyMapsExpressTooltab, Quarantined, [1369], [356944],1.0.3704 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\BROWSER-EXTENSION-DATA\_k8Members_@www.mymapsexpress.com, Quarantined, [1369], [468075],1.0.3704 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\plljhbdegkhnpjnjbhodbjgdmdnnlbcd, Quarantined, [1369], [467555],1.0.3704 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\plljhbdegkhnpjnjbhodbjgdmdnnlbcd\13.321.12.18585_0\_metadata, Quarantined, [1369], [467555],1.0.3704 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\plljhbdegkhnpjnjbhodbjgdmdnnlbcd\13.321.12.18585_0\config, Quarantined, [1369], [467555],1.0.3704 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\plljhbdegkhnpjnjbhodbjgdmdnnlbcd\13.321.12.18585_0\icons, Quarantined, [1369], [467555],1.0.3704 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\plljhbdegkhnpjnjbhodbjgdmdnnlbcd\13.321.12.18585_0\libs, Quarantined, [1369], [467555],1.0.3704 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\plljhbdegkhnpjnjbhodbjgdmdnnlbcd\13.321.12.18585_0\js, Quarantined, [1369], [467555],1.0.3704 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\plljhbdegkhnpjnjbhodbjgdmdnnlbcd\13.321.12.18585_0, Quarantined, [1369], [467555],1.0.3704 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\PLLJHBDEGKHNPJNJBHODBJGDMDNNLBCD, Quarantined, [1369], [467555],1.0.3704 File: 44 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\MyMapsExpressTooltab\TooltabExtension.dll, Quarantined, [1369], [356944],1.0.3704 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\browser-extension-data\_k8Members_@www.mymapsexpress.com\storage.js, Quarantined, [1369], [468075],1.0.3704 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\EXTENSIONS\_k8Members_@www.mymapsexpress.com.xpi, Quarantined, [1369], [457930],1.0.3704 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Replaced, [1369], [467555],1.0.3704 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Preferences, Replaced, [1369], [467555],1.0.3704 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\plljhbdegkhnpjnjbhodbjgdmdnnlbcd\000003.log, Quarantined, [1369], [467555],1.0.3704 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\plljhbdegkhnpjnjbhodbjgdmdnnlbcd\CURRENT, Quarantined, [1369], [467555],1.0.3704 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\plljhbdegkhnpjnjbhodbjgdmdnnlbcd\LOCK, Quarantined, [1369], [467555],1.0.3704 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\plljhbdegkhnpjnjbhodbjgdmdnnlbcd\LOG, Quarantined, [1369], [467555],1.0.3704 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\plljhbdegkhnpjnjbhodbjgdmdnnlbcd\LOG.old, Quarantined, [1369], [467555],1.0.3704 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\plljhbdegkhnpjnjbhodbjgdmdnnlbcd\MANIFEST-000001, Quarantined, [1369], [467555],1.0.3704 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\PLLJHBDEGKHNPJNJBHODBJGDMDNNLBCD\13.321.12.18585_0\MANIFEST.JSON, Quarantined, [1369], [467555],1.0.3704 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\plljhbdegkhnpjnjbhodbjgdmdnnlbcd\13.321.12.18585_0\config\config.json, Quarantined, [1369], [467555],1.0.3704 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\plljhbdegkhnpjnjbhodbjgdmdnnlbcd\13.321.12.18585_0\icons\icon128.png, Quarantined, [1369], [467555],1.0.3704 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\plljhbdegkhnpjnjbhodbjgdmdnnlbcd\13.321.12.18585_0\icons\icon16.png, Quarantined, [1369], [467555],1.0.3704 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\plljhbdegkhnpjnjbhodbjgdmdnnlbcd\13.321.12.18585_0\icons\icon19disabled.png, Quarantined, [1369], [467555],1.0.3704 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\plljhbdegkhnpjnjbhodbjgdmdnnlbcd\13.321.12.18585_0\icons\icon19on.png, Quarantined, [1369], [467555],1.0.3704 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\plljhbdegkhnpjnjbhodbjgdmdnnlbcd\13.321.12.18585_0\icons\icon48.png, Quarantined, [1369], [467555],1.0.3704 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\plljhbdegkhnpjnjbhodbjgdmdnnlbcd\13.321.12.18585_0\js\ajax.js, Quarantined, [1369], [467555],1.0.3704 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\plljhbdegkhnpjnjbhodbjgdmdnnlbcd\13.321.12.18585_0\js\background.js, Quarantined, [1369], [467555],1.0.3704 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\plljhbdegkhnpjnjbhodbjgdmdnnlbcd\13.321.12.18585_0\js\chrome.js, Quarantined, [1369], [467555],1.0.3704 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\plljhbdegkhnpjnjbhodbjgdmdnnlbcd\13.321.12.18585_0\js\content_script.js, Quarantined, [1369], [467555],1.0.3704 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\plljhbdegkhnpjnjbhodbjgdmdnnlbcd\13.321.12.18585_0\js\dlp.js, Quarantined, [1369], [467555],1.0.3704 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\plljhbdegkhnpjnjbhodbjgdmdnnlbcd\13.321.12.18585_0\js\dlpHelper.js, Quarantined, [1369], [467555],1.0.3704 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\plljhbdegkhnpjnjbhodbjgdmdnnlbcd\13.321.12.18585_0\js\extension_detect.js, Quarantined, [1369], [467555],1.0.3704 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\plljhbdegkhnpjnjbhodbjgdmdnnlbcd\13.321.12.18585_0\js\index.js, Quarantined, [1369], [467555],1.0.3704 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\plljhbdegkhnpjnjbhodbjgdmdnnlbcd\13.321.12.18585_0\js\logger.js, Quarantined, [1369], [467555],1.0.3704 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\plljhbdegkhnpjnjbhodbjgdmdnnlbcd\13.321.12.18585_0\js\pageUtils.js, Quarantined, [1369], [467555],1.0.3704 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\plljhbdegkhnpjnjbhodbjgdmdnnlbcd\13.321.12.18585_0\js\product.js, Quarantined, [1369], [467555],1.0.3704 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\plljhbdegkhnpjnjbhodbjgdmdnnlbcd\13.321.12.18585_0\js\storage.js, Quarantined, [1369], [467555],1.0.3704 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\plljhbdegkhnpjnjbhodbjgdmdnnlbcd\13.321.12.18585_0\js\TabManager.js, Quarantined, [1369], [467555],1.0.3704 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\plljhbdegkhnpjnjbhodbjgdmdnnlbcd\13.321.12.18585_0\js\TemplateParser.js, Quarantined, [1369], [467555],1.0.3704 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\plljhbdegkhnpjnjbhodbjgdmdnnlbcd\13.321.12.18585_0\js\ul.js, Quarantined, [1369], [467555],1.0.3704 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\plljhbdegkhnpjnjbhodbjgdmdnnlbcd\13.321.12.18585_0\js\urlFragmentActions.js, Quarantined, [1369], [467555],1.0.3704 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\plljhbdegkhnpjnjbhodbjgdmdnnlbcd\13.321.12.18585_0\js\urlUtils.js, Quarantined, [1369], [467555],1.0.3704 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\plljhbdegkhnpjnjbhodbjgdmdnnlbcd\13.321.12.18585_0\js\util.js, Quarantined, [1369], [467555],1.0.3704 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\plljhbdegkhnpjnjbhodbjgdmdnnlbcd\13.321.12.18585_0\js\webtooltabAPI.js, Quarantined, [1369], [467555],1.0.3704 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\plljhbdegkhnpjnjbhodbjgdmdnnlbcd\13.321.12.18585_0\libs\PartnerId.js, Quarantined, [1369], [467555],1.0.3704 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\plljhbdegkhnpjnjbhodbjgdmdnnlbcd\13.321.12.18585_0\_metadata\computed_hashes.json, Quarantined, [1369], [467555],1.0.3704 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\plljhbdegkhnpjnjbhodbjgdmdnnlbcd\13.321.12.18585_0\_metadata\verified_contents.json, Quarantined, [1369], [467555],1.0.3704 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\plljhbdegkhnpjnjbhodbjgdmdnnlbcd\13.321.12.18585_0\dynamicNewTab.html, Quarantined, [1369], [467555],1.0.3704 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\plljhbdegkhnpjnjbhodbjgdmdnnlbcd\13.321.12.18585_0\product.html, Quarantined, [1369], [467555],1.0.3704 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\plljhbdegkhnpjnjbhodbjgdmdnnlbcd\13.321.12.18585_0\stubby.html, Quarantined, [1369], [467555],1.0.3704 PUP.Optional.MindSpark, C:\USERS\{username}\DESKTOP\MYMAPSEXPRESS.EXE, Quarantined, [228], [365288],1.0.3704 Physical Sector: 0 (No malicious items detected) (end) As mentioned before the full version of Malwarebytes could have protected your computer against this threat. We use different ways of protecting your computer(s): Dynamically Blocks Malware Sites & Servers Malware Execution Prevention Save yourself the hassle and get protected.
  4. What is RadioRage? The Malwarebytes research team has determined that RadioRage is a browser NewTab. These so-called "NewTabs" can manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. RadioRage is a member of the Mindspark/Ask family now known as IAC Applications. How do I know if my computer is affected by RadioRage? You may see this browser extensions/add-ons: these warnings during install: You may see this entry in your list of installed software: and this new homepage in the affected browsers: How did RadioRage get on my computer? Browser hijackers use different methods for distributing themselves. This particular one was downloaded from their website. How do I remove RadioRage? Our program Malwarebytes can detect and remove this potentially unwanted program. You can use their own uninstall instructions first, but I would advise to follow the steps below anyway. Please download Malwarebytes to your desktop. Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program. Then click Finish. Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu. If another update of the definitions is available, it will be implemented before the rest of the scanning procedure. When the scan is complete, make sure that all Threats are selected, and click Remove Selected. Restart your computer when prompted to do so. Is there anything else I need to do to get rid of RadioRage? If you are using an older version of Malwarebytes, you may have to remove the Chrome extension manually under Tools > More Tools > Extensions. Click on the bin behind the RadioRage entry and confirm Remove in the prompt. If your browsers have been hijacked, you should read our Restore Browser page. You can read there how to fix additional browser redirect methods. How would the full version of Malwarebytes help protect me? We hope our application and this guide have helped you eradicate this hijacker. As you can see below the full version of Malwarebytes would have protected you against the RadioRage hijacker. It would have warned you before the hijacker could install itself, giving you a chance to stop it before it became too late. and it blocks traffic to some of their domains: Technical details for experts Possible signs in a FRST log: HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp.myway.com/radiorage/ttab02/index.html?n={n}&p2={p2}&ptb={ptb}&coid={coid} FF Extension: No Name - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\Extensions\_4jMembers_@www.radiorage.com.xpi [2017-12-20] CHR Extension: (RadioRage) - C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg [2017-12-20] C:\Users\{username}\AppData\Local\RadioRageTooltab RadioRage Internet Explorer Homepage and New Tab (HKCU\...\RadioRageTooltab Uninstall Internet Explorer) (Version: - Mindspark Interactive Network, Inc.) <==== ATTENTION Most significant changes made by the installers: File system details [View: All details] (Selection) --------------------------------------------------- Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0 Adds the file dynamicNewTab.html"="11/9/2017 4:52 PM, 932 bytes, A Adds the file manifest.json"="12/20/2017 9:47 AM, 2471 bytes, A Adds the file product.html"="11/9/2017 4:52 PM, 932 bytes, A Adds the file stubby.html"="11/9/2017 4:52 PM, 932 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\_metadata Adds the file computed_hashes.json"="12/20/2017 9:47 AM, 3620 bytes, A Adds the file verified_contents.json"="11/9/2017 4:52 PM, 4621 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\config Adds the file config.json"="11/9/2017 4:52 PM, 1485 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\icons Adds the file icon128.png"="12/20/2017 9:47 AM, 9565 bytes, A Adds the file icon16.png"="11/9/2017 4:52 PM, 1626 bytes, A Adds the file icon19disabled.png"="11/9/2017 4:52 PM, 1412 bytes, A Adds the file icon19on.png"="12/20/2017 9:47 AM, 594 bytes, A Adds the file icon48.png"="12/20/2017 9:47 AM, 2352 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\js Adds the file ajax.js"="11/9/2017 4:52 PM, 2250 bytes, A Adds the file background.js"="11/9/2017 4:52 PM, 19608 bytes, A Adds the file chrome.js"="11/9/2017 4:52 PM, 180 bytes, A Adds the file content_script.js"="11/9/2017 4:52 PM, 5917 bytes, A Adds the file dlp.js"="11/9/2017 4:52 PM, 5690 bytes, A Adds the file dlpHelper.js"="11/9/2017 4:52 PM, 1836 bytes, A Adds the file extension_detect.js"="11/9/2017 4:52 PM, 4343 bytes, A Adds the file index.js"="11/9/2017 4:52 PM, 82 bytes, A Adds the file logger.js"="11/9/2017 4:52 PM, 575 bytes, A Adds the file pageUtils.js"="11/9/2017 4:52 PM, 2241 bytes, A Adds the file product.js"="11/9/2017 4:52 PM, 4434 bytes, A Adds the file storage.js"="11/9/2017 4:52 PM, 1675 bytes, A Adds the file TabManager.js"="11/9/2017 4:52 PM, 189 bytes, A Adds the file TemplateParser.js"="11/9/2017 4:52 PM, 3080 bytes, A Adds the file ul.js"="11/9/2017 4:52 PM, 3824 bytes, A Adds the file urlFragmentActions.js"="11/9/2017 4:52 PM, 2521 bytes, A Adds the file urlUtils.js"="11/9/2017 4:52 PM, 5385 bytes, A Adds the file util.js"="11/9/2017 4:52 PM, 3840 bytes, A Adds the file webtooltabAPI.js"="11/9/2017 4:52 PM, 8357 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\libs Adds the file PartnerId.js"="11/9/2017 4:52 PM, 22130 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jhhglheefabmkonikljoblmbdglpdkpg Adds the file 000003.log"="12/20/2017 9:47 AM, 4735 bytes, A Adds the file CURRENT"="12/20/2017 9:47 AM, 16 bytes, A Adds the file LOCK"="12/20/2017 9:47 AM, 0 bytes, A Adds the file LOG"="12/20/2017 9:49 AM, 412 bytes, A Adds the file LOG.old"="12/20/2017 9:47 AM, 184 bytes, A Adds the file MANIFEST-000001"="12/20/2017 9:47 AM, 41 bytes, A Adds the folder C:\Users\{username}\AppData\Local\RadioRageTooltab Adds the file TooltabExtension.dll"="8/4/2017 1:29 AM, 266864 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\browser-extension-data\_4jMembers_@www.radiorage.com Adds the file storage.js"="12/20/2017 9:49 AM, 2335 bytes, A In the existing folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions Adds the file _4jMembers_@www.radiorage.com.xpi"="12/20/2017 9:45 AM, 52842 bytes, A Registry details [View: All details] (Selection) ------------------------------------------------ [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page" = REG_SZ, "http://hp.myway.com/radiorage/ttab02/index.html?n={n}&p2={p2}&ptb={ptb}&coid={coid}" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\RadioRageTooltab Uninstall Internet Explorer] "DisplayName"="REG_SZ", "RadioRage Internet Explorer Homepage and New Tab" "HelpLink"="REG_SZ", "http://support.mindspark.com/" "Publisher"="REG_SZ", "Mindspark Interactive Network, Inc." "UninstallString"="REG_SZ", "Rundll32.exe "C:\Users\{username}\AppData\Local\RadioRageTooltab\TooltabExtension.dll" U uninstall:RadioRage" "URLInfoAbout"="REG_SZ", "http://support.mindspark.com/" [HKEY_CURRENT_USER\Software\RadioRage] "Start Page"="REG_SZ", "http://hp.myway.com/radiorage/ttab02/index.html?n={n}&p2=^ZX^mni000^TTAB02&ptb={ptb}&coid={coid}" "UnInstallSurveyUrl"="REG_SZ", "http://@{downloadDomain}.dl.myway.com/uninstall.jhtml?surveyUrl=http%3A%2F%2Fwww.research.net%2Fr%2FHYSCVNM%3Fc%3D{ptb}%26ptb%3D^ZX^mni000^TTAB02" The Malwarebytes scan log: Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 12/20/17 Scan Time: 9:55 AM Log File: 974c251a-e563-11e7-9526-080027750297.json Administrator: Yes -Software Information- Version: 3.3.1.2183 Components Version: 1.0.236 Update Package Version: 1.0.3525 License: Premium -System Information- OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: {computername}\{username} -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 244625 Threats Detected: 60 Threats Quarantined: 60 Time Elapsed: 1 min, 29 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 1 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\RadioRageTooltab\TooltabExtension.dll, Quarantined, [1394], [356944],1.0.3525 Registry Key: 2 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\RadioRageTooltab Uninstall Internet Explorer, Quarantined, [1394], [356944],1.0.3525 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\RadioRage, Quarantined, [1394], [444113],1.0.3525 Registry Value: 2 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\RadioRage|START PAGE, Quarantined, [1394], [444113],1.0.3525 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\RadioRageTooltab Uninstall Internet Explorer|PUBLISHER, Quarantined, [237], [352442],1.0.3525 Registry Data: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, Replaced, [237], [293497],1.0.3525 Data Stream: 0 (No malicious items detected) Folder: 10 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\RadioRageTooltab, Quarantined, [1394], [356944],1.0.3525 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\BROWSER-EXTENSION-DATA\_4jMembers_@www.radiorage.com, Quarantined, [1394], [468075],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jhhglheefabmkonikljoblmbdglpdkpg, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\_metadata, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\config, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\icons, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\libs, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\js, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\JHHGLHEEFABMKONIKLJOBLMBDGLPDKPG, Quarantined, [1394], [467555],1.0.3525 File: 44 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\RadioRageTooltab\TooltabExtension.dll, Quarantined, [1394], [356944],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\browser-extension-data\_4jMembers_@www.radiorage.com\storage.js, Quarantined, [1394], [468075],1.0.3525 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\EXTENSIONS\_4jMembers_@www.radiorage.com.xpi, Quarantined, [1394], [457930],1.0.3525 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Replaced, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Preferences, Replaced, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jhhglheefabmkonikljoblmbdglpdkpg\000003.log, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jhhglheefabmkonikljoblmbdglpdkpg\CURRENT, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jhhglheefabmkonikljoblmbdglpdkpg\LOCK, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jhhglheefabmkonikljoblmbdglpdkpg\LOG, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jhhglheefabmkonikljoblmbdglpdkpg\LOG.old, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jhhglheefabmkonikljoblmbdglpdkpg\MANIFEST-000001, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\JHHGLHEEFABMKONIKLJOBLMBDGLPDKPG\13.321.12.18926_0\MANIFEST.JSON, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\config\config.json, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\icons\icon128.png, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\icons\icon16.png, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\icons\icon19disabled.png, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\icons\icon19on.png, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\icons\icon48.png, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\js\ajax.js, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\js\background.js, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\js\chrome.js, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\js\content_script.js, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\js\dlp.js, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\js\dlpHelper.js, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\js\extension_detect.js, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\js\index.js, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\js\logger.js, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\js\pageUtils.js, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\js\product.js, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\js\storage.js, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\js\TabManager.js, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\js\TemplateParser.js, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\js\ul.js, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\js\urlFragmentActions.js, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\js\urlUtils.js, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\js\util.js, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\js\webtooltabAPI.js, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\libs\PartnerId.js, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\_metadata\computed_hashes.json, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\_metadata\verified_contents.json, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\dynamicNewTab.html, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\product.html, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\stubby.html, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark, C:\USERS\{username}\DESKTOP\RADIORAGE.EXE, Quarantined, [237], [365288],1.0.3525 Physical Sector: 0 (No malicious items detected) (end) As mentioned before the full version of Malwarebytes could have protected your computer against this threat. We use different ways of protecting your computer(s): Dynamically Blocks Malware Sites & Servers Malware Execution Prevention Save yourself the hassle and get protected.
  5. For the past three weeks, malware detects many instances of PUP.Optional.MindSpark.Generic whenever I run a scan. When click on it to quarantine the infections, my google chrome browser automatically closes. After quarantining, I then normally delete the quarantined files. Many times I would then shut off my computer and restart it. After a few hours or less of computer usage, if I then run malwarebytes again, I would find that a reinfection has occurred. It seems that I am not able to get rid of the infection with Malwarebytes. Kindly advise me on what to do. It's a bit annoying for me to continually have to restart my computer and my browser so many times.
  6. What is SMS from Browser? The Malwarebytes research team has determined that SMS from Browser is a browser hijacker. These so-called "hijackers" manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. This one also displays advertisements. SMS from Browser is a Mindspark/Ask toolbar now known as IAC Applications. How do I know if my computer is affected by SMS from Browser? You may see these browser extensions/add-ons: You may see this entry in your list of installed software: these warnings during install: this warning in your Chrome settings: and this new startpage in your browser(s): How did SMS from Browser get on my computer? Browser hijackers use different methods for distributing themselves. This particular one was downloaded from their site. How do I remove SMS from Browser? Our program Malwarebytes can detect and remove this potentially unwanted program. You can use their own uninstall instructions first, but I would advise to follow the steps below anyway. Please download Malwarebytes to your desktop. Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program. Then click Finish. Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu. If another update of the definitions is available, it will be implemented before the rest of the scanning procedure. When the scan is complete, make sure that all Threats are selected, and click Remove Selected. Restart your computer when prompted to do so. Is there anything else I need to do to get rid of SMS from Browser? If you are using Chrome, you may have to remove the Extension manually under Tools > Settings > Extensions. Remove the checkmark and click on the bin behind the SMS from Browser entry. If you are using Chrome or Firefox, you should have a look at our Restore Browser page. You can read there how to fix additional browser redirect methods. How would the full version of Malwarebytes help protect me? We hope our application and this guide have helped you eradicate this hijacker. As you can see below the full version of Malwarebytes would have protected you against the SMS from Browser hijacker. It would have warned you before the hijacker could install itself, giving you a chance to stop it before it became too late. we also block the internet traffic with their domains: Technical details for experts Possible signs in a FRST log: HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp.myway.com/smsfrombrowser/ttab02/index.html?n={n1}&p2={p21}&ptb={ptb1}&coid={coid1} FF Homepage: hxxp://hp.myway.com/smsfrombrowser/ttab02/index.html?coId={coid2}&subId&ln=en&n={n1}&ptb={ptb2}&st=tab&p2={p21}&si FF Extension: SMSfromBrowser - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\Extensions\_f7Members_@download.smsfrombrowser.com [2016-12-29] CHR Extension: (SMSfromBrowser) - C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp [2016-12-29] C:\Users\{username}\AppData\Local\SMSfromBrowserTooltab SMSfromBrowser Internet Explorer Homepage and New Tab (HKCU\...\SMSfromBrowserTooltab Uninstall Internet Explorer) (Version: - Mindspark Interactive Network, Inc.) <==== ATTENTION The Malwarebytes scan log: Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 12/29/16 Scan Time: 10:25 AM Logfile: mbamSMSforBrowser.txt Administrator: Yes -Software Information- Version: 3.0.4.1269 Components Version: 1.0.39 Update Package Version: 1.0.884 License: Premium -System Information- OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: {computername}\{username} -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 352959 Time Elapsed: 9 min, 34 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Enabled Heuristics: Enabled PUP: Enabled PUM: Enabled -Scan Details- Process: 0 (No malicious items detected) Module: 1 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\SMSFROMBROWSERTOOLTAB\TOOLTABEXTENSION.DLL, Quarantined, [343], [301125],1.0.884 Registry Key: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\SMSfromBrowserTooltab Uninstall Internet Explorer, Delete-on-Reboot, [343], [301125],1.0.884 Registry Value: 2 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, Replace-on-Reboot, [343], [293497],1.0.884 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\SMSfromBrowserTooltab Uninstall Internet Explorer|PUBLISHER, Delete-on-Reboot, [343], [352442],1.0.884 Data Stream: 0 (No malicious items detected) Folder: 89 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NCH5MQSA.DEFAULT\SMSfromBrowser_f7, Quarantined, [343], [240302],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_f7Members_@download.smsfrombrowser.com\META-INF, Quarantined, [343], [302304],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_f7Members_@download.smsfrombrowser.com\chrome, Quarantined, [343], [302304],1.0.884 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NCH5MQSA.DEFAULT\EXTENSIONS\_F7MEMBERS_@DOWNLOAD.SMSFROMBROWSER.COM, Quarantined, [343], [302304],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\abstractbutton\background, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\embedscript\background, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\thirdparty\background, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\uninstall\background, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\embedhtml\background, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\widget-api\widgets\weather\css, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\widget-api\widgets\topapps\css, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\widget-api\widgets\weather\js, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\weather\background, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\widget-api\widgets\topapps\js, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\generic\background, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\widget-api\widgets\radio\css, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\defaultSearch\foreground, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\defaultSearch\background, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\embedscript\html, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\alert\background, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\flare\background, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\widget-api\widgets\radio\js, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\moviereviews\background, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\menu\background, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\widget-api\widgets\topapps, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\link\background, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\widget-api\widgets\weather, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\abstractbutton, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\embedhtml\html, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\embedscript\js, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\widget-api\widgets\common, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\widget-api\widgets\rss\js, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\rss\background, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\widget-api\widgets\radio, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\widget-api\widgets\test, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\embedhtml\js, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\embedscript, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\flare\icons, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\menu\images, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\widget-api\widgets\rss, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\radio\radioWrapper, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\search\background, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\thirdparty, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\moviereviews\html, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\embedhtml, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\menu\html, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\radio\foreground, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\uninstall, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\radio\background, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\moviereviews\css, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\menu\css, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\moviereviews\js, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\generic, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\menu\js, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\weather, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\widget-api\widgets, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\api\background, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\defaultSearch, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\supertab\html, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\alert, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\flare, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\moviereviews, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\supertab\css, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\search\html, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\menu, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\link, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\supertab\js, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\rss, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\api\window, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\radio\css, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\supertab, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\widget-api, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\search, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\radio, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\adapter, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\api, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\native\libs, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\js, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\_metadata, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\images, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\native, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\shared, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\icons, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\js, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0, Quarantined, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\CCEBLFJHLKDCECPEMELFCBLLEJHJIFMP, Quarantined, [343], [301932],1.0.884 File: 292 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\SMSFROMBROWSERTOOLTAB\TOOLTABEXTENSION.DLL, Delete-on-Reboot, [343], [301125],1.0.884 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NCH5MQSA.DEFAULT\PREFS.JS, Removal Failed, [1049], [319354],1.0.884 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NCH5MQSA.DEFAULT\PREFS.JS, Removal Failed, [1049], [319354],1.0.884 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NCH5MQSA.DEFAULT\PREFS.JS, Removal Failed, [1049], [319354],1.0.884 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NCH5MQSA.DEFAULT\PREFS.JS, Removal Failed, [1049], [319354],1.0.884 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NCH5MQSA.DEFAULT\PREFS.JS, Removal Failed, [1049], [319354],1.0.884 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NCH5MQSA.DEFAULT\PREFS.JS, Removal Failed, [1049], [319354],1.0.884 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NCH5MQSA.DEFAULT\PREFS.JS, Removal Failed, [1049], [319354],1.0.884 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NCH5MQSA.DEFAULT\PREFS.JS, Removal Failed, [1049], [319354],1.0.884 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NCH5MQSA.DEFAULT\PREFS.JS, Removal Failed, [1049], [319354],1.0.884 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NCH5MQSA.DEFAULT\PREFS.JS, Removal Failed, [1049], [319354],1.0.884 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NCH5MQSA.DEFAULT\PREFS.JS, Removal Failed, [1049], [319354],1.0.884 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NCH5MQSA.DEFAULT\PREFS.JS, Removal Failed, [1049], [319354],1.0.884 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NCH5MQSA.DEFAULT\PREFS.JS, Removal Failed, [1049], [319354],1.0.884 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NCH5MQSA.DEFAULT\PREFS.JS, Removal Failed, [1049], [319354],1.0.884 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NCH5MQSA.DEFAULT\PREFS.JS, Removal Failed, [1049], [319354],1.0.884 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NCH5MQSA.DEFAULT\PREFS.JS, Removal Failed, [1049], [319354],1.0.884 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NCH5MQSA.DEFAULT\PREFS.JS, Removal Failed, [1049], [319354],1.0.884 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NCH5MQSA.DEFAULT\PREFS.JS, Removal Failed, [1049], [319354],1.0.884 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NCH5MQSA.DEFAULT\PREFS.JS, Removal Failed, [1049], [319354],1.0.884 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NCH5MQSA.DEFAULT\PREFS.JS, Removal Failed, [1049], [319354],1.0.884 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NCH5MQSA.DEFAULT\PREFS.JS, Removal Failed, [1049], [319354],1.0.884 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NCH5MQSA.DEFAULT\PREFS.JS, Removal Failed, [1049], [319354],1.0.884 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NCH5MQSA.DEFAULT\PREFS.JS, Removal Failed, [1049], [319354],1.0.884 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NCH5MQSA.DEFAULT\PREFS.JS, Removal Failed, [1049], [319354],1.0.884 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NCH5MQSA.DEFAULT\PREFS.JS, Removal Failed, [1049], [319354],1.0.884 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NCH5MQSA.DEFAULT\PREFS.JS, Removal Failed, [1049], [319354],1.0.884 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NCH5MQSA.DEFAULT\PREFS.JS, Removal Failed, [1049], [319354],1.0.884 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NCH5MQSA.DEFAULT\PREFS.JS, Removal Failed, [1049], [319354],1.0.884 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NCH5MQSA.DEFAULT\PREFS.JS, Removal Failed, [1049], [319354],1.0.884 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NCH5MQSA.DEFAULT\PREFS.JS, Removal Failed, [1049], [319354],1.0.884 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NCH5MQSA.DEFAULT\PREFS.JS, Removal Failed, [1049], [319354],1.0.884 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NCH5MQSA.DEFAULT\PREFS.JS, Removal Failed, [1049], [319354],1.0.884 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NCH5MQSA.DEFAULT\PREFS.JS, Removal Failed, [1049], [319354],1.0.884 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NCH5MQSA.DEFAULT\PREFS.JS, Removal Failed, [1049], [319354],1.0.884 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NCH5MQSA.DEFAULT\PREFS.JS, Removal Failed, [1049], [319354],1.0.884 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NCH5MQSA.DEFAULT\PREFS.JS, Removal Failed, [1049], [319354],1.0.884 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NCH5MQSA.DEFAULT\PREFS.JS, Removal Failed, [1049], [319354],1.0.884 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NCH5MQSA.DEFAULT\PREFS.JS, Removal Failed, [1049], [319354],1.0.884 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NCH5MQSA.DEFAULT\PREFS.JS, Removal Failed, [1049], [319354],1.0.884 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_smsfrombrowser.dl.tb.ask.com_0.localstorage, Delete-on-Reboot, [343], [240306],1.0.884 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NCH5MQSA.DEFAULT\SMSfromBrowser_f7\{ptb2}.sqlite, Delete-on-Reboot, [343], [240302],1.0.884 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_smsfrombrowser.dl.myway.com_0.localstorage, Delete-on-Reboot, [343], [240305],1.0.884 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NCH5MQSA.DEFAULT\EXTENSIONS\_F7MEMBERS_@DOWNLOAD.SMSFROMBROWSER.COM\INSTALL.RDF, Delete-on-Reboot, [343], [302304],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_f7Members_@download.smsfrombrowser.com\chrome\ffxtbr.jar, Delete-on-Reboot, [343], [302304],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_f7Members_@download.smsfrombrowser.com\META-INF\manifest.mf, Delete-on-Reboot, [343], [302304],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_f7Members_@download.smsfrombrowser.com\META-INF\mozilla.rsa, Delete-on-Reboot, [343], [302304],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_f7Members_@download.smsfrombrowser.com\META-INF\mozilla.sf, Delete-on-Reboot, [343], [302304],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_f7Members_@download.smsfrombrowser.com\bootstrap.js, Delete-on-Reboot, [343], [302304],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_f7Members_@download.smsfrombrowser.com\chrome.manifest, Delete-on-Reboot, [343], [302304],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_f7Members_@download.smsfrombrowser.com\chrome.manifest.restartless, Delete-on-Reboot, [343], [302304],1.0.884 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\CCEBLFJHLKDCECPEMELFCBLLEJHJIFMP\12.202.10.30405_0\MANIFEST.JSON, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\adapter\adapterUtil.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\adapter\widget-adapter.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\abstractbutton\background\abstractButton.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\alert\background\alertButton.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\embedhtml\background\embedHtmlWidget.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\embedhtml\html\embedHtmlTemplate.html, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\embedhtml\html\innerEmbedHtmlTemplate.html, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\embedhtml\js\embedHtmlUI.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\embedscript\background\embedScriptWidget.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\embedscript\html\embedScriptTemplate.html, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\embedscript\html\innerEmbedScriptTemplate.html, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\embedscript\js\embedScriptUI.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\flare\background\FlareWidget.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\flare\icons\Icon_Flare_blue.png, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\flare\icons\Icon_Flare_pink.png, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\flare\icons\Thumbs.db, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\generic\background\GenericWidget.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\link\background\linkButton.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\menu\background\menuButton.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\menu\css\menuframe.css, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\menu\html\menuframe.html, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\menu\images\right_arrow.png, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\menu\images\right_arrow_white.png, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\menu\js\jquery-1.7.1.min.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\menu\js\menuframe.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\menu\js\query-string.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\menu\js\underscore-1.3.1.min.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\menu\README.txt, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\rss\background\RssWidget.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\thirdparty\background\thirdPartyWidget.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\uninstall\background\uninstallButton.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\components\weather\background\weatherButton.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\js\bs.30.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\js\common.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\js\dynamic.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\js\enableDetect.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\js\eventListening.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\js\global.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\js\jquery-1.7.1.min.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\js\list-interaction.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\js\messageEventListener.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\js\navRedirector.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\js\paramReplacer.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\js\PartnerId.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\js\set.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\js\underscore-1.3.1.min.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\js\underscore-1.5.2.min.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\js\unifiedLogging.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\widget-api\widgets\common\common.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\widget-api\widgets\common\eventListening.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\widget-api\widgets\common\jquery-1.7.1.min.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\widget-api\widgets\common\list-interaction.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\widget-api\widgets\common\set.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\widget-api\widgets\common\underscore-1.3.1.min.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\widget-api\widgets\radio\css\radio-widget.css, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\widget-api\widgets\radio\js\radio-custom.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\widget-api\widgets\radio\js\radio-parser.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\widget-api\widgets\radio\js\radio-widget-ui.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\widget-api\widgets\radio\js\radio-widget.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\widget-api\widgets\radio\radio-widget.html, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\widget-api\widgets\rss\js\rss-widget-custom.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\widget-api\widgets\rss\js\rss-widget-parse.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\widget-api\widgets\rss\js\rss-widget.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\widget-api\widgets\rss\rssWidget.html, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\widget-api\widgets\test\invalid.json, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\widget-api\widgets\test\jquery.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\widget-api\widgets\test\qunit.css, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\widget-api\widgets\test\qunit.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\widget-api\widgets\test\resource.json, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\widget-api\widgets\test\resource.xml, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\widget-api\widgets\test\testWidget.html, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\widget-api\widgets\test\testWidget.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\widget-api\widgets\topapps\css\widget.css, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\widget-api\widgets\topapps\js\nanigans-topapps-feed.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\widget-api\widgets\topapps\js\topapps-config.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\widget-api\widgets\topapps\js\widget.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\widget-api\widgets\topapps\widget.html, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\widget-api\widgets\weather\css\weatherButton.css, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\widget-api\widgets\weather\js\weather.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\widget-api\widgets\weather\weatherButton.html, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\common\widget-api\widget-context-1.0.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\api\background\ApiBasedWidget.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\api\background\widget-api-impl.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\api\window\hiddenWidgetWindow.html, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\api\window\hiddenWidgetWindow.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\api\window\hiddenWidgetWindowInit.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\api\window\widgetWindow.html, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\api\window\widgetWindow.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\defaultSearch\background\updateSearch.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\defaultSearch\background\updateSearchPromptBg.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\defaultSearch\foreground\07_buttons2.png, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\defaultSearch\foreground\08_buttons2.png, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\defaultSearch\foreground\defaultSearchModal.html, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\defaultSearch\foreground\defaultSearchModalInjector.css, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\defaultSearch\foreground\defaultSearchModalInjector.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\defaultSearch\foreground\tvf_btn_ok.png, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\defaultSearch\foreground\tvf_btn_ok2.png, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\defaultSearch\foreground\tvf_restart_alert_icon.png, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\defaultSearch\foreground\tvf_restart_icon.png, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\defaultSearch\foreground\updateSearchPromptFg.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\moviereviews\background\MovieReviewsWidget.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\moviereviews\css\movieReviews.css, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\moviereviews\html\movieReviews.html, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\moviereviews\js\movieReviews.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\radio\background\RadioWidget.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\radio\css\toolbar-item.css, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\radio\foreground\button.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\radio\radioWrapper\radioWrapper.html, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\radio\radioWrapper\radioWrapper.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\search\background\searchBox.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\search\html\searchSuggestions.css, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\search\html\searchSuggestions.html, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\search\html\searchSuggestions.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\search\html\searchSuggestionsInit.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\supertab\css\supertab.css, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\supertab\html\supertab.html, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\supertab\js\newtabfork.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\supertab\js\reporting.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\supertab\js\srchsugg.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\supertab\js\supertab.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\supertab\js\unifiedLogging.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\components\supertab\js\__utm.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\icons\arrowSprite.png, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\icons\icon128.png, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\icons\icon16.png, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\icons\icon19disabled.png, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\icons\icon19on.png, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\icons\icon48.png, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\icons\tb_icon_search_disappearing_ask.png, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\images\224821503.png, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\images\224821516.png, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\images\224821538.png, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\images\224821544.png, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\images\224821547.png, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\images\224821551.png, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\images\224821554.png, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\images\224821563.png, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\images\224821573.png, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\images\224821584.png, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\images\224821616.png, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\images\224821633.png, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\images\down_arrow.png, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\images\IDR_PRODUCT_LOGO_16.png, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\images\IDR_WEBSTORE_ICON.png, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\images\magnifying_glass.png, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\images\RadioPlayerSprite.png, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\images\search_button.png, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\images\tvf_icon_guide.png, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\images\tvf_logo.png, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\images\wrench.png, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\js\newTabInitialize.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\js\chromeStorage.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\js\chromeUtils.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\js\companionSWUtils.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\js\exeManager.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\js\exeManagerNMD.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\js\exePackageManager.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\js\focusManager.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\js\globalBlacklistManager.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\js\messaging.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\js\mutation_summary-min.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\js\mutation_summary.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\js\nativeMessagingDispatcher.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\js\newTabInfo.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\js\options.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\js\readLocalStorage.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\js\reservespacefortoolbar.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\js\reservespaceifenabled.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\js\scriptInjector.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\js\searchContext.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\js\settingsOverrides.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\js\toolbarCookieParser.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\js\toolbarPreinit.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\js\underscore-1.3.1.min.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\js\URILoaderContentScript.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\js\webTooltabAPI.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\js\Widget.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\js\widgetContentScriptInjectee.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\js\widgetFactory.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\js\widgetWindowManager.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\native\libs\jquery-1.7.1.min.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\native\libs\jquery-1.9.1.min.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\native\libs\underscore-1.5.2.min.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\native\cache.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\native\ce.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\native\debug.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\native\ss.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\shared\activePing.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\shared\buttonLogger.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\shared\competitorDnsList.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\shared\console.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\shared\FFPreferencesPersister.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\shared\httpTransport.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\shared\HttpURL.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\shared\internationalSearch.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\shared\LocalStoragePersister.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\shared\MindsparkGlobal.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\shared\MindsparkGlobal.unitTest.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\shared\MindsparkGlobalNotes.txt, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\shared\rsvp-latest.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\shared\searchSuggestLocale.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\shared\testHttpTransport.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\shared\unifiedLogger.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\shared\unifiedLogging.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\shared\universalConsole.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\shared\utils.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\_metadata\computed_hashes.json, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\_metadata\verified_contents.json, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\spent.css, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\bg.html, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\buildVars, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\buildVars.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\companionSW.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\config.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\contentScript.css, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\contentScript.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\debug.html, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\debug.jade, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\extension_toolbar_api.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\initWidgetWindow.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\newTabContentScript.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\options.html, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\spent.html, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\spent.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\spent2.css, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\spent2.html, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\spentJ.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\spentK.html, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\spentK.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\startup.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\stub.html, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\stubby.html, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\superFrame.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\toolbar.html, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\toolbar.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\toolbarUI.css, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\toolbarUI.html, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\toolbarUI.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\url.js, Delete-on-Reboot, [343], [301932],1.0.884 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cceblfjhlkdcecpemelfcbllejhjifmp\12.202.10.30405_0\webtooltab.cs.js, Delete-on-Reboot, [343], [301932],1.0.884 Physical Sector: 0 (No malicious items detected) (end) As mentioned before the full version of Malwarebytes could have protected your computer against this threat. We use different ways of protecting your computer(s): Dynamically Blocks Malware Sites & Servers Malware Execution Prevention Save yourself the hassle and get protected.
  7. What is EasyWeatherAlert? The Malwarebytes research team has determined that EasyWeatherAlert is a browser hijacker. These so-called "hijackers" manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. This one also displays advertisements. EasyWeatherAlert is a Mindspark/Ask toolbar now known as IAC Applications. How do I know if my computer is affected by EasyWeatherAlert? You may see these browser extensions/add-ons: You may see this entry in your list of installed software: these warnings during install: and this toolbar in your browser(s): and this new startpage: How did EasyWeatherAlert get on my computer? Browser hijackers use different methods for distributing themselves. This particular one was downloaded from their site. How do I remove EasyWeatherAlert? Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted program. You can use their own uninstall instructions first, but I would advise to follow the steps below anyway. Please download Malwarebytes Anti-Malware to your desktop. Double-click mbam-setup-{version}.exe and follow the prompts to install the program. At the end, be sure a check-mark is placed next to: Launch Malwarebytes Anti-Malware Then click Finish. Once the program has loaded, select Scan Now. Or select the Threat Scan from the Scan menu. If an update is available, it will be implemented before the rest of the scanning procedure. When the scan is complete, make sure that all Threats are selected, and click Remove Selected. Restart your computer when prompted to do so. Is there anything else I need to do to get rid of EasyWeatherAlert? If you are using Chrome, you may have to remove the Extension manually under Tools > Settings > Extensions. Remove the checkmark and click on the bin behind the EasyWeatherAlert entry. You should have a look at our Restore Browser page. You can read there how to fix additional browser redirect methods. How would the full version of Malwarebytes Anti-Malware help protect me? We hope our application and this guide have helped you eradicate this hijacker. As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the EasyWeatherAlert hijacker. It would have warned you before the hijacker could install itself, giving you a chance to stop it before it became too late. Technical details for experts Possible signs in a FRST log: HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp.myway.com/easyweatheralert/ttab02/index.html?n={n1}&p2={p21}&ptb={ptb1}&coid={coid1} FF Homepage: hxxp://hp.myway.com/easyweatheralert/ttab02/index.html?coId={coid2}&subId&ln=en&n={n1}&ptb={ptb2}&st=tab&p2={p21}&si FF Extension: EasyWeatherAlert - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\Extensions\_hmMembers_@free.easyweatheralert.com [2016-10-28] CHR Extension: (EasyWeatherAlert) - C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj [2016-10-28] CHR Extension: (Chrome Media Router) - C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-10-24] CHR Extension: (Chrome Media Router) - C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-10-28] C:\Users\{username}\AppData\Local\EasyWeatherAlertTooltab EasyWeatherAlert Internet Explorer Homepage and New Tab (HKCU\...\EasyWeatherAlertTooltab Uninstall Internet Explorer) (Version: - Mindspark Interactive Network, Inc.) <==== ATTENTION An excerpt from the Malwarebytes Anti-Malware scan log: (full log available on request) Malwarebytes Anti-Malware www.malwarebytes.org Scan Date: 10/28/2016 Scan Time: 11:58 AM Logfile: mbamEasyWeatherAlert.txt Administrator: Yes Version: 2.2.1.1043 Malware Database: v2016.10.28.05 Rootkit Database: v2016.09.26.02 License: Premium Malware Protection: Disabled Malicious Website Protection: Enabled Self-protection: Enabled OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: {username} Scan Type: Threat Scan Result: Completed Objects Scanned: 326770 Time Elapsed: 9 min, 10 sec Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Enabled Heuristics: Enabled PUP: Enabled PUM: Enabled Processes: 0 (No malicious items detected) Modules: 1 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\EasyWeatherAlertTooltab\TooltabExtension.dll, Delete-on-Reboot, [781d841a7e1c5bdba86ff99e06fec53b], Registry Keys: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\EasyWeatherAlertTooltab Uninstall Internet Explorer, Quarantined, [781d841a7e1c5bdba86ff99e06fec53b], Registry Values: 0 (No malicious items detected) Registry Data: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://hp.myway.com/easyweatheralert/ttab02/index.html?n={n1}&p2=Bad: (http://hp.myway.com/easyweatheralert/ttab02/index.html?n={n1}&p2={p21}&ptb={ptb1}&coid={coid1}),Replaced,[7d18dfbf1f7bd4625def5f1a32d20df3]ECNEBad: (http://hp.myway.com/easyweatheralert/ttab02/index.html?n={n1}&p2={p21}&ptb={ptb1}&coid={coid1}),Replaced,[7d18dfbf1f7bd4625def5f1a32d20df3]EorgyyyBad: (http://hp.myway.com/easyweatheralert/ttab02/index.html?n={n1}&p2={p21}&ptb={ptb1}&coid={coid1}),Replaced,[7d18dfbf1f7bd4625def5f1a32d20df3]ETTAB02Bad: (http://hp.myway.com/easyweatheralert/ttab02/index.html?n={n1}&p2={p21}&ptb={ptb1}&coid={coid1}),Replaced,[7d18dfbf1f7bd4625def5f1a32d20df3]Enl&ptb={ptb1}&coid={coid1}, Good: (www.google.com), Bad: (http://hp.myway.com/easyweatheralert/ttab02/index.html?n={n1}&p2={p21}&ptb={ptb1}&coid={coid1}),Replaced,[7d18dfbf1f7bd4625def5f1a32d20df3] Folders: 89 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\EasyWeatherAlert_hm, Quarantined, [6332a6f8287288aeb62d97123bc8827e], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\components, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\icons, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\images, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\native, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\native\libs, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\shared, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\_metadata, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_hmMembers_@free.easyweatheralert.com, Quarantined, [ff96cfcfb7e39d99b4ef5b40d33144bc], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_hmMembers_@free.easyweatheralert.com\chrome, Quarantined, [ff96cfcfb7e39d99b4ef5b40d33144bc], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_hmMembers_@free.easyweatheralert.com\META-INF, Quarantined, [ff96cfcfb7e39d99b4ef5b40d33144bc], Files: 293 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\EasyWeatherAlertTooltab\TooltabExtension.dll, Delete-on-Reboot, [781d841a7e1c5bdba86ff99e06fec53b], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\EasyWeatherAlert_hm\{ptb2}.sqlite, Quarantined, [6332a6f8287288aeb62d97123bc8827e], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_easyweatheralert.dl.myway.com_0.localstorage, Quarantined, [2570801e32682b0b34b27b2ec043a35d], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_easyweatheralert.dl.myway.com_0.localstorage-journal, Quarantined, [6c29ced00f8b2511b432c7e237cc47b9], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_easyweatheralert.dl.tb.ask.com_0.localstorage, Quarantined, [82137f1fd0caac8a7770b2f7956e7a86], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_easyweatheralert.dl.tb.ask.com_0.localstorage-journal, Quarantined, [6134f7a7e0ba51e5f2f59d0c43c0649c], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\manifest.json, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\spent.css, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\bg.html, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\buildVars, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\buildVars.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\companionSW.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\config.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\contentScript.css, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\contentScript.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\debug.html, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\debug.jade, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\extension_toolbar_api.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\initWidgetWindow.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\newTabContentScript.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\options.html, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\spent.html, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\spent.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\spent2.css, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\spent2.html, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\spentJ.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\spentK.html, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\spentK.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\startup.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\stub.html, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\stubby.html, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\superFrame.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\toolbar.html, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\toolbar.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\toolbarUI.css, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\toolbarUI.html, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\toolbarUI.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\url.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\webtooltab.cs.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\adapter\adapterUtil.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\adapter\widget-adapter.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\components\abstractbutton\background\abstractButton.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\components\alert\background\alertButton.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\components\embedhtml\background\embedHtmlWidget.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\components\embedhtml\html\embedHtmlTemplate.html, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\components\embedhtml\html\innerEmbedHtmlTemplate.html, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\components\embedhtml\js\embedHtmlUI.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\components\embedscript\background\embedScriptWidget.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\components\embedscript\html\embedScriptTemplate.html, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\components\embedscript\html\innerEmbedScriptTemplate.html, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\components\embedscript\js\embedScriptUI.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\components\flare\background\FlareWidget.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\components\flare\icons\Icon_Flare_blue.png, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\components\flare\icons\Icon_Flare_pink.png, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\components\flare\icons\Thumbs.db, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\components\generic\background\GenericWidget.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\components\link\background\linkButton.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\components\menu\README.txt, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\components\menu\background\menuButton.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\components\menu\css\menuframe.css, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\components\menu\html\menuframe.html, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\components\menu\images\right_arrow.png, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\components\menu\images\right_arrow_white.png, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\components\menu\js\jquery-1.7.1.min.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\components\menu\js\menuframe.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\components\menu\js\query-string.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\components\menu\js\underscore-1.3.1.min.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\components\rss\background\RssWidget.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\components\thirdparty\background\thirdPartyWidget.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\components\uninstall\background\uninstallButton.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\components\weather\background\weatherButton.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\js\bs.30.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\js\common.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\js\dynamic.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\js\enableDetect.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\js\eventListening.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\js\global.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\js\jquery-1.7.1.min.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\js\list-interaction.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\js\messageEventListener.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\js\navRedirector.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\js\paramReplacer.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\js\PartnerId.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\js\set.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\js\underscore-1.3.1.min.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\js\underscore-1.5.2.min.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\js\unifiedLogging.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\widget-api\widget-context-1.0.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\widget-api\widgets\common\common.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\widget-api\widgets\common\eventListening.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\widget-api\widgets\common\jquery-1.7.1.min.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\widget-api\widgets\common\list-interaction.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\widget-api\widgets\common\set.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\widget-api\widgets\common\underscore-1.3.1.min.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\widget-api\widgets\radio\radio-widget.html, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\widget-api\widgets\radio\css\radio-widget.css, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\widget-api\widgets\radio\js\radio-custom.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\widget-api\widgets\radio\js\radio-parser.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\widget-api\widgets\radio\js\radio-widget-ui.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\widget-api\widgets\radio\js\radio-widget.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\widget-api\widgets\rss\rssWidget.html, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\widget-api\widgets\rss\js\rss-widget-custom.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\widget-api\widgets\rss\js\rss-widget-parse.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\widget-api\widgets\rss\js\rss-widget.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\widget-api\widgets\test\invalid.json, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\widget-api\widgets\test\jquery.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\widget-api\widgets\test\qunit.css, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\widget-api\widgets\test\qunit.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\widget-api\widgets\test\resource.json, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\widget-api\widgets\test\resource.xml, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\widget-api\widgets\test\testWidget.html, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\widget-api\widgets\test\testWidget.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\widget-api\widgets\topapps\widget.html, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\widget-api\widgets\topapps\css\widget.css, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\widget-api\widgets\topapps\js\nanigans-topapps-feed.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\widget-api\widgets\topapps\js\topapps-config.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\widget-api\widgets\topapps\js\widget.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\widget-api\widgets\weather\weatherButton.html, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\widget-api\widgets\weather\css\weatherButton.css, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\common\widget-api\widgets\weather\js\weather.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\components\api\background\ApiBasedWidget.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\components\api\background\widget-api-impl.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\components\api\window\hiddenWidgetWindow.html, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\components\api\window\hiddenWidgetWindow.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\components\api\window\hiddenWidgetWindowInit.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\components\api\window\widgetWindow.html, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\components\api\window\widgetWindow.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\components\defaultSearch\background\updateSearch.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\components\defaultSearch\background\updateSearchPromptBg.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\components\defaultSearch\foreground\07_buttons2.png, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\components\defaultSearch\foreground\08_buttons2.png, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\components\defaultSearch\foreground\defaultSearchModal.html, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\components\defaultSearch\foreground\defaultSearchModalInjector.css, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\components\defaultSearch\foreground\defaultSearchModalInjector.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\components\defaultSearch\foreground\tvf_btn_ok.png, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\components\defaultSearch\foreground\tvf_btn_ok2.png, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\components\defaultSearch\foreground\tvf_restart_alert_icon.png, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\components\defaultSearch\foreground\tvf_restart_icon.png, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\components\defaultSearch\foreground\updateSearchPromptFg.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\components\moviereviews\background\MovieReviewsWidget.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\components\moviereviews\css\movieReviews.css, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\components\moviereviews\html\movieReviews.html, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\components\moviereviews\js\movieReviews.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\components\radio\background\RadioWidget.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\components\radio\css\toolbar-item.css, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\components\radio\foreground\button.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\components\radio\radioWrapper\radioWrapper.html, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\components\radio\radioWrapper\radioWrapper.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\components\search\background\searchBox.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\components\search\html\searchSuggestions.css, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\components\search\html\searchSuggestions.html, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\components\search\html\searchSuggestions.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\components\search\html\searchSuggestionsInit.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\components\supertab\css\supertab.css, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\components\supertab\html\supertab.html, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\components\supertab\js\newtabfork.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\components\supertab\js\reporting.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\components\supertab\js\srchsugg.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\components\supertab\js\supertab.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\components\supertab\js\unifiedLogging.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\components\supertab\js\__utm.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\icons\arrowSprite.png, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\icons\icon128.png, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\icons\icon16.png, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\icons\icon19disabled.png, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\icons\icon19on.png, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\icons\icon48.png, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\icons\tb_icon_search_disappearing_ask.png, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\images\230435491.png, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\images\230435504.png, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\images\230435527.png, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\images\230435529.png, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\images\230435530.png, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\images\230435531.png, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\images\230435537.png, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\images\230435567.png, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\images\230435584.png, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\images\down_arrow.png, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\images\IDR_PRODUCT_LOGO_16.png, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\images\IDR_WEBSTORE_ICON.png, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\images\magnifying_glass.png, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\images\RadioPlayerSprite.png, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\images\search_button.png, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\images\tvf_icon_guide.png, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\images\tvf_logo.png, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\images\wrench.png, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\js\newTabInitialize.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\js\chromeStorage.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\js\chromeUtils.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\js\companionSWUtils.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\js\exeManager.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\js\exeManagerNMD.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\js\exePackageManager.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\js\focusManager.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\js\globalBlacklistManager.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\js\messaging.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\js\mutation_summary-min.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\js\mutation_summary.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\js\nativeMessagingDispatcher.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\js\newTabInfo.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\js\options.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\js\readLocalStorage.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\js\reservespacefortoolbar.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\js\reservespaceifenabled.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\js\scriptInjector.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\js\searchContext.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\js\settingsOverrides.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\js\toolbarCookieParser.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\js\toolbarPreinit.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\js\underscore-1.3.1.min.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\js\URILoaderContentScript.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\js\webTooltabAPI.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\js\Widget.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\js\widgetContentScriptInjectee.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\js\widgetFactory.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\js\widgetWindowManager.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\native\cache.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\native\ce.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\native\debug.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\native\ss.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\native\libs\jquery-1.7.1.min.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\native\libs\jquery-1.9.1.min.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\native\libs\underscore-1.5.2.min.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\shared\activePing.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\shared\buttonLogger.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\shared\competitorDnsList.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\shared\console.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\shared\FFPreferencesPersister.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\shared\httpTransport.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\shared\HttpURL.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\shared\internationalSearch.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\shared\LocalStoragePersister.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\shared\MindsparkGlobal.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\shared\MindsparkGlobal.unitTest.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\shared\MindsparkGlobalNotes.txt, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\shared\rsvp-latest.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\shared\searchSuggestLocale.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\shared\testHttpTransport.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\shared\unifiedLogger.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\shared\unifiedLogging.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\shared\universalConsole.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\shared\utils.js, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\_metadata\computed_hashes.json, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\naopgcbjimmmnkbdipnafajjjkanhfaj\12.202.10.29528_0\_metadata\verified_contents.json, Quarantined, [40551688e3b7ca6c50e36733fd07966a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_hmMembers_@free.easyweatheralert.com\install.rdf, Quarantined, [ff96cfcfb7e39d99b4ef5b40d33144bc], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_hmMembers_@free.easyweatheralert.com\bootstrap.js, Quarantined, [ff96cfcfb7e39d99b4ef5b40d33144bc], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_hmMembers_@free.easyweatheralert.com\chrome.manifest, Quarantined, [ff96cfcfb7e39d99b4ef5b40d33144bc], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_hmMembers_@free.easyweatheralert.com\chrome.manifest.restartless, Quarantined, [ff96cfcfb7e39d99b4ef5b40d33144bc], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_hmMembers_@free.easyweatheralert.com\chrome\ffxtbr.jar, Quarantined, [ff96cfcfb7e39d99b4ef5b40d33144bc], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_hmMembers_@free.easyweatheralert.com\META-INF\manifest.mf, Quarantined, [ff96cfcfb7e39d99b4ef5b40d33144bc], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_hmMembers_@free.easyweatheralert.com\META-INF\mozilla.rsa, Quarantined, [ff96cfcfb7e39d99b4ef5b40d33144bc], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_hmMembers_@free.easyweatheralert.com\META-INF\mozilla.sf, Quarantined, [ff96cfcfb7e39d99b4ef5b40d33144bc], Physical Sectors: 0 (No malicious items detected) (end) As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat. We use different ways of protecting your computer(s): Dynamically Blocks Malware Sites & Servers Malware Execution Prevention Save yourself the hassle and get protected.
  8. What is InspiringBackgrounds? The Malwarebytes research team has determined that InspiringBackgrounds is a browser hijacker. These so-called "hijackers" manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. This one also displays advertisements. InspiringBackgrounds is a Mindspark/Ask toolbar now known as IAC Applications. How do I know if my computer is affected by InspiringBackgrounds? You may see these browser extensions/add-ons: You may see this entry in your list of installed software: these warnings during install: and this startpage in your browser(s): How did InspiringBackgrounds get on my computer? Browser hijackers use different methods for distributing themselves. This particular one was downloaded from their site. How do I remove InspiringBackgrounds? Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted program. You can use their own uninstall instructions first, but I would advise to follow the steps below anyway. Please download Malwarebytes Anti-Malware to your desktop. Double-click mbam-setup-{version}.exe and follow the prompts to install the program. At the end, be sure a check-mark is placed next to: Launch Malwarebytes Anti-Malware Then click Finish. Once the program has loaded, select Scan Now. Or select the Threat Scan from the Scan menu. If an update is available, it will be implemented before the rest of the scanning procedure. When the scan is complete, make sure that all Threats are selected, and click Remove Selected. Restart your computer when prompted to do so. Is there anything else I need to do to get rid of InspiringBackgrounds? If you are using Chrome or Firefox, you may have to remove the Extension manually. Check our Restore Browser page. You can read there how to fix additional browser redirect methods. How would the full version of Malwarebytes Anti-Malware help protect me? We hope our application and this guide have helped you eradicate this hijacker. As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the InspiringBackgrounds hijacker. It would have warned you before the hijacker could install itself, giving you a chance to stop it before it became too late. Technical details for experts Possible signs in a FRST log: HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp.myway.com/inspiringbackgrounds/ttab02/index.html?n={n1}&p2={p21}&ptb={ptb1} FF Homepage: hxxp://hp.myway.com/inspiringbackgrounds/ttab02/index.html?coId={coid1}&subId&ln=en&n={n2}&ptb={ptb2}&st=tab&p2={p22}&si FF Extension: InspiringBackgrounds - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\Extensions\_iyMembers_@free.inspiringbackgrounds.com [2016-10-13] CHR Extension: (InspiringBackgrounds) - C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn [2016-10-13] C:\Users\{username}\AppData\Local\InspiringBackgroundsTooltab InspiringBackgrounds Internet Explorer Homepage and New Tab (HKCU\...\InspiringBackgroundsTooltab Uninstall Internet Explorer) (Version: - Mindspark Interactive Network) <==== ATTENTION An excerpt from the Malwarebytes Anti-Malware scan log: (full log available on request) Malwarebytes Anti-Malware www.malwarebytes.org Scan Date: 10/13/2016 Scan Time: 9:44 AM Logfile: mbamInspiringBackgrounds.txt Administrator: Yes Version: 2.2.1.1043 Malware Database: v2016.10.13.05 Rootkit Database: v2016.09.26.02 License: Premium Malware Protection: Disabled Malicious Website Protection: Enabled Self-protection: Enabled OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: {username} Scan Type: Threat Scan Result: Completed Objects Scanned: 324276 Time Elapsed: 9 min, 5 sec Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Enabled Heuristics: Enabled PUP: Enabled PUM: Enabled Processes: 0 (No malicious items detected) Modules: 1 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\InspiringBackgroundsTooltab\TooltabExtension.dll, Delete-on-Reboot, [e0d92474aaf0989eaa790d8a38ccc63a], Registry Keys: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\InspiringBackgroundsTooltab Uninstall Internet Explorer, Quarantined, [e0d92474aaf0989eaa790d8a38ccc63a], Registry Values: 0 (No malicious items detected) Registry Data: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://hp.myway.com/inspiringbackgrounds/ttab02/index.html?n={n1}&p2=Bad: (http://hp.myway.com/inspiringbackgrounds/ttab02/index.html?n={n1}&p2={p21}&ptb={ptb1}),Replaced,[0aaf9602edad80b6cf89adcc729208f8]ECPABad: (http://hp.myway.com/inspiringbackgrounds/ttab02/index.html?n={n1}&p2={p21}&ptb={ptb1}),Replaced,[0aaf9602edad80b6cf89adcc729208f8]EorgyyyBad: (http://hp.myway.com/inspiringbackgrounds/ttab02/index.html?n={n1}&p2={p21}&ptb={ptb1}),Replaced,[0aaf9602edad80b6cf89adcc729208f8]ETTAB02Bad: (http://hp.myway.com/inspiringbackgrounds/ttab02/index.html?n={n1}&p2={p21}&ptb={ptb1}),Replaced,[0aaf9602edad80b6cf89adcc729208f8]Enl&ptb={ptb1}, Good: (www.google.com), Bad: (http://hp.myway.com/inspiringbackgrounds/ttab02/index.html?n={n1}&p2={p21}&ptb={ptb1}),Replaced,[0aaf9602edad80b6cf89adcc729208f8] Folders: 85 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\adapter, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\abstractbutton, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\abstractbutton\background, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\alert, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\alert\background, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\embedhtml, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\embedhtml\background, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\embedhtml\html, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\embedhtml\js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\embedscript, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\embedscript\background, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\embedscript\html, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\embedscript\js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\flare, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\flare\background, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\flare\icons, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\generic, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\generic\background, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\link, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\link\background, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\menu, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\menu\background, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\menu\css, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\menu\html, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\menu\images, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\menu\js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\rss, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\rss\background, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\thirdparty, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\thirdparty\background, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\uninstall, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\uninstall\background, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\weather, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\weather\background, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\widget-api, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\widget-api\widgets, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\widget-api\widgets\common, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\widget-api\widgets\radio, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\widget-api\widgets\radio\css, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\widget-api\widgets\radio\js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\widget-api\widgets\rss, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\widget-api\widgets\rss\js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\widget-api\widgets\test, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\widget-api\widgets\topapps, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\widget-api\widgets\topapps\css, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\widget-api\widgets\topapps\js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\widget-api\widgets\weather, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\widget-api\widgets\weather\css, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\widget-api\widgets\weather\js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\api, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\api\background, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\api\window, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\defaultSearch, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\defaultSearch\background, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\defaultSearch\foreground, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\moviereviews, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\moviereviews\background, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\moviereviews\css, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\moviereviews\html, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\moviereviews\js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\radio, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\radio\background, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\radio\css, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\radio\foreground, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\radio\radioWrapper, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\search, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\search\background, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\search\html, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\supertab, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\supertab\css, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\supertab\html, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\supertab\js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\icons, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\images, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\native, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\native\libs, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\shared, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\_metadata, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], Files: 279 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\InspiringBackgroundsTooltab\TooltabExtension.dll, Delete-on-Reboot, [e0d92474aaf0989eaa790d8a38ccc63a], PUP.Optional.MindSpark, C:\Users\{username}\Downloads\inspiringbackgrounds.05691594f14e412da49dfc306a732180.exe, Quarantined, [ae0b57415347171f6fb44a4dee165fa1], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_inspiringbackgrounds.dl.myway.com_0.localstorage, Quarantined, [9e1bc1d71b7f04326985317823e0a858], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_inspiringbackgrounds.dl.myway.com_0.localstorage-journal, Quarantined, [6b4e8e0ae0ba3303e80697129f6439c7], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_inspiringbackgrounds.dl.tb.ask.com_0.localstorage, Quarantined, [8a2f415738629b9bc22d8920fb086f91], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_inspiringbackgrounds.dl.tb.ask.com_0.localstorage-journal, Quarantined, [9e1bc8d0e1b9d066db1409a0c43ff907], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\manifest.json, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\spent.css, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\bg.html, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\buildVars, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\buildVars.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\companionSW.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\config.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\contentScript.css, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\contentScript.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\debug.html, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\debug.jade, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\extension_toolbar_api.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\initWidgetWindow.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\newTabContentScript.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\options.html, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\spent.html, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\spent.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\spent2.css, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\spent2.html, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\spentJ.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\spentK.html, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\spentK.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\startup.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\stub.html, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\stubby.html, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\superFrame.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\toolbar.html, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\toolbar.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\toolbarUI.css, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\toolbarUI.html, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\toolbarUI.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\url.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\webtooltab.cs.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\adapter\adapterUtil.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\adapter\widget-adapter.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\abstractbutton\background\abstractButton.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\alert\background\alertButton.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\embedhtml\background\embedHtmlWidget.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\embedhtml\html\embedHtmlTemplate.html, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\embedhtml\html\innerEmbedHtmlTemplate.html, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\embedhtml\js\embedHtmlUI.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\embedscript\background\embedScriptWidget.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\embedscript\html\embedScriptTemplate.html, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\embedscript\html\innerEmbedScriptTemplate.html, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\embedscript\js\embedScriptUI.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\flare\background\FlareWidget.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\flare\icons\Icon_Flare_blue.png, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\flare\icons\Icon_Flare_pink.png, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\flare\icons\Thumbs.db, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\generic\background\GenericWidget.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\link\background\linkButton.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\menu\README.txt, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\menu\background\menuButton.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\menu\css\menuframe.css, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\menu\html\menuframe.html, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\menu\images\right_arrow.png, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\menu\images\right_arrow_white.png, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\menu\js\jquery-1.7.1.min.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\menu\js\menuframe.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\menu\js\query-string.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\menu\js\underscore-1.3.1.min.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\rss\background\RssWidget.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\thirdparty\background\thirdPartyWidget.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\uninstall\background\uninstallButton.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\components\weather\background\weatherButton.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\js\bs.30.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\js\common.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\js\dynamic.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\js\enableDetect.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\js\eventListening.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\js\global.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\js\jquery-1.7.1.min.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\js\list-interaction.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\js\messageEventListener.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\js\navRedirector.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\js\paramReplacer.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\js\PartnerId.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\js\set.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\js\underscore-1.3.1.min.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\js\underscore-1.5.2.min.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\js\unifiedLogging.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\widget-api\widget-context-1.0.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\widget-api\widgets\common\common.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\widget-api\widgets\common\eventListening.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\widget-api\widgets\common\jquery-1.7.1.min.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\widget-api\widgets\common\list-interaction.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\widget-api\widgets\common\set.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\widget-api\widgets\common\underscore-1.3.1.min.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\widget-api\widgets\radio\radio-widget.html, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\widget-api\widgets\radio\css\radio-widget.css, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\widget-api\widgets\radio\js\radio-custom.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\widget-api\widgets\radio\js\radio-parser.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\widget-api\widgets\radio\js\radio-widget-ui.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\widget-api\widgets\radio\js\radio-widget.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\widget-api\widgets\rss\rssWidget.html, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\widget-api\widgets\rss\js\rss-widget-custom.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\widget-api\widgets\rss\js\rss-widget-parse.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\widget-api\widgets\rss\js\rss-widget.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\widget-api\widgets\test\invalid.json, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\widget-api\widgets\test\jquery.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\widget-api\widgets\test\qunit.css, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\widget-api\widgets\test\qunit.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\widget-api\widgets\test\resource.json, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\widget-api\widgets\test\resource.xml, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\widget-api\widgets\test\testWidget.html, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\widget-api\widgets\test\testWidget.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\widget-api\widgets\topapps\widget.html, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\widget-api\widgets\topapps\css\widget.css, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\widget-api\widgets\topapps\js\nanigans-topapps-feed.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\widget-api\widgets\topapps\js\topapps-config.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\widget-api\widgets\topapps\js\widget.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\widget-api\widgets\weather\weatherButton.html, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\widget-api\widgets\weather\css\weatherButton.css, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\common\widget-api\widgets\weather\js\weather.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\api\background\ApiBasedWidget.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\api\background\widget-api-impl.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\api\window\hiddenWidgetWindow.html, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\api\window\hiddenWidgetWindow.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\api\window\hiddenWidgetWindowInit.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\api\window\widgetWindow.html, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\api\window\widgetWindow.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\defaultSearch\background\updateSearch.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\defaultSearch\background\updateSearchPromptBg.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\defaultSearch\foreground\07_buttons2.png, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\defaultSearch\foreground\08_buttons2.png, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\defaultSearch\foreground\defaultSearchModal.html, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\defaultSearch\foreground\defaultSearchModalInjector.css, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\defaultSearch\foreground\defaultSearchModalInjector.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\defaultSearch\foreground\tvf_btn_ok.png, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\defaultSearch\foreground\tvf_btn_ok2.png, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\defaultSearch\foreground\tvf_restart_alert_icon.png, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\defaultSearch\foreground\tvf_restart_icon.png, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\defaultSearch\foreground\updateSearchPromptFg.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\moviereviews\background\MovieReviewsWidget.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\moviereviews\css\movieReviews.css, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\moviereviews\html\movieReviews.html, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\moviereviews\js\movieReviews.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\radio\background\RadioWidget.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\radio\css\toolbar-item.css, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\radio\foreground\button.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\radio\radioWrapper\radioWrapper.html, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\radio\radioWrapper\radioWrapper.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\search\background\searchBox.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\search\html\searchSuggestions.css, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\search\html\searchSuggestions.html, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\search\html\searchSuggestions.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\search\html\searchSuggestionsInit.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\supertab\css\supertab.css, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\supertab\html\supertab.html, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\supertab\js\newtabfork.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\supertab\js\reporting.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\supertab\js\srchsugg.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\supertab\js\supertab.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\supertab\js\unifiedLogging.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\components\supertab\js\__utm.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\icons\arrowSprite.png, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\images\wrench.png, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\js\newTabInitialize.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\js\chromeStorage.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\js\chromeUtils.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\js\companionSWUtils.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\js\exeManager.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\js\exeManagerNMD.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\js\exePackageManager.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\js\focusManager.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\js\globalBlacklistManager.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\js\messaging.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\js\mutation_summary-min.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\js\mutation_summary.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\js\nativeMessagingDispatcher.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\js\newTabInfo.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\js\options.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\js\readLocalStorage.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\js\reservespacefortoolbar.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\js\reservespaceifenabled.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\js\scriptInjector.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\js\searchContext.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\js\settingsOverrides.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\js\toolbarCookieParser.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\js\toolbarPreinit.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\js\underscore-1.3.1.min.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\js\URILoaderContentScript.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\js\webTooltabAPI.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\js\Widget.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\js\widgetContentScriptInjectee.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\js\widgetFactory.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\js\widgetWindowManager.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\native\cache.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\native\ce.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\native\debug.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\native\ss.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\native\libs\jquery-1.7.1.min.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\native\libs\jquery-1.9.1.min.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\native\libs\underscore-1.5.2.min.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\shared\activePing.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\shared\buttonLogger.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\shared\competitorDnsList.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\shared\console.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\shared\FFPreferencesPersister.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\shared\httpTransport.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\shared\HttpURL.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\shared\internationalSearch.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\shared\LocalStoragePersister.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\shared\MindsparkGlobal.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\shared\MindsparkGlobal.unitTest.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\shared\MindsparkGlobalNotes.txt, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\shared\rsvp-latest.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\shared\searchSuggestLocale.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\shared\testHttpTransport.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\shared\unifiedLogger.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\shared\unifiedLogging.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\shared\universalConsole.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\shared\utils.js, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\_metadata\computed_hashes.json, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknhnhgoeomafmbgfbppcgacgcbokbnn\12.202.10.29829_0\_metadata\verified_contents.json, Quarantined, [ad0ce0b88119df57e7588d0db2528f71], Physical Sectors: 0 (No malicious items detected) (end) As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat. We use different ways of protecting your computer(s): Dynamically Blocks Malware Sites & Servers Malware Execution Prevention Save yourself the hassle and get protected.
  9. Hello! I scanned Malwarebytes Free and came with 4 detection from the threat scan, all of them PUP.Mindspark. I kept them in the quarantine section in Malwarebytes. I followed some of the steps here in the forum such as the adwcleaner (i ran the scan and cleaned some of them), then I ran the FRST next and came up with these reports: Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 08-06-2015Ran by windows 7 (administrator) on WINDOWS7-PC on 09-06-2015 11:56:46Running from C:\Users\windows 7\DownloadsLoaded Profiles: windows 7 (Available Profiles: windows 7 & rishibility & ingrid)Platform: Microsoft Windows 7 Ultimate Service Pack 1 (X86) OS Language: English (United States)Internet Explorer Version 11 (Default browser: Chrome)Boot Mode: NormalTutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (IDT, Inc.) C:\Drivers\Audio\Sigmatel(IDT)\IDT\Lenovo_K46\stacsv.exe(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe(Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-05-11] (Avast Software s.r.o.)HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [157480 2015-04-07] (Apple Inc.)HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2015-05-03] (Avast Software s.r.o.) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKU\S-1-5-21-3246227928-2897000876-3919210742-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTIONHKU\S-1-5-21-3246227928-2897000876-3919210742-1000\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com.ph/?gfe_rd=cr&ei=jr1qVYnsEOmL8Qec24CYCA&gws_rd=sslSearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23] (Adobe Systems Incorporated)BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-05-03] (Avast Software s.r.o.)Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2009-02-26] (Microsoft Corporation)Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704 2011-08-30] (Apple Inc.)Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox:========FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_31.dll [2015-03-10] ()FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-17] (Google Inc.)FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-17] (Google Inc.)FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2012-09-23] (Adobe Systems Inc.)FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FFFF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-03-10] Chrome: =======CHR Profile: C:\Users\windows 7\AppData\Local\Google\Chrome\User Data\DefaultCHR Extension: (Google Docs) - C:\Users\windows 7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-03-10]CHR Extension: (Google Drive) - C:\Users\windows 7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-05-07]CHR Extension: (Bookmark Manager) - C:\Users\windows 7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-26]CHR Extension: (Google Wallet) - C:\Users\windows 7\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-04-26]CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-05-03] ========================== Services (Whitelisted) ================= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-05-03] (Avast Software s.r.o.)R2 STacSV; c:\drivers\audio\sigmatel(idt)\idt\lenovo_k46\STacSV.exe [229475 2010-03-09] (IDT, Inc.)R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) S3 AndnetBus; C:\Windows\System32\DRIVERS\lgandnetbus.sys [15744 2014-10-09] (LG Electronics Inc.)S3 AndNetDiag; C:\Windows\System32\DRIVERS\lgandnetdiag.sys [23680 2014-10-09] (LG Electronics Inc.)S3 ANDNetModem; C:\Windows\System32\DRIVERS\lgandnetmodem.sys [28416 2014-10-09] (LG Electronics Inc.)R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24144 2015-05-03] ()R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [74976 2015-05-03] (Avast Software s.r.o.)R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81728 2015-05-03] (Avast Software s.r.o.)R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49904 2015-05-03] ()R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [787760 2015-05-03] (Avast Software s.r.o.)R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427992 2015-05-03] (Avast Software s.r.o.)R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [106912 2015-05-03] (Avast Software s.r.o.)R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [209048 2015-05-03] ()S3 VGPU; System32\drivers\rdvgkmd.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-06-09 11:56 - 2015-06-09 11:57 - 00008070 _____ C:\Users\windows 7\Downloads\FRST.txt2015-06-09 11:56 - 2015-06-09 11:56 - 00000000 ____D C:\FRST2015-06-09 11:55 - 2015-06-09 11:55 - 01147904 _____ (Farbar) C:\Users\windows 7\Downloads\FRST.exe2015-06-09 11:39 - 2015-06-09 11:48 - 00000000 ____D C:\AdwCleaner2015-06-09 11:37 - 2015-06-09 11:38 - 02231296 _____ C:\Users\windows 7\Downloads\AdwCleaner.exe2015-06-09 01:10 - 2015-06-09 01:11 - 04197016 _____ (Kaspersky Lab ZAO) C:\Users\windows 7\Downloads\tdsskiller.exe2015-06-08 11:30 - 2015-06-09 11:22 - 00000000 ____D C:\Users\windows 7\AppData\Roaming\Apple Computer2015-06-08 11:27 - 2015-06-08 11:29 - 00000000 ___SD C:\Windows\system32\GWX2015-06-07 23:45 - 2015-01-09 07:44 - 00419936 _____ C:\Windows\system32\locale.nls2015-06-07 23:44 - 2014-06-27 09:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll2015-06-07 20:42 - 2015-06-07 20:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud2015-06-07 20:34 - 2015-06-07 20:34 - 00001815 _____ C:\Users\Public\Desktop\QuickTime Player.lnk2015-06-07 20:34 - 2015-06-07 20:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime2015-06-07 20:34 - 2015-06-07 20:34 - 00000000 ____D C:\Program Files\QuickTime2015-06-07 20:08 - 2015-06-07 21:38 - 00000000 ____D C:\Users\rishibility\AppData\Roaming\Apple Computer2015-06-07 20:08 - 2015-06-07 20:08 - 00001753 _____ C:\Users\Public\Desktop\iTunes.lnk2015-06-07 20:08 - 2015-06-07 20:08 - 00000000 ____D C:\Users\rishibility\AppData\Local\Apple Computer2015-06-07 20:08 - 2015-06-07 20:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes2015-06-07 20:07 - 2012-10-03 16:14 - 00026840 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys2015-06-07 20:06 - 2015-06-07 20:07 - 00000000 ____D C:\ProgramData\B0FFCDD9-5261-4e59-B29A-17A4FABDEBAB2015-06-07 20:06 - 2015-06-07 20:07 - 00000000 ____D C:\Program Files\iTunes2015-06-07 20:06 - 2015-06-07 20:06 - 00002519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk2015-06-07 20:06 - 2015-06-07 20:06 - 00000000 ____D C:\Users\rishibility\AppData\Local\Apple2015-06-07 20:06 - 2015-06-07 20:06 - 00000000 ____D C:\ProgramData\Apple Computer2015-06-07 20:06 - 2015-06-07 20:06 - 00000000 ____D C:\Program Files\iPod2015-06-07 20:06 - 2015-06-07 20:06 - 00000000 ____D C:\Program Files\Bonjour2015-06-07 20:06 - 2015-06-07 20:06 - 00000000 ____D C:\Program Files\Apple Software Update2015-06-07 20:05 - 2015-06-07 20:42 - 00000000 ____D C:\Program Files\Common Files\Apple2015-06-07 20:05 - 2015-06-07 20:06 - 00000000 ____D C:\ProgramData\Apple2015-06-07 18:31 - 2015-06-07 20:04 - 108728624 _____ (Apple Inc.) C:\Users\rishibility\Downloads\iTunesSetup.exe2015-06-07 17:57 - 2015-06-07 17:57 - 00000000 ____D C:\LGMobileUpgrade2015-06-07 17:54 - 2015-06-07 19:21 - 00000000 ____D C:\Users\rishibility\AppData\Local\Microsoft Games2015-06-07 17:54 - 2015-06-07 17:54 - 00109280 _____ C:\Users\rishibility\AppData\Local\GDIPFONTCACHEV1.DAT2015-06-07 17:45 - 2015-06-07 17:45 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01009.Wdf2015-06-07 17:45 - 2015-06-07 17:45 - 00000000 ____D C:\Users\rishibility\.android2015-06-07 17:44 - 2015-06-07 17:44 - 00000000 ____D C:\Users\rishibility\Documents\LG PC Suite2015-06-07 17:41 - 2015-01-09 10:48 - 00635904 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll2015-06-07 17:41 - 2015-01-09 10:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll2015-06-07 17:41 - 2015-01-09 10:48 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll2015-06-07 17:40 - 2014-08-01 19:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll2015-06-07 17:40 - 2012-02-11 13:37 - 00317440 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe2015-06-07 17:40 - 2011-02-25 13:30 - 02616320 _____ (Microsoft Corporation) C:\Windows\explorer.exe2015-06-07 17:39 - 2015-03-04 12:11 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll2015-06-07 17:39 - 2015-03-04 12:10 - 00295936 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll2015-06-07 17:39 - 2015-03-04 12:10 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll2015-06-07 17:39 - 2015-03-04 12:10 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe2015-06-07 17:39 - 2014-07-09 09:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL2015-06-07 17:39 - 2014-07-09 09:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL2015-06-07 17:39 - 2014-07-09 09:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL2015-06-07 17:39 - 2014-07-09 09:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL2015-06-07 17:39 - 2014-07-09 09:29 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL2015-06-07 17:39 - 2013-08-05 09:56 - 00133056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys2015-06-07 17:38 - 2015-06-07 17:38 - 00000000 ____D C:\Users\rishibility\AppData\Roaming\LG Electronics2015-06-07 17:38 - 2015-01-29 11:02 - 02311168 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll2015-06-07 17:38 - 2014-11-11 09:32 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys2015-06-07 17:38 - 2014-10-14 09:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll2015-06-07 17:38 - 2013-10-30 10:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll2015-06-07 17:38 - 2013-10-04 09:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll2015-06-07 17:38 - 2013-10-04 09:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll2015-06-07 17:38 - 2011-03-11 13:39 - 00143744 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys2015-06-07 17:38 - 2011-03-11 13:39 - 00117120 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys2015-06-07 17:38 - 2011-03-11 13:38 - 00332160 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys2015-06-07 17:38 - 2011-03-11 13:38 - 00080256 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys2015-06-07 17:38 - 2011-03-11 13:38 - 00022400 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys2015-06-07 17:38 - 2011-03-11 13:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll2015-06-07 17:38 - 2011-03-11 13:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe2015-06-07 17:38 - 2011-03-11 12:01 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS2015-06-07 17:37 - 2015-06-07 17:37 - 00001168 _____ C:\Users\Public\Desktop\LG PC Suite.lnk2015-06-07 17:37 - 2014-01-28 10:07 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll2015-06-07 17:37 - 2013-08-28 08:57 - 00434688 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll2015-06-07 17:37 - 2013-03-19 11:33 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll2015-06-07 17:36 - 2015-06-07 17:36 - 00000000 ____D C:\Users\rishibility\AppData\Local\LG Electronics2015-06-07 17:36 - 2015-06-07 17:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LG PC Suite2015-06-07 17:36 - 2014-02-04 10:07 - 00234432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys2015-06-07 17:36 - 2014-02-04 10:07 - 00149440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys2015-06-07 17:36 - 2014-02-04 10:07 - 00027072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys2015-06-07 17:36 - 2014-02-04 10:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll2015-06-07 17:35 - 2015-06-07 17:35 - 00000000 ____D C:\Program Files\LG Electronics2015-06-07 17:34 - 2014-11-08 10:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll2015-06-07 17:32 - 2014-06-24 10:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll2015-06-07 17:32 - 2014-01-24 10:18 - 01212352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys2015-06-07 17:15 - 2014-11-26 11:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll2015-06-07 17:10 - 2013-07-04 19:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll2015-06-07 17:10 - 2013-07-04 19:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll2015-06-07 17:08 - 2014-10-30 09:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe2015-06-07 16:53 - 2015-06-07 17:32 - 235940832 _____ (LG Electronics) C:\Users\rishibility\Downloads\LGPCSuite_Setup.exe2015-06-05 12:04 - 2015-06-06 20:53 - 00000000 ____D C:\Program Files\TeamViewer2015-06-05 12:04 - 2015-06-05 12:04 - 00000000 ____D C:\Users\windows 7\AppData\Roaming\TeamViewer2015-06-05 00:12 - 2015-06-05 00:12 - 00000000 ____D C:\Windows\CheckSur2015-06-04 23:49 - 2015-06-05 00:06 - 239126136 _____ C:\Users\windows 7\Downloads\Windows6.1-KB947821-v34-x86.msu2015-06-04 14:31 - 2015-06-04 14:31 - 00003536 ____N C:\bootsqm.dat2015-06-04 13:56 - 2015-06-04 23:46 - 00000000 ____D C:\MGADiagToolOutput2015-06-04 13:55 - 2015-06-04 13:55 - 00000000 ____D C:\ProgramData\Office Genuine Advantage2015-05-31 15:51 - 2015-05-31 15:51 - 00000000 __SHD C:\Users\windows 7\AppData\Local\EmieUserList2015-05-31 15:51 - 2015-05-31 15:51 - 00000000 __SHD C:\Users\windows 7\AppData\Local\EmieSiteList2015-05-31 15:51 - 2015-05-31 15:51 - 00000000 __SHD C:\Users\windows 7\AppData\Local\EmieBrowserModeList2015-05-31 13:35 - 2015-05-31 22:10 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\0E732AA2.sys2015-05-28 00:55 - 2015-05-28 00:55 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf2015-05-13 12:28 - 2015-05-01 21:16 - 00102608 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll2015-05-13 12:02 - 2015-04-22 09:48 - 00342736 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll2015-05-13 12:02 - 2015-04-22 00:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb2015-05-13 12:02 - 2015-04-22 00:25 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll2015-05-13 12:02 - 2015-04-22 00:24 - 19691008 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll2015-05-13 12:02 - 2015-04-22 00:11 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll2015-05-13 12:02 - 2015-04-22 00:11 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll2015-05-13 12:02 - 2015-04-22 00:10 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll2015-05-13 12:02 - 2015-04-22 00:09 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec2015-05-13 12:02 - 2015-04-22 00:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll2015-05-13 12:02 - 2015-04-22 00:04 - 02278400 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll2015-05-13 12:02 - 2015-04-22 00:03 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll2015-05-13 12:02 - 2015-04-22 00:02 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll2015-05-13 12:02 - 2015-04-22 00:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll2015-05-13 12:02 - 2015-04-21 23:58 - 00664576 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll2015-05-13 12:02 - 2015-04-21 23:58 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe2015-05-13 12:02 - 2015-04-21 23:58 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe2015-05-13 12:02 - 2015-04-21 23:57 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll2015-05-13 12:02 - 2015-04-21 23:51 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe2015-05-13 12:02 - 2015-04-21 23:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll2015-05-13 12:02 - 2015-04-21 23:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll2015-05-13 12:02 - 2015-04-21 23:39 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll2015-05-13 12:02 - 2015-04-21 23:38 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll2015-05-13 12:02 - 2015-04-21 23:36 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll2015-05-13 12:02 - 2015-04-21 23:31 - 04305920 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll2015-05-13 12:02 - 2015-04-21 23:26 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll2015-05-13 12:02 - 2015-04-21 23:26 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe2015-05-13 12:02 - 2015-04-21 23:25 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl2015-05-13 12:02 - 2015-04-21 23:24 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll2015-05-13 12:02 - 2015-04-21 23:17 - 12828672 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll2015-05-13 12:02 - 2015-04-21 23:02 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll2015-05-13 12:02 - 2015-04-21 22:58 - 01310208 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll2015-05-13 12:02 - 2015-04-21 22:56 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll2015-05-13 11:44 - 2015-05-05 09:12 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll2015-05-13 11:44 - 2015-04-18 10:56 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll2015-05-13 11:44 - 2015-04-04 11:10 - 00137656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys2015-05-13 11:44 - 2015-04-04 11:10 - 00067512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys2015-05-13 11:44 - 2015-04-04 11:05 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll2015-05-13 11:44 - 2015-04-04 11:05 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll2015-05-13 11:44 - 2015-04-04 11:05 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll2015-05-13 11:44 - 2015-04-04 11:05 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll2015-05-13 11:44 - 2015-04-04 11:05 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll2015-05-13 11:44 - 2015-04-04 11:05 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll2015-05-13 11:44 - 2015-04-04 11:05 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll2015-05-13 11:44 - 2015-04-04 11:05 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll2015-05-13 11:44 - 2015-04-04 11:05 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll2015-05-13 11:44 - 2015-04-04 11:05 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll2015-05-13 11:44 - 2015-04-04 11:04 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe2015-05-13 11:44 - 2015-04-04 11:04 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe2015-05-13 11:44 - 2015-04-04 11:01 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll2015-05-13 11:44 - 2015-04-04 11:01 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll2015-05-13 11:44 - 2015-04-04 10:59 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll2015-05-13 11:38 - 2015-04-20 10:56 - 01250816 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll2015-05-13 11:38 - 2015-04-20 10:56 - 00909312 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll2015-05-13 11:38 - 2015-04-20 10:03 - 02382336 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys2015-05-13 11:38 - 2015-04-08 11:14 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll2015-05-13 11:38 - 2015-04-08 11:14 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll2015-05-13 11:37 - 2015-04-13 11:19 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\services.exe2015-05-13 11:37 - 2015-02-18 15:06 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-06-09 11:53 - 2015-03-10 16:05 - 01279251 _____ C:\Windows\WindowsUpdate.log2015-06-09 11:50 - 2009-07-14 12:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT2015-06-09 11:50 - 2009-07-14 12:39 - 00043468 _____ C:\Windows\setupact.log2015-06-09 11:48 - 2009-07-14 12:34 - 00025664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A02015-06-09 11:48 - 2009-07-14 12:34 - 00025664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A02015-06-09 11:45 - 2015-05-03 18:08 - 00000000 ____D C:\Users\windows 7\AppData\Roaming\Skype2015-06-09 11:36 - 2015-03-10 16:14 - 00000886 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job2015-06-08 23:50 - 2015-05-03 18:52 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys2015-06-08 15:01 - 2009-07-14 12:33 - 00405992 _____ C:\Windows\system32\FNTCACHE.DAT2015-06-08 14:47 - 2009-07-14 10:37 - 00000000 ____D C:\Windows\system32\NDF2015-06-08 11:27 - 2015-05-03 18:29 - 00000000 ____D C:\Windows\system32\Drivers\ko-KR2015-06-08 11:27 - 2009-07-14 10:37 - 00000000 ____D C:\Windows\tracing2015-06-08 11:27 - 2009-07-14 10:37 - 00000000 ____D C:\Windows\system32\ko-KR2015-06-08 11:27 - 2009-07-14 10:37 - 00000000 ____D C:\Windows\system32\AdvancedInstallers2015-06-07 17:45 - 2015-04-28 16:57 - 00000000 ____D C:\Users\rishibility2015-06-07 17:33 - 2009-07-14 10:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared2015-06-07 13:00 - 2010-11-21 05:48 - 00009684 _____ C:\Windows\PFRO.log2015-06-06 20:54 - 2015-03-10 16:16 - 00109280 _____ C:\Users\windows 7\AppData\Local\GDIPFONTCACHEV1.DAT2015-06-05 23:38 - 2015-05-03 18:29 - 00427048 _____ C:\Windows\system32\perfh012.dat2015-06-05 23:38 - 2015-05-03 18:29 - 00118778 _____ C:\Windows\system32\perfc012.dat2015-06-05 23:38 - 2010-11-21 05:01 - 01315944 _____ C:\Windows\system32\PerfStringBackup.INI2015-05-29 04:03 - 2009-07-14 10:37 - 00000000 ____D C:\Windows\rescache2015-05-26 12:35 - 2015-03-10 16:15 - 00002129 _____ C:\Users\Public\Desktop\Google Chrome.lnk2015-05-17 02:24 - 2015-03-10 16:14 - 00000882 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job2015-05-15 23:33 - 2010-11-21 08:46 - 00000000 ____D C:\Program Files\Windows Journal2015-05-14 03:21 - 2009-07-14 10:37 - 00000000 ____D C:\Windows\Microsoft.NET2015-05-13 12:32 - 2015-05-03 16:00 - 00000000 ____D C:\Program Files\Microsoft Silverlight2015-05-13 12:27 - 2015-03-10 16:19 - 00000000 ____D C:\ProgramData\Microsoft Help2015-05-13 12:26 - 2015-04-27 00:41 - 00000000 ____D C:\Windows\system32\MRT2015-05-13 12:16 - 2015-04-27 00:41 - 137310008 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe2015-05-13 12:10 - 2015-05-03 16:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight Some files in TEMP:====================C:\Users\rishibility\AppData\Local\Temp\vcredist9_x86.exeC:\Users\windows 7\AppData\Local\Temp\Quarantine.exeC:\Users\windows 7\AppData\Local\Temp\sqlite3.dll ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\explorer.exe => File is digitally signedC:\Windows\system32\winlogon.exe => File is digitally signedC:\Windows\system32\wininit.exe => File is digitally signedC:\Windows\system32\svchost.exe => File is digitally signedC:\Windows\system32\services.exe => File is digitally signedC:\Windows\system32\User32.dll => File is digitally signedC:\Windows\system32\userinit.exe => File is digitally signedC:\Windows\system32\rpcss.dll => File is digitally signedC:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-05-29 03:45 ==================== End of log ============================ And then the additional txt: Additional scan result of Farbar Recovery Scan Tool (x86) Version: 08-06-2015Ran by windows 7 at 2015-06-09 11:57:22Running from C:\Users\windows 7\DownloadsBoot Mode: Normal========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-3246227928-2897000876-3919210742-500 - Administrator - Disabled)Guest (S-1-5-21-3246227928-2897000876-3919210742-501 - Limited - Disabled)HomeGroupUser$ (S-1-5-21-3246227928-2897000876-3919210742-1002 - Limited - Enabled)ingrid (S-1-5-21-3246227928-2897000876-3919210742-1004 - Administrator - Enabled) => C:\Users\ingridrishibility (S-1-5-21-3246227928-2897000876-3919210742-1003 - Administrator - Enabled) => C:\Users\rishibilitywindows 7 (S-1-5-21-3246227928-2897000876-3919210742-1000 - Administrator - Enabled) => C:\Users\windows 7 ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Adobe Flash Player 12 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 12.0.0.31 - Adobe Systems Incorporated)Adobe Flash Player 12 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 12.0.0.31 - Adobe Systems Incorporated)Adobe Reader XI MUI (HKLM\...\{AC76BA86-7AD7-FFFF-7B44-AB0000000001}) (Version: 11.0.00 - Adobe Systems Incorporated)Apple Application Support (32-bit) (HKLM\...\{AFA1153A-F547-409B-B837-3A0D6C5A3FEC}) (Version: 3.1.3 - Apple Inc.)Apple Mobile Device Support (HKLM\...\{E1DB0812-2D60-43DB-AE09-6C7027D93B28}) (Version: 8.1.1.3 - Apple Inc.)Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)Avast Free Antivirus (HKLM\...\Avast) (Version: 10.2.2218 - AVAST Software)Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)Google Chrome (HKLM\...\Google Chrome) (Version: 43.0.2357.81 - Google Inc.)Google Update Helper (Version: 1.3.24.7 - Google Inc.) HiddenGoogle Update Helper (Version: 1.3.27.5 - Google Inc.) HiddeniCloud (HKLM\...\{9A07AB4F-6B53-43E9-B7FC-7892E8C26BE3}) (Version: 4.1.1.53 - Apple Inc.)iTunes (HKLM\...\{CE1F04C7-79BC-4219-BE6A-BA490224D4B5}) (Version: 12.1.2.27 - Apple Inc.)K-Lite Mega Codec Pack 9.9.5 (HKLM\...\KLiteCodecPack_is1) (Version: 9.9.5 - )LG PC Suite (HKLM\...\LG PC Suite) (Version: 5.3.24.20150327 - LG Electronics)LG United Mobile Drivers (HKLM\...\{2D5218EB-6992-46E3-8ECE-76C79AB955CE}) (Version: 3.13.2.0 - LG Electronics)Malwarebytes Anti-Malware version 2.1.6.1022 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)Microsoft Works 6-9 Converter (HKLM\...\{95140000-0137-0409-0000-0000000FF1CE}) (Version: 14.0.6120.5002 - Microsoft Corporation)QuickTime 7 (HKLM\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)Skype™ 7.4 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.4.102 - Skype Technologies S.A.)Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)WinRAR 5.01 (32-bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== Restore Points ========================= 07-06-2015 16:51:39 Installed LG United Mobile Drivers.07-06-2015 19:00:51 Windows Backup08-06-2015 11:40:38 Windows Update ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 10:04 - 2009-06-11 05:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {0442B0DC-CA6A-442F-89CD-E6A2808C9CC1} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-03-10] (Google Inc.)Task: {0D213FCF-0ADC-4C31-BBB1-137432973021} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)Task: {174909B5-4554-4C7A-B12E-63AF8D4F7E1E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-03-10] (Google Inc.)Task: {492AC1F3-9269-410B-B7B7-E09C4043C413} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle => C:\Windows\system32\GWX\GWX.exe [2015-05-08] (Microsoft Corporation)Task: {5D0CD894-DBA6-4A62-B7B2-D33BFCED0997} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-05-08] (Microsoft Corporation)Task: {88E7D511-D9B7-46B7-96A6-6B7D6642F261} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-05-03] (Avast Software s.r.o.)Task: {8D9968DE-F551-46D6-A88F-38BD6EA9587E} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\Logon => C:\Windows\system32\GWX\GWX.exe [2015-05-08] (Microsoft Corporation)Task: {A314D0A5-D152-4026-A1A7-EF2B271227F9} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-05-08] (Microsoft Corporation)Task: {DBDA7C85-99E6-4C27-9917-FBD4F28CEED3} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => schtasks (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exeTask: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (Whitelisted) ============== 2015-05-03 16:28 - 2015-05-03 16:28 - 00104400 _____ () C:\Program Files\AVAST Software\Avast\log.dll2015-05-03 16:28 - 2015-05-03 16:28 - 00081728 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll2015-06-09 11:25 - 2015-06-09 11:25 - 02952192 _____ () C:\Program Files\AVAST Software\Avast\defs\15060801\algo.dll2015-05-03 16:28 - 2015-05-03 16:28 - 40540672 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll2015-03-20 18:12 - 2015-03-20 18:12 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll2015-03-20 18:12 - 2015-03-20 18:12 - 01044776 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll2015-05-26 12:35 - 2015-05-23 04:22 - 01281864 _____ () C:\Program Files\Google\Chrome\Application\43.0.2357.81\libglesv2.dll2015-05-26 12:35 - 2015-05-23 04:22 - 00080712 _____ () C:\Program Files\Google\Chrome\Application\43.0.2357.81\libegl.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) ==================== Safe Mode (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-3246227928-2897000876-3919210742-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\windows 7\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpgDNS Servers: 192.168.1.1 ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"MSCONFIG\startupreg: GrooveMonitor => "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"MSCONFIG\startupreg: HotKeysCmds => C:\Windows\system32\hkcmd.exeMSCONFIG\startupreg: IgfxTray => C:\Windows\system32\igfxtray.exeMSCONFIG\startupreg: Persistence => C:\Windows\system32\igfxpers.exeMSCONFIG\startupreg: SysTrayApp => %ProgramFiles%\IDT\WDM\sttray.exe ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [{96483D3A-3E01-45E7-A6C5-2B758E9B8195}] => (Allow) C:\Program Files\Skype\Phone\Skype.exeFirewallRules: [{F7DB76FA-D508-4B81-A1DA-3080B29ACB0F}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exeFirewallRules: [{4E8E2E99-E5A5-4B56-9AB9-1CEE802E78FE}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exeFirewallRules: [{6670A648-9F59-46BD-83D0-054459F3F7F6}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exeFirewallRules: [{8C981AC3-5D31-4366-875A-967E95E1FFF7}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exeFirewallRules: [{49DED3ED-E3CB-4388-B9EB-18612DB9DCCB}] => (Allow) C:\Program Files\iTunes\iTunes.exe ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors:==================Error: (06/09/2015 11:50:56 AM) (Source: WinMgmt) (EventID: 10) (User: )Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/09/2015 11:49:09 AM) (Source: Windows Search Service) (EventID: 3084) (User: )Description: Failed to load protocol handler Csc. Error description: Illegal operation attempted on a registry key that has been marked for deletion. (HRESULT : 0x800703fa). Error: (06/09/2015 11:23:32 AM) (Source: WinMgmt) (EventID: 10) (User: )Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/08/2015 11:46:26 PM) (Source: Application Hang) (EventID: 1002) (User: )Description: The program Skype.exe version 7.4.0.102 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel. Process ID: be8 Start Time: 01d0a201c927388c Termination Time: 11 Application Path: C:\Program Files\Skype\Phone\Skype.exe Report Id: 6fbb7a9c-0df5-11e5-ab05-1078d2fe3a66 Error: (06/08/2015 11:42:25 PM) (Source: WinMgmt) (EventID: 10) (User: )Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/08/2015 03:02:34 PM) (Source: WinMgmt) (EventID: 10) (User: )Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/08/2015 11:29:36 AM) (Source: WinMgmt) (EventID: 10) (User: )Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/08/2015 11:26:32 AM) (Source: WinMgmt) (EventID: 10) (User: )Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/07/2015 11:46:43 PM) (Source: MsiInstaller) (EventID: 11935) (User: NT AUTHORITY)Description: Product: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 -- Error 1935.An error occurred during the installation of assembly 'Microsoft.VC90.ATL,version="9.0.30729.6161",publicKeyToken="1fc8b3b9a1e18e3b",processorArchitecture="x86",type="win32"'. Please refer to Help and Support for more information. HRESULT: 0x80070BC9. assembly interface: IAssemblyCacheItem, function: Commit, component: {03329364-ED3E-3EF1-ACB0-C1E9F5282929} Error: (06/07/2015 04:45:53 PM) (Source: WinMgmt) (EventID: 10) (User: )Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 System errors:=============Error: (06/09/2015 11:49:33 AM) (Source: Service Control Manager) (EventID: 7000) (User: )Description: The Print Spooler service failed to start due to the following error: %%1069 Error: (06/09/2015 11:49:33 AM) (Source: Service Control Manager) (EventID: 7038) (User: )Description: The Spooler service was unable to log on as NT AUTHORITY\SYSTEM with the currently configured password due to the following error: %%50 To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC). Error: (06/09/2015 11:49:33 AM) (Source: Service Control Manager) (EventID: 7000) (User: )Description: The Apple Mobile Device service failed to start due to the following error: %%109 Error: (06/09/2015 11:48:52 AM) (Source: Service Control Manager) (EventID: 7032) (User: )Description: The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Windows Search service, but this action failed with the following error: %%1056 Error: (06/09/2015 11:48:22 AM) (Source: Service Control Manager) (EventID: 7031) (User: )Description: The Windows Search service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service. Error: (06/09/2015 11:48:20 AM) (Source: Service Control Manager) (EventID: 7031) (User: )Description: The Software Protection service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service. Error: (06/09/2015 11:48:20 AM) (Source: Service Control Manager) (EventID: 7031) (User: )Description: The Windows Modules Installer service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service. Error: (06/09/2015 11:48:18 AM) (Source: Service Control Manager) (EventID: 7031) (User: )Description: The Windows Search service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service. Error: (06/09/2015 11:48:18 AM) (Source: Service Control Manager) (EventID: 7031) (User: )Description: The Windows Media Player Network Sharing Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service. Error: (06/09/2015 11:48:17 AM) (Source: Service Control Manager) (EventID: 7034) (User: )Description: The iPod Service service terminated unexpectedly. It has done this 1 time(s). Microsoft Office:========================= ==================== Memory info =========================== Processor: Intel® Core2 Quad CPU Q6600 @ 2.40GHzPercentage of memory in use: 50%Total physical RAM: 1981.24 MBAvailable physical RAM: 985.05 MBTotal Pagefile: 3962.48 MBAvailable Pagefile: 2831.61 MBTotal Virtual: 2047.88 MBAvailable Virtual: 1892.99 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:50.68 GB) (Free:21.56 GB) NTFSDrive d: () (Fixed) (Total:98.27 GB) (Free:46.89 GB) NTFS ==================== MBR & Partition Table ================== ========================================================Disk: 0 (MBR Code: Windows 7 or 8) (Size: 149.1 GB) (Disk ID: FF6AFF6A)Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)Partition 2: (Not Active) - (Size=50.7 GB) - (Type=07 NTFS)Partition 3: (Not Active) - (Size=98.3 GB) - (Type=07 NTFS) ==================== End of log ============================ I don't know what to do next after this since I dn't know how to read the logs and find what's wrong. I have also Avast Antivirus Free, but it didn't detect anything. Thank you in advance for those who will reply.
  10. I've run Malwarebytes free edition on a family members PC twice (mbam-setup-2.0.4.1028.exe). Both times after reboot and log on it hangs. After a hard hard power off I can reboot it into safe mode only. What recommendations do you have. Here are the actions I've taken : 1) Run Malwarebytes - it discovers files, folders keys, PUP, etc. - 99% associated with 3 Mindspark programs 2) Apply Malwarebytes default fix and reboot 3) PC restarts 4) enter password on log on screen 5) PC "hangs" on windows 7 "Welcome" screen overnight 6) hard power off 7) boot to safe mode 8) perform a system restore to one week ago 9) PC reboots from system restore and I log on 10) Install HitmanPro (HitmanPro_x64 (1).exe) 11) Run HitmanPro 12) It finds 18 tracking cookies - nothing I can see is related to Mindspark. 13) allow HitmanPro to clean cookies 14) restart PC 15) Logs on good. 16) reinstall Malwarebytes - allow it to over write existing program folder 17) Run Malwarebytes. 18) Malware bytes finds 500 files, folders keys, PUP, etc. - 99% associated with 3 Mindspark programs 19) apply default Malwarebytes fix 20) reboot PC 21) enter password on log on screen 22) PC "hangs" on windows 7 "Welcome" screen then after 25 minutes, white cursor appears on black screen. And the cursor can be moved 23) I notice the hard drive LED blinks - hard to tell if it is a pattern What should I try next...
  11. What is SafePCRepair? The Malwarebytes research team has determined that SafePCRepair is a browser hijacker. These so-called "hijackers" manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. This one also displays advertisements. How do I know if my computer is affected by SafePCRepair? This is how the first window of the official installer looks: And you may see this toolbar in the affected browser(s): and these browser extensions: and this entry in your list of installed programs: How did SafePCRepair get on my computer? Browser hijackers use different methods for distributing themselves. This particular one was downloaded from the Mindspark site. How do I remove SafePCRepair? Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted program. Please download Malwarebytes Anti-Malware to your desktop.Double-click mbam-setup-version.exe and follow the prompts to install the program.At the end, be sure a check-mark is placed next to the following:Enable free trial of Malwarebytes Anti-Malware PremiumLaunch Malwarebytes Anti-MalwareThen click Finish.If an update is found, you will be prompted to download and install the latest version.Once the program has loaded, select Scan now. Or select the Threat Scan from the Scan menu.When the scan is complete , make sure that everything is set to "Quarantine", and click Apply Actions.Reboot your computer if prompted.Is there anything else I need to do to get rid of SafePCRepair?The Chrome extension can now safely be removed. Open "Settings" > "Extensions" and click the bin behind the Name of the rogue listing. Then confirm removal.The hijacker sets itself as Homepage in Firefox. We will show you how to change that.Look at the reply to this topic for the additional guide.How would the full version of Malwarebytes Anti-Malware help protect me? We hope our application and this guide have helped you eradicate this hijacker. As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the SafePCRepair hijacker. It would have warned you before the rogue could install itself, giving you a chance to stop it before it became too late. Technical details for experts Signs in a HijackThis log: R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.tb.ask.com/index.jhtml?n=780CC582&p2=^AW7^man000^YYA^&ptb=5F4B66A6-7192-4E3F-9382-58BDE34E265AR3'>http://home.tb.ask.com/index.jhtml?n=780CC582&p2=^AW7^man000^YYA^&ptb=5F4B66A6-7192-4E3F-9382-58BDE34E265AR3 - URLSearchHook: (no name) - {be823b8c-a7ec-4078-a321-0f8046cbb48a} - C:\Program Files\SafePCRepair_89\bar\1.bin\89SrcAs.dllO2 - BHO: Toolbar BHO - {1fc509df-4b29-4ab3-96e6-47c178d60287} - C:\PROGRA~1\SAFEPC~2\bar\1.bin\89bar.dllO2 - BHO: Search Assistant BHO - {5d13bf91-ea09-4ed8-9acd-c6bad32617b9} - C:\Program Files\SafePCRepair_89\bar\1.bin\89SrcAs.dllO3 - Toolbar: SafePCRepair - {a9d9ea68-5d09-43ef-a0c5-6f6a6f82a0e1} - C:\Program Files\SafePCRepair_89\bar\1.bin\89bar.dllO4 - HKLM\..\Run: [SafePCRepair EPM Support] "C:\PROGRA~1\SAFEPC~2\bar\1.bin\89medint.exe" T8EPMSUP.DLL,SO4 - HKLM\..\Run: [SafePCRepair AppIntegrator 32-bit] C:\PROGRA~1\SAFEPC~2\bar\1.bin\AppIntegrator.exeO4 - HKLM\..\Run: [SafePCRepair Search Scope Monitor] "C:\PROGRA~1\SAFEPC~2\bar\1.bin\89srchmn.exe" /m=2 /w /hO23 - Service: ioloToolService (ioloService) - iolo technologies, LLC - C:\Program Files\SafePCRepair\ioloToolService.exeO23 - Service: SafePCRepairService (SafePCRepair_89Service) - Mindspark - C:\PROGRA~1\SAFEPC~2\bar\1.bin\89barsvc.exe Alterations made by the installer: File system details --------------------------------------------- Adds the folder C:\Program Files\SafePCRepair Adds the file Chrome-NativeMessagingDispatcher.exe"="10/2/2014 6:56 PM, 10688 bytes, A Adds the file IoloServiceWrapper.dll"="10/2/2014 6:56 PM, 36192 bytes, A Adds the file ioloToolService.dll"="10/2/2014 6:56 PM, 24416 bytes, A Adds the file ioloToolService.exe"="10/2/2014 6:56 PM, 2624352 bytes, A Adds the file log4net.dll"="10/2/2014 6:56 PM, 293728 bytes, A Adds the file lua5.1.dll"="10/29/2014 2:32 PM, 325960 bytes, A Adds the file manifest.json"="10/29/2014 2:32 PM, 310 bytes, A Adds the file Microsoft.Expression.Drawing.dll"="10/2/2014 6:56 PM, 129376 bytes, A Adds the file MindSparkTools.dll"="10/2/2014 6:56 PM, 2362720 bytes, A Adds the file NativeMessagingDispatcher.dll"="10/2/2014 6:56 PM, 484784 bytes, A Adds the file Newtonsoft.Json.dll"="10/2/2014 6:56 PM, 398176 bytes, A Adds the file SPR.exe"="10/2/2014 6:56 PM, 1800544 bytes, A Adds the file SPR.exe.config"="10/2/2014 6:56 PM, 885 bytes, A Adds the file TaskDialog.dll"="10/2/2014 6:56 PM, 89952 bytes, A Adds the file uninstall.exe"="10/29/2014 2:32 PM, 1352032 bytes, A Adds the file Verify.dll"="10/2/2014 6:56 PM, 69520 bytes, A Adds the folder C:\Program Files\SafePCRepair\Uninstall Adds the file IRIMG1.PNG"="10/29/2014 2:32 PM, 5043 bytes, A Adds the file uninstall.dat"="10/29/2014 2:32 PM, 120480 bytes, A Adds the file uninstall.xml"="10/29/2014 2:32 PM, 10383 bytes, A Adds the folder C:\Program Files\SafePCRepair_89\bar\1.bin Adds the folder C:\Program Files\SafePCRepair_89\bar\1.bin\assists\ie_default_search_provider Adds the file ARBITER.DLL"="10/29/2014 2:32 PM, 15432 bytes, A Adds the file ARBITER64.DLL"="10/29/2014 2:32 PM, 17480 bytes, A Adds the file ASSIST.EXE"="10/29/2014 2:32 PM, 207944 bytes, A Adds the file CONFIG.XML"="10/29/2014 2:32 PM, 3242 bytes, A Adds the folder C:\Program Files\SafePCRepair_89\bar\1.bin\assists\ie_enable Adds the file ARBITER.DLL"="10/29/2014 2:32 PM, 12360 bytes, A Adds the file ARBITER64.DLL"="10/29/2014 2:32 PM, 12360 bytes, A Adds the file CONFIG.XML"="10/29/2014 2:32 PM, 6564 bytes, A Adds the folder C:\Program Files\SafePCRepair_89\bar\1.bin\chrome Adds the file 89ffxtbr.jar"="10/29/2014 2:32 PM, 548864 bytes, A Adds the folder C:\Program Files\SafePCRepair_89\bar\1.bin\ThirdPartyInstallers Adds the folder C:\Program Files\SafePCRepair_89\bar\assists Adds the file COMMON.T8S"="10/29/2014 2:32 PM, 138369 bytes, A Adds the folder C:\Program Files\SafePCRepair_89\bar\gen1 Adds the file COMMON.T8S"="10/29/2014 2:32 PM, 1547 bytes, A Adds the folder C:\Program Files\SafePCRepair_89\bar\History Adds the folder C:\Program Files\SafePCRepair_89\bar\Message Adds the file COMMON.T8S"="10/29/2014 2:32 PM, 100829 bytes, A Adds the folder C:\Program Files\SafePCRepair_89\bar\Settings Adds the file s_pid.dat"="10/29/2014 2:32 PM, 32 bytes, A Adds the folder C:\ProgramData\iolo Adds the folder C:\Users\{username}\AppData\Local\IAC Adds the folder C:\Users\{username}\AppData\Local\iolo Adds the folder C:\Users\{username}\AppData\Local\SafePCRepair_89 Adds the file UrlFolderExtension.uf1"="10/29/2014 2:32 PM, 3344 bytes, A Adds the file UrlFolderExtension.ufm"="10/29/2014 2:32 PM, 3344 bytes, A Adds the folder C:\Users\{username}\AppData\Local\SafePCRepair_89\1d337bed5b7299517362055301e98c70b6be0b2e\1.1.0 Adds the file Background.html"="12/5/2013 9:42 PM, 845 bytes, A Adds the file lang-default.js"="12/5/2013 9:42 PM, 116 bytes, A Adds the file manifest.json"="12/5/2013 9:42 PM, 1066 bytes, A Adds the file manifest.json.sig"="12/5/2013 9:42 PM, 8244 bytes, A Adds the folder C:\Users\{username}\AppData\Local\SafePCRepair_89\1d337bed5b7299517362055301e98c70b6be0b2e\1.1.0\images Adds the file icn_accel.bmp"="12/5/2013 9:42 PM, 6392 bytes, A Adds the file icn_accel.png"="12/5/2013 9:42 PM, 2587 bytes, A Adds the folder C:\Users\{username}\AppData\Local\SafePCRepair_89\1d337bed5b7299517362055301e98c70b6be0b2e\1.1.0\js Adds the file Background.min.js"="12/5/2013 9:42 PM, 237521 bytes, A Adds the folder C:\Users\{username}\AppData\Local\SafePCRepair_89\57b413127dc14ab260448989debbb88b6f1f1363\1.0.0 Adds the file background.html"="8/28/2013 6:55 PM, 555 bytes, A Adds the file manifest.json"="8/28/2013 6:55 PM, 1110 bytes, A Adds the file manifest.json.sig"="8/28/2013 6:55 PM, 8420 bytes, A Adds the file widget-api-1.3.js"="8/28/2013 6:55 PM, 102026 bytes, A Adds the folder C:\Users\{username}\AppData\Local\SafePCRepair_89\57b413127dc14ab260448989debbb88b6f1f1363\1.0.0\bin Adds the file core.min.js"="8/28/2013 6:55 PM, 110600 bytes, A Adds the folder C:\Users\{username}\AppData\Local\SafePCRepair_89\57b413127dc14ab260448989debbb88b6f1f1363\1.0.0\bin\libs\require Adds the file require.min.js"="8/28/2013 6:55 PM, 14761 bytes, A Adds the folder C:\Users\{username}\AppData\Local\SafePCRepair_89\57b413127dc14ab260448989debbb88b6f1f1363\1.0.0\images Adds the folder C:\Users\{username}\AppData\Local\SafePCRepair_89\57b413127dc14ab260448989debbb88b6f1f1363\1.0.0\imgs Adds the folder C:\Users\{username}\AppData\Local\SafePCRepair_89\57b413127dc14ab260448989debbb88b6f1f1363\1.0.0\vicinio-data Adds the folder C:\Users\{username}\AppData\Local\SafePCRepair_89\753ef97f9c830f5ee406844b800580ea56791102\1.0.0 Adds the file background.html"="8/28/2013 7:00 PM, 558 bytes, A Adds the file manifest.json"="8/28/2013 7:00 PM, 1101 bytes, A Adds the file manifest.json.sig"="8/28/2013 7:00 PM, 8384 bytes, A Adds the file widget-api-1.3.js"="8/28/2013 7:00 PM, 102026 bytes, A Adds the folder C:\Users\{username}\AppData\Local\SafePCRepair_89\753ef97f9c830f5ee406844b800580ea56791102\1.0.0\bin Adds the file core.min.js"="8/28/2013 7:00 PM, 110596 bytes, A Adds the folder C:\Users\{username}\AppData\Local\SafePCRepair_89\753ef97f9c830f5ee406844b800580ea56791102\1.0.0\bin\libs\require Adds the file require.min.js"="8/28/2013 7:00 PM, 14761 bytes, A Adds the folder C:\Users\{username}\AppData\Local\SafePCRepair_89\753ef97f9c830f5ee406844b800580ea56791102\1.0.0\images Adds the file icn_memory.bmp"="8/28/2013 7:00 PM, 4456 bytes, A Adds the file icn_memory.png_1367345186901.bmp"="8/28/2013 7:00 PM, 1859 bytes, A Adds the folder C:\Users\{username}\AppData\Local\SafePCRepair_89\753ef97f9c830f5ee406844b800580ea56791102\1.0.0\imgs Adds the file icn_memory.bmp"="8/28/2013 7:00 PM, 4456 bytes, A Adds the file icn_memory.bmp,hot,flags=none.png"="8/28/2013 7:00 PM, 1590 bytes, A Adds the file icn_memory.png"="8/28/2013 7:00 PM, 1859 bytes, A Adds the folder C:\Users\{username}\AppData\Local\SafePCRepair_89\753ef97f9c830f5ee406844b800580ea56791102\1.0.0\vicinio-data Adds the folder C:\Users\{username}\AppData\Local\SafePCRepair_89\9f0dc5279df6f2dd408e4faff0fbd51a3d3102cc\1.0.0 Adds the file background.html"="8/28/2013 7:03 PM, 558 bytes, A Adds the file manifest.json"="8/28/2013 7:03 PM, 1095 bytes, A Adds the file manifest.json.sig"="8/28/2013 7:03 PM, 8360 bytes, A Adds the file widget-api-1.3.js"="8/28/2013 7:03 PM, 102026 bytes, A Adds the folder C:\Users\{username}\AppData\Local\SafePCRepair_89\9f0dc5279df6f2dd408e4faff0fbd51a3d3102cc\1.0.0\bin Adds the file core.min.js"="8/28/2013 7:03 PM, 110592 bytes, A Adds the folder C:\Users\{username}\AppData\Local\SafePCRepair_89\9f0dc5279df6f2dd408e4faff0fbd51a3d3102cc\1.0.0\bin\libs\require Adds the file require.min.js"="8/28/2013 7:03 PM, 14761 bytes, A Adds the folder C:\Users\{username}\AppData\Local\SafePCRepair_89\9f0dc5279df6f2dd408e4faff0fbd51a3d3102cc\1.0.0\images Adds the file icn_logo.bmp"="8/28/2013 7:03 PM, 3984 bytes, A Adds the file icn_logo.png_1367345054994.bmp"="8/28/2013 7:03 PM, 2471 bytes, A Adds the folder C:\Users\{username}\AppData\Local\SafePCRepair_89\9f0dc5279df6f2dd408e4faff0fbd51a3d3102cc\1.0.0\imgs Adds the folder C:\Users\{username}\AppData\Local\SafePCRepair_89\9f0dc5279df6f2dd408e4faff0fbd51a3d3102cc\1.0.0\vicinio-data Adds the folder C:\Users\{username}\AppData\Local\SafePCRepair_89\ad2fc2ef49e8bdce614be43e0ed9f0eefb3db2c2\1.1.0 Adds the folder C:\Users\{username}\AppData\Local\SafePCRepair_89\ad2fc2ef49e8bdce614be43e0ed9f0eefb3db2c2\1.1.0\images Adds the folder C:\Users\{username}\AppData\Local\SafePCRepair_89\ad2fc2ef49e8bdce614be43e0ed9f0eefb3db2c2\1.1.0\js Adds the file Background.min.js"="12/5/2013 9:43 PM, 237509 bytes, A Adds the folder C:\Users\{username}\AppData\Local\SafePCRepair_89\d879dd0ca51305d335c2d3a39b4331aae8725905\1.1.0 Adds the folder C:\Users\{username}\AppData\Local\SafePCRepair_89\d879dd0ca51305d335c2d3a39b4331aae8725905\1.1.0\images Adds the folder C:\Users\{username}\AppData\Local\SafePCRepair_89\d879dd0ca51305d335c2d3a39b4331aae8725905\1.1.0\js Adds the file Background.min.js"="12/5/2013 9:39 PM, 237510 bytes, A Adds the folder C:\Users\{username}\AppData\Local\SafePCRepair_89\f8ae901a7bcc4710a0b7897c027472193382ec40\1.0.0 Adds the folder C:\Users\{username}\AppData\Local\SafePCRepair_89\f8ae901a7bcc4710a0b7897c027472193382ec40\1.0.0\bin Adds the file core.min.js"="8/28/2013 7:01 PM, 110592 bytes, A Adds the folder C:\Users\{username}\AppData\Local\SafePCRepair_89\f8ae901a7bcc4710a0b7897c027472193382ec40\1.0.0\bin\libs\require Adds the file require.min.js"="8/28/2013 7:01 PM, 14761 bytes, A Adds the folder C:\Users\{username}\AppData\Local\SafePCRepair_89\f8ae901a7bcc4710a0b7897c027472193382ec40\1.0.0\images Adds the folder C:\Users\{username}\AppData\Local\SafePCRepair_89\f8ae901a7bcc4710a0b7897c027472193382ec40\1.0.0\imgs Adds the folder C:\Users\{username}\AppData\Local\SafePCRepair_89\f8ae901a7bcc4710a0b7897c027472193382ec40\1.0.0\vicinio-data Adds the folder C:\Users\{username}\AppData\LocalLow\SafePCRepair_89\bar\Cache Adds the folder C:\Users\{username}\AppData\LocalLow\SafePCRepair_89\bar\History Adds the file search3"="10/29/2014 2:32 PM, 1024 bytes, A Adds the folder C:\Users\{username}\AppData\LocalLow\SafePCRepair_89\bar\Settings Adds the file prevcfg2.htm"="10/29/2014 2:32 PM, 12416 bytes, A Adds the file ToolbarStructure.json"="10/29/2014 2:32 PM, 4310 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\89ffxtbr@SafePCRepair_89.com Adds the file bootstrap.js"="10/29/2014 2:32 PM, 20480 bytes, A Adds the file chrome.manifest"="10/29/2014 2:32 PM, 1024 bytes, A Adds the file install.rdf"="10/29/2014 2:32 PM, 2048 bytes, A Adds the file installKeys.js"="10/29/2014 2:32 PM, 215 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\89ffxtbr@SafePCRepair_89.com\chrome Adds the file 89ffxtbr.jar"="10/29/2014 2:32 PM, 548864 bytes, ARegistry details ------------------------------------------ [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{CFBE264C-912E-4DA5-B67B-790B27D6D338}] "LocalService"="REG_SZ", "ioloService" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\ioloToolService.exe] "AppID"="REG_SZ", "{CFBE264C-912E-4DA5-B67B-790B27D6D338}"{ I had to remove some of the less important registry changes, because the post was too long. Full log available on request } [HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\NativeMessagingHosts\com.mindspark.safepcrepair_89] "(Default)"="REG_SZ", "C:\Program Files\SafePCRepair\manifest.json" "path.full.of"="REG_SZ", "C:\Program Files\SafePCRepair\manifest.json" "path.full.to"="REG_SZ", "C:\Program Files\SafePCRepair\manifest.json" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION] "CrExtP89.exe"="REG_DWORD", 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{8684a7c7-3ade-4208-ad43-ad57a1af352c}] "(Default)"="REG_SZ", "SafePCRepair_89" "DisplayName"="REG_SZ", "Ask Web Search" "ShowSearchSuggestions"="REG_DWORD", 1 "SuggestionsURL_JSON"="REG_SZ", "http://ssmsp.ask.com/query?li=ff&q={searchTerms}&sstype=prefix" "URL"="REG_SZ", "http://search.tb.ask.com/search/GGmain.jhtml?p2=^AW7^man000^YYA^&ptb=5F4B66A6-7192-4E3F-9382-58BDE34E265A&ind=2014102909&n=780cc57d&psa=&st=sb&searchfor={searchTerms}" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] "{a9d9ea68-5d09-43ef-a0c5-6f6a6f82a0e1}"="REG_SZ", "" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1fc509df-4b29-4ab3-96e6-47c178d60287}] "(Default)"="REG_SZ", "" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5d13bf91-ea09-4ed8-9acd-c6bad32617b9}] "(Default)"="REG_SZ", "" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SafePCRepair AppIntegrator 32-bit"="REG_SZ", "C:\PROGRA~1\SAFEPC~2\bar\1.bin\AppIntegrator.exe" "SafePCRepair EPM Support"="REG_SZ", ""C:\PROGRA~1\SAFEPC~2\bar\1.bin\89medint.exe" T8EPMSUP.DLL,S" "SafePCRepair Search Scope Monitor"="REG_SZ", ""C:\PROGRA~1\SAFEPC~2\bar\1.bin\89srchmn.exe" /m=2 /w /h" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Mindspark SafePCRepair] "Contact"="REG_SZ", "Mindspark Interactive Network Support Department" "DisplayIcon"="REG_SZ", ""C:\Program Files\SafePCRepair\SPR.exe",0" "DisplayName"="REG_SZ", "SafePCRepair" "DisplayVersion"="REG_SZ", "1.0.8056.14" "HelpLink"="REG_SZ", "http://www.mindspark.com" "InstallLocation"="REG_SZ", "C:\Program Files\SafePCRepair" "NoModify"="REG_DWORD", 1 "NoRepair"="REG_DWORD", 1 "Publisher"="REG_SZ", "Mindspark Interactive Network" "UninstallString"="REG_SZ", ""C:\Program Files\SafePCRepair\uninstall.exe" "/U:C:\Program Files\SafePCRepair\Uninstall\uninstall.xml"" "URLInfoAbout"="REG_SZ", "http://www.mindspark.com" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SafePCRepair_89bar Uninstall Firefox] "UninstallString"="REG_SZ", "rundll32 "C:\Program Files\SafePCRepair_89\bar\1.bin\89Bar.dll",O mindsparktoolbarkey="SafePCRepair_89" uninstalltype=FF" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SafePCRepair_89bar Uninstall Internet Explorer] "DisplayName"="REG_SZ", "SafePCRepair Internet Explorer Toolbar" "HelpLink"="REG_SZ", "http://support.mindspark.com/" "Publisher"="REG_SZ", "Mindspark Interactive Network" "UninstallString"="REG_SZ", "rundll32 "C:\Program Files\SafePCRepair_89\bar\1.bin\89Bar.dll",O mindsparktoolbarkey="SafePCRepair_89" uninstalltype=IE" "UrlInfoAbout"="REG_SZ", "http://support.mindspark.com/" [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@SafePCRepair_89.com/Plugin] "Description"="REG_SZ", "SafePCRepair Plugin" "Path"="REG_SZ", "C:\Program Files\SafePCRepair_89\bar\1.bin\NP89Stub.dll" "vendor"="REG_SZ", "SafePCRepair_89" "version"="REG_SZ", "1.1.1.1" [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@SafePCRepair_89.com/Plugin\MimeTypes\application/x-safepcrepair_89plugin] "Description"="REG_SZ", "SafePCRepair Plugin" "Suffixes"="REG_SZ", "89" [HKEY_LOCAL_MACHINE\SOFTWARE\SafePCRepair_89\bar] "Build"="REG_SZ", "194.18080" "CurInstall"="REG_SZ", "1" "cv"="REG_SZ", "3" "Dir"="REG_SZ", "C:\Program Files\SafePCRepair_89\bar\" "HistoryDir"="REG_SZ", "C:\Program Files\SafePCRepair_89\bar\History\" "HomePage"="REG_SZ", "http://home.tb.ask.com/index.jhtml?n=780CC582&p2=^AW7^man000^YYA^&ptb=5F4B66A6-7192-4E3F-9382-58BDE34E265A" "hpwl"="REG_SZ", ".myway.com,.mywebsearch.com,.iwon.com,.google.com,.yahoo.com,.bing.com,.msn.com,.tb.ask.com" "Id"="REG_SZ", "5F4B66A6-7192-4E3F-9382-58BDE34E265A" "InstallingUser"="REG_SZ", "S-1-5-21-4016700205-1717049133-1125222536-1001" "lidate"="REG_SZ", "2014-10-29T13:32:31Z" "Maximized"="REG_SZ", "1" "PartnerPixelNotSet"="REG_SZ", "" "pid"="REG_SZ", "^AW7^man000^YYA^" "pl"="REG_SZ", "9" "PluginPath"="REG_SZ", "C:\Program Files\SafePCRepair_89\bar\1.bin\" "RegHookPath"="REG_SZ", "C:\PROGRA~1\SAFEPC~2\bar\1.bin\89reghk" "RegisteredWithFirefox"="REG_SZ", "1" "SettingsDir"="REG_SZ", "C:\Program Files\SafePCRepair_89\bar\Settings\" "sr"="REG_SZ", "0" "tiec"="REG_SZ", "208976" "un"="REG_SZ", "SafePCRepair" "UninstallFFString"="REG_SZ", ""C:\Program Files\SafePCRepair_89\bar\1.bin\89highin.exe" 89bar.dll,O uninstalltype=FF" "UninstallString"="REG_SZ", ""C:\Program Files\SafePCRepair_89\bar\1.bin\89highin.exe" 89bar.dll,O uninstalltype=IE" "Visible"="REG_SZ", "1" [HKEY_LOCAL_MACHINE\SOFTWARE\SafePCRepair_89\bar\Integrators] "89DlgHk.dll"="REG_SZ", "" "89SrcAs.dll"="REG_SZ", "" "AssistMonitor.dll"="REG_SZ", "" "HPG.dll"="REG_SZ", "" "ToolbarGuard.dll"="REG_SZ", "" [HKEY_LOCAL_MACHINE\SOFTWARE\SafePCRepair_89\bar\Switches] "89SrcAs.dll"="REG_SZ", "1" "au"="REG_SZ", "1" "ffTabs"="REG_SZ", "0" "hpp"="REG_SZ", "1" "nd"="REG_SZ", "0" "nk"="REG_SZ", "0" "nodns"="REG_SZ", "0" "od"="REG_SZ", "1" "ok"="REG_SZ", "1" "oldhpp"="REG_SZ", "0" "ps"="REG_SZ", "1" "ua"="REG_SZ", "1" [HKEY_LOCAL_MACHINE\SOFTWARE\SafePCRepair_89\Dependencies] "dependencymanagerpath"="REG_SZ", "C:\Program Files\SafePCRepair_89\bar\1.bin\DPNMNGR.DLL" [HKEY_LOCAL_MACHINE\SOFTWARE\SafePCRepair_89\Dependencies\SafePCRepair] "friendlyName"="REG_SZ", "Safe PC Repair" "uninstall"="REG_DWORD", 0 [HKEY_LOCAL_MACHINE\SOFTWARE\SafePCRepair_89\SkinTools] "PlayerPath"="REG_SZ", ""C:\Program Files\SafePCRepair_89\bar\1.bin\89SkPlay.exe"" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\ioloService] "DisplayName"="REG_SZ", "ioloToolService" "ErrorControl"="REG_DWORD", 1 "ImagePath"="REG_EXPAND_SZ, "C:\Program Files\SafePCRepair\ioloToolService.exe" "ObjectName"="REG_SZ", "LocalSystem" "Start"="REG_DWORD", 3 "Type"="REG_DWORD", 16 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SafePCRepair_89Service] "DisplayName"="REG_SZ", "SafePCRepairService" "ErrorControl"="REG_DWORD", 1 "ImagePath"="REG_EXPAND_SZ, "C:\PROGRA~1\SAFEPC~2\bar\1.bin\89barsvc.exe" "ObjectName"="REG_SZ", "LocalSystem" "Start"="REG_DWORD", 2 "Type"="REG_DWORD", 16 [HKEY_CURRENT_USER\Software\AppDataLow\Software\Mindspark\SafePCRepair] "InstallDir"="REG_SZ", "C:\Program Files\SafePCRepair\" [HKEY_CURRENT_USER\Software\AppDataLow\Software\SafePCRepair_89\bar] "AlertCount"="REG_SZ", "3" "AlertPausePeriod"="REG_SZ", "259200" "AlertPeriod"="REG_SZ", "60" "AutocompleteURL"="REG_SZ", "http://ssmsp.ask.com/query?li=ff&q=<!-- QUERY_INPUT -->&sstype=prefix" "CacheDir"="REG_SZ", "C:\Users\{username}\AppData\LocalLow\SafePCRepair_89\bar\Cache\" "ConfigDateStamp"="REG_SZ", "2014102909" "ConfigRevision"="REG_SZ", "8364" "ConfigRevisionURL"="REG_SZ", "http://config.tb.ask.com/cfg.jhtml?p2=^AW7^man000^YYA^&s=t211634648&tv=2.5.15.5" "DeletedCustomizations"="REG_SZ", "-1" "DSS"="REG_SZ", "{8684a7c7-3ade-4208-ad43-ad57a1af352c}" "Flags"="REG_SZ", "74258" "HistoryDir"="REG_SZ", "C:\Users\{username}\AppData\LocalLow\SafePCRepair_89\bar\History\" "HTMLMenuRevision"="REG_SZ", "358" "LastConfigRequest"="REG_SZ", "QOOHMoXzzwE-" "LastEventsPost"="REG_SZ", "4PwsM4XzzwE-" "Maximized"="REG_SZ", "1" "NewTab"="REG_DWORD", 1 "NextConfigRequest"="REG_SZ", "QBvVV57zzwE-" "NextEventsPost"="REG_SZ", "4GTxlI3zzwE-" "NoThrottleAlert"="REG_SZ", "0" "PostEvents"="REG_SZ", "0" "SettingsDir"="REG_SZ", "C:\Users\{username}\AppData\LocalLow\SafePCRepair_89\bar\Settings\" "sscLabel"="REG_SZ", "Ask Web Search" "sscSet"="REG_SZ", "20" "sscSuggestionsURL"="REG_SZ", "http://ssmsp.ask.com/query?li=ff&q={searchTerms}&sstype=prefix" "sscURL"="REG_SZ", "http://search.tb.ask.com/search/GGmain.jhtml?p2=^AW7^man000^YYA^&ptb=5F4B66A6-7192-4E3F-9382-58BDE34E265A&ind=2014102909&n=780cc57d&psa=&st=sb&searchfor={searchTerms}" "tiec"="REG_SZ", "733264" "ua"="REG_SZ", "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/7.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E)" "Visible"="REG_SZ", "1" [HKEY_CURRENT_USER\Software\AppDataLow\Software\SafePCRepair_89\bar\Integrators] "AlertCount"="REG_SZ", "3" "AlertPausePeriod"="REG_SZ", "259200" "AlertPeriod"="REG_SZ", "60" "NoThrottleAlert"="REG_SZ", "0" [HKEY_CURRENT_USER\Software\AppDataLow\Software\SafePCRepair_89\Events\EventData] "000B0000_8"="REG_BINARY, ........................ "000B0000_9"="REG_BINARY, ........................ "19000000_A"="REG_BINARY, ........................ [HKEY_CURRENT_USER\Software\AppDataLow\Software\SafePCRepair_89\SearchAssistant] "ABS"="REG_SZ", "http://search.tb.ask.com/search/GGmain.jhtml?p2=^AW7^man000^YYA^&ptb=5F4B66A6-7192-4E3F-9382-58BDE34E265A&ind=2014102909&n=780cc57d&psa=&st=kwd&searchfor=" "DES"="REG_SZ", "http://search.tb.ask.com/search/SNdns.jhtml?p2=^AW7^man000^YYA^&ptb=5F4B66A6-7192-4E3F-9382-58BDE34E265A&ind=2014102909&n=780cc57d&psa=&st=dns&searchfor=" "ie8h"="REG_SZ", "1" [HKEY_CURRENT_USER\Software\AppDataLow\Software\SafePCRepair_89\Settings\SmileyCentralBt] "HTMLMenuPosDeleted"="REG_SZ", "1" [HKEY_CURRENT_USER\Software\Classes\CLSID\{be823b8c-a7ec-4078-a321-0f8046cbb48a] "(Default)"="REG_SZ", "" [HKEY_CURRENT_USER\Software\Classes\CLSID\{be823b8c-a7ec-4078-a321-0f8046cbb48a}\Implemented Categories\{59fb2056-d625-48d0-a944-1a85b5ab2640}] [HKEY_CURRENT_USER\Software\Classes\CLSID\{be823b8c-a7ec-4078-a321-0f8046cbb48a}\InprocServer32] "(Default)"="REG_SZ", "C:\Program Files\SafePCRepair_89\bar\1.bin\89SrcAs.dll" "ThreadingModel"="REG_SZ", "Apartment" [HKEY_CURRENT_USER\Software\Classes\CLSID\{be823b8c-a7ec-4078-a321-0f8046cbb48a}\Programmable] [HKEY_CURRENT_USER\Software\CodeGear\Locales] "C:\Program Files\SafePCRepair\ioloToolService.exe"="REG_SZ", "en" "C:\Windows\system32\regsvr32.exe"="REG_SZ", "en" [HKEY_CURRENT_USER\Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96} "lastrun REG_SZ, "13059063007122520" ==> REG_SZ, "13059063183381609" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page" = REG_SZ, "http://home.tb.ask.com/index.jhtml?n=780CC582&p2=^AW7^man000^YYA^&ptb=5F4B66A6-7192-4E3F-9382-58BDE34E265A" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{8684a7c7-3ade-4208-ad43-ad57a1af352c}] "(Default)"="REG_SZ", "SafePCRepair_89" "DisplayName"="REG_SZ", "Ask Web Search" "ShowSearchSuggestions"="REG_DWORD", 1 "SuggestionsURL_JSON"="REG_SZ", "http://ssmsp.ask.com/query?li=ff&q={searchTerms}&sstype=prefix" "URL"="REG_SZ", "http://search.tb.ask.com/search/GGmain.jhtml?p2=^AW7^man000^YYA^&ptb=5F4B66A6-7192-4E3F-9382-58BDE34E265A&ind=2014102909&n=780cc57d&psa=&st=sb&searchfor={searchTerms}" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser] "{A9D9EA68-5D09-43EF-A0C5-6F6A6F82A0E1}"="REG_BINARY, ........ "ITBar7Height"="REG_DWORD", 32 "ITBar7Layout"="REG_BINARY, ...... ... ............................................................................................................................................................................................................................................................................... [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks] "{be823b8c-a7ec-4078-a321-0f8046cbb48a}"="REG_SZ", "" Malwarebytes Anti-Malware log: Malwarebytes Anti-Malwarewww.malwarebytes.orgScan Date: 10/29/2014Scan Time: 2:35:49 PMLogfile: mbamPCSafeRepair.txtAdministrator: YesVersion: 2.00.3.1025Malware Database: v2014.10.29.04Rootkit Database: v2014.10.22.01License: FreeMalware Protection: DisabledMalicious Website Protection: DisabledSelf-protection: DisabledOS: Windows 7 Service Pack 1CPU: x86File System: NTFSUser: MalwarebytesScan Type: Threat ScanResult: CompletedObjects Scanned: 272390Time Elapsed: 3 min, 12 secMemory: EnabledStartup: EnabledFilesystem: EnabledArchives: EnabledRootkits: DisabledHeuristics: EnabledPUP: EnabledPUM: EnabledProcesses: 1PUP.Optional.MindSpark, C:\Program Files\SafePCRepair_89\bar\1.bin\89highin.exe, 9980, Delete-on-Reboot, [98e0eb2f1a62b086303d338733cecb35]Modules: 1PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin\89tpinst.dll, Delete-on-Reboot, [dc9c04161f5dba7c30653ec22dd6fa06], Registry Keys: 92PUP.Optional.MindSpark, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SafePCRepair_89Service, Quarantined, [7bfd0515f884ce6871fce6d4778a827e], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\CLSID\{79223c67-251e-4447-94fe-762be858d73e}, Quarantined, [77010416bebe8fa707661d9d7b861de3], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\TYPELIB\{b2a921d8-e831-468f-bbc6-16416342c0a7}, Quarantined, [77010416bebe8fa707661d9d7b861de3], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\INTERFACE\{B4BCF535-178F-43C9-98B3-1C5447AAF153}, Quarantined, [77010416bebe8fa707661d9d7b861de3], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\CLSID\{5d13bf91-ea09-4ed8-9acd-c6bad32617b9}, Quarantined, [73051bffccb015217cf1b604cd3459a7], PUP.Optional.MindSpark, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{5D13BF91-EA09-4ED8-9ACD-C6BAD32617B9}, Quarantined, [73051bffccb015217cf1b604cd3459a7], PUP.Optional.MindSpark, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{5D13BF91-EA09-4ED8-9ACD-C6BAD32617B9}, Quarantined, [73051bffccb015217cf1b604cd3459a7], PUP.Optional.MindSpark, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{5D13BF91-EA09-4ED8-9ACD-C6BAD32617B9}, Quarantined, [73051bffccb015217cf1b604cd3459a7], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\CLSID\{5D13BF91-EA09-4ED8-9ACD-C6BAD32617B9}\INPROCSERVER32, Quarantined, [73051bffccb015217cf1b604cd3459a7], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\CLSID\{1fc509df-4b29-4ab3-96e6-47c178d60287}, Quarantined, [d8a09a8043394de9e9847e3cbd44847c], PUP.Optional.MindSpark, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{1FC509DF-4B29-4AB3-96E6-47C178D60287}, Quarantined, [d8a09a8043394de9e9847e3cbd44847c], PUP.Optional.MindSpark, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{1FC509DF-4B29-4AB3-96E6-47C178D60287}, Quarantined, [d8a09a8043394de9e9847e3cbd44847c], PUP.Optional.MindSpark, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{1FC509DF-4B29-4AB3-96E6-47C178D60287}, Quarantined, [d8a09a8043394de9e9847e3cbd44847c], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\CLSID\{a9d9ea68-5d09-43ef-a0c5-6f6a6f82a0e1}, Quarantined, [d8a09a8043394de9e9847e3cbd44847c], PUP.Optional.MindSpark, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{A9D9EA68-5D09-43EF-A0C5-6F6A6F82A0E1}, Quarantined, [d8a09a8043394de9e9847e3cbd44847c], PUP.Optional.MindSpark, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{A9D9EA68-5D09-43EF-A0C5-6F6A6F82A0E1}, Quarantined, [d8a09a8043394de9e9847e3cbd44847c], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\CLSID\{e81003f0-8f21-4a23-8142-403d821198ac}, Quarantined, [d8a09a8043394de9e9847e3cbd44847c], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\TYPELIB\{0bc5607d-dc04-410a-b137-73f2ee733596}, Quarantined, [d8a09a8043394de9e9847e3cbd44847c], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\INTERFACE\{2438F6B7-0532-4C8C-9C5C-B34935DD3D70}, Quarantined, [d8a09a8043394de9e9847e3cbd44847c], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\INTERFACE\{34930B93-003D-4FF8-BF64-6A6F27547B0E}, Quarantined, [d8a09a8043394de9e9847e3cbd44847c], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\INTERFACE\{535062C7-0E84-4CD0-BEB2-59F41DD1A8F5}, Quarantined, [d8a09a8043394de9e9847e3cbd44847c], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\INTERFACE\{A5935A23-63D1-4216-B6B3-7B392880EB21}, Quarantined, [d8a09a8043394de9e9847e3cbd44847c], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\INTERFACE\{A983B26D-76CB-41C6-947E-4EEFF0906747}, Quarantined, [d8a09a8043394de9e9847e3cbd44847c], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\INTERFACE\{B98BE44D-266A-45FE-814D-DB708279E238}, Quarantined, [d8a09a8043394de9e9847e3cbd44847c], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\SafePCRepair_89.SettingsPlugin.1, Quarantined, [d8a09a8043394de9e9847e3cbd44847c], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\SafePCRepair_89.SettingsPlugin, Quarantined, [d8a09a8043394de9e9847e3cbd44847c], PUP.Optional.MindSpark, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{E81003F0-8F21-4A23-8142-403D821198AC}, Quarantined, [d8a09a8043394de9e9847e3cbd44847c], PUP.Optional.MindSpark, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\SafePCRepair_89bar Uninstall Firefox, Quarantined, [d8a09a8043394de9e9847e3cbd44847c], PUP.Optional.MindSpark, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\SafePCRepair_89bar Uninstall Internet Explorer, Quarantined, [d8a09a8043394de9e9847e3cbd44847c], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\CLSID\{1FC509DF-4B29-4AB3-96E6-47C178D60287}\INPROCSERVER32, Quarantined, [d8a09a8043394de9e9847e3cbd44847c], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\SafePCRepair_89, Quarantined, [a6d21dfdd0ac91a579dd98b30300c23e], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\MOZILLAPLUGINS\@SafePCRepair_89.com/Plugin, Quarantined, [4a2e6baf8def55e10b487dced033ee12], PUP.Optional.MindSpark.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SafePCRepair_89, Quarantined, [f97fb268750772c498b5a9a26a998b75], PUP.Optional.MindSpark.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\SafePCRepair_89, Quarantined, [7ff94dcd8af2e056388eb48e4bb812ee], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\CLSID\{b6de1d4c-f21b-4056-a99c-1727fd6400ce}, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{63498647-b3ef-4a8a-8c98-163ecf8048fe}, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{356E8E19-4DEB-4F01-8DB4-1A0C99129CE7}, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{5AB21B6C-9EAA-465D-9C21-A1F75981773C}, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{C62485E9-50DB-4F12-AE49-5D0A9B8BAC2C}, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\SafePCRepair_89.ToolbarProtector.1, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\SafePCRepair_89.ToolbarProtector, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\CLSID\{fe617740-9986-4a5b-a4a8-a66d64ce5e7d}, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{f7b9f27c-2e1a-429c-972a-da83f1165b74}, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{2E685A5C-6D12-4C22-AA7B-32E7467FD7A0}, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{590CFF64-4C98-4B32-887C-4F6BC8C89899}, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{6E2A759A-C5FC-45BA-92B8-85A6131B1324}, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\CLSID\{76816fb7-2009-45ec-a3d7-0d45c67d5bd7}, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{c78cce0d-f991-44f4-b450-33c4fd189e38}, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{41A55DD5-AF6C-482F-9FED-0F3326D71800}, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{E07DD2E8-0B35-4F00-B311-1F079B94A1B4}, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\SafePCRepair_89.FeedManager.1, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\SafePCRepair_89.FeedManager, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\CLSID\{816098C9-EC16-4106-9FF7-E19580B2C338}, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\SafePCRepair_89.HTMLMenu.1, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\SafePCRepair_89.HTMLMenu, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{816098C9-EC16-4106-9FF7-E19580B2C338}, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\CLSID\{43223489-51e1-4e5c-bbc4-3645dce39afe}, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{ccb31621-e2c6-43e7-b5d8-2b161973d5c3}, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{35C03DE9-8BA0-4B87-B3D1-51944C349FF1}, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{7E84E65B-E911-4DC3-B316-E2E854343D1B}, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\CLSID\{2accb327-7218-4979-8eb7-0e653bc0ea66}, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\SafePCRepair_89.MultipleButton.1, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\SafePCRepair_89.MultipleButton, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\CLSID\{5806dc83-95c8-4120-a305-cbce6260adf1}, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{154690a0-7778-41b5-a3ab-eb51e2482b74}, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{3C6E6F5A-8105-423A-AD2C-892FDAC11F49}, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{499616EC-7C3D-499E-95ED-5D37D7FC7A3F}, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\SafePCRepair_89.HTMLPanel.1, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\SafePCRepair_89.HTMLPanel, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{5806DC83-95C8-4120-A305-CBCE6260ADF1}, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\CLSID\{a8d7fcf9-a855-449b-aa9f-230ba62c4b4e}, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\SafePCRepair_89.ScriptButton.1, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\SafePCRepair_89.ScriptButton, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\CLSID\{10019e3c-1039-4c6a-8231-0c657afc4bc4}, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{95cd0b4b-5782-435e-993d-ba07b30710a6}, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{565ABC73-E8CB-4261-8FDE-C281445CA53D}, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{59B4F810-41AC-40F0-9FF1-703EAD14C290}, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{A42FD199-B78F-452F-B31F-5755D6105704}, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{B24F3E66-6E22-456F-85F0-43BEF5784F6C}, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\CLSID\{5ed1334e-4e55-40cd-accb-05ce52ad981d}, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5ED1334E-4E55-40CD-ACCB-05CE52AD981D}, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\CLSID\{fe97fe9a-ef03-47e0-9df9-8ebb728c5d93}, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\SafePCRepair_89.PseudoTransparentPlugin.1, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\SafePCRepair_89.PseudoTransparentPlugin, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{FE97FE9A-EF03-47E0-9DF9-8EBB728C5D93}, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\CLSID\{50066dbf-71b9-4489-b62e-4188d3048db2}, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{6c227856-d369-4b3f-a317-89e4b1cd1a83}, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{394E9A2F-F433-43F1-9A2E-EAC2C6BB8D80}, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{E07714D8-5006-492B-A2B1-B433949D6B1D}, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\SafePCRepair_89.ThirdPartyInstaller.1, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\SafePCRepair_89.ThirdPartyInstaller, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{50066DBF-71B9-4489-B62E-4188D3048DB2}, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], Registry Values: 9PUP.Optional.MindSpark, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|SafePCRepair AppIntegrator 32-bit, C:\PROGRA~1\SAFEPC~2\bar\1.bin\AppIntegrator.exe, Quarantined, [d5a32febdf9daa8c6805d9e1f8099070]PUP.Optional.MindSpark, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|SafePCRepair EPM Support, "C:\PROGRA~1\SAFEPC~2\bar\1.bin\89medint.exe" T8EPMSUP.DLL,S, Quarantined, [5d1bd94199e378be81ec744660a1cd33]PUP.Optional.MindSpark, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER|{A9D9EA68-5D09-43EF-A0C5-6F6A6F82A0E1}, hêÃ?© ]ïC Ã?ojoâ?? á, Quarantined, [d8a09a8043394de9e9847e3cbd44847c]PUP.Optional.MindSpark, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{A9D9EA68-5D09-43EF-A0C5-6F6A6F82A0E1}, Quarantined, [d8a09a8043394de9e9847e3cbd44847c], PUP.Optional.MindSpark.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER\{A9D9EA68-5D09-43EF-A0C5-6F6A6F82A0E1}, Quarantined, [cdaba87238448bab2486b7f3be44b64a], PUP.Optional.MindSpark.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS\{be823b8c-a7ec-4078-a321-0f8046cbb48a}, Quarantined, [1464bf5bd8a4b383b8f3cbdf16ec0ef2], PUP.Optional.MindSpark.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS|{BE823B8C-A7EC-4078-A321-0F8046CBB48A}, Quarantined, [1464bf5bd8a4b383b8f3cbdf16ec0ef2], PUP.Optional.MindSpark.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\{a9d9ea68-5d09-43ef-a0c5-6f6a6f82a0e1}, Quarantined, [a6d2b9614438f343901a5f4b3ac816ea], PUP.Optional.MindSpark, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|SafePCRepair Search Scope Monitor, "C:\PROGRA~1\SAFEPC~2\bar\1.bin\89srchmn.exe" /m=2 /w /h, Quarantined, [6a0e67b3cdaf22144f5de7adcf3521df]Registry Data: 1PUP.Optional.AskWebSearch, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://home.tb.ask.com/index.jhtml?n=780CC582&p2=^AW7^man000^YYA^&ptb=5F4B66A6-7192-4E3F-9382-58BDE34E265A,'>http://home.tb.ask.com/index.jhtml?n=780CC582&p2=^AW7^man000^YYA^&ptb=5F4B66A6-7192-4E3F-9382-58BDE34E265A, Good: (www.google.com), Bad: (http://home.tb.ask.com/index.jhtml?n=780CC582&p2=^AW7^man000^YYA^&ptb=5F4B66A6-7192-4E3F-9382-58BDE34E265A),Replaced,[bdbb74a69ddf44f26c0b9b966e977e82]Folders: 65PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\89ffxtbr@SafePCRepair_89.com, Quarantined, [a8d063b7a3d91e185e2b37c961a209f7], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\89ffxtbr@SafePCRepair_89.com\chrome, Quarantined, [a8d063b7a3d91e185e2b37c961a209f7], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\1d337bed5b7299517362055301e98c70b6be0b2e, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\1d337bed5b7299517362055301e98c70b6be0b2e\1.1.0, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\1d337bed5b7299517362055301e98c70b6be0b2e\1.1.0\images, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\1d337bed5b7299517362055301e98c70b6be0b2e\1.1.0\js, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\57b413127dc14ab260448989debbb88b6f1f1363, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\57b413127dc14ab260448989debbb88b6f1f1363\1.0.0, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\57b413127dc14ab260448989debbb88b6f1f1363\1.0.0\bin, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\57b413127dc14ab260448989debbb88b6f1f1363\1.0.0\bin\libs, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\57b413127dc14ab260448989debbb88b6f1f1363\1.0.0\bin\libs\require, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\57b413127dc14ab260448989debbb88b6f1f1363\1.0.0\images, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\57b413127dc14ab260448989debbb88b6f1f1363\1.0.0\imgs, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\57b413127dc14ab260448989debbb88b6f1f1363\1.0.0\vicinio-data, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\753ef97f9c830f5ee406844b800580ea56791102, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\753ef97f9c830f5ee406844b800580ea56791102\1.0.0, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\753ef97f9c830f5ee406844b800580ea56791102\1.0.0\bin, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\753ef97f9c830f5ee406844b800580ea56791102\1.0.0\bin\libs, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\753ef97f9c830f5ee406844b800580ea56791102\1.0.0\bin\libs\require, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\753ef97f9c830f5ee406844b800580ea56791102\1.0.0\images, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\753ef97f9c830f5ee406844b800580ea56791102\1.0.0\imgs, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\753ef97f9c830f5ee406844b800580ea56791102\1.0.0\vicinio-data, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\9f0dc5279df6f2dd408e4faff0fbd51a3d3102cc, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\9f0dc5279df6f2dd408e4faff0fbd51a3d3102cc\1.0.0, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\9f0dc5279df6f2dd408e4faff0fbd51a3d3102cc\1.0.0\bin, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\9f0dc5279df6f2dd408e4faff0fbd51a3d3102cc\1.0.0\bin\libs, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\9f0dc5279df6f2dd408e4faff0fbd51a3d3102cc\1.0.0\bin\libs\require, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\9f0dc5279df6f2dd408e4faff0fbd51a3d3102cc\1.0.0\images, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\9f0dc5279df6f2dd408e4faff0fbd51a3d3102cc\1.0.0\imgs, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\9f0dc5279df6f2dd408e4faff0fbd51a3d3102cc\1.0.0\vicinio-data, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\ad2fc2ef49e8bdce614be43e0ed9f0eefb3db2c2, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\ad2fc2ef49e8bdce614be43e0ed9f0eefb3db2c2\1.1.0, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\ad2fc2ef49e8bdce614be43e0ed9f0eefb3db2c2\1.1.0\images, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\ad2fc2ef49e8bdce614be43e0ed9f0eefb3db2c2\1.1.0\js, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\d879dd0ca51305d335c2d3a39b4331aae8725905, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\d879dd0ca51305d335c2d3a39b4331aae8725905\1.1.0, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\d879dd0ca51305d335c2d3a39b4331aae8725905\1.1.0\images, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\d879dd0ca51305d335c2d3a39b4331aae8725905\1.1.0\js, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\f8ae901a7bcc4710a0b7897c027472193382ec40, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\f8ae901a7bcc4710a0b7897c027472193382ec40\1.0.0, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\f8ae901a7bcc4710a0b7897c027472193382ec40\1.0.0\bin, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\f8ae901a7bcc4710a0b7897c027472193382ec40\1.0.0\bin\libs, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\f8ae901a7bcc4710a0b7897c027472193382ec40\1.0.0\bin\libs\require, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\f8ae901a7bcc4710a0b7897c027472193382ec40\1.0.0\images, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\f8ae901a7bcc4710a0b7897c027472193382ec40\1.0.0\imgs, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\f8ae901a7bcc4710a0b7897c027472193382ec40\1.0.0\vicinio-data, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89, Delete-on-Reboot, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar, Delete-on-Reboot, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin, Delete-on-Reboot, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin\chrome, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin\ThirdPartyInstallers, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin\assists, Delete-on-Reboot, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin\assists\ie_default_search_provider, Delete-on-Reboot, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin\assists\ie_enable, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\assists, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\gen1, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\History, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\Message, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\Settings, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\LocalLow\SafePCRepair_89, Quarantined, [156357c3087478be3563bb4b09fad22e], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\LocalLow\SafePCRepair_89\bar, Quarantined, [156357c3087478be3563bb4b09fad22e], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\LocalLow\SafePCRepair_89\bar\Cache, Quarantined, [156357c3087478be3563bb4b09fad22e], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\LocalLow\SafePCRepair_89\bar\History, Quarantined, [156357c3087478be3563bb4b09fad22e], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\LocalLow\SafePCRepair_89\bar\Settings, Quarantined, [156357c3087478be3563bb4b09fad22e], Files: 177PUP.Optional.MindSpark, C:\Program Files\SafePCRepair_89\bar\1.bin\APPINTEGRATORSTUB.DLL, Delete-on-Reboot, [54242feb91eb1e182f3ebcfea1600cf4], PUP.Optional.MindSpark, C:\Program Files\SafePCRepair_89\bar\1.bin\89barsvc.exe, Delete-on-Reboot, [7bfd0515f884ce6871fce6d4778a827e], PUP.Optional.MindSpark, C:\Program Files\SafePCRepair_89\bar\1.bin\89highin.exe, Delete-on-Reboot, [98e0eb2f1a62b086303d338733cecb35], PUP.Optional.MindSpark, C:\Program Files\SafePCRepair_89\bar\1.bin\APPINTEGRATOR.EXE, Delete-on-Reboot, [d5a32febdf9daa8c6805d9e1f8099070], PUP.Optional.MindSpark, C:\Program Files\SafePCRepair_89\bar\1.bin\ASSISTMONITOR.DLL, Delete-on-Reboot, [136577a3acd0b185acc1eeccc73a23dd], PUP.Optional.MindSpark, C:\Program Files\SafePCRepair_89\bar\1.bin\HPG.DLL, Delete-on-Reboot, [9adedc3ee696c373402d6b4fe61be11f], PUP.Optional.MindSpark, C:\Program Files\SafePCRepair_89\bar\1.bin\89dlghk.dll, Delete-on-Reboot, [77010416bebe8fa707661d9d7b861de3], PUP.Optional.MindSpark, C:\Program Files\SafePCRepair_89\bar\1.bin\89SrcAs.dll, Delete-on-Reboot, [73051bffccb015217cf1b604cd3459a7], PUP.Optional.MindSpark, C:\Program Files\SafePCRepair_89\bar\1.bin\TOOLBARGUARD.DLL, Delete-on-Reboot, [0c6cc45693e940f66eff398145bc8d73], PUP.Optional.MindSpark, C:\Program Files\SafePCRepair_89\bar\1.bin\assists\ie_default_search_provider\ARBITER.DLL, Delete-on-Reboot, [344478a2760616208fde5a6010f136ca], PUP.Optional.MindSpark, C:\Program Files\SafePCRepair_89\bar\1.bin\89medint.exe, Quarantined, [5d1bd94199e378be81ec744660a1cd33], PUP.Optional.MindSpark, C:\Program Files\SafePCRepair_89\bar\1.bin\89bar.dll, Quarantined, [d8a09a8043394de9e9847e3cbd44847c], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_safepcrepair.dl.tb.ask.com_0.localstorage, Quarantined, [77019e7cb2ca69cd5febca81dd261ce4], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_safepcrepair.dl.tb.ask.com_0.localstorage-journal, Quarantined, [d1a78199cfadf93dfc4e6ae106fd857b], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\89ffxtbr@SafePCRepair_89.com\bootstrap.js, Quarantined, [a8d063b7a3d91e185e2b37c961a209f7], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\89ffxtbr@SafePCRepair_89.com\chrome.manifest, Quarantined, [a8d063b7a3d91e185e2b37c961a209f7], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\89ffxtbr@SafePCRepair_89.com\install.rdf, Quarantined, [a8d063b7a3d91e185e2b37c961a209f7], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\89ffxtbr@SafePCRepair_89.com\installKeys.js, Quarantined, [a8d063b7a3d91e185e2b37c961a209f7], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\89ffxtbr@SafePCRepair_89.com\chrome\89ffxtbr.jar, Quarantined, [a8d063b7a3d91e185e2b37c961a209f7], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\UrlFolderExtension.uf1, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\UrlFolderExtension.ufm, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\1d337bed5b7299517362055301e98c70b6be0b2e\1.1.0\Background.html, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\1d337bed5b7299517362055301e98c70b6be0b2e\1.1.0\lang-default.js, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\1d337bed5b7299517362055301e98c70b6be0b2e\1.1.0\manifest.json, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\1d337bed5b7299517362055301e98c70b6be0b2e\1.1.0\manifest.json.sig, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\1d337bed5b7299517362055301e98c70b6be0b2e\1.1.0\images\icn_accel.bmp, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\1d337bed5b7299517362055301e98c70b6be0b2e\1.1.0\images\icn_accel.png, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\1d337bed5b7299517362055301e98c70b6be0b2e\1.1.0\js\Background.min.js, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\57b413127dc14ab260448989debbb88b6f1f1363\1.0.0\background.html, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\57b413127dc14ab260448989debbb88b6f1f1363\1.0.0\manifest.json, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\57b413127dc14ab260448989debbb88b6f1f1363\1.0.0\manifest.json.sig, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\57b413127dc14ab260448989debbb88b6f1f1363\1.0.0\widget-api-1.3.js, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\57b413127dc14ab260448989debbb88b6f1f1363\1.0.0\bin\core.min.js, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\57b413127dc14ab260448989debbb88b6f1f1363\1.0.0\bin\libs\require\require.min.js, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\57b413127dc14ab260448989debbb88b6f1f1363\1.0.0\images\icn_repair.bmp, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\57b413127dc14ab260448989debbb88b6f1f1363\1.0.0\images\icn_repair.png_1367345307959.bmp, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\57b413127dc14ab260448989debbb88b6f1f1363\1.0.0\imgs\icn_repair.bmp, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\57b413127dc14ab260448989debbb88b6f1f1363\1.0.0\imgs\icn_repair.bmp,hot,flags=none.png, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\57b413127dc14ab260448989debbb88b6f1f1363\1.0.0\imgs\icn_repair.png, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\57b413127dc14ab260448989debbb88b6f1f1363\1.0.0\vicinio-data\icon-1377723911049.bmp, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\57b413127dc14ab260448989debbb88b6f1f1363\1.0.0\vicinio-data\icon-1377723911049.png, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\57b413127dc14ab260448989debbb88b6f1f1363\1.0.0\vicinio-data\icon-1377726907442.bmp, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\57b413127dc14ab260448989debbb88b6f1f1363\1.0.0\vicinio-data\icon-1377726907442.png, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\753ef97f9c830f5ee406844b800580ea56791102\1.0.0\background.html, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\753ef97f9c830f5ee406844b800580ea56791102\1.0.0\manifest.json, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\753ef97f9c830f5ee406844b800580ea56791102\1.0.0\manifest.json.sig, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\753ef97f9c830f5ee406844b800580ea56791102\1.0.0\widget-api-1.3.js, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\753ef97f9c830f5ee406844b800580ea56791102\1.0.0\bin\core.min.js, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\753ef97f9c830f5ee406844b800580ea56791102\1.0.0\bin\libs\require\require.min.js, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\753ef97f9c830f5ee406844b800580ea56791102\1.0.0\images\icn_memory.bmp, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\753ef97f9c830f5ee406844b800580ea56791102\1.0.0\images\icn_memory.png_1367345186901.bmp, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\753ef97f9c830f5ee406844b800580ea56791102\1.0.0\imgs\icn_memory.bmp, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\753ef97f9c830f5ee406844b800580ea56791102\1.0.0\imgs\icn_memory.bmp,hot,flags=none.png, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\753ef97f9c830f5ee406844b800580ea56791102\1.0.0\imgs\icn_memory.png, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\753ef97f9c830f5ee406844b800580ea56791102\1.0.0\vicinio-data\icon-1377723896794.bmp, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\753ef97f9c830f5ee406844b800580ea56791102\1.0.0\vicinio-data\icon-1377723896794.png, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\753ef97f9c830f5ee406844b800580ea56791102\1.0.0\vicinio-data\icon-1377727248664.bmp, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\753ef97f9c830f5ee406844b800580ea56791102\1.0.0\vicinio-data\icon-1377727248664.png, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\9f0dc5279df6f2dd408e4faff0fbd51a3d3102cc\1.0.0\background.html, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\9f0dc5279df6f2dd408e4faff0fbd51a3d3102cc\1.0.0\manifest.json, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\9f0dc5279df6f2dd408e4faff0fbd51a3d3102cc\1.0.0\manifest.json.sig, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\9f0dc5279df6f2dd408e4faff0fbd51a3d3102cc\1.0.0\widget-api-1.3.js, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\9f0dc5279df6f2dd408e4faff0fbd51a3d3102cc\1.0.0\bin\core.min.js, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\9f0dc5279df6f2dd408e4faff0fbd51a3d3102cc\1.0.0\bin\libs\require\require.min.js, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\9f0dc5279df6f2dd408e4faff0fbd51a3d3102cc\1.0.0\images\icn_logo.bmp, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\9f0dc5279df6f2dd408e4faff0fbd51a3d3102cc\1.0.0\images\icn_logo.png_1367345054994.bmp, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\9f0dc5279df6f2dd408e4faff0fbd51a3d3102cc\1.0.0\imgs\icn_logo.bmp, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\9f0dc5279df6f2dd408e4faff0fbd51a3d3102cc\1.0.0\imgs\icn_logo.bmp,hot,flags=none.png, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\9f0dc5279df6f2dd408e4faff0fbd51a3d3102cc\1.0.0\imgs\icn_logo.png, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\9f0dc5279df6f2dd408e4faff0fbd51a3d3102cc\1.0.0\vicinio-data\icon-1377727431471.bmp, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\9f0dc5279df6f2dd408e4faff0fbd51a3d3102cc\1.0.0\vicinio-data\icon-1377727431471.png, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\ad2fc2ef49e8bdce614be43e0ed9f0eefb3db2c2\1.1.0\Background.html, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\ad2fc2ef49e8bdce614be43e0ed9f0eefb3db2c2\1.1.0\lang-default.js, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\ad2fc2ef49e8bdce614be43e0ed9f0eefb3db2c2\1.1.0\manifest.json, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\ad2fc2ef49e8bdce614be43e0ed9f0eefb3db2c2\1.1.0\manifest.json.sig, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\ad2fc2ef49e8bdce614be43e0ed9f0eefb3db2c2\1.1.0\images\icn_startup.bmp, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\ad2fc2ef49e8bdce614be43e0ed9f0eefb3db2c2\1.1.0\images\icn_startup.png, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\ad2fc2ef49e8bdce614be43e0ed9f0eefb3db2c2\1.1.0\js\Background.min.js, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\d879dd0ca51305d335c2d3a39b4331aae8725905\1.1.0\Background.html, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\d879dd0ca51305d335c2d3a39b4331aae8725905\1.1.0\lang-default.js, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\d879dd0ca51305d335c2d3a39b4331aae8725905\1.1.0\manifest.json, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\d879dd0ca51305d335c2d3a39b4331aae8725905\1.1.0\manifest.json.sig, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\d879dd0ca51305d335c2d3a39b4331aae8725905\1.1.0\images\icn_games.bmp, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\d879dd0ca51305d335c2d3a39b4331aae8725905\1.1.0\images\icn_games.png, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\d879dd0ca51305d335c2d3a39b4331aae8725905\1.1.0\js\Background.min.js, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\f8ae901a7bcc4710a0b7897c027472193382ec40\1.0.0\background.html, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\f8ae901a7bcc4710a0b7897c027472193382ec40\1.0.0\manifest.json, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\f8ae901a7bcc4710a0b7897c027472193382ec40\1.0.0\manifest.json.sig, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\f8ae901a7bcc4710a0b7897c027472193382ec40\1.0.0\widget-api-1.3.js, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\f8ae901a7bcc4710a0b7897c027472193382ec40\1.0.0\bin\core.min.js, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\f8ae901a7bcc4710a0b7897c027472193382ec40\1.0.0\bin\libs\require\require.min.js, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\f8ae901a7bcc4710a0b7897c027472193382ec40\1.0.0\images\icn_clutter.bmp, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\f8ae901a7bcc4710a0b7897c027472193382ec40\1.0.0\images\icn_clutter.png_1367345426810.bmp, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\f8ae901a7bcc4710a0b7897c027472193382ec40\1.0.0\imgs\icn_clutter.bmp, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\f8ae901a7bcc4710a0b7897c027472193382ec40\1.0.0\imgs\icn_clutter.bmp,hot,flags=none.png, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\f8ae901a7bcc4710a0b7897c027472193382ec40\1.0.0\imgs\icn_clutter.png, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\f8ae901a7bcc4710a0b7897c027472193382ec40\1.0.0\vicinio-data\icon-1377715864127.bmp, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\f8ae901a7bcc4710a0b7897c027472193382ec40\1.0.0\vicinio-data\icon-1377715864127.png, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\f8ae901a7bcc4710a0b7897c027472193382ec40\1.0.0\vicinio-data\icon-1377723927946.bmp, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\f8ae901a7bcc4710a0b7897c027472193382ec40\1.0.0\vicinio-data\icon-1377723927946.png, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\f8ae901a7bcc4710a0b7897c027472193382ec40\1.0.0\vicinio-data\icon-1377727297009.bmp, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\Local\SafePCRepair_89\f8ae901a7bcc4710a0b7897c027472193382ec40\1.0.0\vicinio-data\icon-1377727297009.png, Quarantined, [47311efcef8d02346b27cf3153b014ec], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin\89regiet.dll, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin\BOOTSTRAP.JS, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin\89bprtct.dll, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin\89datact.dll, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin\89dlghk64.dll, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin\89feedmg.dll, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin\89hkstub.dll, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin\89htmlmu.dll, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin\89httpct.dll, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin\89idle.dll, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin\89mlbtn.dll, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin\89Plugin.dll, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin\89regfft.dll, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin\89reghk.dll, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin\CHROME.MANIFEST, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin\CREXT.DLL, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin\CrExtP89.exe, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin\DPNMNGR.DLL, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin\FF-NativeMessagingDispatcher.dll, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin\HKFXMGR.DLL, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin\HKFXMGR64.DLL, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin\Hpg64.dll, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin\INSTALL.RDF, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin\installKeys.js, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin\LOGO.BMP, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin\T8EPMSUP.DLL, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin\T8EXTEX.DLL, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin\T8EXTPEX.DLL, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin\T8HTML.DLL, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin\T8RES.DLL, Delete-on-Reboot, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin\T8TICKER.DLL, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin\TOOLBARGUARD64.DLL, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin\TPIMANAGERCONSOLE.EXE, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin\VERIFY.DLL, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin\89script.dll, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin\89skin.dll, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin\89skplay.exe, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin\89tpinst.dll, Delete-on-Reboot, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin\AppIntegrator64.exe, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin\AppIntegratorStub64.dll, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin\ASSISTMONITOR64.DLL, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin\chrome\89ffxtbr.jar, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin\assists\ie_default_search_provider\ARBITER64.DLL, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin\assists\ie_default_search_provider\ASSIST.EXE, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin\assists\ie_default_search_provider\CONFIG.XML, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin\assists\ie_enable\ARBITER.DLL, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin\assists\ie_enable\ARBITER64.DLL, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\1.bin\assists\ie_enable\CONFIG.XML, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\assists\COMMON.T8S, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\gen1\COMMON.T8S, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\Message\COMMON.T8S, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Program Files\SafePCRepair_89\bar\Settings\s_pid.dat, Quarantined, [dc9c04161f5dba7c30653ec22dd6fa06], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\LocalLow\SafePCRepair_89\bar\Cache\0064D174, Quarantined, [156357c3087478be3563bb4b09fad22e], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\LocalLow\SafePCRepair_89\bar\Cache\0064D391, Quarantined, [156357c3087478be3563bb4b09fad22e], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\LocalLow\SafePCRepair_89\bar\Cache\0064D409.bmp, Quarantined, [156357c3087478be3563bb4b09fad22e], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\LocalLow\SafePCRepair_89\bar\Cache\0064D431.bmp, Quarantined, [156357c3087478be3563bb4b09fad22e], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\LocalLow\SafePCRepair_89\bar\Cache\0064D44F.bmp, Quarantined, [156357c3087478be3563bb4b09fad22e], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\LocalLow\SafePCRepair_89\bar\Cache\0064D46D.bmp, Quarantined, [156357c3087478be3563bb4b09fad22e], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\LocalLow\SafePCRepair_89\bar\Cache\0064D4EF.cab, Quarantined, [156357c3087478be3563bb4b09fad22e], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\LocalLow\SafePCRepair_89\bar\Cache\0064D5A4.bmp, Quarantined, [156357c3087478be3563bb4b09fad22e], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\LocalLow\SafePCRepair_89\bar\Cache\0064D5D6.cab, Quarantined, [156357c3087478be3563bb4b09fad22e], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\LocalLow\SafePCRepair_89\bar\Cache\0064D66C.bmp, Quarantined, [156357c3087478be3563bb4b09fad22e], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\LocalLow\SafePCRepair_89\bar\Cache\0064D6B2.cab, Quarantined, [156357c3087478be3563bb4b09fad22e], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\LocalLow\SafePCRepair_89\bar\Cache\0064D75C.bmp, Quarantined, [156357c3087478be3563bb4b09fad22e], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\LocalLow\SafePCRepair_89\bar\Cache\0064D784.cab, Quarantined, [156357c3087478be3563bb4b09fad22e], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\LocalLow\SafePCRepair_89\bar\Cache\0064D87F.bmp, Quarantined, [156357c3087478be3563bb4b09fad22e], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\LocalLow\SafePCRepair_89\bar\Cache\0064D8C5.cab, Quarantined, [156357c3087478be3563bb4b09fad22e], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\LocalLow\SafePCRepair_89\bar\Cache\0064D96F.bmp, Quarantined, [156357c3087478be3563bb4b09fad22e], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\LocalLow\SafePCRepair_89\bar\Cache\0064D9B5.cab, Quarantined, [156357c3087478be3563bb4b09fad22e], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\LocalLow\SafePCRepair_89\bar\Cache\0064DB3C.bmp, Quarantined, [156357c3087478be3563bb4b09fad22e], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\LocalLow\SafePCRepair_89\bar\Cache\0064DBAA.cab, Quarantined, [156357c3087478be3563bb4b09fad22e], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\LocalLow\SafePCRepair_89\bar\Cache\files.ini, Quarantined, [156357c3087478be3563bb4b09fad22e], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\LocalLow\SafePCRepair_89\bar\History\search3, Quarantined, [156357c3087478be3563bb4b09fad22e], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\LocalLow\SafePCRepair_89\bar\Settings\prevcfg2.htm, Quarantined, [156357c3087478be3563bb4b09fad22e], PUP.Optional.MindSpark.A, C:\Users\Malwarebytes\AppData\LocalLow\SafePCRepair_89\bar\Settings\ToolbarStructure.json, Quarantined, [156357c3087478be3563bb4b09fad22e], Physical Sectors: 0(No malicious items detected)(end) As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat. We use different ways of protecting your computer(s): Dynamically Blocks Malware Sites & ServersMalware Execution PreventionSave yourself the hassle and get protected.
  12. I purchased and installed Malwarebytes Premium (MBAM) severak days ago. Since I ran the initial scan and cleaned quite a bit of malware, I have been getting regular popups in the task bar mostly for a malware called RadioRage Toolbar by Mindspark. Malwarebytes recognizes the threat with constant popups but does not give me any way to clean it from my system. I see the Radio Rage Toolbar program in my Windows Program List but it will not let me uninstall it - it says that it can't find 4jBar.dll. There is a directory on my C-drive for Radio Rage but I cannot delete it - it says files are in use. I have tried to disable the toolbar in my browser but your program still gives me these frequent annoying popups that the malware is still active on my system. I even tried to System Restore several times but it failed every time due to a 'missing file'. I would like to know how to clean this from my system for good. I have attached files and a jpeg of some of the popups. In addition to Malwarebytes MBAM Premium, I am running Bitdefender Total Security. My system is Windows 7 Pro 64-bit. Robert FRST.txt Addition.txt
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.